![]() |
|
Plagegeister aller Art und deren Bekämpfung: Trojan.GenericKD.1242803 / download malwarebytes funzt nichtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #3 |
![]() | ![]() Trojan.GenericKD.1242803 / download malwarebytes funzt nicht vielen dank für deine hilfe
__________________![]() ![]() FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-09-2013 Ran by t.hertel (administrator) on PC-2 on 08-09-2013 17:34:58 Running from C:\Users\t.hertel\Desktop Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Safe Mode (minimal) ==================== Processes (Whitelisted) =================== ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7772704 2009-10-06] (Realtek Semiconductor) HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [624056 2011-08-30] (Adobe Systems Inc.) HKLM\...\Run: [] - HKLM\...\Run: [Adobe_ID0EYTHM] - C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [1884160 2007-03-20] (Adobe Systems Incorporated) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-29] (Adobe Systems Incorporated) HKLM\...\Run: [SignIn] - C:\Program Files\Microsoft Online Services\Sign In\SignIn.exe [1734512 2010-03-09] (Microsoft Corporation) HKLM\...\Run: [Communicator] - C:\Program Files\Microsoft Lync\communicator.exe [12108456 2013-06-27] (Microsoft Corporation) HKLM\...\Run: [ToolboxFX] - C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe [58936 2010-04-16] (Hewlett-Packard Company) HKLM\...\Run: [HP LaserJet Professional CM1410 Series Fax] - C:\Program Files\HP\HP LaserJet Professional CM1410 Series\Fax Driver\hppfaxprintersrv.exe [2460472 2010-04-09] (Hewlett-Packard Company) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-06-20] () HKLM\...\Run: [LexwareInfoService] - C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.) HKLM\...\Run: [AS2014] - C:\ProgramData\37nr3DDu\37nr3DDu.exe HKCU\...\Run: [MobileDocuments] - C:\Program Files\Common Files\Apple\Internet Services\ubd.exe HKCU\...\Run: [AS2014] - C:\ProgramData\37nr3DDR\37nr3DDR.exe HKCU\...\Run: [Google Update*] - <===== ATTENTION (ZeroAccess rootkit hidden path) HKU\t.haeussel\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [ 2012-01-15] (Google Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\t.haeussel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\t.hertel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=5E3690FBA690CADB&affID=121240&tsp=4998 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=5E3690FBA690CADB&affID=121240&tsp=4998 SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=5E3690FBA690CADB&affID=121240&tsp=4998 SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll (Adobe Systems Incorporated.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Lync\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files\Wajam\IE\priam_bho.dll (Wajam) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: PricePeep - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Program Files\PricePeep\pricepeep.dll (PricePeep) BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll (Adobe Systems Incorporated.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com) Toolbar: HKCU -Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) DPF: {07041BB2-F22C-413C-9597-622D474EE889} hxxp://service.wuerth.de/duebeltechnik/DLCFrame.cab DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {A13FA96A-73AF-B26F-6925-48EA22517D34} https://login.ecrm.lexware.de/eCRM/eCRMAddins/teamCRMPlugin.cab DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default FF user.js: detected! => C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\user.js FF SelectedSearchEngine: Google SSl DE FF Homepage: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=5E3690FBA690CADB&affID=121240&tsp=4998 FF NetworkProxy: "type", 0 FF NewTab: hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=5E3690FBA690CADB&affID=121240&tsp=4998 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\searchplugins\google-ssl-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\Extensions\ffxtlbr@babylon.com FF Extension: Delta Toolbar - C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\Extensions\ffxtlbr@delta.com FF Extension: pricepeep - C:\Users\t.hertel\AppData\Roaming\Mozilla\Firefox\Profiles\7lhcvhjr.default\Extensions\pricepeep@getpricepeep.com.xpi FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] C:\Program Files\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi FF Extension: No Name - C:\Program Files\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi ========================== Services (Whitelisted) ================= S3 Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [153792 2007-03-20] (Adobe Systems Incorporated) S4 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2838480 2013-08-13] () S3 DATEV Update-Service; C:\DATEV\PROGRAMM\INSTALL\DvInesASDSvc.Exe [147040 2009-12-03] (DATEV eG) S2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [142336 2010-04-12] (HP) S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-06-20] () S2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [1589152 2011-09-28] (Microsoft Corp.) S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-06-20] () S2 PAVAGENTE; C:\Program Files\Panda Software\Panda Administrator 3\Pav_Agent\Pagent.exe [468224 2009-11-25] (Panda Security, S.L.) S2 PavAtScheduler; C:\Program Files\Panda Software\Panda Administrator 3\Scheduler\pavsched.exe [255232 2009-11-18] (Panda Software) S3 PavReport; C:\Program Files\Panda Software\Panda Administrator 3\PavReport\PavReport.exe [926976 2009-12-18] (Panda Security, S.L.) S2 StarMoney 7.0 OnlineUpdate; C:\Program Files\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH) S2 StarMoney 8.0 OnlineUpdate; C:\Program Files\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH) S2 WajamUpdater; C:\Program Files\Wajam\Updater\WajamUpdater.exe [109064 2012-07-26] (Wajam) U2 *etadpug; "C:\Program Files\Google\Desktop\Install\{5dfe0e05-f70e-36cc-f1bc-841f1d80c7fc}\ \...\???\{5dfe0e05-f70e-36cc-f1bc-841f1d80c7fc}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess) ==================== Drivers (Whitelisted) ==================== R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [35776 2011-05-17] (hxxp://libusb-win32.sourceforge.net) S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation) U0 dmboot; S3 FXDrv32; \??\D:\FXDrv32.sys [x] S3 ncplelhp; system32\DRIVERS\ncplelhp.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-08 17:34 - 2013-09-08 17:27 - 01082239 _____ (Farbar) C:\Users\t.hertel\Desktop\FRST.exe 2013-09-07 19:19 - 2013-09-07 19:19 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2013-09-07 18:33 - 2013-09-07 18:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\File Scout 2013-09-07 18:27 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Macromedia 2013-09-07 18:27 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe 2013-09-07 18:27 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Administrator\AppData\Local\Macromedia 2013-09-07 18:26 - 2013-09-07 18:26 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla 2013-09-07 18:26 - 2013-09-07 18:26 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla 2013-09-07 18:25 - 2013-09-07 18:25 - 00000020 ___SH C:\Users\Administrator\ntuser.ini 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Startmenü 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 ____D C:\Users\Administrator 2013-09-07 18:25 - 2011-11-15 04:05 - 00000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help 2013-09-07 18:17 - 2013-09-07 08:53 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\t.hertel\Desktop\mbam-setup.com.partial 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\BabSolution 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\ProgramData\BrowserDefender 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Program Files\Wajam 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Program Files\PricePeep 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Program Files\Delta 2013-09-06 11:59 - 2013-09-06 11:59 - 00000118 _____ C:\Users\t.hertel\Desktop\Antivirus Security Pro support.url 2013-09-06 11:59 - 2013-09-06 11:59 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro 2013-09-06 11:58 - 2013-09-07 20:13 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\QuickScan 2013-09-05 18:04 - 2013-09-06 11:23 - 00016813 _____ C:\Users\t.hertel\Desktop\Immo.xlsx 2013-08-23 13:28 - 2013-08-23 13:28 - 04817275 _____ (Tim Kosse) C:\Users\t.hertel\Downloads\FileZilla_3.7.2_win32-setup.exe 2013-08-20 09:20 - 2013-08-20 09:21 - 00000000 ____D C:\Program Files\iTunes 2013-08-20 09:20 - 2013-08-20 09:20 - 00000000 ____D C:\Program Files\iPod 2013-08-15 03:01 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-15 03:01 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-15 03:01 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-15 03:01 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-15 03:01 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-15 03:01 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-15 03:01 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-15 03:01 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-15 03:01 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 06:56 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 06:56 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 06:56 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2013-08-14 06:56 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 06:56 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 06:56 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 06:56 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 06:56 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 06:56 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 06:56 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 06:56 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 06:56 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys ==================== One Month Modified Files and Folders ======= 2013-09-08 17:34 - 2013-09-08 17:34 - 00000000 ____D C:\FRST 2013-09-08 17:33 - 2010-07-20 22:45 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-08 17:27 - 2013-09-08 17:34 - 01082239 _____ (Farbar) C:\Users\t.hertel\Desktop\FRST.exe 2013-09-08 17:25 - 2011-04-20 08:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-08 16:43 - 2012-03-16 18:46 - 00006247 _____ C:\jctInLeDom.xml 2013-09-08 08:25 - 2011-04-20 08:11 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-07 20:13 - 2013-09-06 11:58 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\QuickScan 2013-09-07 19:46 - 2009-07-14 06:34 - 00014624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-07 19:46 - 2009-07-14 06:34 - 00014624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-07 19:43 - 2012-01-26 13:32 - 00000000 ___RD C:\Users\t.hertel\Dropbox 2013-09-07 19:43 - 2012-01-26 13:30 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Dropbox 2013-09-07 19:39 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-07 19:39 - 2009-07-14 06:39 - 00056484 _____ C:\Windows\setupact.log 2013-09-07 19:38 - 2012-04-12 10:31 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-07 19:19 - 2013-09-07 19:19 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2013-09-07 18:52 - 2010-07-16 16:51 - 01318989 _____ C:\Windows\WindowsUpdate.log 2013-09-07 18:33 - 2013-09-07 18:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\File Scout 2013-09-07 18:30 - 2013-02-20 03:15 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-07 18:27 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Macromedia 2013-09-07 18:27 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe 2013-09-07 18:27 - 2013-09-07 18:27 - 00000000 ____D C:\Users\Administrator\AppData\Local\Macromedia 2013-09-07 18:26 - 2013-09-07 18:26 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla 2013-09-07 18:26 - 2013-09-07 18:26 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla 2013-09-07 18:25 - 2013-09-07 18:25 - 00000020 ___SH C:\Users\Administrator\ntuser.ini 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Startmenü 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf 2013-09-07 18:25 - 2013-09-07 18:25 - 00000000 ____D C:\Users\Administrator 2013-09-07 18:25 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\tracing 2013-09-07 18:06 - 2010-07-16 17:07 - 00066630 _____ C:\Windows\PFRO.log 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\BabSolution 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\ProgramData\BrowserDefender 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Program Files\Wajam 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Program Files\PricePeep 2013-09-07 11:02 - 2013-09-07 11:02 - 00000000 ____D C:\Program Files\Delta 2013-09-07 08:53 - 2013-09-07 18:17 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\t.hertel\Desktop\mbam-setup.com.partial 2013-09-06 11:59 - 2013-09-06 11:59 - 00000118 _____ C:\Users\t.hertel\Desktop\Antivirus Security Pro support.url 2013-09-06 11:59 - 2013-09-06 11:59 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro 2013-09-06 11:23 - 2013-09-05 18:04 - 00016813 _____ C:\Users\t.hertel\Desktop\Immo.xlsx 2013-09-06 11:22 - 2011-07-12 11:56 - 00000000 ____D C:\Users\t.hertel 2013-09-06 10:32 - 2011-08-30 13:18 - 00000000 ____D C:\Users\T6D11~1.HER\AppData\Local\Google 2013-09-06 10:32 - 2010-07-19 14:01 - 00000000 ____D C:\Program Files\Google 2013-09-02 10:43 - 2013-08-07 16:06 - 00000150 _____ C:\LxDasi.Log 2013-09-02 10:43 - 2010-07-20 10:27 - 00000000 ____D C:\ProgramData\Lexware 2013-09-02 10:17 - 2011-07-12 11:57 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\Lexware 2013-08-28 13:11 - 2012-02-18 20:14 - 00000000 ____D C:\Program Files\StarMoney 8.0 2013-08-26 16:15 - 2013-03-13 10:27 - 00000000 ____D C:\Users\t.hertel\AppData\Roaming\FileZilla 2013-08-26 13:01 - 2013-03-12 16:50 - 00000000 ____D C:\htdocs 2013-08-23 13:28 - 2013-08-23 13:28 - 04817275 _____ (Tim Kosse) C:\Users\t.hertel\Downloads\FileZilla_3.7.2_win32-setup.exe 2013-08-23 13:28 - 2013-03-13 10:27 - 00001950 _____ C:\Users\Public\Desktop\FileZilla Client.lnk 2013-08-23 13:28 - 2013-03-13 10:27 - 00000000 ____D C:\Program Files\FileZilla FTP Client 2013-08-20 09:21 - 2013-08-20 09:20 - 00000000 ____D C:\Program Files\iTunes 2013-08-20 09:21 - 2013-06-17 12:17 - 00001753 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-08-20 09:20 - 2013-08-20 09:20 - 00000000 ____D C:\Program Files\iPod 2013-08-20 09:20 - 2010-10-05 12:57 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-08-18 18:30 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-08-15 04:02 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache 2013-08-15 03:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2013-08-15 03:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-08-15 03:08 - 2013-07-13 03:00 - 00000000 ____D C:\Windows\system32\MRT 2013-08-15 03:05 - 2012-04-23 15:10 - 00000000 ____D C:\Program Files\Microsoft Lync 2013-08-15 03:05 - 2010-07-20 19:47 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-15 03:03 - 2010-07-16 17:00 - 01642140 _____ C:\Windows\system32\PerfStringBackup.INI Files to move or delete: ==================== ZeroAccess: C:\Users\T6D11~1.HER\AppData\Local\Google\Desktop\Install\{5dfe0e05-f70e-36cc-f1bc-841f1d80c7fc} ZeroAccess: C:\Program Files\Google\Desktop\Install\{5dfe0e05-f70e-36cc-f1bc-841f1d80c7fc} C:\Users\t.haeussel\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe C:\Users\t.haeussel\AppData\Local\Temp\MSN89FA.exe C:\Users\t.haeussel\AppData\Local\Temp\NV_Support_Teilnehmer_DE.exe C:\Users\t.haeussel\AppData\Local\Temp\ose00000.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\135111077.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\bitdefender_isecurity_[quickscan].exe C:\Users\T6D11~1.HER\AppData\Local\Temp\ghtpyli-.dll C:\Users\T6D11~1.HER\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\Installer.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\outlooksoclconnector_2010_32.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\outlook_2010_32.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\setup_fsu_cid.exe C:\Users\T6D11~1.HER\AppData\Local\Temp\uninst1.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender C:\Program Files\Microsoft Security Client\MsMpEng.exe => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Microsoft Security Client LastRegBack: 2013-09-01 00:48 ==================== End Of Log ============================ --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-09-2013 Ran by t.hertel at 2013-09-08 17:39:34 Running from C:\Users\t.hertel\Desktop Boot Mode: Safe Mode (minimal) ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 7.1.4) 32 Bit HP CIO Components Installer (Version: 8.1.1) 7500_7600_7700_Help (Version: 1.00.0000) Adobe Acrobat 8 Professional - English, Français, Deutsch (Version: 8.3.1) Adobe Acrobat 8.3.1 - CPSID_83708 Adobe Acrobat 8.3.1 Professional (Version: 8.3.1) Adobe After Effects CS3 (Version: 8) Adobe After Effects CS3 Presets (Version: 8) Adobe Anchor Service CS3 (Version: 1.0) Adobe Asset Services CS3 (Version: 3) Adobe Bridge CS3 (Version: 2) Adobe Bridge Start Meeting (Version: 1.0) Adobe BridgeTalk Plugin CS3 (Version: 1.0) Adobe Camera Raw 4.0 (Version: 4.0) Adobe CMaps (Version: 1.0) Adobe Color - Photoshop Specific (Version: 1.0) Adobe Color Common Settings (Version: 1.0.1) Adobe Color EU Recommended Settings (Version: 1.0) Adobe Color JA Extra Settings (Version: 1.0) Adobe Color NA Extra Settings (Version: 1.0) Adobe Contribute CS3 (Version: 4.1) Adobe Creative Suite 3 Master Collection (Version: 1.0) Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen (Version: 1.0) Adobe Default Language CS3 (Version: 1.0) Adobe Device Central CS3 (Version: 1.0) Adobe Dreamweaver CS3 (Version: 9) Adobe Encore CS3 (Version: 3) Adobe ExtendScript Toolkit 2 (Version: 2.0.2) Adobe Extension Manager CS3 (Version: 1.8) Adobe Fireworks CS3 (Version: 9.0) Adobe Flash CS3 (Version: 9.0) Adobe Flash Player 11 ActiveX (Version: 11.8.800.94) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Flash Video Encoder (Version: 2.0) Adobe Fonts All (Version: 1.0) Adobe Help Viewer CS3 (Version: 1) Adobe Illustrator CS3 (Version: 13.0) Adobe InDesign CS3 (Version: 5.0) Adobe InDesign CS3 Icon Handler (Version: 5.0) Adobe Linguistics CS3 (Version: 3.0.0) Adobe MotionPicture Color Files (Version: 1.0) Adobe PDF Library Files (Version: 8.0) Adobe Photoshop CS3 (Version: 10) Adobe Premiere Pro CS3 (Version: 3) Adobe Premiere Pro CS3 Functional Content (Version: 8) Adobe Reader 9.5.5 - Deutsch (Version: 9.5.5) Adobe Setup (Version: 1.0) Adobe SING CS3 (Version: 0.1) Adobe Soundbooth CS3 (Version: 1) Adobe Stock Photos CS3 (Version: 1.5) Adobe SVG Viewer 3.0 (Version: 3.0) Adobe Type Support (Version: 1.0) Adobe Update Manager CS3 (Version: 5.1.0) Adobe Version Cue CS3 Client (Version: 3) Adobe Version Cue CS3 Server {ko_KR} (Version: 3.0.0.0 {ko_KR} ) Adobe Video Profiles (Version: 1.0) Adobe WAS CS3 (Version: 1.0) Adobe WinSoft Linguistics Plugin (Version: 1.0) Adobe XMP DVA Panels CS3 (Version: 1.0) Adobe XMP Panels CS3 (Version: 1.0) AHV content for Acrobat and Flash (Version: 1) Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Bonjour (Version: 3.0.0.10) bpd_scan (Version: 3.00.0000) BPDSoftware (Version: 130.0.000.000) BPDSoftware_Ini (Version: 1.00.0000) BrowserDefender BufferChm (Version: 130.0.331.000) Citrix XenApp Web Plugin (Version: 11.0.0.5357) DATEV Installation V.2.73 Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition Delta Chrome Toolbar Delta toolbar (Version: 1.8.24.6) Destinations (Version: 140.0.77.000) DeviceDiscovery (Version: 130.0.465.000) DirectX for Managed Code Update (Summer 2004) (Version: 9.02.2904) DocProc (Version: 13.0.0.0) Dropbox (HKCU Version: 2.0.22) ElsterFormular (Version: 14.3.20130522) Fax (Version: 130.0.418.000) FileZilla Client 3.7.2 (Version: 3.7.2) Fronius Solar.configurator 2.5 (Version: 2.05.0001) Gigaset QuickSync (Version: 7.2.0844.6) Google Earth (Version: 7.1.1.1888) Google SketchUp 8 (Version: 3.0.3196) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.5.4413.1752) Google Update Helper (Version: 1.3.21.153) GPBaseService2 (Version: 130.0.371.000) Hewlett-Packard ACLM.NET v1.1.0.0 (Version: 1.00.0000) HP Customer Participation Program 13.0 (Version: 13.0) HP FWUpdateEDO3 (Version: 1.0.0.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP LaserJet Professional CM1410 Series HP LJ CM1410 MFP Series HP Scan (Version: 1.0.302.0) HP OfficeJet L7300/L7500/7600/7700 (Version: 13.0) HP Product Detection (Version: 11.14.0001) HP Smart Web Printing 4.51 (Version: 4.51) HP Solution Center 13.0 (Version: 13.0) HP Toner Cartridge Authentication (Version: 1.1.209.3492) HP Update (Version: 5.005.000.001) HPDiagnosticAlert (Version: 1.00.0000) HPLaserJetHelp_LearnCenter (Version: 1.01.0000) HPLJUT (Version: 1.00.0007) HPOARInstall (Version: 1.00.0000) hppCM1410LaserJetService (Version: 001.007.00319) hppFaxDrvCM1410 (Version: 003.000.00001) hppFaxUtilityCM1410 (Version: 000.002.00001) hppLaserJetService (Version: 002.007.00397) HPProductAssistant (Version: 130.0.371.000) hppSendFaxCM1410 (Version: 003.000.00001) hppTLBXFXCM1410 (Version: 001.007.00647) HPSSupply (Version: 130.0.371.000) hpzTLBXFX (Version: 006.007.00770) I.R.I.S. OCR (Version: 12.3.4) iCloud (Version: 2.1.2.8) iTunes (Version: 11.0.5.5) Java(TM) 6 Update 2 (Version: 1.6.0.20) Java(TM) 6 Update 31 (Version: 6.0.310) L7500 (Version: 130.0.000.000) Lexware Admintools Premium (Version: 11.00.00.0065) Lexware buchhalter 2013 (Version: 18.51.00.0371) Lexware eCRM Add-In (Version: 1.00.0000) Lexware Elster (Version: 13.14.00.0008) Lexware handwerk premium 2011 Client (Version: 11.30.00.0153) Lexware Info Service (Version: 2.90.00.0009) Lexware online banking (Version: 20.00.00.0059) Lexware warenwirtschaft premium Servicepack August 2010, Version 10.60 (Version: 10.60.00.0026) LynxPlanner 1.1 (Version: 1.1.1) Lynxplanner.exe (Version: 1.0.4) Macromedia Dreamweaver 4 (Version: 4.0) Macromedia Extension Manager (Version: 1.2) MarketResearch (Version: 130.0.374.000) MaxDesign 3.1 MetaEditor (Version: 1.0.0) MeteoSyn (Version: 2.2.2.1) MeteoSynModul (Version: 1.0.5.3) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Lync 2010 (Version: 4.0.7577.4398) Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Professional 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Single Image 2010 (Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Online Services Sign In (Version: 1.0.1427.40) Microsoft Online Services-Anmeldeassistent (Version: 7.250.4287.0) Microsoft Security Client (Version: 4.3.0215.0) Microsoft Security Essentials (Version: 4.3.215.0) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Sync Framework Runtime v1.0 SP1 (x86) de (Version: 1.0.3010.0) Microsoft Sync Framework Services v1.0 SP1 (x86) de (Version: 1.0.3010.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0) Microsoft XML Parser (Version: 8.70.1104.04) Minianwendung "Desktoplinks" für Windows Small Business Server 2008 (Version: 6.0.5601.6) MobileMe Control Panel (Version: 3.1.8.0) Mozilla Firefox 20.0.1 (x86 de) (Version: 20.0.1) Mozilla Maintenance Service (Version: 17.0.8) Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8) MPM (Version: 1.00.0000) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (Version: 4.30.2100.0) Network (Version: 130.0.579.000) NVIDIA 3D Vision Controller Driver (Version: 280.19) NVIDIA 3D Vision Controller-Treiber 280.19 (Version: 280.19) NVIDIA 3D Vision Treiber 311.06 (Version: 311.06) NVIDIA Grafiktreiber 311.06 (Version: 311.06) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0) NVIDIA Install Application (Version: 2.1002.109.718) NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106) NVIDIA Systemsteuerung 311.06 (Version: 311.06) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) OCR Software by I.R.I.S. 13.0 (Version: 13.0) PDF Settings (Version: 1.0) Photo Plan (Version: 1.01.0004) Picasa 3 (Version: 3.8) PokerStars PricePeep (Version: 2.2.0.3) ProductContext (Version: 130.0.000.000) PvComfort PVSOL Pro 4.5 (Version: 4.5.1) PVSOL Pro 5.5 (Version: 5.5.2) PYTHEAS MailGate QuickTime (Version: 7.74.80.86) Realtek Ethernet Controller Driver For Windows Vista and Later (Version: 1.00.0009) Realtek High Definition Audio Driver (Version: 6.0.1.5953) RENESIS® Player Browser Plugins (Version: 1.1.1) Scan (Version: 140.0.80.000) SCHLETTER Auslegungssoftware PRO (Version: 3.0.2.2) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition Servicepack Datumsaktualisierung (Version: 1.00.00.0005) Shop for HP Supplies (Version: 13.0) SINVERT Select (Version: 2.5.0.0) SmartWebPrinting (Version: 130.0.457.000) SolarConfig (Version: 4.0.0) SolutionCenter (Version: 130.0.373.000) StarMoney (Version: 2.0) StarMoney (Version: 3.0.3.21) StarMoney 7.0 (Version: 7.0) StarMoney 8.0 (Version: 8.0) Status (Version: 130.0.469.000) Sunny Design (Version: 1.54.0) Sunny Design 2.11 (Version: 2.11.0.4) Timex Device Agent (Version: 1.00.47) Toolbox (Version: 130.0.648.000) TrayApp (Version: 130.0.422.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Valentin Meteo Data 1.0.25 Valentin Meteo Data 1.0.26 Wajam (Version: 1.90) WebReg (Version: 130.0.132.017) Windows Live ID Sign-in Assistant (Version: 6.500.3165.0) Windows Small Business Server 2008 ClientAgent (Version: 6.0.5601.6) Windows Small Business Server 2008 WMI Provider (Version: 6.0.5601.6) WinZip 15.0 (Version: 15.0.9411) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {081CE619-B4F4-4BA8-BCAA-A4299ECA041E} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-06-20] () Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {15E39CD6-A5BC-4AAD-A619-A6EFC711187B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-20] (Google Inc.) Task: {3A9E9523-20CE-44A6-AE81-5EFB4AFAFABF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-20] (Google Inc.) Task: {48A1B334-6A8D-4E1B-AD7E-41F53C549BB9} - System32\Tasks\HPLJCustParticipation => C:\Program Files\HP\HPLJUT\HPLJUTSCH.exe [2010-04-13] (Hewlett Packard) Task: {4AB8DAD0-1335-4AE4-BE0E-4BDDC0A299FF} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation) Task: {65381ED1-C39B-4C2A-8B8B-CD2006E90655} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {71E42EB6-D923-4B9E-BCF4-36E97034F6F8} - \AdobeFlashPlayerUpdate No Task File Task: {772FC9A3-4A90-43A8-B5BC-A454255358AB} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3351456237-4214788072-2675960090-1007 => C:\Windows\System32\portabledeviceapi.dll [2010-11-20] (Microsoft Corporation) Task: {AED7BE27-5D39-4CA2-BF0F-9B8B24E6AE18} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {B5B7CB30-D0DD-4509-9A4E-C65B67BC5D4D} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert Task: {D9D4DC59-8CCC-45A1-B119-48D1B3468821} - \AdobeFlashPlayerUpdate 2 No Task File Task: {EE579823-1BCD-44E2-91EB-9A932112C4E5} - System32\Tasks\0C8B663C-680C-4CB7-BA20-A9CAC82116C7 => C:\Program Files\HP Toner Cartridge Authentication\hpcra112.exe [2011-07-18] (Hewlett-Packard) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-05-25 02:36 - 2013-05-25 02:36 - 00130736 _____ (Dropbox, Inc.) C:\Users\t.hertel\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll 2013-08-06 19:43 - 2013-08-06 19:43 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll 2011-04-26 16:00 - 2011-04-26 16:00 - 00011080 ____R (WinZip Computing, S.L.) C:\Program Files\WinZip\wzshlstb.dll 2011-04-26 16:00 - 2011-04-26 16:00 - 00158536 ____R (WinZip Computing, S.L.) C:\Program Files\WinZip\wzshlex1.dll 2011-04-26 16:00 - 2011-04-26 16:00 - 00104776 ____R (WinZip Computing, S.L.) C:\Program Files\WinZip\WZCAB3.DLL ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\Users\t.hertel\Desktop\Incoterms – Wikipedia.url:favicon AlternateDataStreams: C:\Users\t.hertel\Desktop\Oconda-Shop - Haustechnik, Elektro, Betriebsbedarf - Personal Display 4.240.007 Z.url:favicon ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: HP LaserJet CM1415fn Description: HP LaserJet CM1415fn Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: Hewlett-Packard Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/07/2013 10:56:42 AM) (Source: Wininit) (User: ) Description: Ein kritischer Systemprozess C:\Windows\system32\lsass.exe ist fehlgeschlagen mit den Statuscode 1. Der Computer muss neu gestartet werden. Error: (09/05/2013 08:58:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x1130 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 07:58:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x1fbc Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 06:58:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x1460 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 05:58:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x204c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 05:10:57 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: googleearth.exe, Version: 7.1.1.1888, Zeitstempel: 0x51dfe039 Name des fehlerhaften Moduls: googleearth_free.dll, Version: 0.0.0.0, Zeitstempel: 0x51dfdfef Ausnahmecode: 0xc0000005 Fehleroffset: 0x004caa18 ID des fehlerhaften Prozesses: 0x27f8 Startzeit der fehlerhaften Anwendung: 0xgoogleearth.exe0 Pfad der fehlerhaften Anwendung: googleearth.exe1 Pfad des fehlerhaften Moduls: googleearth.exe2 Berichtskennung: googleearth.exe3 Error: (09/05/2013 04:58:01 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0xe78 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 03:58:01 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x1718 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 02:58:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x1528 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 Error: (09/05/2013 01:58:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00034197 ID des fehlerhaften Prozesses: 0x1994 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1 Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2 Berichtskennung: FlashPlayerUpdateService.exe3 System errors: ============= Error: (09/08/2013 05:34:09 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "PnP-X-IP-Busenumerator" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/08/2013 05:32:56 PM) (Source: DCOM) (User: ) Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (09/08/2013 05:32:56 PM) (Source: DCOM) (User: ) Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Microsoft Office Sessions: ========================= Error: (09/07/2013 10:56:42 AM) (Source: Wininit)(User: ) Description: C:\Windows\system32\lsass.exe1 Error: (09/05/2013 08:58:00 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197113001ceaa69d7561b9cC:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll15370d59-165d-11e3-9522-90fba690cadb Error: (09/05/2013 07:58:00 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c0000005000341971fbc01ceaa6175919021C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dllb377b212-1654-11e3-9522-90fba690cadb Error: (09/05/2013 06:58:00 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197146001ceaa5913cd04a6C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll51c416c6-164c-11e3-9522-90fba690cadb Error: (09/05/2013 05:58:00 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197204c01ceaa50b208c74cC:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dllefecc655-1643-11e3-9522-90fba690cadb Error: (09/05/2013 05:10:57 PM) (Source: Application Error)(User: ) Description: googleearth.exe7.1.1.188851dfe039googleearth_free.dll0.0.0.051dfdfefc0000005004caa1827f801ceaa4a176b1d86C:\Program Files\Google\Google Earth\client\googleearth.exeC:\Program Files\Google\Google Earth\client\googleearth_free.dll5d467db2-163d-11e3-9522-90fba690cadb Error: (09/05/2013 04:58:01 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197e7801ceaa4850437fcfC:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll8ebcc107-163b-11e3-9522-90fba690cadb Error: (09/05/2013 03:58:01 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197171801ceaa3fee812e0cC:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll2cff3204-1633-11e3-9522-90fba690cadb Error: (09/05/2013 02:58:00 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197152801ceaa378cb9f278C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dllca9adb9e-162a-11e3-9522-90fba690cadb Error: (09/05/2013 01:58:00 PM) (Source: Application Error)(User: ) Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.1820551db96c5c000000500034197199401ceaa2f2af6b64cC:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SYSTEM32\ntdll.dll68d79f72-1622-11e3-9522-90fba690cadb CodeIntegrity Errors: =================================== Date: 2011-07-11 21:28:10.541 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-07-09 14:02:14.109 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 19:47:21.372 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 19:29:21.816 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 19:16:33.686 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 18:59:44.986 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 18:47:14.909 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 18:41:31.847 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-26 18:32:09.323 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-06-22 12:08:18.260 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 17% Total physical RAM: 3583.24 MB Available physical RAM: 2953.98 MB Total Pagefile: 7164.77 MB Available Pagefile: 6694.15 MB Total Virtual: 2047.88 MB Available Virtual: 1911.59 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:297.99 GB) (Free:104.91 GB) NTFS Drive d: (CDRoot) (CDROM) (Total:0.12 GB) (Free:0 GB) CDFS Drive e: (TREKSTOR) (Fixed) (Total:298.02 GB) (Free:243.1 GB) FAT32 Drive f: () (Removable) (Total:14.83 GB) (Free:8.44 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 2EEC466B) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 15 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=15 GB) - (Type=0C) ======================================================== Disk: 5 (Size: 298 GB) (Disk ID: 1C18D524) Partition 1: (Not Active) - (Size=298 GB) - (Type=0C) ==================== End Of Log ============================ |
Themen zu Trojan.GenericKD.1242803 / download malwarebytes funzt nicht |
adware.agent, antivirus, antivirus security pro, diverse, download, downloaden, hallo zusammen, installier, installiert, malwarebytes, problem, programme, scan, scanner, security, software, system, thomas, trojan.0access, trojan.generickd.1242803, trojaner, versuche, zusammen |