| |
| |||||||
Log-Analyse und Auswertung: Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dllWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
17.09.2013, 20:20
| #1 |
| |  Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll Okay. Kontrollscan ist durchgeführt und Dateien wieder angehängt. FRST.txt: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03
Ran by Simone Petry (administrator) on SIMONEPETRY-PC on 17-09-2013 21:13:24
Running from C:\Users\Simone Petry\Downloads
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
() C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [NDSTray.exe] - NDSTray.exe
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-11-29] (Synaptics, Inc.)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [431456 2008-01-17] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [54608 2007-10-31] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [509816 2008-01-25] (TOSHIBA Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKCU\...\Run: [TOSCDSPD] - TOSCDSPD.EXE
HKCU\...\Run: [Google Update] - C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-14] (Google Inc.)
MountPoints2: {d595702f-8fe8-11dd-9b88-001e68c53ee1} - D:\LaunchU3.exe -a
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2007-12-29] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [TOSCDSPD] - C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2007-12-29] ()
Startup: C:\ProgramData\1912 Titanic Mystery ()
Startup: C:\ProgramData\Absolutist ()
Startup: C:\ProgramData\Adobe ()
Startup: C:\ProgramData\Advanced Chemistry Development ()
Startup: C:\ProgramData\AirportMania ()
Startup: C:\ProgramData\Alex Gordon ()
Startup: C:\ProgramData\Aliasworlds ()
Startup: C:\ProgramData\Anwendungsdaten ()
Startup: C:\ProgramData\Apple ()
Startup: C:\ProgramData\Apple Computer ()
Startup: C:\ProgramData\Application Data ()
Startup: C:\ProgramData\Arcade Lab ()
Startup: C:\ProgramData\Arizona Rose ()
Startup: C:\ProgramData\Artist Colony ()
Startup: C:\ProgramData\Ashtons Family Resort ()
Startup: C:\ProgramData\Astar Games ()
Startup: C:\ProgramData\ATI ()
Startup: C:\ProgramData\Avira ()
Startup: C:\ProgramData\Awem ()
Startup: C:\ProgramData\Balls ()
Startup: C:\ProgramData\BC Soft Games ()
Startup: C:\ProgramData\Becky Brogan 2 ()
Startup: C:\ProgramData\BigFish ()
Startup: C:\ProgramData\Bilbo ()
Startup: C:\ProgramData\Black Blob Studios ()
Startup: C:\ProgramData\blg ()
Startup: C:\ProgramData\BlitPop ()
Startup: C:\ProgramData\CannyGames ()
Startup: C:\ProgramData\Canon IJ Network Tool ()
Startup: C:\ProgramData\CanonBJ ()
Startup: C:\ProgramData\CanonEPP ()
Startup: C:\ProgramData\CanonIJEGV ()
Startup: C:\ProgramData\CanonIJEPPEX2 ()
Startup: C:\ProgramData\CanonIJMSetup ()
Startup: C:\ProgramData\CanonIJScan ()
Startup: C:\ProgramData\CanonIJWSpt ()
Startup: C:\ProgramData\casualArts ()
Startup: C:\ProgramData\Cateia Games ()
Startup: C:\ProgramData\cerasus.media ()
Startup: C:\ProgramData\Colibri Games ()
Startup: C:\ProgramData\Common Files ()
Startup: C:\ProgramData\CrioGames ()
Startup: C:\ProgramData\CropBusters ()
Startup: C:\ProgramData\Crown ()
Startup: C:\ProgramData\Deadtime Stories ()
Startup: C:\ProgramData\Deep Shadows ()
Startup: C:\ProgramData\Desktop ()
Startup: C:\ProgramData\DivoGames ()
Startup: C:\ProgramData\Documents ()
Startup: C:\ProgramData\Dokumente ()
Startup: C:\ProgramData\Dress-up-pups ()
Startup: C:\ProgramData\Electronic Arts ()
Startup: C:\ProgramData\Elephant Games ()
Startup: C:\ProgramData\Escape From Paradise ()
Startup: C:\ProgramData\ezsidmv.dat ()
Startup: C:\ProgramData\Far Mills ()
Startup: C:\ProgramData\Farm Fishes ()
Startup: C:\ProgramData\FarmFrenzy2 ()
Startup: C:\ProgramData\FarmFrenzy3 ()
Startup: C:\ProgramData\FarmFrenzy3_America ()
Startup: C:\ProgramData\FarmFrenzy3_Arctica ()
Startup: C:\ProgramData\FarmFrenzy3_Madagascar ()
Startup: C:\ProgramData\FarmFrenzy3_Russia ()
Startup: C:\ProgramData\FarmFrenzy_Rome ()
Startup: C:\ProgramData\FarmFrenzy_Vikings ()
Startup: C:\ProgramData\Favoriten ()
Startup: C:\ProgramData\Favorites ()
Startup: C:\ProgramData\Fenomen Games ()
Startup: C:\ProgramData\Fitn17 ()
Startup: C:\ProgramData\Flood Light Games ()
Startup: C:\ProgramData\Floodlight Games ()
Startup: C:\ProgramData\FloodLightGames ()
Startup: C:\ProgramData\FreshGames ()
Startup: C:\ProgramData\Friday's games ()
Startup: C:\ProgramData\Friends Games ()
Startup: C:\ProgramData\Fugazo ()
Startup: C:\ProgramData\fullscreen=true ()
Startup: C:\ProgramData\Funny Bear Studio ()
Startup: C:\ProgramData\GAMEON ()
Startup: C:\ProgramData\GameXzone ()
Startup: C:\ProgramData\Gogii ()
Startup: C:\ProgramData\Gogii Games ()
Startup: C:\ProgramData\Google ()
Startup: C:\ProgramData\Hewlett-Packard ()
Startup: C:\ProgramData\HideAndSecret3 ()
Startup: C:\ProgramData\HipSoft ()
Startup: C:\ProgramData\HoverBee Studios ()
Startup: C:\ProgramData\HP ()
Startup: C:\ProgramData\hps ()
Startup: C:\ProgramData\HPSSUPPLY ()
Startup: C:\ProgramData\hpzinstall.log ()
Startup: C:\ProgramData\HTC ()
Startup: C:\ProgramData\Intenium ()
Startup: C:\ProgramData\InterAction studios ()
Startup: C:\ProgramData\Islands ()
Startup: C:\ProgramData\Jewelleria ()
Startup: C:\ProgramData\JollyBear ()
Startup: C:\ProgramData\JuliettesFashionEmpire ()
Startup: C:\ProgramData\Kingdom ()
Startup: C:\ProgramData\KranX ()
Startup: C:\ProgramData\Kreuzworträtsel - Kalender Edition ()
Startup: C:\ProgramData\LittleGamesCompany ()
Startup: C:\ProgramData\LoadHelper ()
Startup: C:\ProgramData\Lost Treasures of El Dorado ()
Startup: C:\ProgramData\MAGIX ()
Startup: C:\ProgramData\Malwarebytes ()
Startup: C:\ProgramData\Maximize Games ()
Startup: C:\ProgramData\McAfee ()
Startup: C:\ProgramData\Mean Hamster ()
Startup: C:\ProgramData\Media Center Programs ()
Startup: C:\ProgramData\MeinEigenesCafé ()
Startup: C:\ProgramData\Meridian93 ()
Startup: C:\ProgramData\Merscom ()
Startup: C:\ProgramData\Microsoft ()
Startup: C:\ProgramData\Microsoft Help ()
Startup: C:\ProgramData\Motorola ()
Startup: C:\ProgramData\MumboJumbo ()
Startup: C:\ProgramData\mxfilerelatedcache.mxc2 ()
Startup: C:\ProgramData\MythPeople ()
Startup: C:\ProgramData\NannyMania ()
Startup: C:\ProgramData\Nevosoft-Breeze ()
Startup: C:\ProgramData\Office Genuine Advantage ()
Startup: C:\ProgramData\Particles ()
Startup: C:\ProgramData\Perfect-Tree ()
Startup: C:\ProgramData\Pets Fun House ()
Startup: C:\ProgramData\PlayFirst ()
Startup: C:\ProgramData\PlayfulAge ()
Startup: C:\ProgramData\Playrix Entertainment ()
Startup: C:\ProgramData\PoBros ()
Startup: C:\ProgramData\PuzzlesByJoe ()
Startup: C:\ProgramData\QuickTime ()
Startup: C:\ProgramData\RescueFrenzy ()
Startup: C:\ProgramData\rionix ()
Startup: C:\ProgramData\Rumbic Studio ()
Startup: C:\ProgramData\Sandlot Games ()
Startup: C:\ProgramData\ScreenSeven ()
Startup: C:\ProgramData\Skype ()
Startup: C:\ProgramData\SpinTop Games ()
Startup: C:\ProgramData\SpookyMall ()
Startup: C:\ProgramData\Sprouts Adventure ()
Startup: C:\ProgramData\Start Menu ()
Startup: C:\ProgramData\Startmenü ()
Startup: C:\ProgramData\SugarGames ()
Startup: C:\ProgramData\SulusGames ()
Startup: C:\ProgramData\Sun ()
Startup: C:\ProgramData\TEMP ()
Startup: C:\ProgramData\Templates ()
Startup: C:\ProgramData\TERMINAL Studio ()
Startup: C:\ProgramData\Terrafarmers ()
Startup: C:\ProgramData\The Game Equation ()
Startup: C:\ProgramData\The Mirror Mysteries ()
Startup: C:\ProgramData\TheFallTrilogyEp3-BF ()
Startup: C:\ProgramData\TheRace_dev ()
Startup: C:\ProgramData\tmp ()
Startup: C:\ProgramData\Toshiba ()
Startup: C:\ProgramData\ToshibaEurope ()
Startup: C:\ProgramData\Try2 ()
Startup: C:\ProgramData\TuneUp Software ()
Startup: C:\ProgramData\UClick ()
Startup: C:\ProgramData\Ulead Systems ()
Startup: C:\ProgramData\Venus DS ()
Startup: C:\ProgramData\VirtualFarm ()
Startup: C:\ProgramData\VirtualFarm2 ()
Startup: C:\ProgramData\Vogelpiraten ()
Startup: C:\ProgramData\Vogue Tales ()
Startup: C:\ProgramData\Vorlagen ()
Startup: C:\ProgramData\WeatherLord ()
Startup: C:\ProgramData\WEBREG ()
Startup: C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} ()
Startup: C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} ()
Startup: C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} ()
Startup: C:\Users\Default\Anwendungsdaten ()
Startup: C:\Users\Default\AppData ()
Startup: C:\Users\Default\Application Data ()
Startup: C:\Users\Default\Cookies ()
Startup: C:\Users\Default\Desktop ()
Startup: C:\Users\Default\Documents ()
Startup: C:\Users\Default\Downloads ()
Startup: C:\Users\Default\Druckumgebung ()
Startup: C:\Users\Default\Eigene Dateien ()
Startup: C:\Users\Default\Favorites ()
Startup: C:\Users\Default\Links ()
Startup: C:\Users\Default\Local Settings ()
Startup: C:\Users\Default\Lokale Einstellungen ()
Startup: C:\Users\Default\Music ()
Startup: C:\Users\Default\My Documents ()
Startup: C:\Users\Default\NetHood ()
Startup: C:\Users\Default\Netzwerkumgebung ()
Startup: C:\Users\Default\NTUSER.DAT ()
Startup: C:\Users\Default\NTUSER.DAT.LOG ()
Startup: C:\Users\Default\ntuser.dat.LOG1 ()
Startup: C:\Users\Default\ntuser.dat.LOG2 ()
Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf ()
Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Default\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Default\Pictures ()
Startup: C:\Users\Default\PrintHood ()
Startup: C:\Users\Default\Recent ()
Startup: C:\Users\Default\Saved Games ()
Startup: C:\Users\Default\SendTo ()
Startup: C:\Users\Default\Start Menu ()
Startup: C:\Users\Default\Startmenü ()
Startup: C:\Users\Default\Templates ()
Startup: C:\Users\Default\Videos ()
Startup: C:\Users\Default\Vorlagen ()
Startup: C:\Users\Public\Desktop ()
Startup: C:\Users\Public\Documents ()
Startup: C:\Users\Public\Downloads ()
Startup: C:\Users\Public\DRM ()
Startup: C:\Users\Public\Favorites ()
Startup: C:\Users\Public\Music ()
Startup: C:\Users\Public\mxfilerelatedcache.mxc2 ()
Startup: C:\Users\Public\NTUSER.DAT ()
Startup: C:\Users\Public\NTUSER.DAT.LOG1 ()
Startup: C:\Users\Public\NTUSER.DAT.LOG2 ()
Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TM.blf ()
Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Public\NTUSER.DAT{1b382e45-9943-11dd-a307-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TM.blf ()
Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Public\NTUSER.DAT{8c9f9ea2-9395-11dd-a473-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Public\Pictures ()
Startup: C:\Users\Public\Recorded TV ()
Startup: C:\Users\Public\Videos ()
Startup: C:\Users\Simone Petry\Anwendungsdaten ()
Startup: C:\Users\Simone Petry\AppData ()
Startup: C:\Users\Simone Petry\Briefe ()
Startup: C:\Users\Simone Petry\Contacts ()
Startup: C:\Users\Simone Petry\Cookies ()
Startup: C:\Users\Simone Petry\Desktop ()
Startup: C:\Users\Simone Petry\Documents ()
Startup: C:\Users\Simone Petry\Downloads ()
Startup: C:\Users\Simone Petry\Druckumgebung ()
Startup: C:\Users\Simone Petry\Eigene Dateien ()
Startup: C:\Users\Simone Petry\Favorites ()
Startup: C:\Users\Simone Petry\geogebra ()
Startup: C:\Users\Simone Petry\Geschenke, Gutscheine ()
Startup: C:\Users\Simone Petry\Haus ()
Startup: C:\Users\Simone Petry\Links ()
Startup: C:\Users\Simone Petry\Lokale Einstellungen ()
Startup: C:\Users\Simone Petry\Material Chemie ()
Startup: C:\Users\Simone Petry\Music ()
Startup: C:\Users\Simone Petry\mxfilerelatedcache.mxc2 ()
Startup: C:\Users\Simone Petry\Netzwerkumgebung ()
Startup: C:\Users\Simone Petry\NTUSER.DAT ()
Startup: C:\Users\Simone Petry\ntuser.dat.LOG1 ()
Startup: C:\Users\Simone Petry\ntuser.dat.LOG2 ()
Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_new.LOG1 ()
Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_new.LOG2 ()
Startup: C:\Users\Simone Petry\NTUSER.DAT_tureg_old ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TM.blf ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{4e79ca56-24f7-11de-8326-001e68c53ee1}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TM.blf ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{58ce7e24-af1d-11e2-8ed4-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TM.blf ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms ()
Startup: C:\Users\Simone Petry\NTUSER.DAT{d275a980-59d0-11e2-94c9-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms ()
Startup: C:\Users\Simone Petry\ntuser.ini ()
Startup: C:\Users\Simone Petry\Organisation Schulen ()
Startup: C:\Users\Simone Petry\Pictures ()
Startup: C:\Users\Simone Petry\Recent ()
Startup: C:\Users\Simone Petry\Saved Games ()
Startup: C:\Users\Simone Petry\Schule (Aushilfe, Praktikum) ()
Startup: C:\Users\Simone Petry\Searches ()
Startup: C:\Users\Simone Petry\SendTo ()
Startup: C:\Users\Simone Petry\Startmenü ()
Startup: C:\Users\Simone Petry\Studienseminar ()
Startup: C:\Users\Simone Petry\Unterricht ()
Startup: C:\Users\Simone Petry\Versuch Natrium in Wasser.docx ()
Startup: C:\Users\Simone Petry\Videos ()
Startup: C:\Users\Simone Petry\Vorlagen ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {CA0D91C8-F9EC-4B40-997E-02F8BA3728F4} URL = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_10-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_10-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR Extension: (Chrome In-App Payments service) - C:\Users\SIMONE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-25] (TOSHIBA CORPORATION)
S4 HTCMonitorService; C:\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2012-10-26] (Nero AG)
S4 o2flash; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [65536 2007-02-12] (O2Micro International)
S4 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2012-10-08] ()
S4 TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-04-01] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-28] (Avira Operations GmbH & Co. KG)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R3 CnxtHdAudAddService; C:\Windows\System32\drivers\CHDART.sys [187904 2008-02-01] (Conexant Systems Inc.)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-04-01] ()
R3 QIOMem; C:\Windows\System32\DRIVERS\QIOMem.sys [8192 2007-04-09] (TOSHIBA)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)
S3 igfx; system32\DRIVERS\igdkmd32.sys [x]
S3 IntcHdmiAddService; system32\drivers\IntcHdmi.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 Tosrfcom; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-17 21:11 - 2013-09-17 21:12 - 01083437 _____ (Farbar) C:\Users\Simone Petry\Downloads\FRST.exe
2013-09-16 18:15 - 2013-09-16 18:15 - 00000911 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Users\Simone Petry\AppData\Roaming\Malwarebytes
2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-16 18:15 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-16 18:11 - 2013-09-16 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Simone Petry\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-16 18:09 - 2013-09-16 18:09 - 00000982 _____ C:\Users\Simone Petry\Desktop\JRT.txt
2013-09-16 18:04 - 2013-09-16 18:04 - 01029675 _____ (Thisisu) C:\Users\Simone Petry\Downloads\JRT.exe
2013-09-16 18:04 - 2013-09-16 18:04 - 00000000 ____D C:\Windows\ERUNT
2013-09-16 17:55 - 2013-09-16 17:58 - 00000000 ____D C:\AdwCleaner
2013-09-16 17:53 - 2013-09-16 17:53 - 01039554 _____ C:\Users\Simone Petry\Downloads\adwcleaner.exe
2013-09-16 16:58 - 2013-09-16 17:00 - 00036992 _____ C:\Users\Simone Petry\Downloads\Addition.txt
2013-09-16 16:56 - 2013-09-16 16:56 - 00000000 ____D C:\FRST
2013-09-13 07:57 - 2013-09-13 07:57 - 04751752 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2013-09-12 22:55 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 22:55 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 22:55 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 22:55 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 22:55 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-12 22:55 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 22:55 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-12 22:55 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 22:55 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 22:55 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-12 22:55 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-12 22:55 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 22:55 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 22:55 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 22:55 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-12 22:55 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 22:01 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 22:01 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-09-04 21:02 - 2013-09-04 21:03 - 00315392 _____ C:\Users\Simone Petry\Downloads\ZentraleMFB_Ueberblic_0d_0a_k_1 (1).ppt
2013-09-01 16:21 - 2013-09-01 16:20 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-01 16:20 - 2013-09-01 16:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-08-28 20:28 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
==================== One Month Modified Files and Folders =======
2013-09-17 21:12 - 2013-09-17 21:11 - 01083437 _____ (Farbar) C:\Users\Simone Petry\Downloads\FRST.exe
2013-09-17 21:03 - 2011-12-14 17:56 - 00001148 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA.job
2013-09-17 20:57 - 2012-04-07 16:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-17 20:55 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-17 20:55 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-17 18:59 - 2008-10-01 17:57 - 01857459 _____ C:\Windows\WindowsUpdate.log
2013-09-17 18:55 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-17 15:46 - 2006-11-02 15:01 - 00032510 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-16 22:10 - 2011-12-14 17:56 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core.job
2013-09-16 20:19 - 2008-10-03 16:20 - 00000000 ____D C:\Users\Simone Petry\AppData\Local\Microsoft Help
2013-09-16 18:15 - 2013-09-16 18:15 - 00000911 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Users\Simone Petry\AppData\Roaming\Malwarebytes
2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-16 18:15 - 2013-09-16 18:15 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-16 18:11 - 2013-09-16 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Simone Petry\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-16 18:09 - 2013-09-16 18:09 - 00000982 _____ C:\Users\Simone Petry\Desktop\JRT.txt
2013-09-16 18:04 - 2013-09-16 18:04 - 01029675 _____ (Thisisu) C:\Users\Simone Petry\Downloads\JRT.exe
2013-09-16 18:04 - 2013-09-16 18:04 - 00000000 ____D C:\Windows\ERUNT
2013-09-16 17:58 - 2013-09-16 17:55 - 00000000 ____D C:\AdwCleaner
2013-09-16 17:53 - 2013-09-16 17:53 - 01039554 _____ C:\Users\Simone Petry\Downloads\adwcleaner.exe
2013-09-16 17:00 - 2013-09-16 16:58 - 00036992 _____ C:\Users\Simone Petry\Downloads\Addition.txt
2013-09-16 16:56 - 2013-09-16 16:56 - 00000000 ____D C:\FRST
2013-09-15 23:02 - 2012-11-19 18:51 - 00000000 ____D C:\Users\Simone Petry\Studienseminar
2013-09-15 18:51 - 2013-02-03 16:44 - 00000000 ____D C:\Users\Simone Petry\Unterricht
2013-09-15 18:39 - 2013-07-09 09:55 - 00006978 _____ C:\Windows\PFRO.log
2013-09-14 08:09 - 2008-02-26 15:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-13 16:12 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-13 07:57 - 2013-09-13 07:57 - 04751752 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2013-09-13 07:57 - 2012-04-07 16:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-13 07:57 - 2011-05-17 11:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-13 07:19 - 2013-07-01 09:42 - 00326720 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 22:48 - 2013-08-15 12:12 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 22:45 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-05 20:34 - 2013-01-02 16:54 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-05 20:34 - 2013-01-02 16:54 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-04 21:03 - 2013-09-04 21:02 - 00315392 _____ C:\Users\Simone Petry\Downloads\ZentraleMFB_Ueberblic_0d_0a_k_1 (1).ppt
2013-09-04 20:26 - 2008-01-21 09:16 - 01560216 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-01 16:20 - 2013-09-01 16:21 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-01 16:20 - 2013-09-01 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-01 16:20 - 2013-09-01 16:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-09-01 16:20 - 2012-08-31 08:25 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-01 16:20 - 2010-07-06 21:46 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-01 15:30 - 2010-05-18 15:10 - 00000000 ____D C:\Program Files\DEUTSCHLAND SPIELT
Some content of TEMP:
====================
C:\Users\Simone Petry\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-17 19:02
==================== End Of Log ============================
--- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-09-2013 03 Ran by Simone Petry at 2013-09-17 21:14:12 Running from C:\Users\Simone Petry\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Update for Microsoft Office 2007 (KB2508958) 32 Bit HP CIO Components Installer (Version: 1.0.0) ABI-TOUR ACD/Labs Software in C:\Program Files\ACDFREE12\ (Version: v12.00, FREE) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0) Adobe Flash Player 11 ActiveX (Version: 11.8.800.174) Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8) Adobe Shockwave Player 11.6 (Version: 11.6.4.634) Apple Application Support (Version: 2.3) Apple Software Update (Version: 2.1.3.127) ATI Catalyst Install Manager (Version: 3.0.657.0) Avira Free Antivirus (Version: 13.0.0.4052) Big Fish Games: Game Manager (Version: 3.0.1.60) Bluetooth Stack for Windows by Toshiba (Version: v6.10.02(T)) Camera Assistant Software for Toshiba (Version: 1.7.175.0123) Canon Easy-PhotoPrint EX Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data Canon IJ Network Scan Utility Canon IJ Network Tool Canon MG6100 series Benutzerregistrierung Canon MG6100 series MP Drivers Canon MP Navigator EX 4.0 Canon My Printer Canon Solution Menu EX Catalyst Control Center - Branding (Version: 1.00.0000) Catalyst Control Center Core Implementation (Version: 2008.0130.1509.26922) Catalyst Control Center Graphics Full Existing (Version: 2008.0130.1509.26922) Catalyst Control Center Graphics Full New (Version: 2008.0130.1509.26922) Catalyst Control Center Graphics Light (Version: 2008.0130.1509.26922) Catalyst Control Center Graphics Previews Vista (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Chinese Standard (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Chinese Traditional (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Dutch (Version: 2008.0130.1509.26922) Catalyst Control Center Localization French (Version: 2008.0130.1509.26922) Catalyst Control Center Localization German (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Italian (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Japanese (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Korean (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Portuguese (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Spanish (Version: 2008.0130.1509.26922) Catalyst Control Center Localization Swedish (Version: 2008.0130.1509.26922) CCC Help Chinese Standard (Version: 2008.0130.1508.26922) CCC Help Chinese Traditional (Version: 2008.0130.1508.26922) CCC Help Dutch (Version: 2008.0130.1508.26922) CCC Help English (Version: 2008.0130.1508.26922) CCC Help French (Version: 2008.0130.1508.26922) CCC Help German (Version: 2008.0130.1508.26922) CCC Help Italian (Version: 2008.0130.1508.26922) CCC Help Japanese (Version: 2008.0130.1508.26922) CCC Help Korean (Version: 2008.0130.1508.26922) CCC Help Portuguese (Version: 2008.0130.1508.26922) CCC Help Spanish (Version: 2008.0130.1508.26922) CCC Help Swedish (Version: 2008.0130.1508.26922) ccc-core-static (Version: 2008.0130.1509.26922) ccc-utility (Version: 2008.0130.1509.26922) CCleaner (Version: 4.02) CD/DVD Drive Acoustic Silencer (Version: 2.02.00) Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000) Conexant HD Audio (Version: 4.36.6.0) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DEUTSCHLAND SPIELT GAME CENTER (Version: 1.0.0.46) Die Siedler II - Die nächste Generation dm-Fotowelt (Version: 5.0.4) EAX Unified Farm Tribe 2: Jetzt wird geackert! (Version: 1.0.0.0) Foto Paradies GeoGebra (Version: 4.0.41.0) GeoGebra WebStart Google Chrome (HKCU Version: 29.0.1547.66) HDAUDIO Soft Data Fax Modem with SmartCP HDMI Control Manager (Version: 1.6) HessGISS 2012-2013 (Version: 17.0) HP Update (Version: 5.002.007.004) HPSSupply (Version: 2.1.3.0000) HTC Driver Installer (Version: 4.0.0.009) HTC Sync Manager (Version: 1.1.66.0) Intel® Matrix Storage Manager InterVideo AVControlSDK Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Marvell Miniport Driver (Version: 10.51.4.3) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Access Runtime 2010 (Version: 14.0.7015.1000) Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Access Runtime 2010 (Version: 14.0.7015.1000) Microsoft Office Access Runtime MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Works (Version: 9.7.0621) Microsoft XML Parser (Version: 8.0.7820.0) Microsoft XML Parser (Version: 8.20.8730.4) Move Media Player MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) NetWaiting (Version: 2.5.52) NVIDIA PhysX (Version: 9.09.0203) O2Micro Flash Memory Card Reader Driver (x86) (Version: 3.19.1) OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0) OpenAL PokerStars.net ProtectDisc Driver, Version 11 (Version: 11.0.0.12) QuickTime (Version: 7.73.80.64) Risen (Version: 1.00.0000) Samsung Master (Version: 1.1.11) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition Sid Meier's Civilization 4 (Version: 1.00.0000) Sid Meier's Civilization 4 (Version: 1.74) Skins (Version: 2008.0130.1509.26922) Skype™ 5.10 (Version: 5.10.116) Star Wars(TM): Knights of the Old Republic (TM) Steam (Version: 1.0.0.0) swMSM (Version: 12.0.0.1) Synaptics Pointing Device Driver (Version: 10.1.7.0) The Witcher: Enhanced Edition TOSHIBA Assist (Version: 2.01.04) TOSHIBA Benutzerhandbücher (Version: 7.33) TOSHIBA ConfigFree (Version: 7.1.26) TOSHIBA Disc Creator (Version: 2.0.1.1.a) TOSHIBA DVD PLAYER (Version: 1.20.10) TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00) TOSHIBA Hardware Setup (Version: 3.00.01.00) Toshiba Online Product Information (Version: 1.00.0012) TOSHIBA Recovery Disc Creator (Version: 2.0.0.1b) TOSHIBA SD Memory Utilities (Version: 1.8.1.1) TOSHIBA Supervisor Password (Version: 3.00.01.00) TOSHIBA Value Added Package (Version: 1.1.14) TRDCReminder (Version: 1.00.0014) TRORDCLauncher (Version: 1.0.0.1) TuneUp Utilities 2013 (Version: 13.0.3020.2) TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2) Unity Web Player (HKCU Version: ) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition Update für Microsoft Office Excel 2007 Help (KB963678) Update für Microsoft Office Powerpoint 2007 Help (KB963669) Update für Microsoft Office Word 2007 Help (KB963665) VLC media player 1.0.3 (Version: 1.0.3) Windows Media Encoder 9-Reihe Windows Media Encoder 9-Reihe (Version: 9.00.3374) ==================== Restore Points ========================= 04-09-2013 16:39:47 Geplanter Prüfpunkt 10-09-2013 13:58:30 Windows Update 12-09-2013 20:44:42 Windows Update 13-09-2013 08:39:17 Windows Update 13-09-2013 13:55:15 Windows Update 13-09-2013 14:03:03 Windows Update 13-09-2013 14:41:31 Windows Update 13-09-2013 15:10:08 Windows Update 13-09-2013 15:17:27 Windows Update 13-09-2013 15:32:32 Windows Update 14-09-2013 06:04:04 Windows Update 17-09-2013 12:45:20 Windows Update ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000736 ____A C:\Windows\system32\Drivers\etc\hosts ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {03FE9E06-9BED-4ECE-825D-7569A2EA4C0A} - System32\Tasks\{61F8E5DD-1D83-40B4-8CB0-C89D5E23647C} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.) Task: {11A9B218-E1FC-4F88-82EB-1522A1B09F5C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {1D3AD10B-481B-4F54-839A-256D1AFFB347} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13] (Adobe Systems Incorporated) Task: {246B0DB0-0D73-42C6-98EF-0C30CF48B70B} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.) Task: {28912FAB-CA72-4BD3-842C-AB81111E6D96} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation) Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {470A6904-C848-4284-BBCF-B1CBAC31345A} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation) Task: {6B6262DF-EFFF-432C-9850-9023BA49143C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.) Task: {9CFCB40E-6BE6-4A52-B834-49CF0E188B06} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software) Task: {9E5B3551-C5A0-4334-A0C5-2D919CB3465B} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation) Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation) Task: {AC09D2B6-7091-4776-BDC4-6C1999933A6E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {CBDF8DD4-48D3-49D7-AC62-89826B0D9891} - System32\Tasks\{4F6BAA77-A8BF-46A1-A07A-697634734F94} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.124.259/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {D5F77ED5-B41B-4259-BE73-E83CB2099B8A} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {F7A5F634-5266-471C-B72A-F68601FDC9EC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd) Task: {F882764E-68E4-45ED-8A86-708FCE72E6C4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000Core.job => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-960008410-599929504-2592557754-1000UA.job => C:\Users\Simone Petry\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2008-02-15 18:22 - 2008-01-30 16:30 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll 2008-01-08 08:15 - 2008-01-08 08:15 - 00688128 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll 2007-11-16 21:10 - 2007-11-16 21:10 - 00172032 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TosBtAPI.dll 2007-12-03 18:57 - 2007-12-03 18:57 - 00131072 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TosBdAPI.dll 2008-02-15 18:29 - 2007-11-29 18:18 - 00163840 _____ (Synaptics, Inc.) C:\Windows\system32\SynCOM.dll 2008-02-15 18:29 - 2007-11-29 18:30 - 00147456 _____ (Synaptics, Inc.) C:\Windows\system32\SynTPAPI.dll 2013-09-04 08:14 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll 2013-09-04 08:14 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll 2013-09-04 08:14 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll 2013-09-04 08:14 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll 2013-09-04 08:14 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll 2013-09-04 08:14 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Simone Petry\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\ProgramData\TEMP:025DF3DE AlternateDataStreams: C:\ProgramData\TEMP:02F30776 AlternateDataStreams: C:\ProgramData\TEMP:03A039A3 AlternateDataStreams: C:\ProgramData\TEMP:03D08225 AlternateDataStreams: C:\ProgramData\TEMP:0406003C AlternateDataStreams: C:\ProgramData\TEMP:041ED421 AlternateDataStreams: C:\ProgramData\TEMP:073139EC AlternateDataStreams: C:\ProgramData\TEMP:07D64CD9 AlternateDataStreams: C:\ProgramData\TEMP:084612C9 AlternateDataStreams: C:\ProgramData\TEMP:0915A718 AlternateDataStreams: C:\ProgramData\TEMP:0968E571 AlternateDataStreams: C:\ProgramData\TEMP:09708CB7 AlternateDataStreams: C:\ProgramData\TEMP:0AE2C68F AlternateDataStreams: C:\ProgramData\TEMP:102394C6 AlternateDataStreams: C:\ProgramData\TEMP:10873493 AlternateDataStreams: C:\ProgramData\TEMP:10B970A9 AlternateDataStreams: C:\ProgramData\TEMP:10D45FC3 AlternateDataStreams: C:\ProgramData\TEMP:12383CAE AlternateDataStreams: C:\ProgramData\TEMP:12D21A9A AlternateDataStreams: C:\ProgramData\TEMP:13019F4B AlternateDataStreams: C:\ProgramData\TEMP:13765436 AlternateDataStreams: C:\ProgramData\TEMP:13CDB0E0 AlternateDataStreams: C:\ProgramData\TEMP:14362DF8 AlternateDataStreams: C:\ProgramData\TEMP:160ADF0B AlternateDataStreams: C:\ProgramData\TEMP:164561C8 AlternateDataStreams: C:\ProgramData\TEMP:169E7AC5 AlternateDataStreams: C:\ProgramData\TEMP:1709732A AlternateDataStreams: C:\ProgramData\TEMP:18A25CF1 AlternateDataStreams: C:\ProgramData\TEMP:1A8BB29B AlternateDataStreams: C:\ProgramData\TEMP:1B3549F2 AlternateDataStreams: C:\ProgramData\TEMP:1B47CB83 AlternateDataStreams: C:\ProgramData\TEMP:1B96CF22 AlternateDataStreams: C:\ProgramData\TEMP:206470A5 AlternateDataStreams: C:\ProgramData\TEMP:217A2A36 AlternateDataStreams: C:\ProgramData\TEMP:2211E7A0 AlternateDataStreams: C:\ProgramData\TEMP:22741C1F AlternateDataStreams: C:\ProgramData\TEMP:258D2F8B AlternateDataStreams: C:\ProgramData\TEMP:26499772 AlternateDataStreams: C:\ProgramData\TEMP:2652902F AlternateDataStreams: C:\ProgramData\TEMP:27F44544 AlternateDataStreams: C:\ProgramData\TEMP:28819F45 AlternateDataStreams: C:\ProgramData\TEMP:2979C892 AlternateDataStreams: C:\ProgramData\TEMP:29C0641D AlternateDataStreams: C:\ProgramData\TEMP:2ABB51D4 AlternateDataStreams: C:\ProgramData\TEMP:2AE74FF9 AlternateDataStreams: C:\ProgramData\TEMP:2B856118 AlternateDataStreams: C:\ProgramData\TEMP:2B9555D8 AlternateDataStreams: C:\ProgramData\TEMP:2C250258 AlternateDataStreams: C:\ProgramData\TEMP:2C86E2AD AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F AlternateDataStreams: C:\ProgramData\TEMP:2CED8825 AlternateDataStreams: C:\ProgramData\TEMP:2EB79F01 AlternateDataStreams: C:\ProgramData\TEMP:2F70C0B4 AlternateDataStreams: C:\ProgramData\TEMP:3118E26B AlternateDataStreams: C:\ProgramData\TEMP:34C443B4 AlternateDataStreams: C:\ProgramData\TEMP:363E775E AlternateDataStreams: C:\ProgramData\TEMP:36608448 AlternateDataStreams: C:\ProgramData\TEMP:36A39835 AlternateDataStreams: C:\ProgramData\TEMP:371A321E AlternateDataStreams: C:\ProgramData\TEMP:375FC7E7 AlternateDataStreams: C:\ProgramData\TEMP:3766E957 AlternateDataStreams: C:\ProgramData\TEMP:3B07E6F4 AlternateDataStreams: C:\ProgramData\TEMP:3CAE2A70 AlternateDataStreams: C:\ProgramData\TEMP:404908B5 AlternateDataStreams: C:\ProgramData\TEMP:413E2927 AlternateDataStreams: C:\ProgramData\TEMP:425759C6 AlternateDataStreams: C:\ProgramData\TEMP:436BE28C AlternateDataStreams: C:\ProgramData\TEMP:45912F61 AlternateDataStreams: C:\ProgramData\TEMP:46A2F27B AlternateDataStreams: C:\ProgramData\TEMP:471AD3D0 AlternateDataStreams: C:\ProgramData\TEMP:483AC68A AlternateDataStreams: C:\ProgramData\TEMP:4AC7B5C1 AlternateDataStreams: C:\ProgramData\TEMP:4B244549 AlternateDataStreams: C:\ProgramData\TEMP:4C6F9D77 AlternateDataStreams: C:\ProgramData\TEMP:4F852702 AlternateDataStreams: C:\ProgramData\TEMP:553056F1 AlternateDataStreams: C:\ProgramData\TEMP:56C66609 AlternateDataStreams: C:\ProgramData\TEMP:58E38390 AlternateDataStreams: C:\ProgramData\TEMP:59A6876B AlternateDataStreams: C:\ProgramData\TEMP:5A2E8BBF AlternateDataStreams: C:\ProgramData\TEMP:5A437AC3 AlternateDataStreams: C:\ProgramData\TEMP:5A8F8A0C AlternateDataStreams: C:\ProgramData\TEMP:5B4686D7 AlternateDataStreams: C:\ProgramData\TEMP:5C0940F1 AlternateDataStreams: C:\ProgramData\TEMP:5CE65446 AlternateDataStreams: C:\ProgramData\TEMP:5DB36C47 AlternateDataStreams: C:\ProgramData\TEMP:5F85EE30 AlternateDataStreams: C:\ProgramData\TEMP:6294B369 AlternateDataStreams: C:\ProgramData\TEMP:6423D635 AlternateDataStreams: C:\ProgramData\TEMP:66AA0486 AlternateDataStreams: C:\ProgramData\TEMP:678C1866 AlternateDataStreams: C:\ProgramData\TEMP:6896CCCE AlternateDataStreams: C:\ProgramData\TEMP:68A41423 AlternateDataStreams: C:\ProgramData\TEMP:6A0A47E7 AlternateDataStreams: C:\ProgramData\TEMP:6DDFD746 AlternateDataStreams: C:\ProgramData\TEMP:6E2D80C8 AlternateDataStreams: C:\ProgramData\TEMP:6E65510A AlternateDataStreams: C:\ProgramData\TEMP:6EA64886 AlternateDataStreams: C:\ProgramData\TEMP:6EE8565A AlternateDataStreams: C:\ProgramData\TEMP:6FD26134 AlternateDataStreams: C:\ProgramData\TEMP:706B1D1A AlternateDataStreams: C:\ProgramData\TEMP:70E897B5 AlternateDataStreams: C:\ProgramData\TEMP:72A1B66A AlternateDataStreams: C:\ProgramData\TEMP:75798D9A AlternateDataStreams: C:\ProgramData\TEMP:762408BA AlternateDataStreams: C:\ProgramData\TEMP:7A032A04 AlternateDataStreams: C:\ProgramData\TEMP:7BB20DE8 AlternateDataStreams: C:\ProgramData\TEMP:7BE5BAAB AlternateDataStreams: C:\ProgramData\TEMP:7BFAAE70 AlternateDataStreams: C:\ProgramData\TEMP:7C8AA9A6 AlternateDataStreams: C:\ProgramData\TEMP:7CEDF9F3 AlternateDataStreams: C:\ProgramData\TEMP:7EABF26C AlternateDataStreams: C:\ProgramData\TEMP:7EF55396 AlternateDataStreams: C:\ProgramData\TEMP:85376176 AlternateDataStreams: C:\ProgramData\TEMP:87A3A233 AlternateDataStreams: C:\ProgramData\TEMP:8AC20936 AlternateDataStreams: C:\ProgramData\TEMP:8AED9359 AlternateDataStreams: C:\ProgramData\TEMP:8C12CFCD AlternateDataStreams: C:\ProgramData\TEMP:8CCDAB14 AlternateDataStreams: C:\ProgramData\TEMP:902C848D AlternateDataStreams: C:\ProgramData\TEMP:908A1B53 AlternateDataStreams: C:\ProgramData\TEMP:922DA2DB AlternateDataStreams: C:\ProgramData\TEMP:92DB4653 AlternateDataStreams: C:\ProgramData\TEMP:943971F5 AlternateDataStreams: C:\ProgramData\TEMP:952245B1 AlternateDataStreams: C:\ProgramData\TEMP:9547F1DB AlternateDataStreams: C:\ProgramData\TEMP:97995ED4 AlternateDataStreams: C:\ProgramData\TEMP:9857FAE3 AlternateDataStreams: C:\ProgramData\TEMP:993185CB AlternateDataStreams: C:\ProgramData\TEMP:99C301D0 AlternateDataStreams: C:\ProgramData\TEMP:9C3AAD57 AlternateDataStreams: C:\ProgramData\TEMP:9C8D5426 AlternateDataStreams: C:\ProgramData\TEMP:9CF728A6 AlternateDataStreams: C:\ProgramData\TEMP:9E3E060F AlternateDataStreams: C:\ProgramData\TEMP:9F3CEEE6 AlternateDataStreams: C:\ProgramData\TEMP:9FCF32A8 AlternateDataStreams: C:\ProgramData\TEMP:A42FABF7 AlternateDataStreams: C:\ProgramData\TEMP:A561576B AlternateDataStreams: C:\ProgramData\TEMP:A6F30843 AlternateDataStreams: C:\ProgramData\TEMP:A76A1B1B AlternateDataStreams: C:\ProgramData\TEMP:A8606E6E AlternateDataStreams: C:\ProgramData\TEMP:A9562832 AlternateDataStreams: C:\ProgramData\TEMP:A9ABA3FF AlternateDataStreams: C:\ProgramData\TEMP:AE8FDB48 AlternateDataStreams: C:\ProgramData\TEMP:AE9351E0 AlternateDataStreams: C:\ProgramData\TEMP:AED4A2B7 AlternateDataStreams: C:\ProgramData\TEMP:AF54CFFD AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 AlternateDataStreams: C:\ProgramData\TEMP:B285A50E AlternateDataStreams: C:\ProgramData\TEMP:B6D84F71 AlternateDataStreams: C:\ProgramData\TEMP:B8791731 AlternateDataStreams: C:\ProgramData\TEMP:BACD3198 AlternateDataStreams: C:\ProgramData\TEMP:BCFEA004 AlternateDataStreams: C:\ProgramData\TEMP:BD8010FE AlternateDataStreams: C:\ProgramData\TEMP:BE0654D6 AlternateDataStreams: C:\ProgramData\TEMP:BEACE4C8 AlternateDataStreams: C:\ProgramData\TEMP:BEF18713 AlternateDataStreams: C:\ProgramData\TEMP:BF6C4AAC AlternateDataStreams: C:\ProgramData\TEMP:C0BCE04B AlternateDataStreams: C:\ProgramData\TEMP:C2F24DB5 AlternateDataStreams: C:\ProgramData\TEMP:C3AD9507 AlternateDataStreams: C:\ProgramData\TEMP:C3C72D5F AlternateDataStreams: C:\ProgramData\TEMP:C4288847 AlternateDataStreams: C:\ProgramData\TEMP:C43C957E AlternateDataStreams: C:\ProgramData\TEMP:C48905F4 AlternateDataStreams: C:\ProgramData\TEMP:C6920A5D AlternateDataStreams: C:\ProgramData\TEMP:C7857F06 AlternateDataStreams: C:\ProgramData\TEMP:C9B27A06 AlternateDataStreams: C:\ProgramData\TEMP:CBAF0C30 AlternateDataStreams: C:\ProgramData\TEMP:CF1334B0 AlternateDataStreams: C:\ProgramData\TEMP:CFF6B3FF AlternateDataStreams: C:\ProgramData\TEMP:D02FBAEC AlternateDataStreams: C:\ProgramData\TEMP:D2397415 AlternateDataStreams: C:\ProgramData\TEMP:D36E068F AlternateDataStreams: C:\ProgramData\TEMP:D3A82449 AlternateDataStreams: C:\ProgramData\TEMP:D4558A0B AlternateDataStreams: C:\ProgramData\TEMP:D696AA12 AlternateDataStreams: C:\ProgramData\TEMP:D987CB43 AlternateDataStreams: C:\ProgramData\TEMP:D999FFD5 AlternateDataStreams: C:\ProgramData\TEMP:DB2748F7 AlternateDataStreams: C:\ProgramData\TEMP:DF5ABA3D AlternateDataStreams: C:\ProgramData\TEMP:E0888117 AlternateDataStreams: C:\ProgramData\TEMP:E0A09032 AlternateDataStreams: C:\ProgramData\TEMP:E1D818F7 AlternateDataStreams: C:\ProgramData\TEMP:E21433CE AlternateDataStreams: C:\ProgramData\TEMP:E222F217 AlternateDataStreams: C:\ProgramData\TEMP:E2CB42C9 AlternateDataStreams: C:\ProgramData\TEMP:E2DDFA62 AlternateDataStreams: C:\ProgramData\TEMP:E402E439 AlternateDataStreams: C:\ProgramData\TEMP:E40AB54F AlternateDataStreams: C:\ProgramData\TEMP:E4EE99EF AlternateDataStreams: C:\ProgramData\TEMP:E5496666 AlternateDataStreams: C:\ProgramData\TEMP:E5B07840 AlternateDataStreams: C:\ProgramData\TEMP:E5BA9ADD AlternateDataStreams: C:\ProgramData\TEMP:E5F8E280 AlternateDataStreams: C:\ProgramData\TEMP:E6708F08 AlternateDataStreams: C:\ProgramData\TEMP:E6BEADB7 AlternateDataStreams: C:\ProgramData\TEMP:E6CDFB4A AlternateDataStreams: C:\ProgramData\TEMP:E87AB4E3 AlternateDataStreams: C:\ProgramData\TEMP:E9900C74 AlternateDataStreams: C:\ProgramData\TEMP:EB68CA55 AlternateDataStreams: C:\ProgramData\TEMP:EC0279DC AlternateDataStreams: C:\ProgramData\TEMP:EC7C9796 AlternateDataStreams: C:\ProgramData\TEMP:ECF3C50F AlternateDataStreams: C:\ProgramData\TEMP:ED2D63E4 AlternateDataStreams: C:\ProgramData\TEMP:ED9B661E AlternateDataStreams: C:\ProgramData\TEMP:EE198B1F AlternateDataStreams: C:\ProgramData\TEMP:EFF3C3C8 AlternateDataStreams: C:\ProgramData\TEMP:F1F936DF AlternateDataStreams: C:\ProgramData\TEMP:F26F5952 AlternateDataStreams: C:\ProgramData\TEMP:F2AF86D9 AlternateDataStreams: C:\ProgramData\TEMP:F3029A65 AlternateDataStreams: C:\ProgramData\TEMP:F3591DDB AlternateDataStreams: C:\ProgramData\TEMP:F3A185AE AlternateDataStreams: C:\ProgramData\TEMP:F53B274A AlternateDataStreams: C:\ProgramData\TEMP:F5FC5DCE AlternateDataStreams: C:\ProgramData\TEMP:F67AAFC5 AlternateDataStreams: C:\ProgramData\TEMP:F6A0889A AlternateDataStreams: C:\ProgramData\TEMP:F760FD47 AlternateDataStreams: C:\ProgramData\TEMP:F9689B72 AlternateDataStreams: C:\ProgramData\TEMP:F9F58B80 AlternateDataStreams: C:\ProgramData\TEMP:FD11E093 AlternateDataStreams: C:\ProgramData\TEMP:FD786DCA AlternateDataStreams: C:\ProgramData\TEMP:FECEF728 ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/17/2013 06:57:16 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/17/2013 02:40:36 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/17/2013 06:25:04 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/16/2013 10:28:35 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/16/2013 08:12:54 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/17/2013 06:57:19 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (09/17/2013 03:46:21 PM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (09/17/2013 02:40:36 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (09/17/2013 06:32:21 AM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (09/17/2013 06:25:04 AM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (09/16/2013 10:30:38 PM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (09/16/2013 10:28:35 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (09/16/2013 10:25:44 PM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (09/16/2013 09:10:59 PM) (Source: Print) (User: SimonePetry-PC) Description: Das Dokument Microsoft Word - Aufträge 17.9.13.docx im Besitz von Simone Petry konnte nicht auf dem Drucker Canon MG6100 series Printer gedruckt werden. Versuchen Sie erneut, das Dokument zu drucken, oder starten Sie den Druckspooler erneut. Datentyp: NT EMF 1.008. Größe der Spooldatei in Bytes: 131072. Anzahl der gedruckten Bytes: 37128. Gesamtanzahl der Seiten des Dokuments: 1. Anzahl der gedruckten Seiten: 0. Clientcomputer: \\SIMONEPETRY-PC. Vom Druckprozessor zurückgegebener Win32-Fehlercode: Microsoft Word - Aufträge 17.9.13.docx0. Microsoft Word - Aufträge 17.9.13.docx1 Error: (09/16/2013 08:12:56 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Microsoft Office Sessions: ========================= Error: (09/02/2013 07:13:54 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8985 seconds with 6780 seconds of active time. This session ended with a crash. Error: (03/26/2010 02:42:51 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 127 seconds with 120 seconds of active time. This session ended with a crash. Error: (03/11/2010 00:11:05 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 892 seconds with 780 seconds of active time. This session ended with a crash. Error: (10/25/2008 03:40:05 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6308.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 189 seconds with 180 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 3069.67 MB Available physical RAM: 1713.84 MB Total Pagefile: 6341.62 MB Available Pagefile: 5171.08 MB Total Virtual: 2047.88 MB Available Virtual: 1918.7 MB ==================== Drives ================================ Drive c: (Vista) (Fixed) (Total:117.54 GB) (Free:22.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: (Data) (Fixed) (Total:113.88 GB) (Free:101.87 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 22741035) Partition 1: (Not Active) - (Size=1 GB) - (Type=27) Partition 2: (Active) - (Size=118 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=114 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
|
18.09.2013, 14:13
| #2 |
| /// TB-Ausbilder   | Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll Servus,
__________________Schritt 1 ESET Online Scanner
Schritt 2 Downloade Dir bitte  SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
|
21.09.2013, 15:29
| #3 |
| /// TB-Ausbilder | Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll Fehlende Rückmeldung
__________________Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen! |
|
22.09.2013, 15:17
| #4 |
| | Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll Hallo Matthias, ich will weitermachen, hatte aber die Woche nicht mehr viel Zeit und habe die Scans jetzt erst durchführen können. Anbei also wieder die Logs. Danke, Simone log.txt von ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3cd13afc8e00e14d8fe9e27342e2b099
# engine=15216
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-22 11:44:47
# local_time=2013-09-22 01:44:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 97 18460 150521592 11216 0
# compatibility_mode=5892 16776573 100 100 105402 217383015 0 0
# scanned=65183
# found=0
# cleaned=0
# scan_time=3012
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3cd13afc8e00e14d8fe9e27342e2b099
# engine=15216
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-22 11:53:02
# local_time=2013-09-22 01:53:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 97 18955 150522087 11711 0
# compatibility_mode=5892 16776573 100 100 105897 217383510 0 0
# scanned=1060
# found=0
# cleaned=0
# scan_time=137
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=3cd13afc8e00e14d8fe9e27342e2b099
# engine=15216
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-22 01:33:18
# local_time=2013-09-22 03:33:18 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 97 24971 150528103 17727 0
# compatibility_mode=5892 16776573 100 100 111913 217389526 0 0
# scanned=233281
# found=0
# cleaned=0
# scan_time=5973
Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2013 TuneUp Utilities Language Pack (de-DE) CCleaner Java 7 Update 25 Adobe Reader 10.1.8 Adobe Reader out of Date! Google Chrome 29.0.1547.66 Google Chrome 29.0.1547.76 ````````Process Check: objlist.exe by Laurent```````` Windows Defender MSASCui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Windows Defender MSASCui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` |
|
23.09.2013, 13:10
| #5 |
| /// TB-Ausbilder | Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll Servus, Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Ich sehe, dass du sog. Registry Cleaner auf dem System hast. In deinem Fall CCleaner TuneUp Utilities 2013 . Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner. Der Grund ist ganz einfach: Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich. Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.
Zerstörst Du die Registry, zerstörst Du Windows. Ich empfehle dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten. Am Ende empfehle ich dir ein anderes Tool, mit dem du deine temporären Dateien entfernen kannst. Schritt 1 Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Schritt 2 Deine Version von Adobe Flash Player ist veraltet. Bitte folge diesen Schritte, um Adobe Flash zu aktualisieren:
Schritt 3 Deinstalliere bitte deine aktuelle Version von Adobe Reader Start--> Systemsteuerung--> Software / Programme deinstallieren--> Adobe Reader und lade dir die neue Version von Hier herunter- Entferne den Hacken für den McAfee SecurityScan bzw. Google Chrome. Schritt 4 Die Reihenfolge ist hier entscheidend.
Schritt 5 Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von Registry Cleanern. Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link: Miekemoes Blogspot ( MVP ) Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
| Themen zu Vista: APPL/BProtector.Gen in C:\ProgramDat\BrowserProtect\...\BrowserProtect.dll |
| antivir, antivirus, appl/bprotector.gen, avg, avira, black, branding, canon, computer, defender, device driver, einstellungen, farbar, farbar recovery scan tool, flash player, google, home, homepage, iexplore.exe, logfile, plug-in, programm, registry, services.exe, software, svchost.exe, system, vikings, windows |
Hybrid-Darstellung
