Windows 7: Viel Werbung und Videos im Hintergrund

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01
Ran by Janine (administrator) on FUJI on 20-09-2013 17:18:01
Running from C:\Users\Janine\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\vVX3000.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Google Update] - C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-25] (Google Inc.)
MountPoints2: E - E:\FRT_Install.exe
MountPoints2: {170b0609-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe
MountPoints2: {170b061d-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe
HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [80480 2013-06-26] (Nullsoft, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

ProxyServer: :0
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9EC287D89D3CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Norton Identity Protection) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130919.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130919.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)
S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)
S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-03-19] (Sony Ericsson Mobile Communications)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-20 17:17 - 2013-09-20 17:17 - 01950622 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe
2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST
2013-09-20 17:16 - 2013-09-20 17:16 - 01083549 _____ (Farbar) C:\Users\Janine\Downloads\FRST.exe
2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe
2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log
2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable
2013-09-18 21:08 - 2013-09-18 21:08 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe
2013-09-12 07:08 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 07:08 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 07:08 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-12 07:08 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 07:08 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 07:08 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-12 07:08 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-12 07:08 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 07:08 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 07:08 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 07:08 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 07:08 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 07:08 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-12 07:08 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 19:20 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 19:20 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 19:20 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 19:20 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 19:20 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 19:20 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 19:20 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 19:20 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 19:20 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 19:20 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 19:20 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 19:20 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 19:20 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 19:20 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 19:20 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 19:20 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 19:20 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 19:20 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 19:20 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 19:20 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 19:20 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 19:20 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 19:20 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 19:20 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 19:20 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 19:20 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 19:20 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-03 18:45 - 2013-09-03 18:45 - 00000000 ____D C:\Program Files (x86)\USB Audio
2013-08-30 06:44 - 2013-09-18 21:10 - 00000000 ____D C:\AdwCleaner
2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Malwarebytes
2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-29 19:17 - 2013-08-29 19:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Janine\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-29 18:59 - 2013-08-29 18:59 - 00688992 ____R (Swearware) C:\Users\Janine\Downloads\dds.exe
2013-08-25 08:42 - 2013-08-25 08:42 - 00001657 _____ C:\Users\Public\Desktop\iMesh.lnk

==================== One Month Modified Files and Folders =======

2013-09-20 17:17 - 2013-09-20 17:17 - 01950622 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe
2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST
2013-09-20 17:16 - 2013-09-20 17:16 - 01083549 _____ (Farbar) C:\Users\Janine\Downloads\FRST.exe
2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe
2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log
2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable
2013-09-20 17:15 - 2011-02-23 20:11 - 00000000 ____D C:\Users\Janine
2013-09-20 16:50 - 2011-06-25 09:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job
2013-09-20 16:43 - 2012-03-30 06:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-20 16:09 - 2011-02-23 20:08 - 01096322 _____ C:\Windows\WindowsUpdate.log
2013-09-20 15:37 - 2011-03-19 18:26 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
2013-09-20 15:37 - 2011-03-19 18:23 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson
2013-09-20 15:37 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-20 11:04 - 2012-03-30 06:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 11:03 - 2012-03-30 06:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 11:03 - 2011-06-03 23:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 11:02 - 2011-06-25 09:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job
2013-09-19 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-19 08:18 - 2009-07-14 06:51 - 00175097 _____ C:\Windows\setupact.log
2013-09-18 22:46 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-18 22:46 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-18 21:13 - 2012-10-12 17:29 - 00000000 ____D C:\Users\Janine\FM_Transmitter_02
2013-09-18 21:13 - 2012-08-17 09:21 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-18 21:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-18 21:12 - 2011-03-01 21:50 - 00085132 _____ C:\Windows\PFRO.log
2013-09-18 21:10 - 2013-08-30 06:44 - 00000000 ____D C:\AdwCleaner
2013-09-18 21:08 - 2013-09-18 21:08 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe
2013-09-12 18:43 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 18:42 - 2009-07-14 06:45 - 00294344 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 07:07 - 2013-07-27 03:10 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 06:58 - 2011-02-23 21:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-08 09:39 - 2011-09-01 19:21 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Winamp
2013-09-03 18:45 - 2013-09-03 18:45 - 00000000 ____D C:\Program Files (x86)\USB Audio
2013-09-03 17:56 - 2012-01-31 14:14 - 00000000 ____D C:\Users\Janine\Documents\Konto Janine
2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Malwarebytes
2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-29 19:17 - 2013-08-29 19:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Janine\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-29 18:59 - 2013-08-29 18:59 - 00688992 ____R (Swearware) C:\Users\Janine\Downloads\dds.exe
2013-08-25 08:42 - 2013-08-25 08:42 - 00001657 _____ C:\Users\Public\Desktop\iMesh.lnk
2013-08-23 07:04 - 2013-07-10 07:07 - 00000000 ____D C:\Users\Janine\AppData\Local\NPE
2013-08-21 19:33 - 2009-07-14 19:58 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-21 19:33 - 2009-07-14 19:58 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-21 19:33 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI

Some content of TEMP:
====================
C:\Users\Janine\AppData\Local\Temp\AskSLib.dll
C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32axau_gtbd_chrd_dn_aaa_aih.exe
C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32ax_gtbd_chrd_dn_aaa_aih.exe
C:\Users\Janine\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-19 11:35

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01
Ran by Janine at 2013-09-20 17:18:55
Running from C:\Users\Janine\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)
Advertising Center (x32 Version: 0.0.0.1)
Avanquest update (x32 Version: 1.28)
AVS Screen Capture version 2.0.1 (x32)
AVS Update Manager 1.0 (x32)
AVS Video Converter 8 (x32)
AVS Video Recorder 2.4 (x32)
AVS Video ReMaker 4.0.2.126 (x32)
AVS4YOU Software Navigator 1.4 (x32)
Content Manager 2 (x32 Version: 3.4.1.11834)
D3DX10 (x32 Version: 15.4.2368.0902)
DVD Flick 1.3.0.7 (x32 Version: 1.3.0.7)
Free M4a to MP3 Converter 7.1 (x32)
Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0)
Free YouTube to MP3 Converter version 3.9.33 (x32)
GIMP 2.8.6 (Version: 2.8.6)
Google Chrome (HKCU Version: 29.0.1547.66)
ImagXpress (x32 Version: 7.0.74.0)
Java 7 Update 15 (x32 Version: 7.0.150)
Java Auto Updater (x32 Version: 2.1.9.0)
Lyrics Finder (x32)
Media Go (x32 Version: 2.1.392)
Media Go Video Playback Engine 1.88.116.12060 (x32 Version: 1.88.116.12060)
MFC RunTime files (x32 Version: 1.0.0)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Corporation (Version: 9.1.0.0)
Microsoft Corporation (x32 Version: 9.1.0.0)
Microsoft LifeCam (Version: 3.22.270.0)
Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (x32 Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MP4 To MP3 Converter V3.0 (x32)
MSVCRT (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)
Nero 9 Essentials (x32)
Nero BurnRights (x32 Version: 3.4.10.100)
Nero BurnRights Help (x32 Version: 3.4.4.100)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero CoverDesigner (x32 Version: 4.4.9.203)
Nero CoverDesigner Help (x32 Version: 4.4.6.100)
Nero DiscSpeed (x32 Version: 5.4.7.202)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.10.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero InfoTool (x32 Version: 6.4.7.204)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.8.1)
Nero StartSmart (x32 Version: 9.4.11.207)
Nero StartSmart Help (x32 Version: 9.4.1.100)
Nero StartSmart OEM (x32 Version: 9.4.10.100)
neroxml (x32 Version: 1.0.0)
Norton Internet Security (x32 Version: 20.4.0.40)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
PlayStation(R)Network Downloader (x32 Version: 2.07.00849)
PlayStation(R)Store (x32 Version: 4.7.14.14146)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Skype Click to Call (x32 Version: 5.6.8442)
Skype™ 5.10 (x32 Version: 5.10.116)
Sony PC Companion 2.10.108 (x32 Version: 2.10.108)
Spotify (HKCU Version: 0.8.4.124.ga3559d86)
swMSM (x32 Version: 12.0.0.1)
Uninstall 1.0.0.1 (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Zip Opener (HKCU)
Ver 1.2.0 (x32)
Winamp (x32 Version: 5.64 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
WinRAR
WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928)
WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7304)
WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)

==================== Restore Points  =========================

24-08-2013 12:56:01 Geplanter Prüfpunkt
02-09-2013 14:27:34 Geplanter Prüfpunkt
12-09-2013 04:42:59 Windows Modules Installer
12-09-2013 04:49:31 Windows Modules Installer
19-09-2013 09:42:06 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {4F74EC6C-39AE-4805-B88C-B5E1AB106398} - System32\Tasks\{46BFADCD-A8AB-474A-8B35-B4C9F64196C3} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {554D27B3-117B-46BE-85EE-C240EA7E0B2D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)
Task: {69019E76-8D07-498E-A649-01FB6810A3C5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)
Task: {7BA9D501-A71D-49E1-99BE-45FFD2971C3A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {9CA17B01-7F3B-46D9-9A9C-C9B0C09585C1} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {B94597EA-A5DE-41E2-8DA1-89558228BD64} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)
Task: {C5373CC3-CA53-4BAB-AA74-707088BDF4C0} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {CD122EE0-D50A-4645-8FDC-67EF5D2E3EDB} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {F9533743-4F24-4805-8864-940CD3E4E304} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\imaadp32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\msg711.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\msgsm32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\msadp32.acm
2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2010-08-25 20:05 - 2010-08-25 20:05 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2013-02-27 18:32 - 2013-02-13 13:35 - 08907856 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll
2013-02-27 18:33 - 2013-02-13 13:35 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 02583552 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtCorers48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 09005056 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtGuirs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 01031680 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtNetworkrs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 00355840 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtXmlrs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 00755712 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtSqlrs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 01342464 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtScriptrs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 02403840 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\Qt3Supportrs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 13112832 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtWebKitrs48.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 00109056 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtTestrs48.dll
2013-02-27 18:33 - 2013-02-13 13:34 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll
2013-02-27 18:33 - 2013-02-13 13:34 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll
2013-02-27 18:32 - 2013-02-13 13:36 - 02980944 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll
2013-02-27 18:33 - 2013-02-13 13:35 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 02152528 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 00283136 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtSvgrs48.dll
2013-02-27 18:33 - 2013-02-13 13:34 - 01604176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll
2013-02-27 18:33 - 2013-02-13 13:34 - 01716304 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll
2013-02-27 18:32 - 2013-02-12 13:25 - 04128848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 00272384 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\phononrs48.dll
2013-01-17 15:30 - 2013-02-12 13:03 - 01041408 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll
2013-01-17 15:30 - 2013-02-12 13:03 - 00094208 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll
2013-01-17 15:30 - 2013-01-16 10:51 - 00075264 _____ (Zlib) C:\Program Files (x86)\WISO\Steuersoftware 2013\zlib.dll
2013-01-17 15:30 - 2013-02-12 13:03 - 00251392 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll
2013-02-27 18:33 - 2013-02-13 13:35 - 01467984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll
2013-02-27 18:33 - 2012-11-01 15:32 - 02635264 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtXmlpatternsrs48.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 04923984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01367632 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01747024 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01556048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01150032 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01202768 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll
2013-02-27 18:33 - 2013-02-13 13:35 - 01310800 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 06758480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01230848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll
2013-02-27 18:32 - 2013-02-13 13:35 - 01313872 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll
2011-01-17 17:19 - 2011-11-07 20:24 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-07-09 06:59 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll
2013-09-04 06:42 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll
2013-09-16 19:39 - 2013-09-16 19:39 - 00982864 _____ (Symantec Corporation) C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0\npcoplgn.dll
2013-09-04 06:42 - 2013-09-02 20:46 - 00081768 _____ (Microsoft Corporation) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\xinput1_3.dll
2013-09-04 06:42 - 2013-09-02 20:46 - 03231688 _____ (Microsoft Corporation) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\D3DCompiler_46.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 00709584 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 00099792 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\libegl.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll
2013-09-04 06:42 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-07-09 06:59 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: seehcri
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (09/19/2013 11:35:05 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (09/19/2013 04:36:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16686, Zeitstempel: 0x52058cf0
Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00023b0c
ID des fehlerhaften Prozesses: 0xbb30
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (09/19/2013 04:12:21 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16686, Zeitstempel: 0x52058cf0
Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00023b0c
ID des fehlerhaften Prozesses: 0x214
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (09/12/2013 06:59:47 PM) (Source: MsiInstaller) (User: Fuji)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011004}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (09/12/2013 06:45:34 PM) (Source: MsiInstaller) (User: Fuji)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011004}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (09/12/2013 06:41:28 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (09/07/2013 01:37:36 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/30/2013 07:52:54 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/29/2013 09:55:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (08/24/2013 02:49:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.


System errors:
=============
Error: (09/20/2013 04:09:38 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/20/2013 11:47:22 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/20/2013 11:02:15 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/19/2013 05:51:03 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/19/2013 00:40:10 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/19/2013 08:18:50 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/18/2013 10:38:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde nicht richtig gestartet.

Error: (09/18/2013 07:30:14 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/18/2013 01:53:25 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (09/18/2013 01:53:24 PM) (Source: ipnathlp) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (09/19/2013 11:35:05 AM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (09/19/2013 04:36:57 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.1668652058cf0MMDevApi.dll6.1.7601.175144ce7b892c000000500023b0cbb3001ceb4ddb545d12dC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dll59d7a5e1-20d4-11e3-9a9a-e839df082830

Error: (09/19/2013 04:12:21 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE10.0.9200.1668652058cf0MMDevApi.dll6.1.7601.175144ce7b892c000000500023b0c21401ceb4afb3ce5d82C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dlle9f22804-20d0-11e3-9a9a-e839df082830

Error: (09/12/2013 06:59:47 PM) (Source: MsiInstaller)(User: Fuji)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011004}1625(NULL)(NULL)(NULL)

Error: (09/12/2013 06:45:34 PM) (Source: MsiInstaller)(User: Fuji)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011004}1625(NULL)(NULL)(NULL)

Error: (09/12/2013 06:41:28 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (09/07/2013 01:37:36 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/30/2013 07:52:54 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/29/2013 09:55:35 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (08/24/2013 02:49:07 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 3892.55 MB
Available physical RAM: 1901.51 MB
Total Pagefile: 7783.29 MB
Available Pagefile: 5644.81 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:403.67 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0DCE7163)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-20 17:35:02
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS545050B9A300 rev.PB4OC61J 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Janine\AppData\Local\Temp\pxldypod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                            fffff80002fb8000 45 bytes [00, 00, 37, 00, 4D, 6D, 43, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 591                                                            fffff80002fb802f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtTerminateProcess                          000000007714fcb0 5 bytes JMP 00000001002a091c
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                        000000007714fe14 5 bytes JMP 00000001002a0048
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtOpenEvent                                 000000007714fea8 5 bytes JMP 00000001002a02ee
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateThread                              0000000077150004 5 bytes JMP 00000001002a04b2
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                      0000000077150038 5 bytes JMP 00000001002a09fe
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtResumeThread                              0000000077150068 5 bytes JMP 00000001002a0ae0
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtTerminateThread                           0000000077150084 5 bytes JMP 0000000100020050
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateMutant                              000000007715079c 5 bytes JMP 00000001002a012a
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                  000000007715088c 5 bytes JMP 00000001002a0758
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateThreadEx                            00000000771508a4 5 bytes JMP 00000001002a0676
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtLoadDriver                                0000000077150df4 5 bytes JMP 00000001002a03d0
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtSetContextThread                          0000000077151920 5 bytes JMP 00000001002a0594
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtSetSystemInformation                      0000000077151be4 5 bytes JMP 00000001002a083a
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtSuspendThread                             0000000077151d70 5 bytes JMP 00000001002a020c
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206            000000007539524f 7 bytes JMP 00000001002a0f52
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                00000000753953d0 7 bytes JMP 00000001002b0210
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149               0000000075395677 1 byte JMP 00000001002b0048
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151               0000000075395679 5 bytes {JMP 0xffffffff8af1a9d1}
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!CreateServiceA + 542                      000000007539589a 7 bytes JMP 00000001002a0ca6
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!CreateServiceW + 382                      0000000075395a1d 7 bytes JMP 00000001002b03d8
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                 0000000075395c9b 7 bytes JMP 00000001002b012c
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ControlServiceExA + 231                   0000000075395d87 7 bytes JMP 00000001002b02f4
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123  0000000075397240 7 bytes JMP 00000001002a0e6e
.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\syswow64\USER32.dll!RecordShutdownReason + 882                 0000000076bf1492 7 bytes JMP 00000001002b04bc

---- EOF - GMER 2.1 ----