![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows Vista, viel Adware und ein Trojaner Trojan.Win32.GenericWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Windows Vista, viel Adware und ein Trojaner Trojan.Win32.Generic Liebes Board, mein Rechner wurde langsamer und langsamer. Mit der ct-DVD habe ich einen umfassenden Scan gemacht. Avira und Bitdefender haben nichts gefunden. Allerdings hat Kaspersky folgendes gefunden: Code:
ATTFilter 2013-10-09 15:28:31 Scan_Objects$0006 starting 1% ; --- Settings --- ; Action on detect: Disinfect automatically ; Scan objects: All objects ; Try disinfect: No ; Try delete: No ; Try delete container: No ; Scan archives: No ; Scan mail databases: No ; Scan plain mail: No ; Exclude by mask: No ; Include by mask: No ; Objects to scan: ; "/media" Enable=Yes Recursive=Yes ; ------------------ 2013-10-09 15:28:31 Scan_Objects$0006 running 1% 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/eUninstall.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/eUninstall.exe skipped 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/DeskExternal.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/deskplusdl.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/deskplusdl.exe skipped 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/desk365.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:55 /media/14545BC2545BA4F0/Program Files/Desk 365/deskSvc.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/edeskcmn.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/eDhelper.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/ebase.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/eDhelper64.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/edis.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/ElexDbg.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/edis64.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/enotify.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/libpopdlg.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/libpng.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/mbdet.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/ouilibnl.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/TrayDownloader.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/sqlite3.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/zlib1.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:31:56 /media/14545BC2545BA4F0/Program Files/Desk 365/WinZipperdl.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 15:47:13 /media/14545BC2545BA4F0/bundlesw/PCToolsfirewallinstall.exe//data0015 suspicion HEUR:Trojan.Win32.Generic 2013-10-09 15:55:23 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//$INSTDIR\bh\delta.dll detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 15:55:23 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local2013-10-09 15:55:23 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//deltaTlbr.dll detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 15:55:24 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//deltasrv.exe detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 16:08:32 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//$INSTDIR\bh\delta.dll detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 16:08:32 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local 2013-10-09 16:08:32 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//deltaTlbr.dll detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 16:08:33 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//deltasrv.exe detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 16:17:22 /media/14545BC2545BA4F0/Program Files/Desk 365/eUninstall.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:22 /media/14545BC2545BA4F0/Program Files/Desk 365/DeskExternal.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:22 /media/14545BC2545BA4F0/Program Files/Desk 365/desk365.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:22 /media/14545BC2545BA4F0/Program Files/Desk 365/deskplusdl.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/deskSvc.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/edeskcmn.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/eDhelper.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/ebase.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/eDhelper64.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/edis.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/ElexDbg.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/edis64.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/enotify.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/libpng.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/libpopdlg.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/mbdet.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/ouilibnl.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/TrayDownloader.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/sqlite3.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/zlib1.dll detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:17:23 /media/14545BC2545BA4F0/Program Files/Desk 365/WinZipperdl.exe detected not-a-virus:AdWare.Win32.D365.a 2013-10-09 16:49:48 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//$INSTDIR\bh\delta.dll detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 16:49:48 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//deltaTlbr.dll detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 16:49:48 /media/14545BC2545BA4F0/Users/Gabriele/AppData/Local/Temp/6050BA6F-BAB0-7891-ADDC-2A9F3D02625A/Latest/MyDeltaTB.exe//delta4ie.exe//deltasrv.exe detected not-a-virus:AdWare.Win32.DelBar.a 2013-10-09 17:43:42 Scan_Objects$0006 completed ; --- Statistics --- ; Time Start: 2013-10-09 15:27:38 ; Time Finish: 2013-10-09 17:43:41 ; Completion: 100% ; Processed objects: 246256 ; Total detected: 55 ; Detected exact: 54 ; Suspicions: 1 ; Treats detected: 55 ; Untreated: 55 ; Disinfected: 0 ; Quarantined: 0 ; Deleted: 0 ; Skipped: 0 ; Archived: 1506 ; Packed: 669 ; Password protected: 1708 ; Corrupted: 0 ; Errors: 0 ; Last object: ; ------------------ Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013 Ran by Gabriele (administrator) on COMPI on 09-10-2013 18:12:42 Running from C:\Users\Gabriele\Desktop Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (PC Tools) C:\Program Files\PC Tools Firewall Plus\FWService.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (337 Technology Limited.) C:\Program Files\Desk 365\deskSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Samsung) C:\Program Files\Samsung Inkjet\AiO\Center\SPAiOHostService.exe () C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe (PC Tools) C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe (Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\AutoDetector\Monitor.exe ({StringFileInfo_CompanyName}) C:\Program Files\Ask.com\Updater\Updater.exe (Spigot, Inc.) C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe () C:\Program Files\AVG Secure Search\vprot.exe (Samsung) C:\Windows\System32\spool\drivers\w32x86\3\SPAiO2MUI.exe (Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Smartbar) C:\Users\Gabriele\AppData\Local\Smartbar\Application\QuickShare.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe () C:\ScanWizard 5\ScannerFinder.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (337 Technology Limited.) C:\Program Files\Desk 365\desk365.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Microsoft Corporation) C:\Windows\system32\conime.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\system32\wuauclt.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation) HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG) HKLM\...\Run: [00PCTFW] - C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2483504 2007-09-19] (PC Tools) HKLM\...\Run: [Ulead AutoDetector v2] - C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2006-11-29] (Ulead Systems, Inc.) HKLM\...\Run: [ApnUpdater] - C:\Program Files\Ask.com\Updater\Updater.exe [888488 2011-09-08] ({StringFileInfo_CompanyName}) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [] - [x] HKLM\...\Run: [SearchSettings] - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [934240 2012-02-06] (Spigot, Inc.) HKLM\...\Run: [vProt] - C:\Program Files\AVG Secure Search\vprot.exe [1151152 2013-02-21] () HKLM\...\Run: [Conime] - C:\Windows\system32\conime.exe [69120 2009-04-11] (Microsoft Corporation) HKLM\...\Run: [SPAIO2StatusMonitor] - C:\Windows\system32\spool\DRIVERS\W32X86\3\SPAiO2MUI.exe [2649600 2011-11-29] (Samsung) HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [868352 2006-02-01] (Analog Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-07] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [77824 2013-08-07] (Apple Computer, Inc.) HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation) HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Gabriele\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-09-03] (Smartbar) HKCU\...\Run: [Desk 365] - C:\Program Files\Desk 365\desk365.exe [1011792 2013-10-07] (337 Technology Limited.) HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\SvcCOPSSH\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\SvcCOPSSH\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [ 2008-01-19] (Microsoft Corporation) HKU\UpdatusUser\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter AppInit_DLLs: [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=545B001A9215DDBD&affID=120524&tsp=5028 URLSearchHook: (No Name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - No File SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={C808EEE0-9643-4434-BADD-41ABA73E141D}&mid=115017cc354d47d084ced14946e4e9f3-095f73a95ac71371cedf2cab267fbd878edbf12a&lang=de&ds=pd011&pr=sa&d=2012-09-20 17:21:42&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss_Btisdt7&mntrId=545B001A9215DDBD&affID=120524&tsp=5028 SearchScopes: HKCU - {5633B737-E522-404A-972D-5A7E3A69AEC9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=302398&p={searchTerms} SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={C808EEE0-9643-4434-BADD-41ABA73E141D}&mid=115017cc354d47d084ced14946e4e9f3-095f73a95ac71371cedf2cab267fbd878edbf12a&lang=de&ds=pd011&pr=sa&d=2012-09-20 17:21:42&v=14.2.0.1&pid=avg&sg=&sap=dsp&q={searchTerms} BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll () BHO: No Name - {B922D405-6D13-4A2B-AE89-08A030DA4402} - No File BHO: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKLM - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\14.2.0.1\AVG Secure Search_toolbar.dll () Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) Toolbar: HKCU -Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\14.2.0\ViProtocol.dll () Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 29 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 83.169.185.225 83.169.185.161 FireFox: ======== FF ProfilePath: C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default FF user.js: detected! => C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll (AVG Technologies) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\searchplugins\Nation Search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Nation Search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\Extensions\toolbar@ask.com FF Extension: No Name - C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\Extensions\{09bad93c-be48-8fb3-0154-fc36bdb9bbcf} FF Extension: Microsoft .NET Framework Assistant - C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: toolbar - C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\Extensions\toolbar@gmx.net.xpi FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1 FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1 ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG) R2 desksvc; C:\Program Files\Desk 365\deskSvc.exe [424016 2013-10-07] (337 Technology Limited.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) R2 PCToolsFirewallPlus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [91480 2007-09-19] (PC Tools) R2 Samsung AiO Network Discovery Service; C:\Program Files\Samsung Inkjet\AiO\Center\SPAiOHostService.exe [395128 2011-11-30] (Samsung) R2 vToolbarUpdater14.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe [968880 2013-02-21] () S2 CLTNetCnService; "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [x] ==================== Drivers (Whitelisted) ==================== R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-07] (Avira Operations GmbH & Co. KG) R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [33112 2013-02-21] (AVG Technologies) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-07] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG) R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation) S0 JGOGO; C:\Windows\System32\drivers\jgogo.sys [6912 2006-02-08] (JMicron ) S4 JRAID; C:\Windows\system32\drivers\jraid.sys [48000 2007-04-12] (JMicron Technology Corp.) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2006-10-18] () R1 pctfw2; C:\Windows\system32\drivers\pctfw2.sys [195928 2007-09-19] (PC Tools) R1 pctmp; C:\Windows\System32\drivers\pctmp.sys [39768 2007-09-19] (PCTools Research Pty Ltd.) R1 pctssipc; C:\Windows\System32\drivers\pctssipc.sys [17752 2007-09-19] (PC Tools Research Pty Ltd.) R3 SFilter; C:\Windows\System32\DRIVERS\pctfw.sys [114008 2007-09-19] (PC Tools) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-05] (Avira GmbH) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x] S1 eeCtrl; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-09 18:12 - 2013-10-09 18:12 - 00000000 ____D C:\FRST 2013-10-09 18:11 - 2013-10-09 18:11 - 01087213 _____ (Farbar) C:\Users\Gabriele\Desktop\FRST.exe 2013-10-08 15:35 - 2013-10-08 15:35 - 00000000 ____D C:\116e0d5829d5f9ccee2f 2013-10-07 18:34 - 2013-10-07 18:34 - 00000830 _____ C:\Users\Public\Desktop\VideoPlayer.lnk 2013-10-07 18:25 - 2013-10-07 18:25 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-10-07 18:22 - 2013-10-07 18:22 - 00000554 _____ C:\Windows\KB893803v2.log 2013-10-07 18:22 - 2013-10-07 18:22 - 00000000 ____D C:\Users\Gabriele\Documents\Optimizer Pro 2013-10-07 18:21 - 2013-10-09 18:03 - 00000000 ____D C:\Program Files\Desk 365 2013-10-07 18:21 - 2013-10-07 18:34 - 00000000 ____D C:\Program Files\VideoPlayer 2013-10-07 18:21 - 2013-10-07 18:32 - 00000000 ____D C:\Users\Gabriele\AppData\Roaming\Desk 365 2013-10-07 18:20 - 2013-10-08 15:45 - 00000000 ____D C:\Program Files\Optimizer Pro 2013-10-07 18:19 - 2013-10-07 18:21 - 00000000 ____D C:\Users\Gabriele\AppData\Local\Smartbar 2013-10-07 18:17 - 2013-10-07 18:17 - 00000000 ____D C:\ProgramData\Babylon 2013-10-07 18:14 - 2013-10-07 18:12 - 00335160 _____ C:\Users\Gabriele\Downloads\Setup(1).exe 2013-10-07 18:12 - 2013-10-07 18:12 - 00335160 _____ C:\Users\Gabriele\Downloads\Setup.exe 2013-10-02 18:48 - 2013-10-02 18:53 - 111421608 _____ (Landesfinanzdirektion Thüringen) C:\Users\Gabriele\Downloads\ElsterFormular-14.4.20130909u.exe 2013-10-02 18:48 - 2013-10-02 18:52 - 111421608 _____ (Landesfinanzdirektion Thüringen) C:\Users\Gabriele\Downloads\ElsterFormular-14.4.20130909u(1).exe 2013-10-01 21:38 - 2013-08-13 08:38 - 00032328 _____ C:\Windows\Launcher.exe 2013-10-01 21:08 - 2013-10-01 21:08 - 00966248 _____ ( ) C:\Users\Gabriele\Downloads\VLC_Media_Player.exe 2013-09-21 18:12 - 2013-09-21 18:12 - 00010495 _____ C:\Users\Gabriele\Elster_elster_2048.pfx 2013-09-19 13:48 - 2013-09-19 13:48 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-13 10:16 - 2013-09-16 08:27 - 00001911 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-09-13 10:16 - 2013-09-16 08:27 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-09-12 09:21 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-12 09:21 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-12 09:21 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-12 09:21 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-12 09:21 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-09-12 09:21 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-12 09:21 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-09-12 09:21 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-12 09:21 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-12 09:21 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-09-12 09:21 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-09-12 09:21 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-12 09:21 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-12 09:21 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-12 09:21 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-09-12 09:21 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-12 08:20 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-12 08:20 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll ==================== One Month Modified Files and Folders ======= 2013-10-09 18:12 - 2013-10-09 18:12 - 00000000 ____D C:\FRST 2013-10-09 18:12 - 2007-09-29 09:28 - 01710191 _____ C:\Windows\WindowsUpdate.log 2013-10-09 18:11 - 2013-10-09 18:11 - 01087213 _____ (Farbar) C:\Users\Gabriele\Desktop\FRST.exe 2013-10-09 18:07 - 2006-11-02 12:33 - 01445116 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-09 18:06 - 2012-05-11 14:39 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-09 18:04 - 2006-11-02 14:49 - 00035860 _____ C:\Windows\setupact.log 2013-10-09 18:03 - 2013-10-07 18:21 - 00000000 ____D C:\Program Files\Desk 365 2013-10-09 18:03 - 2012-11-30 16:14 - 00000000 ____D C:\ProgramData\Samsung Inkjet 2013-10-09 18:00 - 2006-11-02 14:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-09 18:00 - 2006-11-02 14:45 - 00005456 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-09 18:00 - 2006-11-02 14:45 - 00005456 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-09 13:13 - 2006-11-02 14:58 - 00032628 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-10-09 13:11 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET 2013-10-09 13:06 - 2012-05-11 14:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2013-10-09 13:06 - 2011-05-26 08:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2013-10-09 13:02 - 2007-07-03 16:03 - 00104794 _____ C:\Windows\PFRO.log 2013-10-08 16:12 - 2013-03-25 20:37 - 00000000 ____D C:\Program Files\VideoLAN 2013-10-08 15:45 - 2013-10-07 18:20 - 00000000 ____D C:\Program Files\Optimizer Pro 2013-10-08 15:35 - 2013-10-08 15:35 - 00000000 ____D C:\116e0d5829d5f9ccee2f 2013-10-08 14:39 - 2007-10-04 16:55 - 00000000 ___RD C:\Users\Gabriele\Documents\Bewerbungsmappe 2013-10-07 19:25 - 2013-03-25 20:39 - 00000000 ____D C:\Users\Gabriele\AppData\Roaming\vlc 2013-10-07 18:34 - 2013-10-07 18:34 - 00000830 _____ C:\Users\Public\Desktop\VideoPlayer.lnk 2013-10-07 18:34 - 2013-10-07 18:21 - 00000000 ____D C:\Program Files\VideoPlayer 2013-10-07 18:32 - 2013-10-07 18:21 - 00000000 ____D C:\Users\Gabriele\AppData\Roaming\Desk 365 2013-10-07 18:25 - 2013-10-07 18:25 - 00000000 ____D C:\Program Files\Microsoft.NET 2013-10-07 18:22 - 2013-10-07 18:22 - 00000554 _____ C:\Windows\KB893803v2.log 2013-10-07 18:22 - 2013-10-07 18:22 - 00000000 ____D C:\Users\Gabriele\Documents\Optimizer Pro 2013-10-07 18:21 - 2013-10-07 18:19 - 00000000 ____D C:\Users\Gabriele\AppData\Local\Smartbar 2013-10-07 18:17 - 2013-10-07 18:17 - 00000000 ____D C:\ProgramData\Babylon 2013-10-07 18:12 - 2013-10-07 18:14 - 00335160 _____ C:\Users\Gabriele\Downloads\Setup(1).exe 2013-10-07 18:12 - 2013-10-07 18:12 - 00335160 _____ C:\Users\Gabriele\Downloads\Setup.exe 2013-10-07 17:42 - 2013-08-26 08:25 - 00000000 ____D C:\Users\Gabriele\Documents\Elster 2013-10-07 15:38 - 2013-08-05 12:27 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-10-07 15:38 - 2013-08-05 12:27 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-10-07 15:38 - 2013-08-05 12:27 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-10-02 19:01 - 2007-09-29 10:38 - 00000052 _____ C:\Windows\seumain.INI 2013-10-02 18:53 - 2013-10-02 18:48 - 111421608 _____ (Landesfinanzdirektion Thüringen) C:\Users\Gabriele\Downloads\ElsterFormular-14.4.20130909u.exe 2013-10-02 18:52 - 2013-10-02 18:48 - 111421608 _____ (Landesfinanzdirektion Thüringen) C:\Users\Gabriele\Downloads\ElsterFormular-14.4.20130909u(1).exe 2013-10-01 21:08 - 2013-10-01 21:08 - 00966248 _____ ( ) C:\Users\Gabriele\Downloads\VLC_Media_Player.exe 2013-09-21 18:12 - 2013-09-21 18:12 - 00010495 _____ C:\Users\Gabriele\Elster_elster_2048.pfx 2013-09-21 18:12 - 2007-09-29 09:37 - 00000000 ____D C:\Users\Gabriele 2013-09-21 17:07 - 2012-06-18 14:03 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-09-20 15:58 - 2010-06-10 16:52 - 00000000 ____D C:\Users\Gabriele\Documents\Vanessa 2013-09-19 17:25 - 2010-12-27 12:29 - 00012288 _____ C:\Users\Gabriele\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-09-19 13:48 - 2013-09-19 13:48 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-09-16 08:27 - 2013-09-13 10:16 - 00001911 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-09-16 08:27 - 2013-09-13 10:16 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-09-13 10:17 - 2007-09-29 10:15 - 00000000 ____D C:\Users\Gabriele\AppData\Local\Adobe 2013-09-12 11:20 - 2006-11-02 14:44 - 00301232 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-12 09:21 - 2013-08-16 10:27 - 00000000 ____D C:\Windows\system32\MRT 2013-09-12 09:19 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe Some content of TEMP: ==================== C:\Users\Gabriele\AppData\Local\Temp\app.exe C:\Users\Gabriele\AppData\Local\Temp\AskSLib.dll C:\Users\Gabriele\AppData\Local\Temp\avgnt.exe C:\Users\Gabriele\AppData\Local\Temp\avguidx.dll C:\Users\Gabriele\AppData\Local\Temp\CommonInstaller.exe C:\Users\Gabriele\AppData\Local\Temp\Connection.dll C:\Users\Gabriele\AppData\Local\Temp\Dbwork.dll C:\Users\Gabriele\AppData\Local\Temp\Dialogs.dll C:\Users\Gabriele\AppData\Local\Temp\FlashPlayerUpdate.exe C:\Users\Gabriele\AppData\Local\Temp\FlashPlayerUpdate01.exe C:\Users\Gabriele\AppData\Local\Temp\FlashPlayerUpdate02.exe C:\Users\Gabriele\AppData\Local\Temp\FlashPlayerUpdate03.exe C:\Users\Gabriele\AppData\Local\Temp\FlashPlayerUpdate04.exe C:\Users\Gabriele\AppData\Local\Temp\FlashPlayerUpdate05.exe C:\Users\Gabriele\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe C:\Users\Gabriele\AppData\Local\Temp\Installer.exe C:\Users\Gabriele\AppData\Local\Temp\install_flashplayer11x32_mssd_aih.exe C:\Users\Gabriele\AppData\Local\Temp\install_reader10_de_mssd_aih.exe C:\Users\Gabriele\AppData\Local\Temp\IPC.dll C:\Users\Gabriele\AppData\Local\Temp\Jobs.dll C:\Users\Gabriele\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Gabriele\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Gabriele\AppData\Local\Temp\libeay32.dll C:\Users\Gabriele\AppData\Local\Temp\MachineIdCreator.exe C:\Users\Gabriele\AppData\Local\Temp\mfc80.dll C:\Users\Gabriele\AppData\Local\Temp\msvcp80.dll C:\Users\Gabriele\AppData\Local\Temp\msvcr80.dll C:\Users\Gabriele\AppData\Local\Temp\NEW7AE9.tmp.exe C:\Users\Gabriele\AppData\Local\Temp\oi_{8170BE62-E305-4135-81D8-5491321CF9F3}.exe C:\Users\Gabriele\AppData\Local\Temp\Permissions.dll C:\Users\Gabriele\AppData\Local\Temp\QFA.EXE C:\Users\Gabriele\AppData\Local\Temp\QfaInvoke.dll C:\Users\Gabriele\AppData\Local\Temp\Report.dll C:\Users\Gabriele\AppData\Local\Temp\Setup(1).exe C:\Users\Gabriele\AppData\Local\Temp\setup.exe C:\Users\Gabriele\AppData\Local\Temp\SkinMagic.dll C:\Users\Gabriele\AppData\Local\Temp\Smarti.dll C:\Users\Gabriele\AppData\Local\Temp\SmartiComm.dll C:\Users\Gabriele\AppData\Local\Temp\SmartIcon.exe C:\Users\Gabriele\AppData\Local\Temp\SmartSurfer.exe C:\Users\Gabriele\AppData\Local\Temp\smurf.dll C:\Users\Gabriele\AppData\Local\Temp\SmurfService.dll C:\Users\Gabriele\AppData\Local\Temp\SmurfService.exe C:\Users\Gabriele\AppData\Local\Temp\SmurfUpd.exe C:\Users\Gabriele\AppData\Local\Temp\SmurfUpdEng.exe C:\Users\Gabriele\AppData\Local\Temp\Sqlite.dll C:\Users\Gabriele\AppData\Local\Temp\ssleay32.dll C:\Users\Gabriele\AppData\Local\Temp\Threads.dll C:\Users\Gabriele\AppData\Local\Temp\ToolbarInstaller.exe C:\Users\Gabriele\AppData\Local\Temp\uninst1.exe C:\Users\Gabriele\AppData\Local\Temp\Uninstall.exe C:\Users\Gabriele\AppData\Local\Temp\Utils.dll C:\Users\Gabriele\AppData\Local\Temp\Vars.dll C:\Users\Gabriele\AppData\Local\Temp\vlc-2.0.8-win32.exe C:\Users\Gabriele\AppData\Local\Temp\WEBDE_ServiceInstall.exe C:\Users\Gabriele\AppData\Local\Temp\WEBDE_ServiceUninstall.exe C:\Users\Gabriele\AppData\Local\Temp\WEBDE_SmartRollback.exe C:\Users\Gabriele\AppData\Local\Temp\Wizzard.dll C:\Users\Gabriele\AppData\Local\Temp\xmlparse.dll C:\Users\Gabriele\AppData\Local\Temp\xmltok.dll C:\Users\Gabriele\AppData\Local\Temp\_is93F5.exe C:\Users\Gabriele\AppData\Local\Temp\_isD49C.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-09 18:07 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-10-2013 Ran by Gabriele at 2013-10-09 18:17:02 Running from C:\Users\Gabriele\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== ABBYY FineReader OCR Engine für ScanWizard Adobe Flash Player 11 Plugin (Version: 11.9.900.117) Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8) aioscnnr (Version: 1.0.0.0) AVG Security Toolbar (Version: 14.2.0.1) Avira Free Antivirus (Version: 14.0.0.383) Avira SearchFree Toolbar (Version: 1.15.13.0) Bibi Blocksberg - Mein verhextes Filmstudio center (Version: 6.2.5.0) Cockpit (Version: 1.0.168) Desk 365 (Version: 1.14.20) essentials (Version: 1.0.0.0) Galaxy of Mahjongg 2 Galileo Family Quiz - Spezial I InterVideo MediaOne Gallery Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) McAfee Security Scan Plus (Version: 3.0.318.3) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft Office XP Professional mit FrontPage (Version: 10.0.2701.0) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual J# 2.0 Redistributable Package Microsoft Visual J# 2.0 Redistributable Package (Version: 2.0.50727) Microsoft XML Parser (Version: 8.20.8730.4) Mozilla Firefox 24.0 (x86 de) (Version: 24.0) Mozilla Maintenance Service (Version: 24.0) MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) Mustrum 2.0.4 Nero 7 Essentials (Version: 7.02.8631) neroxml (Version: 1.0.0) Notting Hill Gate 1 NVIDIA Drivers NVIDIA Grafiktreiber 307.83 (Version: 307.83) NVIDIA Install Application (Version: 2.1002.109.706) NVIDIA Systemsteuerung 307.83 (Version: 307.83) NVIDIA Update 1.10.8 (Version: 1.10.8) NVIDIA Update Components (Version: 1.10.8) ocr (Version: 6.0.0.0) OpenOffice.org 3.1 (Version: 3.1.9420) PC Tools Firewall Plus 3.0 PC-Kaufmann Fibu Pro 2011 PC-Kaufmann Fibu Pro 2013 PC-Kaufmann Fibu Pro 2014 PC-Kaufmann Fibu Pro Vollversion 2009 PDFCreator (Version: 1.5.0) pdfforge Toolbar v5.0 (Version: 5.0) PreReq (Version: 6.2.3.0) QuickShare (Version: 1.135.60.12323) QuickTime Regenbogenfisch Junior Sage BankCom (Version: 2.00.0000) Sage HBCI-Kontaktverwaltung (Version: 2.00.0000) Sage HBCI-Kontaktverwaltung (Version: 3.0) Sage SAIP (Version: 1.0.1.115) Sagede.Shared.Elster.Setup (Version: 1.0.0.0.28) Sagede.Shared.Elster.Setup (Version: 1.0.0.0.7) Samsung AIO Printer (Version: 1.0.0.0) Samsung All-in-One Software (Version: 1.0.10.30) ScanWizard 5 SoundMAX (Version: 6.10.1.6110) TIPP10 Version 2.1.0 Ulead PhotoImpact 12 (Version: 12.0) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) VideoPlayer v2.0.6 (Version: v2.0.6) WinRAR archiver xp-AntiSpy 3.96-6 Zootrix (Version: 1.0) ==================== Restore Points ========================= 27-05-2013 12:23:52 Windows Update 03-06-2013 14:34:12 Windows Update 07-06-2013 08:45:17 Windows Update 12-06-2013 08:12:53 Windows Update 12-06-2013 08:34:58 Windows Update 14-06-2013 11:02:04 Geplanter Prüfpunkt 18-06-2013 10:46:03 Windows Update 15-07-2013 06:17:59 Windows Update 15-07-2013 07:13:59 Windows Update 22-07-2013 08:10:09 Windows Update 25-07-2013 09:22:55 Installed Java 7 Update 25 29-07-2013 07:49:24 Windows Update 05-08-2013 10:12:52 Windows Update 12-08-2013 13:40:39 Application kill. 12-08-2013 13:41:22 Installation 12-08-2013 13:45:14 Application kill. 16-08-2013 08:24:44 Windows Update 20-08-2013 08:55:08 Geplanter Prüfpunkt 27-08-2013 08:07:28 Geplanter Prüfpunkt 29-08-2013 08:09:29 Geplanter Prüfpunkt 29-08-2013 08:57:57 Windows Update 12-09-2013 07:18:13 Windows Update 19-09-2013 12:22:22 Geplanter Prüfpunkt 26-09-2013 08:39:47 Geplanter Prüfpunkt 28-09-2013 10:53:08 Geplanter Prüfpunkt 08-10-2013 12:01:41 Geplanter Prüfpunkt 08-10-2013 13:12:37 Windows Update 08-10-2013 13:45:44 Windows Update ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {18DFD9FC-082E-4E9B-8285-5F21D2B4EDAE} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {26C58B49-4657-44C4-A77D-4ADB7307504A} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-21] () Task: {5916F864-469C-4391-8604-E4EA141A2699} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] () Task: {8B0E6FAB-F43A-4988-AF0A-A21646C212F0} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {8E1119F7-3298-4597-A146-15BEDCF8AFD5} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exe [2013-10-07] (337 Technology Limited.) Task: {9ED703A9-5FFD-40D5-895A-4385EE1509DE} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation) Task: {E74AFB39-62AE-462E-98B7-1A804A1CE0B7} - System32\Tasks\Microsoft\Windows\RestartManager\{FB837C47-DC0D-49b3-8159-531A91572C23} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation) Task: {EB572579-0922-4D3D-BD32-36E8D7DA0833} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated) Task: {F69149CE-8BAC-4EBE-9864-C9FE99933C15} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2007-09-29 12:19 - 2004-07-26 17:11 - 00028672 ____N () C:\Program Files\Common Files\Ulead Systems\AutoDetector\DetMethod.dll 2013-02-21 18:17 - 2013-02-21 18:16 - 00156848 _____ () C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\SiteSafety.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00033560 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00055064 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00149784 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00111896 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 01764632 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00055576 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00012568 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00048408 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PublisherSettingsManager.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00725272 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00081176 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00013592 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00016664 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00029464 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00019736 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00057112 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00013592 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00014104 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00051480 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll 2013-09-03 18:49 - 2013-09-03 18:49 - 00047384 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\MACTrackBarLib.dll 2013-09-03 18:48 - 2013-09-03 18:48 - 00025368 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00024856 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll 2013-09-03 18:50 - 2013-09-03 18:50 - 00245528 _____ () C:\Users\Gabriele\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll 2008-01-01 01:26 - 2007-01-05 15:05 - 00249856 _____ () C:\ScanWizard 5\SFRes.dll 2013-10-07 18:21 - 2013-10-07 18:21 - 00232016 _____ () C:\Program Files\Desk 365\edeskcmn.dll 2013-10-07 18:21 - 2013-10-07 18:21 - 00181840 _____ () C:\Program Files\Desk 365\libpng.dll 2013-10-07 18:21 - 2013-10-07 18:21 - 00073296 _____ () C:\Program Files\Desk 365\libpopdlg.dll 2013-10-07 18:21 - 2013-10-07 18:21 - 00099408 _____ () C:\Program Files\Desk 365\mbdet.dll 2013-10-07 18:21 - 2013-10-07 18:21 - 00146512 _____ () C:\Program Files\Desk 365\enotify.dll 2013-09-19 13:48 - 2013-09-19 13:48 - 03279768 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2013-10-07 18:19 - 2013-08-27 15:06 - 00099096 _____ () C:\Users\Gabriele\AppData\Roaming\Mozilla\Firefox\Profiles\v8xip62y.default\extensions\{09bad93c-be48-8fb3-0154-fc36bdb9bbcf}\components\SmartbarFireFoxRemotePlugin_24.dll 2013-10-09 13:06 - 2013-10-09 13:06 - 16233864 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:373E1720 AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/07/2013 06:34:08 PM) (Source: MsiInstaller) (User: Compi) Description: Produkt: Microsoft .NET Framework 4 Extended -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten. Error: (10/07/2013 06:24:47 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\GABRIELE\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\SAFEBROWSING> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (10/07/2013 06:24:47 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\GABRIELE\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\SAFEBROWSING> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (10/07/2013 06:24:29 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung FlashPlayerPlugin_11_8_800_168.exe, Version 11.8.800.168, Zeitstempel 0x52223bb7, fehlerhaftes Modul ShimEng.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x4549bdb7, Ausnahmecode 0xc0000005, Fehleroffset 0x71ab4618, Prozess-ID 0x1030, Anwendungsstartzeit FlashPlayerPlugin_11_8_800_168.exe0. Error: (10/07/2013 06:22:55 PM) (Source: Windows Installer 3.1) (User: ) Description: WindowsFür diesen Befehl ist nicht genügend Speicher verfügbar. Error: (10/07/2013 06:22:46 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung FlashPlayerPlugin_11_8_800_168.exe, Version 11.8.800.168, Zeitstempel 0x52223bb7, fehlerhaftes Modul ShimEng.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x4549bdb7, Ausnahmecode 0xc0000005, Fehleroffset 0x71ab4618, Prozess-ID 0xf18, Anwendungsstartzeit FlashPlayerPlugin_11_8_800_168.exe0. Error: (10/07/2013 06:22:18 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung FlashPlayerPlugin_11_8_800_168.exe, Version 11.8.800.168, Zeitstempel 0x52223bb7, fehlerhaftes Modul ShimEng.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x4549bdb7, Ausnahmecode 0xc0000005, Fehleroffset 0x71ab4618, Prozess-ID 0x13a0, Anwendungsstartzeit FlashPlayerPlugin_11_8_800_168.exe0. Error: (10/07/2013 06:20:21 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\GABRIELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\EXTENSIONS\{09BAD93C-BE48-8FB3-0154-FC36BDB9BBCF}\COMPONENTS> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (10/07/2013 06:20:21 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\GABRIELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\EXTENSIONS\{09BAD93C-BE48-8FB3-0154-FC36BDB9BBCF}\COMPONENTS> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (10/07/2013 06:20:20 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\GABRIELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\EXTENSIONS\{09BAD93C-BE48-8FB3-0154-FC36BDB9BBCF}\CHROME\PUBLISHERIMAGES> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) System errors: ============= Error: (10/09/2013 06:03:59 PM) (Source: Service Control Manager) (User: ) Description: NVIDIA Update Service Daemon%%1069 Error: (10/09/2013 06:03:59 PM) (Source: Service Control Manager) (User: ) Description: nvUpdatusService.\UpdatusUser%%1330 Error: (10/09/2013 06:02:16 PM) (Source: Service Control Manager) (User: ) Description: eeCtrl Error: (10/09/2013 06:01:45 PM) (Source: LSM) (User: ) Description: Der Terminaldienst konnte nicht gestartet werden. Relevanter Statuscode: Die Konfigurationsdaten für dieses Produkt sind beschädigt. Wenden Sie sich an den Support. . Error: (10/09/2013 01:05:50 PM) (Source: Service Control Manager) (User: ) Description: NVIDIA Update Service Daemon%%1069 Error: (10/09/2013 01:05:50 PM) (Source: Service Control Manager) (User: ) Description: nvUpdatusService.\UpdatusUser%%1330 Error: (10/09/2013 01:04:23 PM) (Source: Service Control Manager) (User: ) Description: eeCtrl Error: (10/09/2013 01:03:51 PM) (Source: LSM) (User: ) Description: Der Terminaldienst konnte nicht gestartet werden. Relevanter Statuscode: Die Konfigurationsdaten für dieses Produkt sind beschädigt. Wenden Sie sich an den Support. . Error: (10/08/2013 04:09:29 PM) (Source: Service Control Manager) (User: ) Description: NVIDIA Update Service Daemon%%1069 Error: (10/08/2013 04:09:29 PM) (Source: Service Control Manager) (User: ) Description: nvUpdatusService.\UpdatusUser%%1330 Microsoft Office Sessions: ========================= Error: (10/07/2013 06:34:08 PM) (Source: MsiInstaller)(User: Compi) Description: Produkt: Microsoft .NET Framework 4 Extended -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.(NULL)(NULL)(NULL)(NULL) Error: (10/07/2013 06:24:47 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\GABRIELE\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\SAFEBROWSING Error: (10/07/2013 06:24:47 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\GABRIELE\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\SAFEBROWSING Error: (10/07/2013 06:24:29 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_8_800_168.exe11.8.800.16852223bb7ShimEng.dll_unloaded0.0.0.04549bdb7c000000571ab4618103001cec379b1eacfcd Error: (10/07/2013 06:22:55 PM) (Source: Windows Installer 3.1)(User: ) Description: WindowsFür diesen Befehl ist nicht genügend Speicher verfügbar. Error: (10/07/2013 06:22:46 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_8_800_168.exe11.8.800.16852223bb7ShimEng.dll_unloaded0.0.0.04549bdb7c000000571ab4618f1801cec3797477753d Error: (10/07/2013 06:22:18 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_8_800_168.exe11.8.800.16852223bb7ShimEng.dll_unloaded0.0.0.04549bdb7c000000571ab461813a001cec37963d88b6d Error: (10/07/2013 06:20:21 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\GABRIELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\EXTENSIONS\{09BAD93C-BE48-8FB3-0154-FC36BDB9BBCF}\COMPONENTS Error: (10/07/2013 06:20:21 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\GABRIELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\EXTENSIONS\{09BAD93C-BE48-8FB3-0154-FC36BDB9BBCF}\COMPONENTS Error: (10/07/2013 06:20:20 PM) (Source: Windows Search Service)(User: ) Description: Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) C:\USERS\GABRIELE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V8XIP62Y.DEFAULT\EXTENSIONS\{09BAD93C-BE48-8FB3-0154-FC36BDB9BBCF}\CHROME\PUBLISHERIMAGES CodeIntegrity Errors: =================================== Date: 2013-03-25 18:16:12.181 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-03-25 18:16:11.959 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-03-25 18:16:11.727 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-03-25 18:16:11.495 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-03-25 18:16:11.175 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-09 19:03:10.825 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\Spigot\Search Settings\wth.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-09 19:03:10.648 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\Spigot\Search Settings\wth.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-09 18:58:19.871 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\Spigot\Search Settings\wth.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-09 18:58:19.681 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\Spigot\Search Settings\wth.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-09 18:58:19.491 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\Common Files\Spigot\Search Settings\wth.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 51% Total physical RAM: 3037.75 MB Available physical RAM: 1484.89 MB Total Pagefile: 6302.02 MB Available Pagefile: 4563.15 MB Total Virtual: 2047.88 MB Available Virtual: 1908.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:456.59 GB) (Free:337.82 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (KINGSTON) (Removable) (Total:14.91 GB) (Free:14.19 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 3D01D1A0) Partition 1: (Active) - (Size=457 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=9 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 15 GB) (Disk ID: 6E652072) No partition Table on disk 2. ==================== End Of Log ============================ Viele Grüße Gabriele |
Themen zu Windows Vista, viel Adware und ein Trojaner Trojan.Win32.Generic |
adobe, adware, antivir, antivirus, avg security toolbar, avira searchfree toolbar, browser, cid, computer, defender, farbar, farbar recovery scan tool, fehler, firefox, flash player, home, mozilla, msiinstaller, plug-in, registry, rundll, scan, secure search, security, services.exe, smartbar, software, svchost.exe, symantec, system, trojan.win32.generic, trojaner, vista, vtoolbarupdater, windows, windows vista |