| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Windows Firewall deaktiviert, nicht bedienbar, Fehlercode: 0x6D9Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
18.10.2013, 15:51
| #1 |
| |  Windows 7: Windows Firewall deaktiviert, nicht bedienbar, Fehlercode: 0x6D9 Hallo zusammen, ich habe oben genanntes Problem. Ich nutze den Rechner beruflisch und Privat und bin viel auf Reisen. Wahrscheinlich enstanden nach der Nutzung eines Memory-Sticks diese Probleme. Zumindestens ist es mir danach aufgefallen, weil der Virenscanner angeschlagen hatte und ich danach die Firewall-Einstellungen nicht mehr ändern konnte. Zusätzlich ist mir aufgefallen, dass ich fast jedesmal bei einem Wechsel des WLAN Netzwerks die Problembehandlung ausführen muss, um eine Verbindung zum Internet zu bekommen. Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 16:05 on 18/10/2013 (armin.basten)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by armin.basten (administrator) on KIS-FIELD-PG on 18-10-2013 16:10:29
Running from C:\Users\armin.basten\Downloads
Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Hewlett-Packard Company) C:\Program Files\HP\HPBDSService\HPBDSService.exe
(Siemens AG) C:\PROGRAM FILES\COMMON FILES\SIEMENS\ALMPANELPLUGIN\ALMPANELPLUGIN.EXE
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAdm.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrDba.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrHis.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrPas.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrSaz.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.3\MSSQL\Binn\sqlservr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SIEMENS AG) C:\Program Files\Siemens\Step7\s7bin\s7hspsvx.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\ace\bin\SCSMX.exe
(Siemens AG) C:\Program Files\Siemens\SIMATIC WinCC flexible\WinCC flexible 2008 Runtime\SmartServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\SimNetCom\PNIOMGR.exe
(OPC Foundation) C:\Program Files\Common Files\OPC Foundation\UA\v1.0\Bin\Opc.Ua.DiscoveryServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\SimNetCom\pniopcac.exe
(Volkswagen AG) D:\ElsaWin\bin\LcSvrAuf.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
(TODO: <Company name>) C:\Program Files\Wetelecom\NetKit.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\armin.basten\Downloads\Defogger.exe
(Google Inc.) C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-01] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [iTunesHelper] - D:\Program Files\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [LoadMdm] - C:\Program Files\Wetelecom\LoadMdm.exe [397312 2010-09-13] (TODO: <Company name>)
HKLM\...\Runonce: [Del5750820] - cmd.exe /Q /D /c del "C:\Users\ARMIN~1.BAS\AppData\Local\Temp\0.del"
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Runonce: [Del5750820] - cmd.exe /Q /D /c del "C:\Users\ARMIN~1.BAS\AppData\Local\Temp\0.del"
Startup: C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RT-Updater.lnk
ShortcutTarget: RT-Updater.lnk -> D:\Program Files\VCDS\VCDS.EXE (Ross-Tech, LLC)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.siemens.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9A70EA11C858CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=119816&babsrc=HP_ss_din2g&mntrId=FECE001060D1BBAB
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119816&babsrc=SP_ss_din2g&mntrId=FECE001060D1BBAB
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119816&babsrc=SP_ss_din2g&mntrId=FECE001060D1BBAB
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - D:\ElsaWin\bin\wiprot.dll (TODO: <Company name>)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\..\Interfaces\{555765F5-ECDF-4795-B550-30881F8EAB47}: [NameServer]77.243.240.230 77.243.240.231
Tcpip\..\Interfaces\{BD04B7F9-5482-42B0-9390-430FB6D2248A}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Chrome:
=======
CHR HomePage: hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=FECE001060D1BBAB
CHR Extension: (YouTube) - C:\Users\ARMIN~1.BAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\ARMIN~1.BAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\ARMIN~1.BAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\ARMIN~1.BAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\ARMIN~1.BAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp\5.0.94.1_0
CHR Extension: (Gmail) - C:\Users\ARMIN~1.BAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR StartMenuInternet: Google Chrome - C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 almservice; C:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe [1138312 2011-12-11] (SIEMENS AG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
S2 CCAgent; C:\Program Files\Common Files\Siemens\ACE\bin\CCAgent.exe [344064 2009-07-16] (SIEMENS AG)
S3 CCEClient; C:\Program Files\Common Files\Siemens\ace\bin\CCEClient.exe [262144 2009-07-16] (SIEMENS AG)
S2 CCEServer; C:\Program Files\Common Files\Siemens\ace\bin\CCEServer.exe [237568 2009-07-16] (SIEMENS AG)
R2 HP DS Service; C:\Program Files\HP\HPBDSService\HPBDSService.exe [13824 2010-10-27] (Hewlett-Packard Company)
R2 LcSvrAdm; D:\ElsaWin\bin\LcSvrAdm.exe [240640 2011-12-06] (Volkswagen AG)
R3 LcSvrAuf; D:\ElsaWin\bin\LcSvrAuf.exe [1321472 2011-12-06] (Volkswagen AG)
R2 LcSvrDba; D:\ElsaWin\bin\LcSvrDba.exe [392704 2011-12-06] (Volkswagen AG)
R2 LcSvrHis; D:\ElsaWin\bin\LcSvrHis.exe [335360 2011-12-06] (Volkswagen AG)
R2 LcSvrPAS; D:\ElsaWin\bin\LcSvrPas.exe [477696 2011-12-06] (Volkswagen AG)
R2 LcSvrSaz; D:\ElsaWin\bin\LcSvrSaz.exe [373248 2011-12-06] (Volkswagen AG)
R2 MSSQL$WINCCFLEXEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 MSSQL$WINCCPLUS; C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 MSSQL$WINCCPLUSMIG; C:\Program Files\Microsoft SQL Server\MSSQL.3\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [227600 2010-07-19] ()
S3 OpcEnum; C:\Windows\system32\Opcenum.exe [139488 2009-02-05] (OPC Foundation)
S3 RedundancyControl; C:\Program Files\Common Files\Siemens\ace\bin\RedundancyControl.exe [430080 2009-07-16] (SIEMENS AG)
S3 RedundancyState; C:\Program Files\Common Files\Siemens\ace\bin\RedundancyState.exe [180224 2009-07-16] (SIEMENS AG)
R2 s7hspsvx; C:\Program Files\Siemens\Step7\s7bin\s7hspsvx.exe [61493 2010-06-02] (SIEMENS AG)
R2 s7oiehsx; C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe [412808 2011-11-04] (SIEMENS AG)
R2 S7TraceServiceX; C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe [556168 2011-11-04] (SIEMENS AG)
R2 SCSMonitor; C:\Program Files\Common Files\Siemens\ace\bin\SCSMX.exe [167936 2009-07-16] (SIEMENS AG)
S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S2 smartserver; C:\Program Files\Siemens\SIMATIC WinCC flexible\WinCC flexible 2008 Runtime\SmartServer.exe [558416 2011-12-06] (Siemens AG)
R2 UA Local Discovery Server; C:\Program Files\Common Files\OPC Foundation\UA\v1.0\Bin\Opc.Ua.DiscoveryServer.exe [28160 2010-05-05] (OPC Foundation)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S4 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [x]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [225280 2011-07-19] (Intel Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R1 dpmconv; C:\Windows\System32\DRIVERS\dpmconv32.sys [288256 2010-04-28] (SIEMENS AG)
S3 dpmcslv; C:\Windows\System32\Drivers\dpmcslv.sys [68280 2005-07-04] (Siemens AG)
R1 DPMTRCDD; C:\Windows\System32\DRIVERS\DPMTRCDD32.sys [72248 2010-03-22] (SIEMENS AG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-03-23] (DT Soft Ltd)
R3 e1qexpress; C:\Windows\System32\DRIVERS\e1q6232.sys [215208 2009-11-05] (Intel Corporation)
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [63464 2013-02-13] (FTDI Ltd.)
R3 fwkbdrtm; C:\Windows\system32\drivers\fwkbdrtm.sys [21464 2011-12-06] (Windows (R) Win 7 DDK provider)
R2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
S3 HPFXBULKLEDM; C:\Windows\System32\drivers\hppcbulkio.sys [20504 2011-05-10] (Hewlett Packard)
S3 IAMT03; C:\Windows\system32\DRIVERS\IAMT03.sys [40848 2007-04-11] (Intel Corporation)
S3 IAMTV; C:\Windows\system32\DRIVERS\IAMTV.sys [38288 2007-04-11] (Intel Corporation)
S3 IAMTXP; C:\Windows\system32\DRIVERS\IAMTXP.sys [47496 2007-04-11] (Intel Corporation)
R3 iBtFltCoex; C:\Windows\System32\DRIVERS\iBtFltCoex.sys [47104 2011-07-19] (Intel Corporation)
S3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [42648 2011-04-30] (Logitech, Inc.)
S3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12184 2011-04-30] (Logitech, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30360 2011-04-30] (Logitech, Inc.)
S3 NAL; C:\Windows\system32\Drivers\iqvw32.sys [30880 2010-03-24] (Intel Corporation )
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [6814720 2010-07-14] (Intel Corporation)
R2 NSHE; C:\Windows\system32\Drivers\NSHE.SYS [97792 2008-11-23] (T0r0 2008)
R2 PROFIbrd; C:\Windows\System32\Drivers\PROFIbrd.sys [165432 2010-03-10] (Softing AG)
S3 PROFIpnp; C:\Windows\System32\Drivers\PROFIpnp.sys [19256 2010-03-10] (Softing AG)
R2 PROFIprt; C:\Windows\System32\Drivers\PROFIprt.sys [39480 2010-03-10] (Softing AG)
R2 PROFIstack; C:\Windows\System32\Drivers\PROFIstack.sys [130104 2010-03-10] (Softing AG)
S3 PROFIusb; C:\Windows\System32\Drivers\PROFIusb.sys [39352 2010-03-10] (Softing AG)
S3 RT-USB; C:\Windows\System32\drivers\RT-USB.SYS [59464 2010-06-16] (Ross-Tech LLC)
R3 S7odpx2x32; C:\Windows\System32\Drivers\S7odpx2x32.sys [87552 2011-05-06] (SIEMENS AG)
R3 s7opciax32; C:\Windows\System32\DRIVERS\s7opciax32.sys [227840 2011-06-22] (SIEMENS AG)
R2 S7opcsrtx; C:\Windows\System32\DRIVERS\s7opcsrtx.sys [31744 2011-02-22] (SIEMENS AG)
R3 s7otmcd32x; C:\Windows\System32\Drivers\s7otmcd32x.sys [256512 2011-05-06] (SIEMENS AG)
R3 S7otranx32; C:\Windows\System32\Drivers\S7otranx32.sys [521216 2011-05-06] (SIEMENS AG)
R3 s7otsadx32; C:\Windows\System32\Drivers\s7otsadx32.sys [182784 2011-09-29] (SIEMENS AG)
R2 s7ousbu32x; C:\Windows\System32\DRIVERS\s7ousbu32x.sys [641280 2011-09-29] (SIEMENS AG)
R2 s7sn2srtx; C:\Windows\System32\DRIVERS\s7sn2srtx.sys [63104 2011-06-16] (SIEMENS AG)
R2 s7snsrtx; C:\Windows\System32\DRIVERS\s7snsrtx.sys [73088 2009-02-24] (SIEMENS AG)
R2 SNTIE; C:\Windows\System32\DRIVERS\sntie.sys [343888 2011-10-11] (SIEMENS AG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2010-06-09] (Samsung Electronics)
S3 usbbulk; C:\Windows\System32\Drivers\USBBulk.sys [18776 2008-07-04] (SEGGER MICROCONTROLLER GmbH & Co. KG)
R1 vsnl2ada; C:\Windows\System32\DRIVERS\vsnl2ada32.sys [98944 2010-03-22] (SIEMENS AG)
R3 wmdusbser; C:\Windows\System32\DRIVERS\wmdusbser.sys [107136 2010-06-11] (WeTelecom Incorporated)
S3 ZTEusbMB; C:\Windows\System32\DRIVERS\ZTEusbnmeaext2.sys [107520 2011-07-04] (ZTE Incorporated)
S3 ZTEusbwwan; C:\Windows\System32\DRIVERS\ZTEusbwwan.sys [195072 2011-12-01] (ZTE Incorporated)
S3 ALSysIO; \??\C:\Users\ARMIN~1.BAS\AppData\Local\Temp\ALSysIO.sys [x]
S3 catchme; \??\C:\Users\ARMIN~1.BAS\AppData\Local\Temp\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 EverestDriver; \??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 massfilter; system32\DRIVERS\massfilter.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]
U3 mbr; \??\C:\Users\ARMIN~1.BAS\AppData\Local\Temp\mbr.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-18 16:10 - 2013-10-18 16:10 - 00000000 ____D C:\FRST
2013-10-18 16:08 - 2013-10-18 16:09 - 01087213 _____ (Farbar) C:\Users\armin.basten\Downloads\FRST.exe
2013-10-18 16:05 - 2013-10-18 16:06 - 00000556 _____ C:\Users\armin.basten\Downloads\defogger_disable.log
2013-10-18 16:05 - 2013-10-18 16:05 - 00000146 _____ C:\Users\armin.basten\defogger_reenable
2013-10-18 16:04 - 2013-10-18 16:04 - 00050477 _____ C:\Users\armin.basten\Downloads\Defogger.exe
2013-10-18 15:42 - 2013-10-18 15:42 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\DigitalSite
2013-10-18 15:36 - 2013-10-18 15:41 - 00001163 _____ C:\Users\armin.basten\Desktop\Continue Mipony Download Manager Installation.lnk
2013-10-18 15:25 - 2013-10-18 15:25 - 00015001 _____ C:\Users\armin.basten\Downloads\[kickass.to]grown.ups.2010.720p.brrip.x264.yify.torrent
2013-10-18 15:25 - 2013-10-18 15:25 - 00008244 _____ C:\Users\armin.basten\Downloads\[kickass.to]grown.ups.2.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:24 - 2013-10-18 15:24 - 00008232 _____ C:\Users\armin.basten\Downloads\[kickass.to]despicable.me.2.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:24 - 2013-10-18 15:24 - 00008198 _____ C:\Users\armin.basten\Downloads\[kickass.to]r.i.p.d.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:24 - 2013-10-18 15:24 - 00008178 _____ C:\Users\armin.basten\Downloads\[kickass.to]parkland.2013.720p.brrip.x264.yify.torrent
2013-10-18 14:58 - 2013-10-18 14:58 - 00028958 _____ C:\ComboFix.txt
2013-10-18 13:47 - 2013-10-18 14:59 - 00000000 ____D C:\ComboFix
2013-10-18 13:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-10-18 13:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-10-18 13:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-10-18 13:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-10-18 13:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-10-18 13:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-10-18 13:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-10-18 13:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-10-18 12:34 - 2013-10-18 12:36 - 05134711 ____R (Swearware) C:\Users\armin.basten\Downloads\ComboFix.exe
2013-10-18 08:39 - 2013-10-18 15:07 - 00000000 ____D C:\Program Files\Wetelecom
2013-10-18 08:39 - 2013-10-18 08:39 - 00000952 _____ C:\Users\armin.basten\Desktop\NetKit.lnk
2013-10-18 08:39 - 2013-10-18 08:39 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wetelecom
2013-10-17 12:52 - 2013-10-17 12:52 - 00002483 _____ C:\Users\Public\Desktop\Bonjour-Druckerassistent.lnk
2013-10-17 12:52 - 2013-10-17 12:52 - 00000000 ____D C:\Program Files\Bonjour Print Services
2013-10-17 12:48 - 2013-10-17 07:30 - 05436744 _____ (Apple Inc.) C:\Users\armin.basten\Downloads\BonjourPSSetup.exe
2013-10-14 07:40 - 2013-10-14 07:40 - 00131072 ____N C:\Windows\Minidump\101413-31184-01.dmp
2013-10-10 15:31 - 2013-09-04 03:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-10 15:31 - 2013-09-04 03:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-10 15:31 - 2013-09-04 03:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-10 15:31 - 2013-09-04 03:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-10 15:31 - 2013-09-04 03:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-10 15:31 - 2013-09-04 03:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-10 15:31 - 2013-09-04 03:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-10 07:06 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 07:06 - 2013-09-23 01:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 07:06 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 07:06 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 07:06 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 07:06 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-10 07:05 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 07:05 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 07:05 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 23:48 - 2013-09-14 02:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 23:48 - 2013-09-08 04:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 23:48 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 23:48 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-10-09 23:48 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 23:48 - 2013-08-29 03:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 23:48 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 23:48 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 23:48 - 2013-08-28 03:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 23:48 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 23:48 - 2013-08-01 13:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 23:48 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 23:48 - 2013-07-12 12:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 23:48 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 23:48 - 2013-07-12 12:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 23:48 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 23:48 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 23:48 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 23:48 - 2013-07-04 11:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 23:48 - 2013-07-03 06:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 23:48 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 23:48 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 23:48 - 2013-06-06 06:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 23:48 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 23:48 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 23:48 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 23:48 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 23:47 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 12:24 - 2013-10-09 12:24 - 00001401 _____ C:\Users\armin.basten\Desktop\CopyTrans Control Center.lnk
2013-10-09 12:24 - 2013-10-09 12:24 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-10-03 20:49 - 2013-10-03 20:49 - 00189643 _____ C:\Users\armin.basten\Documents\Schiebedach.xps
2013-10-03 12:52 - 2013-10-03 12:53 - 12105568 _____ (EVC electronic GmbH ) C:\Users\armin.basten\Downloads\WinOLS_Testversion.EXE
2013-10-01 13:28 - 2013-10-02 17:55 - 00000056 _____ C:\Windows\Acroread.ini
2013-09-30 21:49 - 2013-10-01 03:49 - 98602865 _____ C:\Windows\system32\胜塃ᵌd
2013-09-30 17:01 - 2013-09-30 17:01 - 00000756 _____ C:\Users\Public\Desktop\ElsaWin.lnk
2013-09-30 17:01 - 2013-09-30 17:01 - 00000756 _____ C:\Users\Public\Desktop\ElsaWin Administration.lnk
2013-09-30 17:01 - 2013-09-30 17:01 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ElsaWin
2013-09-30 17:00 - 2013-09-30 17:00 - 00000000 ____D C:\VW
2013-09-30 12:36 - 2013-09-30 12:36 - 00000000 ____D C:\ProgramData\Western Digital
2013-09-29 22:31 - 2013-09-29 23:14 - 00124421 _____ C:\Users\armin.basten\Documents\esla.xps
2013-09-29 22:13 - 2013-09-30 16:20 - 00000556 _____ C:\Windows\ODBC.INI
2013-09-29 22:12 - 2013-09-29 23:11 - 00000000 ____D C:\Program Files\Diagnose-BK
2013-09-29 22:10 - 1996-11-05 15:13 - 00299008 _____ (InstallShield Corporation, Inc.) C:\Windows\uninst.exe
2013-09-29 21:22 - 2013-09-29 21:35 - 00005120 _____ C:\WirelessDiagLog.csv
2013-09-29 21:17 - 2013-10-18 14:06 - 00008454 _____ C:\Windows\PFRO.log
2013-09-29 21:17 - 2013-10-18 14:06 - 00001637 _____ C:\Windows\setupact.log
2013-09-29 21:17 - 2013-09-29 21:17 - 00000000 _____ C:\Windows\setuperr.log
2013-09-29 14:18 - 2013-09-29 14:18 - 00000675 _____ C:\Users\armin.basten\Desktop\Vincreator.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000675 _____ C:\Users\armin.basten\Desktop\ETKA 7.4 Germany 2013.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000670 _____ C:\Users\armin.basten\Desktop\ETKA 7.4 Online-Update.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000664 _____ C:\Users\armin.basten\Desktop\ETKA-Supportforum.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ETKA 7.4 Germany 2013
2013-09-28 21:50 - 2013-09-28 21:50 - 98442955 _____ C:\Windows\system32\㻚ᵌa
2013-09-28 12:12 - 2013-09-29 13:57 - 00000000 ____D C:\Program Files\Spyware Terminator
2013-09-28 12:12 - 2011-06-21 10:24 - 00032768 _____ C:\Windows\system32\Drivers\sp_rsdrv2.sys
2013-09-28 12:06 - 2013-09-28 12:08 - 00000000 ____D C:\Users\armin.basten\Downloads\TuWG2013
2013-09-27 23:28 - 2013-09-28 06:10 - 00000000 ____D C:\Program Files\Browser Protect Removal Tool
2013-09-27 23:28 - 2012-12-10 10:04 - 00356352 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll
2013-09-27 23:28 - 2012-12-10 10:04 - 00081920 _____ (eSellerate Inc.) C:\Windows\eSellerateControl350.dll
2013-09-27 23:28 - 2009-07-23 17:32 - 01122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libeay32.dll
2013-09-27 23:28 - 2009-07-23 17:32 - 00274432 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\ssleay32.dll
2013-09-27 22:29 - 2013-09-27 22:37 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-27 20:34 - 2013-09-27 20:34 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-09-27 20:32 - 2013-09-27 22:22 - 00000000 ____D C:\Windows\865537E164904193A4B6669C62711852.TMP
2013-09-25 15:48 - 2013-09-26 03:48 - 97892804 _____ C:\Windows\system32\橩難ὄh
2013-09-23 00:51 - 2013-09-23 00:51 - 00001247 _____ C:\Users\armin.basten\Desktop\UniSettings Bosch ME7.lnk
2013-09-21 11:33 - 2013-10-09 14:06 - 00000955 _____ C:\Users\armin.basten\Desktop\ETKA.txt
2013-09-21 08:52 - 2008-11-23 09:23 - 00097792 _____ (T0r0 2008) C:\Windows\system32\Drivers\NSHE.SYS
2013-09-21 08:50 - 2013-09-29 14:32 - 00007771 _____ C:\Windows\system32\HLDRV.LOG
2013-09-21 08:48 - 2013-09-21 08:48 - 00191488 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hlvdd.dll
2013-09-21 08:48 - 2006-12-20 10:55 - 03066968 _____ (Aladdin Knowledge Systems.) C:\Windows\system32\hinstd.dll
2013-09-21 08:48 - 2006-12-20 09:00 - 02511360 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\haspds_windows.dll
2013-09-21 08:48 - 2006-12-20 09:00 - 00671112 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hdinst_windows.dll
2013-09-21 08:48 - 2006-11-30 10:06 - 00069632 _____ (Aladdin Knowledge Systems) C:\Windows\system32\hasp_inst_help1.dll
2013-09-21 08:48 - 2005-09-06 16:06 - 00028672 _____ C:\Windows\system32\hlduinst.exe
2013-09-21 08:48 - 2002-07-26 16:02 - 00006836 _____ C:\Windows\system32\UNWISE.INI
2013-09-21 08:15 - 2013-09-29 14:02 - 00000000 ____D C:\Windows\ETKA7.4_Germany
2013-09-20 19:00 - 2013-10-13 21:54 - 00005102 _____ C:\Users\armin.basten\Desktop\S6-4F.txt
==================== One Month Modified Files and Folders =======
2013-10-18 16:10 - 2013-10-18 16:10 - 00000000 ____D C:\FRST
2013-10-18 16:09 - 2013-10-18 16:08 - 01087213 _____ (Farbar) C:\Users\armin.basten\Downloads\FRST.exe
2013-10-18 16:06 - 2013-10-18 16:05 - 00000556 _____ C:\Users\armin.basten\Downloads\defogger_disable.log
2013-10-18 16:05 - 2013-10-18 16:05 - 00000146 _____ C:\Users\armin.basten\defogger_reenable
2013-10-18 16:04 - 2013-10-18 16:04 - 00050477 _____ C:\Users\armin.basten\Downloads\Defogger.exe
2013-10-18 15:44 - 2011-07-27 11:04 - 01132133 _____ C:\Windows\WindowsUpdate.log
2013-10-18 15:42 - 2013-10-18 15:42 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\DigitalSite
2013-10-18 15:41 - 2013-10-18 15:36 - 00001163 _____ C:\Users\armin.basten\Desktop\Continue Mipony Download Manager Installation.lnk
2013-10-18 15:25 - 2013-10-18 15:25 - 00015001 _____ C:\Users\armin.basten\Downloads\[kickass.to]grown.ups.2010.720p.brrip.x264.yify.torrent
2013-10-18 15:25 - 2013-10-18 15:25 - 00008244 _____ C:\Users\armin.basten\Downloads\[kickass.to]grown.ups.2.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:24 - 2013-10-18 15:24 - 00008232 _____ C:\Users\armin.basten\Downloads\[kickass.to]despicable.me.2.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:24 - 2013-10-18 15:24 - 00008198 _____ C:\Users\armin.basten\Downloads\[kickass.to]r.i.p.d.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:24 - 2013-10-18 15:24 - 00008178 _____ C:\Users\armin.basten\Downloads\[kickass.to]parkland.2013.720p.brrip.x264.yify.torrent
2013-10-18 15:07 - 2013-10-18 08:39 - 00000000 ____D C:\Program Files\Wetelecom
2013-10-18 14:59 - 2013-10-18 13:47 - 00000000 ____D C:\ComboFix
2013-10-18 14:58 - 2013-10-18 14:58 - 00028958 _____ C:\ComboFix.txt
2013-10-18 14:58 - 2013-08-10 11:57 - 00000000 ____D C:\Qoobox
2013-10-18 14:52 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-10-18 14:17 - 2009-07-14 06:34 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-18 14:17 - 2009-07-14 06:34 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-18 14:15 - 2011-10-14 17:18 - 00763840 _____ C:\Windows\system32\perfh01F.dat
2013-10-18 14:15 - 2011-10-14 17:18 - 00182854 _____ C:\Windows\system32\perfc01F.dat
2013-10-18 14:15 - 2011-08-09 13:24 - 00830312 _____ C:\Windows\system32\perfh019.dat
2013-10-18 14:15 - 2011-08-09 13:24 - 00193648 _____ C:\Windows\system32\perfc019.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00602068 _____ C:\Windows\system32\perfh014.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00549482 _____ C:\Windows\system32\perfh012.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00526592 _____ C:\Windows\system32\prfh0404.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00510290 _____ C:\Windows\system32\prfh0804.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00165054 _____ C:\Windows\system32\perfc012.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00164626 _____ C:\Windows\system32\prfc0804.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00159712 _____ C:\Windows\system32\prfc0404.dat
2013-10-18 14:15 - 2011-07-28 08:38 - 00137768 _____ C:\Windows\system32\perfc014.dat
2013-10-18 14:15 - 2010-07-01 02:19 - 00844522 _____ C:\Windows\system32\perfh010.dat
2013-10-18 14:15 - 2010-07-01 02:19 - 00188544 _____ C:\Windows\system32\perfc010.dat
2013-10-18 14:15 - 2010-06-30 16:31 - 11561664 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-18 14:06 - 2013-09-29 21:17 - 00008454 _____ C:\Windows\PFRO.log
2013-10-18 14:06 - 2013-09-29 21:17 - 00001637 _____ C:\Windows\setupact.log
2013-10-18 12:36 - 2013-10-18 12:34 - 05134711 ____R (Swearware) C:\Users\armin.basten\Downloads\ComboFix.exe
2013-10-18 12:13 - 2011-07-27 13:54 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Skype
2013-10-18 08:39 - 2013-10-18 08:39 - 00000952 _____ C:\Users\armin.basten\Desktop\NetKit.lnk
2013-10-18 08:39 - 2013-10-18 08:39 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wetelecom
2013-10-18 07:02 - 2013-02-16 17:01 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\uTorrent
2013-10-17 23:48 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-10-17 12:52 - 2013-10-17 12:52 - 00002483 _____ C:\Users\Public\Desktop\Bonjour-Druckerassistent.lnk
2013-10-17 12:52 - 2013-10-17 12:52 - 00000000 ____D C:\Program Files\Bonjour Print Services
2013-10-17 09:33 - 2012-04-15 11:00 - 00000000 ____D C:\ProgramData\Apple
2013-10-17 07:30 - 2013-10-17 12:48 - 05436744 _____ (Apple Inc.) C:\Users\armin.basten\Downloads\BonjourPSSetup.exe
2013-10-14 07:40 - 2013-10-14 07:40 - 00131072 ____N C:\Windows\Minidump\101413-31184-01.dmp
2013-10-14 07:40 - 2011-08-17 07:37 - 00000000 ____D C:\Windows\Minidump
2013-10-13 21:54 - 2013-09-20 19:00 - 00005102 _____ C:\Users\armin.basten\Desktop\S6-4F.txt
2013-10-12 13:41 - 2011-07-27 13:52 - 00000000 ___RD C:\Program Files\Skype
2013-10-12 13:41 - 2011-07-27 13:52 - 00000000 ____D C:\ProgramData\Skype
2013-10-10 17:11 - 2012-03-03 08:31 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\AIMP3
2013-10-10 08:32 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-10 07:43 - 2009-07-14 06:33 - 00509944 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-TW
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\zh-CN
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\tr-TR
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ru-RU
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\nb-NO
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\ko-KR
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\it-IT
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fr-FR
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fi-FI
2013-10-10 07:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-10-10 07:15 - 2011-07-28 12:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-10 07:13 - 2013-07-20 12:09 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 07:07 - 2011-07-27 18:14 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-09 14:06 - 2013-09-21 11:33 - 00000955 _____ C:\Users\armin.basten\Desktop\ETKA.txt
2013-10-09 12:24 - 2013-10-09 12:24 - 00001401 _____ C:\Users\armin.basten\Desktop\CopyTrans Control Center.lnk
2013-10-09 12:24 - 2013-10-09 12:24 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-10-09 12:24 - 2012-05-21 04:20 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\WindSolutions
2013-10-09 12:24 - 2012-05-21 04:20 - 00000000 ____D C:\ProgramData\WindSolutions
2013-10-09 08:47 - 2013-05-06 13:40 - 00004756 _____ C:\Users\armin.basten\Desktop\Edenites.txt
2013-10-03 20:49 - 2013-10-03 20:49 - 00189643 _____ C:\Users\armin.basten\Documents\Schiebedach.xps
2013-10-03 12:53 - 2013-10-03 12:52 - 12105568 _____ (EVC electronic GmbH ) C:\Users\armin.basten\Downloads\WinOLS_Testversion.EXE
2013-10-02 17:55 - 2013-10-01 13:28 - 00000056 _____ C:\Windows\Acroread.ini
2013-10-01 16:00 - 2013-05-06 10:45 - 00067680 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-01 16:00 - 2012-11-05 06:14 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-01 16:00 - 2012-11-05 06:14 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-01 16:00 - 2012-11-05 06:14 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-01 03:49 - 2013-09-30 21:49 - 98602865 _____ C:\Windows\system32\胜塃ᵌd
2013-09-30 17:01 - 2013-09-30 17:01 - 00000756 _____ C:\Users\Public\Desktop\ElsaWin.lnk
2013-09-30 17:01 - 2013-09-30 17:01 - 00000756 _____ C:\Users\Public\Desktop\ElsaWin Administration.lnk
2013-09-30 17:01 - 2013-09-30 17:01 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ElsaWin
2013-09-30 17:00 - 2013-09-30 17:00 - 00000000 ____D C:\VW
2013-09-30 16:20 - 2013-09-29 22:13 - 00000556 _____ C:\Windows\ODBC.INI
2013-09-30 12:36 - 2013-09-30 12:36 - 00000000 ____D C:\ProgramData\Western Digital
2013-09-29 23:14 - 2013-09-29 22:31 - 00124421 _____ C:\Users\armin.basten\Documents\esla.xps
2013-09-29 23:11 - 2013-09-29 22:12 - 00000000 ____D C:\Program Files\Diagnose-BK
2013-09-29 22:09 - 2013-03-23 16:26 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\DAEMON Tools Lite
2013-09-29 21:35 - 2013-09-29 21:22 - 00005120 _____ C:\WirelessDiagLog.csv
2013-09-29 21:17 - 2013-09-29 21:17 - 00000000 _____ C:\Windows\setuperr.log
2013-09-29 17:18 - 2012-04-03 13:27 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\FileZilla
2013-09-29 16:10 - 2013-03-24 14:04 - 00000156 _____ C:\Windows\etkinst.ini
2013-09-29 14:32 - 2013-09-21 08:50 - 00007771 _____ C:\Windows\system32\HLDRV.LOG
2013-09-29 14:18 - 2013-09-29 14:18 - 00000675 _____ C:\Users\armin.basten\Desktop\Vincreator.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000675 _____ C:\Users\armin.basten\Desktop\ETKA 7.4 Germany 2013.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000670 _____ C:\Users\armin.basten\Desktop\ETKA 7.4 Online-Update.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000664 _____ C:\Users\armin.basten\Desktop\ETKA-Supportforum.lnk
2013-09-29 14:18 - 2013-09-29 14:18 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ETKA 7.4 Germany 2013
2013-09-29 14:02 - 2013-09-21 08:15 - 00000000 ____D C:\Windows\ETKA7.4_Germany
2013-09-29 14:02 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system
2013-09-29 13:57 - 2013-09-28 12:12 - 00000000 ____D C:\Program Files\Spyware Terminator
2013-09-28 21:50 - 2013-09-28 21:50 - 98442955 _____ C:\Windows\system32\㻚ᵌa
2013-09-28 12:08 - 2013-09-28 12:06 - 00000000 ____D C:\Users\armin.basten\Downloads\TuWG2013
2013-09-28 09:16 - 2012-06-17 16:37 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Audacity
2013-09-28 07:32 - 2012-05-11 19:25 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-28 07:32 - 2011-07-27 15:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-28 06:10 - 2013-09-27 23:28 - 00000000 ____D C:\Program Files\Browser Protect Removal Tool
2013-09-27 23:25 - 2013-07-27 14:18 - 00000000 ____D C:\Users\armin.basten\AppData\Local\SwvUpdater
2013-09-27 22:37 - 2013-09-27 22:29 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-27 22:22 - 2013-09-27 20:32 - 00000000 ____D C:\Windows\865537E164904193A4B6669C62711852.TMP
2013-09-27 20:34 - 2013-09-27 20:34 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-09-27 20:32 - 2013-02-04 04:27 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-09-27 20:22 - 2013-03-23 16:31 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\BabSolution
2013-09-27 20:21 - 2011-08-03 13:31 - 00000000 ____D C:\Users\armin.basten\AppData\Roaming\Canon
2013-09-27 20:21 - 2011-08-03 12:44 - 00000000 ____D C:\Program Files\Canon
2013-09-27 20:17 - 2011-08-03 13:32 - 00000000 ___HD C:\ProgramData\CanonIJScan
2013-09-27 20:17 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\twain_32
2013-09-27 20:08 - 2012-04-15 11:04 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-26 03:48 - 2013-09-25 15:48 - 97892804 _____ C:\Windows\system32\橩難ὄh
2013-09-23 01:28 - 2013-10-10 07:06 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 01:28 - 2013-10-10 07:06 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 01:28 - 2013-10-10 07:05 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-23 01:27 - 2013-10-10 07:06 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-23 01:27 - 2013-10-10 07:05 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 01:27 - 2013-10-10 07:05 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:51 - 2013-09-23 00:51 - 00001247 _____ C:\Users\armin.basten\Desktop\UniSettings Bosch ME7.lnk
2013-09-21 09:01 - 2011-10-08 07:18 - 00000000 ____D C:\Users\armin.basten\Desktop\IFM VES003_2_6
2013-09-21 08:48 - 2013-09-21 08:48 - 00191488 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hlvdd.dll
2013-09-21 05:30 - 2013-10-10 07:06 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 04:39 - 2013-10-10 07:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
Some content of TEMP:
====================
C:\Users\armin.basten\AppData\Local\temp\avgnt.exe
C:\Users\armin.basten\AppData\Local\temp\ICReinstall_DownloadManagerSetup (1).exe
C:\Users\armin.basten\AppData\Local\temp\ICReinstall_DownloadManagerSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 00:20
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-10-2013
Ran by armin.basten at 2013-10-18 16:11:31
Running from C:\Users\armin.basten\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958)
32 Bit HP CIO Components Installer (Version: 8.1.1)
7-Zip 9.20
ABB DTM500 (Version: 05.03.00)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
Adobe SVG Viewer 3.0 (Version: 3.0)
AIMP3 (Version: v3.00.981)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Audacity 2.0
Autodesk Design Review 2009 DGN Importer (Version: 2.00.071)
Autodesk Design Review 2009 JT Importer (Version: 2.00.071)
Autodesk Design Review 2010 (Version: 10.0.0.108)
Avira Free Antivirus (Version: 14.0.0.383)
Bluetooth Stack for Windows by Toshiba (Version: v7.10.12)
Bonjour (Version: 3.0.0.10)
Bonjour-Druckdienste (Version: 2.0.2.0)
BufferChm (Version: 130.0.331.000)
CameraHelperMsi (Version: 13.31.1038.0)
CCleaner (Version: 3.09)
Core Temp 1.0 RC3 (Version: 1.0)
D3DX10 (Version: 15.4.2368.0902)
DAEMON Tools Lite (Version: 4.47.1.0333)
Destinations (Version: 130.0.0.0)
Disoplan (Version: 9.00.0006)
DocProc (Version: 13.0.0.0)
DTM 266-PdP HART (Version: 05.00.02.31)
DTM TTX300 HART (Version: 05.00.10.16)
DTM500 Library (Version: 05.00.17.25)
DWG TrueView 2010 (Version: 18.0.55.0)
Elcomsoft Advanced Office Password Recovery Professional (Version: v4.10)
ELECTRA 2.8
ElsaWin (Version: 4.00)
ElsterFormular (Version: 13.0.0.8086)
eReg (Version: 1.20.138.34)
ETKA 7.4 Germany 2013
FileZilla Client 3.7.3 (Version: 3.7.3)
FlukeView ScopeMeter 4
FluMoS Light V01.40R01
GOM Player (Version: 2.1.50.5145)
Google Chrome (HKCU Version: 29.0.1547.66)
GPBaseService2 (Version: 130.0.371.000)
HART Communication FDT 1.2 DTM (V1.0.39) (Version: 1.0.39.0)
HP Deskjet 3050 J610 series Basic Device Software (Version: 22.0.334.0)
HP Deskjet 3050 J610 series Hilfe (Version: 140.0.63.63)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP LaserJet 100 color MFP M175
HP LJ100 M175 HP Scan (Version: 1.0.302.0)
HP Photosmart 5510d series - Grundlegende Software für das Gerät (Version: 25.0.607.0)
HP Scanjet G3010 (Version: 13.0)
HP Solution Center 13.0 (Version: 13.0)
HP Update (Version: 5.003.001.001)
hpbDSService (Version: 001.001.05133)
hpbM175DSService (Version: 001.001.05133)
hpg3010 (Version: 13.0.0.0)
HPProductAssistant (Version: 130.0.371.000)
HUAWEI DataCard Driver 4.22.19.00 (Version: 4.22.19.00)
iCloud (Version: 2.1.2.8)
ICS Generic HART Release 4 FDT 1.2 DTM (Version: 4.0.3)
IDT Audio (Version: 5.10.0000.0)
ImgBurn (Version: 2.5.8.0)
Intel PROSet Wireless
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2182)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Network Connections 15.4.82.0 (Version: 15.4.82.0)
Intel(R) PROSet/Wireless WiFi Software (Version: 13.03.0000)
iTunes (Version: 11.0.5.5)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Logitech SetPoint 6.32 (Version: 6.32.20)
Logitech Webcam Software (Version: 2.0)
LWS Facebook (Version: 13.31.1038.0)
LWS Gallery (Version: 13.31.1038.0)
LWS Help_main (Version: 13.31.1044.0)
LWS Launcher (Version: 13.31.1038.0)
LWS Motion Detection (Version: 13.30.1395.0)
LWS Pictures And Video (Version: 13.31.1038.0)
LWS Twitter (Version: 13.30.1346.0)
LWS Video Mask Maker (Version: 13.30.1379.0)
LWS VideoEffects (Version: 13.30.1379.0)
LWS Webcam Software (Version: 13.31.1038.0)
LWS WLM Plugin (Version: 1.30.1201.0)
LWS YouTube Plugin (Version: 13.31.1038.0)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Standard 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 8.0.50727.42)
Microsoft SOAP Toolkit 3.0 (Version: 3.0.1325.4)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Backward compatibility (Version: 8.05.2312)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Express Edition (WINCCFLEXEXPRESS) (Version: 9.4.5000.00)
Microsoft SQL Server 2005 Express Edition (WINCCPLUS) (Version: 9.4.5000.00)
Microsoft SQL Server 2005 Express Edition (WINCCPLUSMIG) (Version: 9.4.5000.00)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server Setup Support Files (English) (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft XML Parser (Version: 8.30.9530.0)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Neuratron PhotoScore Ultimate Demo (Version: 7.0.2)
NirSoft ShellExView
Notepad++ (Version: 6.1.2)
Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37)
OCR Software by I.R.I.S. 13.0 (Version: 13.0)
OPC .NET API 2.00 Redistributables (x86) 101.0 (Version: 2.00.10200)
OPC Core Components Redistributable (Version: 3.00.102)
OPC Core Components Redistributable (x86) 101.2 (Version: 3.00.10102)
OPC UA SDK 1.01 Redistributables 314.0 (Version: 1.01.31400)
PACTware 4.0 (Version: 4.0.06)
pdfsam (Version: 2.2.1)
PKZIP Server for Windows 12.40.0008 (Version: 12.40.0008)
Scan (Version: 13.0.0.0)
Sibelius 7 OpenType Fonts (Version: 7.0.0)
Siemens Totally Integrated Automation Portal V10 (Version: V10.5 SP2)
Siemens Automation License Manager (Version: 05.01.0103)
Siemens Automation License Manager V5.1 + SP1 + Upd3 (Version: 05.01.0103)
Siemens Totally Integrated Automation Portal V11 (Version: V11)
SIMATIC STEP 7 (Version: 05.05.0000)
SIMATIC STEP 7 V5.5 Professional 2010 (Version: 05.05.0000)
SIMATIC Device Drivers (Version: 08.02.0200)
SIMATIC Event Database (Version: 05.05.0003)
SIMATIC HMI License Manager Panel Plugin (Version: 11.00.0100)
SIMATIC HMI ProSave (Version: 09.00.0300)
SIMATIC HMI Symbol Library (Version: 11.00.0200)
SIMATIC LanguageSupportTool (Version: 05.08.0100)
SIMATIC OPC-XML-Gateway (Version: 01.03.0200)
SIMATIC OPC-XML-Gateway V1.3 + SP 2 (Version: 01.03.0200)
SIMATIC Prosave (Version: 09.00.0300)
SIMATIC Prosave V9.0 incl. SP3 (Version: 09.00.0300)
SIMATIC S7 CP PtP Param (Version: 5.1.1300)
SIMATIC S7 CP PtP Param V5.1 + SP13 (Version: 5.1.1300)
SIMATIC S7 Distributed Safety Prog. V5.4 + SP5 (Version: 05.04.0500)
SIMATIC S7 Distributed Safety Prog. V5.4 SP5
SIMATIC S7 F ConfigurationPack (Version: 05.05.0700)
SIMATIC S7 F ConfigurationPack V5.5 + SP7 (Version: 05.05.0700)
SIMATIC S7-GRAPH V5.3 + SP6 Professional 2010 (Version: 05.03.0600)
SIMATIC S7-GRAPH V5.3 inkl. SP6 Professional 2010
SIMATIC S7-PCT (Version: 02.01.0000)
SIMATIC S7-PCT Advanced Services
SIMATIC S7-PCT V2.1 Professional 2010 (Version: 02.01.0000)
SIMATIC S7-PLCSIM (Version: 5.4.0401)
SIMATIC S7-PLCSIM V5.4 + SP4 + HF1 (Version: 5.4.0401)
SIMATIC S7-SCL V5.3 + SP5 Professional 2010 (Version: 5.3.5.0)
SIMATIC S7-SCL V5.3 SP5 Professional 2010
SIMATIC STEP 7 Advanced Services
SIMATIC TS Adapter IE (Version: 03.00.0000)
SIMATIC TS Adapter IE V3.0 (Version: 03.00.0000)
SIMATIC TS Adapter MPI (Version: 3.0)
SIMATIC TS Adapter MPI V3.0 + SP1 (Version: 3.0)
SIMATIC Version View (Version: 01.07.0600)
SIMATIC WinCC flexible 2008 SP3 (Version: 01.04.0000)
SIMATIC WinCC flexible OCX (Version: 01.04.0000)
SIMATIC WinCC flexible Runtime (Version: 01.04.0000)
SIMATIC WinCC flexible Runtime 2008 SP3 (Version: 01.04.0000)
SIMATIC WinCC flexible Simulator (Version: 01.08.0300)
SIMATIC WinCC flexible Tag Simulator (Version: 01.04.0000)
Skype Click to Call (Version: 6.4.11328)
Skype™ 6.9 (Version: 6.9.106)
Softing PROFIdtm (Version: 2.11.00)
SolutionCenter (Version: 130.0.373.000)
Synaptics Pointing Device Driver (Version: 14.0.3.0)
Target 3001! V15 discover (Version: )
TeamViewer 8 (Version: 8.0.19617)
Texas Instruments PCIxx21/x515/xx12 drivers. (Version: 2.00.0005)
ThirdPartyCompInstaller (Version: 05.00.04)
TIA Portal Single SetupPackage - Hardware Support Base Package 0 V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - Hardware Support Base Package 02 V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - Hardware Support Base Package 03 V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - Hardware Support Base Package WCF-01 V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - HW Module Base Package V10.5 + HF1 (Version: 10.05.0001)
TIA Portal Single SetupPackage - HWConfig Single SetupPackage V10.5 + SP2 (Version: 10.05.0200)
TIA Portal Single SetupPackage - HWConfig Single SetupPackage V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - S7BASUCL V10.5 + SP12 (Version: 10.05.1200)
TIA Portal Single SetupPackage - STEP 7 Single SetupPackage V10.5 + SP2 (Version: 10.05.0200)
TIA Portal Single SetupPackage - STEP 7 Single SetupPackage V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - Support Base Package TO-01 V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - Support Base Package TO-02 V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - TIA ESTOUR V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - WinCC Single SetupPackage V10.5 + SP2 (Version: 10.05.0200)
TIA Portal Single SetupPackage - WinCC Single SetupPackage V11.0 (Version: 11.00.0000)
TIA Portal Single SetupPackage - WINCCBASUCL V10.5 + SP12 (Version: 10.05.1200)
TIA Portal Single SetupPackage - WINCCBASUCL V11.0 + SP11 (Version: 11.00.1100)
TIPCI (Version: 2.00.0005)
Totally Integrated Automation Portal V10 - TIA Portal Single SetupPackage V10.5 + SP2 (Version: 10.05.0200)
Totally Integrated Automation Portal V11 - TIA Portal Single SetupPackage V11.0 (Version: 11.00.0000)
Update for 2007 Microsoft Office System (KB967642)
Update for Codec Pack
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition
Update for Mipony Download Manager
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VC User 71 RTL X86 --- (Version: 1.0)
VCDS Release 11.11.6 (Version: 11.11.6)
VCDS Release 12.12.0 (Version: 12.12.0)
VEGA DTM VEGADIF 55 V1.4.129.244 (Version: 1.7.244)
VEGA-DTM 1.65.0 (Version: 1.48.0000)
Visual C++ 2008 x86 Runtime - (v9.0.30729.5578) (Version: 9.0.30729.5578)
Visual C++ 2008 x86 Runtime - v9.0.30729.5578 (Version: 9.0.30729.5578)
WebReg (Version: 130.0.132.017)
Wetelecom (Version: 1.0)
WinCC flexible (Version: 01.04.0000)
WinCC flexible Graphics (Version: 1.04.0000)
WinCC flexible Languages (Version: 1.04.0000)
WinCC Runtime Advanced Simulator (Version: 11.00.0000)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows-Treiberpaket - Ross-Tech USB Driver Package (06/16/2010 2.06.02) (Version: 06/16/2010 2.06.02)
Xvid Video Codec (Version: 1.3.2)
ZTE USB Driver (Version: 1.0.1.5_Turkcell)
==================== Restore Points =========================
17-10-2013 22:03:29 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:04 - 2013-10-18 13:33 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {00AC3588-F115-444A-ABD0-93570EAF801B} - System32\Tasks\{9E14ADC3-014D-4A79-87AF-735E769D2294} => C:\Users\armin.basten\Downloads\1832201\setup.exe
Task: {16A38688-0E30-401D-ADD7-272B1C07BAA0} - System32\Tasks\{D912E601-65A8-4EA4-9BDA-55202B39B343} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.66.105/de/go/help.faq.installer?LastError=1618
Task: {1BF3961C-D6C8-45A8-A146-D677174205BC} - System32\Tasks\AmiUpdXp => C:\Users\armin.basten\AppData\Local\SwvUpdater\Updater.exe
Task: {1CC7CCC9-30F7-4237-96A2-6DFD41554BDD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {267CEBFB-42AD-4935-A087-4535A557E249} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: {4ED61137-C6ED-4E41-8178-74B22D617E22} - System32\Tasks\{5D468662-5516-4BBC-8503-ACD84219E1FB} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.66.105/de/go/help.faq.installer?LastError=1618
Task: {6EC248CA-255C-4EB8-AE09-D5306C0ED2FA} - System32\Tasks\{A3FB6368-314A-482B-9579-0CA6E53194D3} => C:\Users\armin.basten\Downloads\1832201\setup.exe
Task: {789F4F36-BCBB-4F01-8CBA-136DF573AD7A} - System32\Tasks\DealPlyUpdate => C:\Program
Task: {91C8F6E6-1DAF-476B-9965-D00AF65BF694} - System32\Tasks\{7E7FF179-F4F8-4C7B-A246-B94C10BE5A48} => C:\Users\armin.basten\Downloads\1832201\setup.exe
Task: {92FF716D-60AD-4F4F-AA69-E68EC7148041} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: {9E50076B-5350-4E37-8DCB-8476B6480124} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3934052282-1587484455-2844972666-1005UA => C:\Users\armin.basten\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-04] (Google Inc.)
Task: {A4CE552A-9A7F-4C36-9574-125690A46CDE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3934052282-1587484455-2844972666-1005Core => C:\Users\armin.basten\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-04] (Google Inc.)
Task: {D12C3D3E-D9B0-4CD6-8647-DAB7AA0E967C} - System32\Tasks\{25A0B681-AEE8-4F2E-9F3C-7DDD726AAC5A} => C:\Users\armin.basten\Downloads\1832201\setup.exe
Task: {DCD67A11-71BC-4DF6-B58B-ED2DE2D2B092} - System32\Tasks\{F38BB4CB-5BD7-4E3B-A0A5-7BDC59B1050F} => C:\Program Files\Skype\\Phone\Skype.exe [2013-10-02] (Skype Technologies S.A.)
Task: {E297CBDB-E008-4B41-A4D6-7962CE15DB5B} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect
Task: {EF41E1B1-2590-4F8B-9BB2-CFDB5040688C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {FC548396-9875-4F3D-8EC9-E821867AF3DD} - System32\Tasks\{FC749B2D-4412-4C4C-813B-5144CC89805F} => C:\Users\armin.basten\Downloads\1832201\setup.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3934052282-1587484455-2844972666-1005Core.job => C:\Users\armin.basten\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3934052282-1587484455-2844972666-1005UA.job => C:\Users\armin.basten\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-07-18 23:04 - 2011-07-18 23:04 - 00296448 _____ () C:\Program Files\Notepad++\NppShell_04.dll
2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2013-09-04 08:26 - 2013-09-02 22:35 - 00709584 _____ () C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-04 08:26 - 2013-09-02 22:35 - 00099792 _____ () C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\29.0.1547.66\libegl.dll
2010-05-10 03:24 - 2010-05-10 03:24 - 00581632 _____ () C:\Program Files\Wetelecom\sqlite3.dll
2013-09-04 08:26 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 08:26 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 08:26 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-09-04 08:26 - 2013-09-02 22:35 - 13599184 _____ () C:\Users\armin.basten\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE
AlternateDataStreams: C:\Users\armin.basten\Downloads\BonjourPSSetup.exe:AFP_AfpInfo
AlternateDataStreams: C:\Users\armin.basten\Downloads\BonjourPSSetup.exe:com.apple.metadata?kMDItemWhereFroms
AlternateDataStreams: C:\Users\armin.basten\Downloads\BonjourPSSetup.exe:com.apple.quarantine
AlternateDataStreams: C:\Users\armin.basten\Downloads\BonjourPSSetup.exe:Mac_Metadata
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Microsoft Virtual WiFi Miniport Adapter #2
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/09/2013 04:02:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: pniopcac.exe, Version: 8.1.1.4312, Zeitstempel: 0x4ea68e07
Name des fehlerhaften Moduls: pniopcac.exe, Version: 8.1.1.4312, Zeitstempel: 0x4ea68e07
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000387a4
ID des fehlerhaften Prozesses: 0x2d04
Startzeit der fehlerhaften Anwendung: 0xpniopcac.exe0
Pfad der fehlerhaften Anwendung: pniopcac.exe1
Pfad des fehlerhaften Moduls: pniopcac.exe2
Berichtskennung: pniopcac.exe3
Error: (10/05/2013 07:31:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc89a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5
Ausnahmecode: 0xc0000008
Fehleroffset: 0x00081f84
ID des fehlerhaften Prozesses: 0xaa8
Startzeit der fehlerhaften Anwendung: 0xWLANExt.exe0
Pfad der fehlerhaften Anwendung: WLANExt.exe1
Pfad des fehlerhaften Moduls: WLANExt.exe2
Berichtskennung: WLANExt.exe3
Error: (10/03/2013 03:58:31 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: pniopcac.exe, Version: 8.1.1.4312, Zeitstempel: 0x4ea68e07
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db96c5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003224d
ID des fehlerhaften Prozesses: 0xfe0
Startzeit der fehlerhaften Anwendung: 0xpniopcac.exe0
Pfad der fehlerhaften Anwendung: pniopcac.exe1
Pfad des fehlerhaften Moduls: pniopcac.exe2
Berichtskennung: pniopcac.exe3
Error: (09/30/2013 10:29:43 AM) (Source: LCSVRADM) (User: NT-AUTORITÄT)
Description: LoadLibrary Instdllu.dll failed.
Error: (09/29/2013 11:10:00 PM) (Source: Application Hang) (User: )
Description: Programm keygen.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 7e8
Startzeit: 01cebd5814ee1b6d
Endzeit: 16
Anwendungspfad: F:\crack\keygen.exe
Berichts-ID: 7f0f394c-294b-11e3-924a-001060d1bbab
Error: (09/29/2013 11:08:34 PM) (Source: Application Hang) (User: )
Description: Programm keygen.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: d10
Startzeit: 01cebd57fd41abf3
Endzeit: 0
Anwendungspfad: F:\crack\keygen.exe
Berichts-ID: 4ae08eca-294b-11e3-924a-001060d1bbab
Error: (09/29/2013 10:30:01 PM) (Source: Application Hang) (User: )
Description: Programm keygen.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1038
Startzeit: 01cebd525a377337
Endzeit: 0
Anwendungspfad: F:\crack\keygen.exe
Berichts-ID: e7a72828-2945-11e3-924a-001060d1bbab
Error: (09/29/2013 10:26:06 PM) (Source: Application Hang) (User: )
Description: Programm keygen.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 9ac
Startzeit: 01cebd515bec562f
Endzeit: 0
Anwendungspfad: F:\crack\keygen.exe
Berichts-ID: 5a4c3bf1-2945-11e3-924a-001060d1bbab
Error: (09/29/2013 10:16:16 PM) (Source: Application Hang) (User: )
Description: Programm keygen.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 17e4
Startzeit: 01cebd5075d343d2
Endzeit: 15
Anwendungspfad: F:\crack\keygen.exe
Berichts-ID: fb993cc0-2943-11e3-924a-001060d1bbab
Error: (09/29/2013 01:47:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: etka7.exe, Version: 7.4.0.1643, Zeitstempel: 0x51fa2794
Name des fehlerhaften Moduls: EtUpdCon.dll, Version: 1.0.0.2, Zeitstempel: 0x4e799e51
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000041ec
ID des fehlerhaften Prozesses: 0x1338
Startzeit der fehlerhaften Anwendung: 0xetka7.exe0
Pfad der fehlerhaften Anwendung: etka7.exe1
Pfad des fehlerhaften Moduls: etka7.exe2
Berichtskennung: etka7.exe3
System errors:
=============
Error: (10/18/2013 03:02:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%13.
Error: (10/18/2013 03:02:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%13.
Error: (10/18/2013 03:02:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%13.
Error: (10/18/2013 02:10:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (10/18/2013 02:09:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Gemeinsame Nutzung der Internetverbindung" wurde nicht richtig gestartet.
Error: (10/18/2013 02:08:47 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (10/18/2013 02:07:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows-Firewall" wurde mit folgendem dienstspezifischem Fehler beendet: %%13.
Error: (10/18/2013 02:06:55 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 18.10.2013 um 14:05:32 unerwartet heruntergefahren.
Error: (10/18/2013 01:58:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (10/18/2013 01:48:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Microsoft Office Sessions:
=========================
Error: (08/19/2013 00:39:11 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1010 seconds with 480 seconds of active time. This session ended with a crash.
Error: (08/16/2013 00:21:09 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 27 seconds with 0 seconds of active time. This session ended with a crash.
Error: (08/16/2013 04:34:31 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/03/2012 08:09:15 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2664 seconds with 1980 seconds of active time. This session ended with a crash.
Error: (06/11/2012 08:00:40 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1274 seconds with 600 seconds of active time. This session ended with a crash.
Error: (03/16/2012 10:25:39 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 813 seconds with 720 seconds of active time. This session ended with a crash.
Error: (03/14/2012 00:07:00 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 18712 seconds with 5040 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 2997.86 MB
Available physical RAM: 1413.11 MB
Total Pagefile: 5991.95 MB
Available Pagefile: 3694.89 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.17 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:50 GB) (Free:2.91 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:182.88 GB) (Free:43.05 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 8BC4714F)
Partition 1: (Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=183 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-18 18:17:13
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.GJ00 232,89GB
Running: 0i2g6zy8.exe; Driver: C:\Users\ARMIN~1.BAS\AppData\Local\Temp\kgriruog.sys
---- System - GMER 2.1 ----
SSDT 91DA3336 ZwCreateSection
SSDT 91DA3340 ZwRequestWaitReplyPort
SSDT 91DA333B ZwSetContextThread
SSDT 91DA3345 ZwSetSecurityObject
SSDT 91DA334A ZwSystemDebugControl
SSDT 91DA32D7 ZwTerminateProcess
---- Kernel code sections - GMER 2.1 ----
.text ntoskrnl.exe!ZwRollbackEnlistment + 1409 838729A5 1 Byte [06]
.text ntoskrnl.exe!KiDispatchInterrupt + 5A2 83892512 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntoskrnl.exe!KeRemoveQueueEx + 14BF 83899AB4 4 Bytes [36, 33, DA, 91] {XOR EBX, EDX; XCHG ECX, EAX}
.text ntoskrnl.exe!KeRemoveQueueEx + 181B 83899E10 4 Bytes [40, 33, DA, 91] {INC EAX; XOR EBX, EDX; XCHG ECX, EAX}
.text ntoskrnl.exe!KeRemoveQueueEx + 185F 83899E54 4 Bytes [3B, 33, DA, 91]
.text ntoskrnl.exe!KeRemoveQueueEx + 18DB 83899ED0 4 Bytes [45, 33, DA, 91] {INC EBP; XOR EBX, EDX; XCHG ECX, EAX}
.text ntoskrnl.exe!KeRemoveQueueEx + 192F 83899F24 4 Bytes [4A, 33, DA, 91] {DEC EDX; XOR EBX, EDX; XCHG ECX, EAX}
.text ...
.text C:\Windows\system32\drivers\hardlock.sys section is writeable [0xA15C9400, 0x87EE2, 0xE8000020]
.protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0xA166D620] C:\Windows\system32\drivers\hardlock.sys entry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0xA166D620]
.protectÿÿÿÿhardlockunknown last code section [0xA166D400, 0x5126, 0xE0000020] C:\Windows\system32\drivers\hardlock.sys unknown last code section [0xA166D400, 0x5126, 0xE0000020]
? C:\Windows\system32\Drivers\PROCEXP113.SYS Das System kann die angegebene Datei nicht finden. !
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys
Device \Driver\BTHUSB \Device\0000009f bthport.sys
---- Registry - GMER 2.1 ----
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\{4714AF41-F5B2-11d3-919D-00D0B71030AD}@IndexT -1338417521
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@Alive 1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@UDN uuid:1108ad33-bd15-4c8e-8b23-da7087643dc1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@SerialNumber {4866A119-52BE-4828-B58B-C0E2F5FD19EF}
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@FriendlyName KIS-FIELD-PG: armin.basten:
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ModelName Windows Media Player Sharing
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ModelNumber 12.0
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ModelURL hxxp://go.microsoft.com/fwlink/?LinkId=105926
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ManufacturerURL hxxp://www.microsoft.com/
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@Manufacturer Microsoft Corporation
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@NetworkInterface {E29AC6C2-7037-11DE-816D-806E6F6E6963}
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@NetworkIPCount 1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@NetworkIP0 127.0.0.0/8
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@RemoteURLCount 0
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@IPAddress 127.0.0.1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@IconFileName C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files\1108ad33-bd15-4c8e-8b23-da7087643dc1.png
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Superfetch@VirtualStoreSize 1798
Reg HKLM\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex@LazyCheckPointUpdateInterval 86400
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\armin.basten\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe 1
---- EOF - GMER 2.1 ----
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-18 18:17:13
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.GJ00 232,89GB
Running: 0i2g6zy8.exe; Driver: C:\Users\ARMIN~1.BAS\AppData\Local\Temp\kgriruog.sys
---- System - GMER 2.1 ----
SSDT 91DA3336 ZwCreateSection
SSDT 91DA3340 ZwRequestWaitReplyPort
SSDT 91DA333B ZwSetContextThread
SSDT 91DA3345 ZwSetSecurityObject
SSDT 91DA334A ZwSystemDebugControl
SSDT 91DA32D7 ZwTerminateProcess
---- Kernel code sections - GMER 2.1 ----
.text ntoskrnl.exe!ZwRollbackEnlistment + 1409 838729A5 1 Byte [06]
.text ntoskrnl.exe!KiDispatchInterrupt + 5A2 83892512 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntoskrnl.exe!KeRemoveQueueEx + 14BF 83899AB4 4 Bytes [36, 33, DA, 91] {XOR EBX, EDX; XCHG ECX, EAX}
.text ntoskrnl.exe!KeRemoveQueueEx + 181B 83899E10 4 Bytes [40, 33, DA, 91] {INC EAX; XOR EBX, EDX; XCHG ECX, EAX}
.text ntoskrnl.exe!KeRemoveQueueEx + 185F 83899E54 4 Bytes [3B, 33, DA, 91]
.text ntoskrnl.exe!KeRemoveQueueEx + 18DB 83899ED0 4 Bytes [45, 33, DA, 91] {INC EBP; XOR EBX, EDX; XCHG ECX, EAX}
.text ntoskrnl.exe!KeRemoveQueueEx + 192F 83899F24 4 Bytes [4A, 33, DA, 91] {DEC EDX; XOR EBX, EDX; XCHG ECX, EAX}
.text ...
.text C:\Windows\system32\drivers\hardlock.sys section is writeable [0xA15C9400, 0x87EE2, 0xE8000020]
.protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0xA166D620] C:\Windows\system32\drivers\hardlock.sys entry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0xA166D620]
.protectÿÿÿÿhardlockunknown last code section [0xA166D400, 0x5126, 0xE0000020] C:\Windows\system32\drivers\hardlock.sys unknown last code section [0xA166D400, 0x5126, 0xE0000020]
? C:\Windows\system32\Drivers\PROCEXP113.SYS Das System kann die angegebene Datei nicht finden. !
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys
Device \Driver\BTHUSB \Device\0000009f bthport.sys
---- Registry - GMER 2.1 ----
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\{4714AF41-F5B2-11d3-919D-00D0B71030AD}@IndexT -1338417521
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@Alive 1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@UDN uuid:1108ad33-bd15-4c8e-8b23-da7087643dc1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@SerialNumber {4866A119-52BE-4828-B58B-C0E2F5FD19EF}
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@FriendlyName KIS-FIELD-PG: armin.basten:
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ModelName Windows Media Player Sharing
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ModelNumber 12.0
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ModelURL hxxp://go.microsoft.com/fwlink/?LinkId=105926
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@ManufacturerURL hxxp://www.microsoft.com/
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@Manufacturer Microsoft Corporation
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@NetworkInterface {E29AC6C2-7037-11DE-816D-806E6F6E6963}
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@NetworkIPCount 1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@NetworkIP0 127.0.0.0/8
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@RemoteURLCount 0
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@IPAddress 127.0.0.1
Reg HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\1108AD33-BD15-4C8E-8B23-DA7087643DC1@IconFileName C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files\1108ad33-bd15-4c8e-8b23-da7087643dc1.png
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Superfetch@VirtualStoreSize 1798
Reg HKLM\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex@LazyCheckPointUpdateInterval 86400
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\armin.basten\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe 1
---- EOF - GMER 2.1 ----
|
| Themen zu Windows 7: Windows Firewall deaktiviert, nicht bedienbar, Fehlercode: 0x6D9 |
| 4d36e972-e325-11ce-bfc1-08002be10318, antivir, antivirus, chromium, continue, entfernen, farbar, farbar recovery scan tool, flash player, homepage, icreinstall, js/kryptik.ali, minidump, mipony, nicht möglich, plug-in, programm, pum.hijack.homepagecontrol, pup.bprotector, pup.optional.1clickdownload.a, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.babylontoolbar.a, pup.optional.bprotector.a, pup.optional.datamngr.a, pup.optional.dealply.a, pup.optional.delta.a, pup.optional.digitalsite.a, pup.optional.filescout.a, software, spyware, svchost.exe, system, windows, ändern |
Baum-Darstellung