|
Plagegeister aller Art und deren Bekämpfung: immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartnersWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
23.10.2013, 13:44 | #1 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hi, auch bei mir öffnet sich immer wieder IE oder Firefox von selber. Erst wars die Seite von longfintuna. Ich habe dann öfters Anti Maleware und Adwcleaner drüberlaufen lassen. Hilft aber nichts. Bei jedem Neustart popt wieder eine Seite auf. Jetzt erscheint seit dem letzen Bereinigen die Seite salesresourcepartners. Kann mir bitte jemand helfen. Den Scan mit Farbar's Recovery Scan Tool habe ich schon ausgeführt, hier die Logfiles: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-10-2013 Ran by Kiki (administrator) on CHRISTINE on 23-10-2013 10:40:05 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe (Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe (RealNetworks, Inc.) C:\Programme\Online Games Manager\ogmservice.exe (pdfforge GmbH) C:\Programme\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Programme\PDF Architect\ConversionService.exe (Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe (Symantec Corporation) C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe (Canon Inc.) C:\Programme\Canon\CAL\CALMAIN.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (SigmaTel, Inc.) C:\WINDOWS\stsystra.exe (CyberLink Corp.) C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe (InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Sonic Solutions) C:\WINDOWS\system32\dla\tfswctrl.exe (Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe (Nuance Communications, Inc.) C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe (Microsoft Corporation) C:\Programme\Microsoft IntelliPoint\ipoint.exe (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcmon.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Apple Inc.) C:\Programme\iPod\bin\iPodService.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation) HKLM\...\Run: [SigmatelSysTrayApp] - C:\Windows\stsystra.exe [339968 2005-03-23] (SigmaTel, Inc.) HKLM\...\Run: [ATIPTA] - C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064 2005-08-05] (ATI Technologies, Inc.) HKLM\...\Run: [DVDLauncher] - C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe [53248 2005-02-23] (CyberLink Corp.) HKLM\...\Run: [ISUSPM Startup] - C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe [221184 2004-07-27] (InstallShield Software Corporation) HKLM\...\Run: [ISUSScheduler] - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM\...\Run: [HPDJ Taskbar Utility] - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [188416 2002-03-28] (HP) HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [dla] - C:\WINDOWS\system32\dla\tfswctrl.exe [122941 2005-05-31] (Sonic Solutions) HKLM\...\Run: [Corel Reminder] - [x] HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [413696 2008-11-04] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [290088 2008-11-20] (Apple Inc.) HKLM\...\Run: [SSBkgdUpdate] - C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [PaperPort PTD] - C:\Programme\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [IndexSearch] - C:\Programme\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [PPort11reminder] - C:\Programme\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM\...\Run: [BrMfcWnd] - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe [1089536 2008-02-19] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Programme\Brother\ControlCenter3\brctrcen.exe [86016 2007-12-21] (Brother Industries, Ltd.) HKLM\...\Run: [IntelliPoint] - c:\Programme\Microsoft IntelliPoint\ipoint.exe [1468296 2009-05-28] (Microsoft Corporation) HKLM\...\Run: [Google Updater] - C:\Programme\Google\Google Updater\GoogleUpdater.exe [161336 2011-09-17] (Google) HKLM\...\Run: [ToADiMon.exe] - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe [286720 2010-04-08] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Policies\Explorer: [NoCDBurning] 0 HKCU\...\Run: [Akamai NetSession Interface] - C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\Administrator\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\Default User\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Broadcom Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programme\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File Toolbar: HKCU - No Name - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} hxxp://arcade.icq.com/carlo/zuma/popcaploader_v5.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll (Broadcom Corporation) Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll () Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [147456] (Apple Inc.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @garmin.com/GpsControl - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.3.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @zylom.com/ZylomGamesPlayer - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: No Name - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\Extensions.rdf FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\installed-extensions-processed.txt FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Programme\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Programme\PDF Architect\FFPDFArchitectExt Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Programme\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Programme\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Programme\Google\Chrome\Application\29.0.1547.66\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Programme\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Programme\Mozilla Firefox\plugins\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (ScorchPlugin) - C:\Programme\Mozilla Firefox\plugins\NPSibelius.dll () CHR Plugin: (Zylom Plugin) - C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll (Zylom) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Updater) - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (iTunes Application Detector) - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Drive) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ========================== Services (Whitelisted) ================= R2 Akamai; c:\programme\gemeinsame dateien\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424 2008-11-07] (Apple Inc.) R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [238888 2008-08-29] (Apple Inc.) R2 btwdins; C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe [163840 2004-08-16] (Broadcom Corporation) R2 CCALib8; C:\Programme\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194104 2011-09-17] (Google) S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [536872 2008-11-20] (Apple Inc.) R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-09-18] (Mozilla Foundation) S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation) R2 ogmservice; C:\Programme\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.) S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation) R2 PDF Architect Helper Service; C:\Programme\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Programme\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [160944 2012-07-13] (Skype Technologies) R2 SymWSC; C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe [316544 2004-11-02] (Symantec Corporation) S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation) R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [25244 1999-09-10] (Adaptec) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R3 BrScnUsb; C:\Windows\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [17024 2004-08-16] (Broadcom Corporation) R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30267 2004-08-16] (Broadcom Corporation) R0 BTKRNL; C:\Windows\System32\drivers\btkrnl.sys [1241034 2004-08-16] (Broadcom Corporation) R2 BTSERIAL; C:\WINDOWS\system32\drivers\btserial.sys [23271 2004-08-16] (Broadcom Corporation) R2 BTSLBCSP; C:\WINDOWS\system32\drivers\btslbcsp.sys [222876 2004-08-16] (Broadcom Corporation) R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [147896 2004-08-16] (Broadcom Corporation) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [54328 2004-08-18] (Broadcom Corporation) R2 drvnddm; C:\Windows\System32\drivers\drvnddm.sys [40544 2005-04-21] (Sonic Solutions) S3 GigasetGenericUSB; C:\Windows\System32\DRIVERS\GigasetGenericUSB.sys [44032 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.) S3 MIINPazX; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [19200 2010-08-27] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation) R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [66048 2005-09-29] (Protection Technology) R1 sscdbhk5; C:\Windows\System32\drivers\sscdbhk5.sys [5627 2005-05-13] (Sonic Solutions) R1 SSHDRV5C; C:\WINDOWS\system32\drivers\SSHDRV5C.sys [34816 2005-11-27] () R1 SSHDRV86; C:\WINDOWS\system32\drivers\SSHDRV86.sys [81408 2005-11-22] () S3 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-05] (Avira GmbH) R1 ssrtln; C:\Windows\System32\drivers\ssrtln.sys [23545 2005-05-13] (Sonic Solutions) R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2008-10-16] () R2 STEC3; C:\WINDOWS\system32\STEC3.sys [2368 2007-04-16] (AntiCracking) R3 STHDA; C:\Windows\System32\drivers\sthda.sys [180864 2005-06-15] (SigmaTel, Inc.) R2 tfsnboio; C:\Windows\System32\dla\tfsnboio.sys [25725 2005-05-31] (Sonic Solutions) R2 tfsncofs; C:\Windows\System32\dla\tfsncofs.sys [34845 2005-05-31] (Sonic Solutions) R2 tfsndrct; C:\Windows\System32\dla\tfsndrct.sys [4125 2005-05-31] (Sonic Solutions) R2 tfsndres; C:\Windows\System32\dla\tfsndres.sys [2273 2005-05-31] (Sonic Solutions) R2 tfsnifs; C:\Windows\System32\dla\tfsnifs.sys [86876 2005-05-31] (Sonic Solutions) R2 tfsnopio; C:\Windows\System32\dla\tfsnopio.sys [15069 2005-05-31] (Sonic Solutions) R2 tfsnpool; C:\Windows\System32\dla\tfsnpool.sys [6365 2005-05-31] (Sonic Solutions) R2 tfsnudf; C:\Windows\System32\dla\tfsnudf.sys [98716 2005-05-31] (Sonic Solutions) R2 tfsnudfa; C:\Windows\System32\dla\tfsnudfa.sys [100605 2005-05-31] (Sonic Solutions) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.) U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-10-23 10:39 - 2013-10-23 10:39 - 00000000 ____D C:\FRST 2013-10-23 10:38 - 2013-10-23 10:38 - 01087503 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 08:52 - 2013-10-23 08:52 - 102541796 _____ C:\WINDOWS\system32\둰盰各7 2013-10-22 13:10 - 2013-10-22 13:11 - 00000000 ____D C:\AdwCleaner 2013-10-22 13:09 - 2013-10-22 13:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 13:04 - 2013-10-22 13:04 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-22 09:54 - 2013-10-22 09:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 09:52 - 2013-10-22 09:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-14 16:11 - 2013-10-14 16:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 18:08 - 2013-10-10 18:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 18:05 - 2013-10-10 18:06 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 18:05 - 2013-10-10 18:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 17:59 - 2013-10-10 17:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 17:59 - 2013-10-10 17:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 17:55 - 2013-10-10 17:56 - 00014017 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 17:25 - 2013-10-10 18:08 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 17:24 - 2013-07-03 04:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2013-10-10 17:24 - 2013-07-03 03:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys 2013-10-10 17:19 - 2013-08-09 02:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2013-10-10 17:19 - 2013-08-09 02:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2013-10-10 17:19 - 2009-03-18 13:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2013-10-10 17:09 - 2013-10-10 17:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 16:49 - 2013-10-09 16:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-09-27 12:02 - 2013-09-27 12:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 2013-09-25 07:54 - 2013-09-25 07:54 - 97673008 _____ C:\WINDOWS\system32\ᆌ蘒各7 ==================== One Month Modified Files and Folders ======= 2013-10-23 10:39 - 2013-10-23 10:39 - 00000000 ____D C:\FRST 2013-10-23 10:38 - 2013-10-23 10:38 - 01087503 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 10:32 - 2013-08-20 19:32 - 00000414 _____ C:\WINDOWS\Tasks\At2.job 2013-10-23 10:32 - 2013-08-20 19:32 - 00000410 _____ C:\WINDOWS\Tasks\At1.job 2013-10-23 10:12 - 2010-01-07 19:36 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-23 10:00 - 2006-12-10 21:18 - 00000280 ____H C:\WINDOWS\Tasks\AF6E075493B5BAA8.job 2013-10-23 09:57 - 2013-08-07 18:13 - 00000000 ____D C:\Programme\Mozilla Thunderbird 2013-10-23 09:47 - 2012-04-16 12:12 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-23 09:35 - 2013-08-22 08:32 - 00000113 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WB.CFG 2013-10-23 09:35 - 2013-08-22 08:32 - 00000006 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WBPU-TTL.DAT 2013-10-23 09:02 - 2005-08-20 02:56 - 01767129 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-23 09:00 - 2005-08-20 03:05 - 00032028 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-23 08:59 - 2013-02-20 11:06 - 00002503 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Microsoft Office Word 2007.lnk 2013-10-23 08:52 - 2013-10-23 08:52 - 102541796 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 08:51 - 2005-08-20 02:51 - 00000259 _____ C:\WINDOWS\wiadebug.log 2013-10-23 08:49 - 2005-08-20 02:34 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-23 08:48 - 2005-08-20 02:54 - 00000000 ____D C:\WINDOWS\Registration 2013-10-23 08:47 - 2010-05-13 15:48 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Akamai 2013-10-23 08:47 - 2010-01-07 19:36 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-23 08:47 - 2005-08-20 02:51 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-23 08:46 - 2005-08-20 03:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-22 18:08 - 2005-11-22 09:54 - 00000300 ___SH C:\Dokumente und Einstellungen\Kiki\ntuser.ini 2013-10-22 18:07 - 2005-11-22 09:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki 2013-10-22 16:23 - 2005-11-15 20:30 - 00000364 _____ C:\WINDOWS\Tasks\Symantec NetDetect.job 2013-10-22 13:53 - 2009-03-22 15:45 - 00001044 _____ C:\WINDOWS\Tasks\Google Software Updater.job 2013-10-22 13:11 - 2013-10-22 13:10 - 00000000 ____D C:\AdwCleaner 2013-10-22 13:09 - 2013-10-22 13:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 13:04 - 2013-10-22 13:04 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-22 12:52 - 2013-05-01 20:26 - 00000000 __HDC C:\WINDOWS\$NtUninstallWdf01007$ 2013-10-22 10:09 - 2013-04-27 17:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Eigene Dateien\Online-BankingPlus 2013-10-22 09:54 - 2013-10-22 09:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 09:52 - 2013-10-22 09:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-22 09:46 - 2013-07-11 12:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2833951$ 2013-10-16 18:32 - 2005-11-21 20:16 - 00000000 ____D C:\Dokumente und Einstellungen\Toni 2013-10-14 18:41 - 2005-08-20 02:48 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2013-10-14 16:52 - 2005-08-20 02:53 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-10-14 16:11 - 2013-10-14 16:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 18:44 - 2005-08-20 02:43 - 00461232 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-10 18:13 - 2013-02-20 10:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help 2013-10-10 18:12 - 2005-08-20 02:49 - 01201066 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-10 18:08 - 2013-10-10 18:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 18:08 - 2013-10-10 17:25 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00687906 _____ C:\WINDOWS\iis6.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00634366 _____ C:\WINDOWS\FaxSetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00304468 _____ C:\WINDOWS\ocgen.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00290585 _____ C:\WINDOWS\tsoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00211967 _____ C:\WINDOWS\comsetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00205397 _____ C:\WINDOWS\updspapi.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00194526 _____ C:\WINDOWS\msmqinst.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00128194 _____ C:\WINDOWS\ntdtcsetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00111549 _____ C:\WINDOWS\netfxocm.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00070967 _____ C:\WINDOWS\plusoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00044290 _____ C:\WINDOWS\MedCtrOC.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00035226 _____ C:\WINDOWS\ocmsn.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00034814 _____ C:\WINDOWS\ehOCGen.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00032033 _____ C:\WINDOWS\tabletoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00031827 _____ C:\WINDOWS\msgsocm.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00001393 _____ C:\WINDOWS\imsins.log 2013-10-10 18:06 - 2013-10-10 18:05 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 18:06 - 2013-10-10 18:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 18:06 - 2012-04-12 12:49 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-10-10 18:05 - 2013-07-21 13:00 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-10 18:05 - 2012-03-23 13:46 - 00265140 _____ C:\WINDOWS\setupapi.log 2013-10-10 18:00 - 2005-11-24 10:26 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-10 17:59 - 2013-10-10 17:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 17:59 - 2013-10-10 17:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 17:56 - 2013-10-10 17:55 - 00014017 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 17:55 - 2009-04-29 17:38 - 00000000 ____D C:\WINDOWS\ie8updates 2013-10-10 17:09 - 2013-10-10 17:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-10 17:08 - 2005-08-20 02:49 - 00000000 ____D C:\Programme 2013-10-09 16:49 - 2013-10-09 16:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-09 16:49 - 2012-04-16 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-09 16:49 - 2011-12-03 13:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-09 16:05 - 2006-05-03 20:10 - 00000000 ____D C:\Programme\Yahoo! 2013-10-06 21:25 - 2008-12-03 12:22 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Skype 2013-10-06 21:21 - 2012-09-13 10:08 - 00002243 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk 2013-09-27 12:02 - 2013-09-27 12:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 2013-09-26 14:09 - 2012-12-12 20:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$ 2013-09-25 09:00 - 2009-07-21 21:24 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ 2013-09-25 07:54 - 2013-09-25 07:54 - 97673008 _____ C:\WINDOWS\system32\ᆌ蘒各7 2013-09-23 23:36 - 2006-11-07 04:26 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe 2013-09-23 23:36 - 2005-08-20 02:33 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-09-23 20:23 - 2012-06-13 14:10 - 00522240 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll 2013-09-23 20:23 - 2010-06-09 16:03 - 00743424 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll 2013-09-23 20:23 - 2009-06-13 10:31 - 00247808 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll 2013-09-23 20:23 - 2009-06-13 10:31 - 00012800 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll 2013-09-23 20:23 - 2009-03-08 05:33 - 00018944 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 11113472 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 02006016 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 00630272 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 00055296 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2013-09-23 20:23 - 2006-11-07 22:03 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-09-23 20:23 - 2006-11-07 22:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2013-09-23 20:23 - 2006-11-07 22:03 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2013-09-23 20:23 - 2006-11-07 04:27 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll 2013-09-23 20:23 - 2006-10-17 13:05 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl 2013-09-23 20:23 - 2006-10-17 13:05 - 00105984 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll 2013-09-23 20:23 - 2006-10-17 13:05 - 00043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll 2013-09-23 20:23 - 2006-10-17 13:04 - 00206848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll 2013-09-23 20:23 - 2006-10-17 12:57 - 02006016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-09-23 20:23 - 2006-09-18 16:14 - 00759296 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll 2013-09-23 20:23 - 2006-05-19 17:06 - 06017536 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 01215488 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00920064 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00611840 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00184320 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00067072 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 06017536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 01215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00611840 ____N (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00206848 ____N (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00067072 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2013-09-23 20:23 - 2005-08-20 02:33 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00184320 ____N (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\corpol.dll 2013-09-23 20:06 - 2005-08-20 02:33 - 00385024 ____N (Microsoft Corporation) C:\WINDOWS\system32\html.iec Files to move or delete: ==================== C:\Windows\Tasks\At1.job C:\Windows\Tasks\At2.job Some content of TEMP: ==================== C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\718631~1.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AskSLib.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10380_b19770de.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10641_b1977ba6.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10750_b1977f85.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10878_b197838c.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoRun.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoRunGUI.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\bstrapInstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\drm_dialogs.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\drm_dyndata_7270012.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\EAInstall.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\eauninstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Elev-CD.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Elev-CD2.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQInstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQRT.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQTIK.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\IcqUpdater.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u10-windows-i586-p-iftw_3ca5d6e4.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u11-windows-i586-p-iftw.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u13-windows-i586-p-iftw.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u3-windows-i586-p-iftw_2cd32978.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u5-windows-i586-p-iftw_1b121abb.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u7-windows-i586-p-iftw_bdb28397.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Need for Speed Carbon_uninst.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ose00000.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Quarantine.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\secuniasi7313982473488777106.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\setup_wm.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\SkypeSetup.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\_is35.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2005-08-20 02:33] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e C:\Windows\System32\winlogon.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a C:\Windows\System32\svchost.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 C:\Windows\System32\services.exe [2005-08-20 02:34] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc C:\Windows\System32\User32.dll [2005-08-20 02:34] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd C:\Windows\System32\userinit.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 C:\Windows\System32\Drivers\volsnap.sys [2005-08-20 02:34] - [2008-04-14 03:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-10-2013 Ran by Kiki at 2013-10-23 10:43:14 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611B434-FFA4-0100-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616663C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DFDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AEDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618F764-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614FDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610F284-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F7DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861545A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F632C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF6DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {864B3DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617D474-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F2674-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B3474-FFA4-0100-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8626C2D4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612AC74-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86037DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86161554-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861404A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86062484-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610CDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {862CE9CC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86401DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8608E20C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618F464-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866CC31C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86038DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860AA70C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86237CE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602A2A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FA127C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861709E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86120A94-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865EF98C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616E16C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861BF45C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E36C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86114A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614D2DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860ED5C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8630B940-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86124DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AC964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8613BC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8634C424-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86151DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D8B44-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A02E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E070C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615B29C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F55BC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86012BCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606EDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86094C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DB6E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602493C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86115DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602552C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86008A5C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {863D4B6C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86102AA4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861F6364-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8613AA34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8639162C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B4A14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DAA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861BBDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861C3534-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610845C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619D634-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86399D8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {862A9DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86189DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86177DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {863087F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FE4C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE18C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A0C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8639289C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619A7DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D6DB4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE4F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B5C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861E18AC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FB68C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606A59C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8637AAAC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866A88B4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F5DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86135564-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000000-0000-0000-0000-000000000000} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86399704-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86119DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A6DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86119B24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861963B4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861745E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617DDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8632ADDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D4734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86100A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612C5C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FD994-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86175734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FDC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86368514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861DDA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D9B8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8604C964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612CA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86040054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865F66E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86153284-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861FA494-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A4234-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86437054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EA2C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861681A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D477C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86004DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618EBCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861214A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8607CB24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86057054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EADDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86460054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8640B9CC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86082A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616AA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606423C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618B454-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861874AC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619FB64-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B9DB4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612A54C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611A26C-FFA4-00EF-0D24-347CA8A3377C} AV: Avira Desktop (Disabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86170DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866A04EC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861DFA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D5964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FB514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {BADB0D00-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8644C5EC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E92BC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D432C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610799C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF893C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A0A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614BDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612B874-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86047C1C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8600A6FC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8668D24C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86168854-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A35D4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86063384-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8622A94C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86684734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {852C5AE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615DDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86058574-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A75E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85F7BCE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F9354-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F98F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861288DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606CA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86191C34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A560C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616077C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86187434-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000246-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618621C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617EB4C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE62C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86689914-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615589C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616DAD4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86490DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DBC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860C453C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86110DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AB1FC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610EC44-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A793C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8621D8F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865178A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865D4DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FF4C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F4554-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617124C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611D63C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8603839C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86056734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610DC34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EAA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860C3614-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860ACDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86175A14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F6A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86120514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DEBCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86174C2C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86146DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612077C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF630C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8668F354-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86691994-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86683DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86393054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B9054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860BBDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86127A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861C15C4-FFA4-00EF-0D24-347CA8A3377C} Could not list Security Center items. Check WMI. ==================== Installed Programs ====================== Adobe Acrobat 5.0 (Version: 5.0) Adobe Flash Player 11 ActiveX (Version: 11.9.900.117) Adobe Flash Player 11 Plugin (Version: 11.9.900.117) Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8) Adobe Shockwave Player (Version: 10.2.0.23) Akamai NetSession Interface Service Apple Mobile Device Support (Version: 2.1.2.7) Apple Software Update (Version: 2.1.1.116) ARTEuro (Version: 1.00.0000) ATI Display Driver (Version: 8.162-050803a2-025672C-Dell) ATI Systemsteuerung (Version: 6.14.10.5160) Avira Free Antivirus (Version: 13.0.0.4052) BDE Bonjour (Version: 1.0.105) Brother MFL-Pro Suite DCP-165C (Version: 1.0.0.0) Canon Camera Access Library (Version: 8.4.0.1) Canon Camera Support Core Library (Version: 7.3.1.6) Canon G.726 WMP-Decoder (Version: 1.1.0.4) CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.5.0.3) Canon Internet Library for ZoomBrowser EX (Version: 1.6.1.6) Canon MovieEdit Task for ZoomBrowser EX (Version: 2.6.0.4) Canon RAW Image Task for ZoomBrowser EX (Version: 0.9.3.9) Canon Utilities CameraWindow (Version: 7.1.0.2) Canon Utilities CameraWindow DC (Version: 7.1.0.7) Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX (Version: 5.4.5.17) Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX (Version: 6.4.2.16) Canon Utilities EOS Utility (Version: 1.1.0.8) Canon Utilities MyCamera (Version: 6.4.0.5) Canon Utilities MyCamera DC (Version: 7.0.1.8) Canon Utilities PhotoStitch (Version: 3.1.21.45) Canon Utilities RemoteCapture Task for ZoomBrowser EX (Version: 1.7.1.9) Canon Utilities ZoomBrowser EX (Version: 6.1.0.20) Canon ZoomBrowser EX Memory Card Utility (Version: 1.1.0.8) CCleaner (Version: 3.16) CDex extraction audio Citrix-ICA-Client Codeur Windows Media Série 9 Codeur Windows Media Série 9 (Version: 9.00.2980) ContentSAFER for Wizmax CorelDRAW 10 CorelDRAW 10 (Version: 10) Dell Driver Reset Tool (Version: 1.02.0000) Dell Picture Studio v3.0 (Version: 3.0.0) Dell System Restore (Version: 2.00.0000) ElsterFormular (Version: 14.3.11574) ElsterFormular 2007/2008 (Version: 9.1.0.0) ElsterFormular 2008/2009 (Version: 10.3.1.0) Free Audio Converter version 5.0.17.903 (Version: 5.0.17.903) Free Studio version 5.3.3 Free YouTube to MP3 Converter version 3.11.35.1031 (Version: 3.11.35.1031) Garmin BaseCamp (Version: 4.2.2) Garmin TransAlpin v2 (Version: 2.0.0.0) Garmin Trip and Waypoint Manager v5 (Version: 5.0.0.0) Garmin USB Drivers (Version: 2.3.1.0) GemMaster Mystic Gigaset QuickSync (Version: 7.2.0844.6) Google Chrome (Version: 30.0.1599.101) Google Earth (Version: 7.1.1.1888) Google Updater (Version: 2.4.2432.1652) Google Video Player GPSBabel 1.4.1 GPS-Track-Analyse.NET 6.0 Hotfix für Windows Internet Explorer 7 (KB947864) (Version: 1) Hotfix für Windows XP (KB2756822) (Version: 1) Hotfix für Windows XP (KB2779562) (Version: 1) ICQ6.5 (Version: 6.5) Image Resizer Powertoy for Windows XP (Version: 1.00.0001) Intel(R) PRO Network Connections Drivers Intel(R) PROSet for Wired Connections (Version: 9.20.0000) IrfanView (remove only) (Version: 4.28) iTunes (Version: 8.0.2.20) Jasc Paint Shop Photo Album 5 (Version: 5.22) Jasc Paint Shop Pro Studio, Dell Editon (Version: 1.01.0000) Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Java(TM) 6 Update 31 (Version: 6.0.310) LiveUpdate 2.5 (Symantec Corporation) (Version: 2.5.55.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Messenger Plus! Live & Sponsor (CiD) (Version: 4.82.0.368) Microsoft .NET Framework 1.0 Hotfix (KB2604042) Microsoft .NET Framework 1.0 Hotfix (KB2656378) Microsoft .NET Framework 1.0 Security Update (KB2698035) Microsoft .NET Framework 1.0 Security Update (KB2742607) Microsoft .NET Framework 1.0 Security Update (KB2833951) Microsoft .NET Framework 1.1 (Version: 1.1.4322) Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322) Microsoft .NET Framework 1.1 Security Update (KB2698023) Microsoft .NET Framework 1.1 Security Update (KB2833941) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 2.0 Language Pack - DEU Microsoft .NET Framework 2.0 Language Pack - DEU (Version: 1.1.50727.42) Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729) Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Choice Guard (Version: 2.0.48.0) Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1) Microsoft IntelliPoint 7.0 (Version: 7.0.260.0) Microsoft Internationalized Domain Names Mitigation APIs Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft National Language Support Downlevel APIs Microsoft Office 2000 Disc 2 (Version: 9.00.2816) Microsoft Office 2000 Professional (Version: 9.00.2816) Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Software Update for Web Folders (German) 12 (Version: 12.0.6612.1000) Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft WinUsb 1.0 Microsoft Works 7.0 (Version: 07.02.0702) Mozilla Firefox 24.0 (x86 de) (Version: 24.0) Mozilla Maintenance Service (Version: 24.0) Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8) MSN MSVCRT (Version: 14.0.1468.721) MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0) MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0) Musicload Manager NetObjects Fusion 7 Norton Security Center (Version: 2005.1.0.111) OLYMPUS CAMEDIA Master 4.1 Online Games Manager v1.21 (Version: 1.21.2) Online-Banking+ Online-Banking+ (Version: 15.2.1.18) PaperPort Image Printer (Version: 1.00.0000) PC Inspector File Recovery (Version: 4.0) PDF Architect (Version: 1.1.83.9982) PDFCreator (Version: 1.7.0) Phonetik (Version: 1.0.0) PixiePack Codec Pack (Version: 1.0.100.0) PowerDVD 5.5 QuickTime (Version: 7.55.90.70) RealPlayer SAMSUNG Mobile Modem Driver Set Samsung Mobile phone USB driver Software SAMSUNG Mobile USB Modem 1.0 Software SAMSUNG Mobile USB Modem Software Samsung PC Studio 3 (Version: 3.0.0.71207) Samsung PC Studio 3 (Version: 3.2.2.80705) Samsung PC Studio 3 USB Driver Installer (Version: 3.2.0.70701) SamsungMediaStudio Sandlot Games Client Services 1.2.2 ScanSoft PaperPort 11 (Version: 11.1.0000) Schmidt Solitaire SEGA Rally AUTO BILD DEMO (Version: 1.00.0000) Segoe UI (Version: 14.0.4327.805) Sibelius Scorch (Firefox, Opera, Netscape only) (Version: 5.2.1) Sicherheitsupdate für Windows Internet Explorer 7 (KB928090) (Version: 20070117.120000) Sicherheitsupdate für Windows Internet Explorer 7 (KB929969) (Version: 20061222.120000) Sicherheitsupdate für Windows Internet Explorer 7 (KB931768) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB933566) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB937143) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB938127) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB939653) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB942615) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB944533) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB950759) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB953838) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB956390) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB958215) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB960714) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB961260) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB963027) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2761465) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2792100) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2797052) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2799329) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2809289) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2817183) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2829530) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2838727) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2847204) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2870699) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2879017) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (Version: 1) Sicherheitsupdate für Windows Media Player (KB2834904) Sicherheitsupdate für Windows Media Player (KB2834904-v2) Sicherheitsupdate für Windows Media Player 6.4 (KB925398) Sicherheitsupdate für Windows XP (KB2621440) (Version: 1) Sicherheitsupdate für Windows XP (KB2641653) (Version: 1) Sicherheitsupdate für Windows XP (KB2647518) (Version: 1) Sicherheitsupdate für Windows XP (KB2653956) (Version: 1) Sicherheitsupdate für Windows XP (KB2655992) (Version: 1) Sicherheitsupdate für Windows XP (KB2659262) (Version: 1) Sicherheitsupdate für Windows XP (KB2676562) (Version: 1) Sicherheitsupdate für Windows XP (KB2685939) (Version: 1) Sicherheitsupdate für Windows XP (KB2686509) (Version: 1) Sicherheitsupdate für Windows XP (KB2691442) (Version: 1) Sicherheitsupdate für Windows XP (KB2695962) (Version: 1) Sicherheitsupdate für Windows XP (KB2698365) (Version: 1) Sicherheitsupdate für Windows XP (KB2705219) (Version: 1) Sicherheitsupdate für Windows XP (KB2707511) (Version: 1) Sicherheitsupdate für Windows XP (KB2709162) (Version: 1) Sicherheitsupdate für Windows XP (KB2712808) (Version: 1) Sicherheitsupdate für Windows XP (KB2718523) (Version: 1) Sicherheitsupdate für Windows XP (KB2719985) (Version: 1) Sicherheitsupdate für Windows XP (KB2723135) (Version: 1) Sicherheitsupdate für Windows XP (KB2724197) (Version: 1) Sicherheitsupdate für Windows XP (KB2727528) (Version: 1) Sicherheitsupdate für Windows XP (KB2731847) (Version: 1) Sicherheitsupdate für Windows XP (KB2753842) (Version: 1) Sicherheitsupdate für Windows XP (KB2753842-v2) (Version: 2) Sicherheitsupdate für Windows XP (KB2757638) (Version: 1) Sicherheitsupdate für Windows XP (KB2758857) (Version: 1) Sicherheitsupdate für Windows XP (KB2761226) (Version: 1) Sicherheitsupdate für Windows XP (KB2770660) (Version: 1) Sicherheitsupdate für Windows XP (KB2778344) (Version: 1) Sicherheitsupdate für Windows XP (KB2779030) (Version: 1) Sicherheitsupdate für Windows XP (KB2780091) (Version: 1) Sicherheitsupdate für Windows XP (KB2799494) (Version: 1) Sicherheitsupdate für Windows XP (KB2802968) (Version: 1) Sicherheitsupdate für Windows XP (KB2807986) (Version: 1) Sicherheitsupdate für Windows XP (KB2808735) (Version: 1) Sicherheitsupdate für Windows XP (KB2813170) (Version: 1) Sicherheitsupdate für Windows XP (KB2813345) (Version: 1) Sicherheitsupdate für Windows XP (KB2820197) (Version: 1) Sicherheitsupdate für Windows XP (KB2820917) (Version: 1) Sicherheitsupdate für Windows XP (KB2829361) (Version: 1) Sicherheitsupdate für Windows XP (KB2834886) (Version: 1) Sicherheitsupdate für Windows XP (KB2839229) (Version: 1) Sicherheitsupdate für Windows XP (KB2845187) (Version: 1) Sicherheitsupdate für Windows XP (KB2847311) (Version: 1) Sicherheitsupdate für Windows XP (KB2849470) (Version: 1) Sicherheitsupdate für Windows XP (KB2850851) (Version: 1) Sicherheitsupdate für Windows XP (KB2850869) (Version: 1) Sicherheitsupdate für Windows XP (KB2859537) (Version: 1) Sicherheitsupdate für Windows XP (KB2862330) (Version: 1) Sicherheitsupdate für Windows XP (KB2862335) (Version: 1) Sicherheitsupdate für Windows XP (KB2864063) (Version: 1) Sicherheitsupdate für Windows XP (KB2868038) (Version: 1) Sicherheitsupdate für Windows XP (KB2876217) (Version: 1) Sicherheitsupdate für Windows XP (KB2876315) (Version: 1) Sicherheitsupdate für Windows XP (KB2883150) (Version: 1) Sicherheitsupdate für Windows XP (KB923689) Sitecom Bluetooth Software (Version: 3.0.1.910) Skype Click to Call (Version: 5.6.8442) Skype™ 5.10 (Version: 5.10.116) Sonic DLA (Version: 4.98) Sonic Encoders (Version: 1.00) Sonic MyDVD LE (Version: 6.1.1) Sonic RecordNow Audio (Version: 2.0.0) Sonic RecordNow Copy (Version: 2.0.0) Sonic RecordNow Data (Version: 2.0.0) Sonic Update Manager (Version: 3.0.0) StarOffice 8 (Version: 8.00.8945) Tiscali Internet (Version: 1.0.0.25) T-Online 6.0 T-Online Installationsdateien (Version: 5.0) Transalp 2003 Ulead COOL 360 1.0 Ulead Photo Explorer 8.0 SE Basic (Version: 8.0) Ulead Photo Express 5 SE (Version: 5.0) Uninstall 1.0.0.1 Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update für Windows Internet Explorer 8 (KB2598845) (Version: 1) Update für Windows XP (KB2661254-v2) (Version: 2) Update für Windows XP (KB2718704) (Version: 1) Update für Windows XP (KB2736233) (Version: 1) Update für Windows XP (KB2749655) (Version: 1) Update für Windows XP (KB2863058) (Version: 1) WebFldrs XP (Version: 9.50.7523) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0) Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0017.0) Windows Genuine Advantage Validation Tool (KB892130) Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2) Windows Internet Explorer 7 (Version: 20061107.210142) Windows Internet Explorer 8 (Version: 20090308.140743) Windows Live Anmelde-Assistent (Version: 5.000.818.6) Windows Live Call (Version: 14.0.8064.0206) Windows Live Communications Platform (Version: 14.0.8064.206) Windows Live Essentials (Version: 14.0.8089.0726) Windows Live Essentials (Version: 14.0.8089.726) Windows Live Messenger (Version: 14.0.8089.0726) Windows Live-Uploadtool (Version: 14.0.8014.1029) Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player Firefox Plugin (Version: 1.0.0.8) Windows XP Service Pack 3 (Version: 20080414.031514) WinGDB3 3.62 (Version: 3.62 ) WinRAR Archivierer XviD MPEG-4 Video Codec (Version: XviD-1.0.3-20122004) Zylom Games Player Plugin ==================== Restore Points ========================= 25-07-2013 08:05:22 Systemprüfpunkt 26-07-2013 15:15:03 Systemprüfpunkt 29-07-2013 06:16:48 Systemprüfpunkt 30-07-2013 07:30:37 Systemprüfpunkt 31-07-2013 15:16:47 Systemprüfpunkt 01-08-2013 16:06:28 Systemprüfpunkt 02-08-2013 16:36:20 Systemprüfpunkt 04-08-2013 12:27:33 Systemprüfpunkt 05-08-2013 12:46:53 Systemprüfpunkt 06-08-2013 13:34:17 Systemprüfpunkt 07-08-2013 15:49:11 Systemprüfpunkt 08-08-2013 16:32:24 Systemprüfpunkt 09-08-2013 16:45:04 Systemprüfpunkt 10-08-2013 16:51:27 Systemprüfpunkt 11-08-2013 17:44:31 Systemprüfpunkt 12-08-2013 17:46:09 Systemprüfpunkt 14-08-2013 06:43:28 Software Distribution Service 3.0 15-08-2013 07:41:07 Systemprüfpunkt 16-08-2013 08:44:19 Systemprüfpunkt 17-08-2013 09:35:10 Systemprüfpunkt 19-08-2013 07:41:27 Systemprüfpunkt 19-08-2013 12:10:16 Java 7 Update 10 wird entfernt 19-08-2013 12:11:11 Java 7 Update 25 wird installiert 20-08-2013 16:59:15 Systemprüfpunkt 22-08-2013 06:14:34 Systemprüfpunkt 23-08-2013 07:07:53 Systemprüfpunkt 26-08-2013 10:07:19 Systemprüfpunkt 27-08-2013 14:16:43 Systemprüfpunkt 28-08-2013 07:44:27 Software Distribution Service 3.0 29-08-2013 08:30:53 Systemprüfpunkt 30-08-2013 09:17:10 Systemprüfpunkt 31-08-2013 14:59:48 Systemprüfpunkt 01-09-2013 15:50:58 Systemprüfpunkt 02-09-2013 16:40:46 Systemprüfpunkt 04-09-2013 17:14:02 Systemprüfpunkt 08-09-2013 15:14:10 Systemprüfpunkt 10-09-2013 07:44:02 Systemprüfpunkt 12-09-2013 08:25:08 Systemprüfpunkt 13-09-2013 06:35:23 Software Distribution Service 3.0 13-09-2013 07:35:03 Software Distribution Service 3.0 13-09-2013 07:41:42 Software Distribution Service 3.0 17-09-2013 08:45:58 Systemprüfpunkt 18-09-2013 08:48:17 Systemprüfpunkt 19-09-2013 09:56:48 Systemprüfpunkt 20-09-2013 11:41:32 Systemprüfpunkt 22-09-2013 10:32:30 Systemprüfpunkt 23-09-2013 11:08:45 Systemprüfpunkt 25-09-2013 06:27:56 Systemprüfpunkt 26-09-2013 08:58:07 Systemprüfpunkt 27-09-2013 09:04:43 Systemprüfpunkt 05-10-2013 09:05:39 Systemprüfpunkt 06-10-2013 19:05:06 Systemprüfpunkt 09-10-2013 14:55:33 Systemprüfpunkt 10-10-2013 15:25:29 Systemprüfpunkt 10-10-2013 15:51:09 Software Distribution Service 3.0 14-10-2013 14:40:37 Software Distribution Service 3.0 16-10-2013 09:25:58 Systemprüfpunkt 22-10-2013 07:36:27 Systemprüfpunkt 23-10-2013 08:14:23 Systemprüfpunkt ==================== Hosts content: ========================== 2005-08-20 02:33 - 2006-12-25 21:03 - 00004188 ____N C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 127.0.0.1 cdn.errorsafe.com ## added by CiD 127.0.0.1 cdn.winsoftware.com ## added by CiD 127.0.0.1 de.errorsafe.com ## added by CiD 127.0.0.1 de.winantivirus.com ## added by CiD 127.0.0.1 download.cdn.drivecleaner.com ## added by CiD 127.0.0.1 download.cdn.errorsafe.com ## added by CiD 127.0.0.1 download.cdn.winsoftware.com ## added by CiD 127.0.0.1 download.errorsafe.com ## added by CiD 127.0.0.1 download.systemdoctor.com ## added by CiD 127.0.0.1 download.winantispyware.com ## added by CiD 127.0.0.1 download.windrivecleaner.com ## added by CiD 127.0.0.1 download.winfixer.com ## added by CiD 127.0.0.1 drivecleaner.com ## added by CiD 127.0.0.1 dynamique.drivecleaner.com ## added by CiD 127.0.0.1 errorprotector.com ## added by CiD 127.0.0.1 errorsafe.com ## added by CiD 127.0.0.1 es.winantivirus.com ## added by CiD 127.0.0.1 fr.winantivirus.com ## added by CiD 127.0.0.1 fr.winfixer.com ## added by CiD 127.0.0.1 go.drivecleaner.com ## added by CiD 127.0.0.1 go.errorsafe.com ## added by CiD 127.0.0.1 go.winantispyware.com ## added by CiD 127.0.0.1 go.winantivirus.com ## added by CiD There are 41 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\AF6E075493B5BAA8.job => c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe Task: C:\WINDOWS\Tasks\At1.job => C:\DOKUME~1\Toni\ANWEND~1\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\WINDOWS\Tasks\At2.job => C:\DOKUME~1\Toni\ANWEND~1\Dealply\UPDATE~1\UPDATE~1.EXE Task: C:\WINDOWS\Tasks\Google Software Updater.job => C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\ISP-Anmeldungserinnerung 1.job => C:\WINDOWS\system32\OOBE\oobebaln.exe Task: C:\WINDOWS\Tasks\Symantec NetDetect.job => C:\Programme\Symantec\LiveUpdate\NDETECT.EXE ==================== Loaded Modules (whitelisted) ============= 2013-03-05 09:21 - 2013-03-05 09:12 - 00397704 _____ () C:\Programme\Avira\AntiVir Desktop\sqlite3.dll 2005-08-20 02:34 - 2011-02-04 18:48 - 00291840 _____ () C:\WINDOWS\system32\sbe.dll 2005-08-20 02:34 - 2008-04-14 04:22 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2013-09-03 15:54 - 2013-09-03 15:54 - 00301056 _____ () C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU 2004-08-16 19:53 - 2004-08-16 19:53 - 00053248 ____N () C:\Programme\Sitecom\Bluetooth Software\btkeyind.dll 2006-03-08 15:27 - 2005-10-19 12:56 - 00125952 ____N () C:\Programme\WinRAR\rarext.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtest AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-2PHI-2B2UA19M6VT8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVF7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVK0} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVKE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVMI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVR9} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVRR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVTN} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVV1} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVMH} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVNL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVP5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVPR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVRB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVSQ} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVVB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-3BG4-281NL05DCVTL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-3BG4-281NL05DCVUC} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-6E2T-2B6FMQRBGVUF} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-7LLS-29TK0CI52VR7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-7LLS-29TK0CI52VTU} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-J24H-293SB52ICVVE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-J24H-2981HI7ICVVG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28T8P0TASVVS} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28UD62RUEVV9} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVGU} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVHS} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVIR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVLT} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVR8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVRM} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVUQ} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-Q64S-2675H2E5QVVI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-1EMN-28M5NPU00VT1} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-90CN-262FTCDKSVUC} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-9P7R-292OFTVD6VST} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-L1G2-28QRSPMS6VVV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-NGIN-25I8KVHMGVVK} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVT8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVVB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVVP} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVV7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-0ANJ-25JQU97JCVVO} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-3S8E-27J3AJ6UT000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-5TO3-2831TOKLCVUL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-B3Q1-28C117F43000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-HU68-27ADSL5PEVUL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-HU68-27ADSL5PEVVR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-OIBL-25SSVB6LMVVT} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-8A6T-26VOTC6OMVQV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-FGLT-28R1BF9D2VSE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-KO19-25DIJFDG6VUO} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVFR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVH4} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVI0} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVIG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJ8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJM} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVKL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVPA} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVS5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-64CA-2ASVQDAHMVOI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-64CA-2ASVQDAHMVR5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-L514-25CJ6NICMVUV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVOV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVPH} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVQD} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVUG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVVE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFRER000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-E9E4-28HCA9OPAVSD} AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:07D9FF25 AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:1ECED34B AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:3D36932D AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:5F64C164 AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:8DCF53BE ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/10/2013 06:46:11 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (10/09/2013 03:33:14 PM) (Source: COM+) (User: ) Description: In der Laufzeitumgebung wurde ein inkonsistenter interner Status erkannt. Dies deutet auf eine potenzielle Instabilität des Prozesses hin. Diese Instabilität wird durch die in der COM+-Anwendung ausgeführten benutzerdefinierten Komponenten, die von ihnen verwendeten Komponenten oder durch andere Faktoren verursacht. Fehler in f:\xpsp3\com\com1x\src\comsvcs\package\cpackage.cpp(1184), hr = 8007041d: InitEventCollector failed Error: (09/24/2013 08:56:53 AM) (Source: Application Hang) (User: ) Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (09/23/2013 00:28:57 PM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 10:43:11 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 10:09:50 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:33:24 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:33:15 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:30:09 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:10:09 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. System errors: ============= Error: (10/23/2013 10:32:00 AM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/23/2013 09:32:00 AM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/22/2013 05:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/22/2013 04:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/22/2013 03:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/22/2013 02:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/22/2013 01:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/22/2013 01:16:01 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Gatewaydienst auf Anwendungsebene" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/22/2013 01:16:00 PM) (Source: Service Control Manager) (User: ) Description: Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Gatewaydienst auf Anwendungsebene. Error: (10/22/2013 00:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Microsoft Office Sessions: ========================= ==================== Memory info =========================== LG Christine Percentage of memory in use: 59% Total physical RAM: 1022.07 MB Available physical RAM: 410.85 MB Total Pagefile: 2458.66 MB Available Pagefile: 1763.51 MB Total Virtual: 2047.88 MB Available Virtual: 1941.92 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:228.11 GB) (Free:88.47 GB) NTFS ==>[Drive with boot components (Windows XP)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 233 GB) (Disk ID: 79751EB5) Partition 1: (Not Active) - (Size=63 MB) - (Type=DE) Partition 2: (Active) - (Size=228 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=5 GB) - (Type=DB) ==================== End Of Log ============================ Christine |
23.10.2013, 14:16 | #2 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners hi,
__________________Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
24.10.2013, 06:46 | #3 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hi Schrauber,
__________________hier die Logdateien: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.22.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Kiki :: CHRISTINE [Administrator] 23.10.2013 16:03:06 mbam-log-2013-10-23 (16-03-06).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 284612 Laufzeit: 16 Minute(n), 41 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.010 - Bericht erstellt am 23/10/2013 um 16:23:45 # Updated 20/10/2013 von Xplode # Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits) # Benutzername : Kiki - CHRISTINE # Gestartet von : C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v8.0.6001.18702 -\\ Mozilla Firefox v24.0 (de) [ Datei : C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Mozilla\Firefox\Profiles\eaf6ggbk.default\prefs.js ] [ Datei : C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\prefs.js ] -\\ Google Chrome v30.0.1599.101 [ Datei : C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [1138 octets] - [22/10/2013 13:10:26] AdwCleaner[R1].txt - [1259 octets] - [23/10/2013 16:22:03] AdwCleaner[S0].txt - [1200 octets] - [22/10/2013 13:11:45] AdwCleaner[S1].txt - [1180 octets] - [23/10/2013 16:23:45] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1240 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.7 (10.15.2013:3) OS: Microsoft Windows XP x86 Ran by Kiki on 23.10.2013 at 16:36:22,03 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 23.10.2013 at 16:41:23,90 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2013 Ran by Kiki (administrator) on CHRISTINE on 23-10-2013 16:47:10 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe (Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe (RealNetworks, Inc.) C:\Programme\Online Games Manager\ogmservice.exe (pdfforge GmbH) C:\Programme\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Programme\PDF Architect\ConversionService.exe (Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe (Symantec Corporation) C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (SigmaTel, Inc.) C:\WINDOWS\stsystra.exe (CyberLink Corp.) C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe (Canon Inc.) C:\Programme\Canon\CAL\CALMAIN.exe (InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Sonic Solutions) C:\WINDOWS\system32\dla\tfswctrl.exe (Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe (Nuance Communications, Inc.) C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Microsoft Corporation) C:\Programme\Microsoft IntelliPoint\ipoint.exe (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcmon.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Apple Inc.) C:\Programme\iPod\bin\iPodService.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe (Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation) HKLM\...\Run: [SigmatelSysTrayApp] - C:\Windows\stsystra.exe [339968 2005-03-23] (SigmaTel, Inc.) HKLM\...\Run: [ATIPTA] - C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064 2005-08-05] (ATI Technologies, Inc.) HKLM\...\Run: [DVDLauncher] - C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe [53248 2005-02-23] (CyberLink Corp.) HKLM\...\Run: [ISUSPM Startup] - C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe [221184 2004-07-27] (InstallShield Software Corporation) HKLM\...\Run: [ISUSScheduler] - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM\...\Run: [HPDJ Taskbar Utility] - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [188416 2002-03-28] (HP) HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [dla] - C:\WINDOWS\system32\dla\tfswctrl.exe [122941 2005-05-31] (Sonic Solutions) HKLM\...\Run: [Corel Reminder] - [x] HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [413696 2008-11-04] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [290088 2008-11-20] (Apple Inc.) HKLM\...\Run: [SSBkgdUpdate] - C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [PaperPort PTD] - C:\Programme\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [IndexSearch] - C:\Programme\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [PPort11reminder] - C:\Programme\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM\...\Run: [BrMfcWnd] - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe [1089536 2008-02-19] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Programme\Brother\ControlCenter3\brctrcen.exe [86016 2007-12-21] (Brother Industries, Ltd.) HKLM\...\Run: [IntelliPoint] - c:\Programme\Microsoft IntelliPoint\ipoint.exe [1468296 2009-05-28] (Microsoft Corporation) HKLM\...\Run: [Google Updater] - C:\Programme\Google\Google Updater\GoogleUpdater.exe [161336 2011-09-17] (Google) HKLM\...\Run: [ToADiMon.exe] - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe [286720 2010-04-08] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Policies\Explorer: [NoCDBurning] 0 HKCU\...\Run: [Akamai NetSession Interface] - C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\Administrator\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\Default User\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Broadcom Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programme\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File Toolbar: HKCU - No Name - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} hxxp://arcade.icq.com/carlo/zuma/popcaploader_v5.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll (Broadcom Corporation) Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll () Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [147456] (Apple Inc.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @garmin.com/GpsControl - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.3.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @zylom.com/ZylomGamesPlayer - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: No Name - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\Extensions.rdf FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\installed-extensions-processed.txt FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Programme\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Programme\PDF Architect\FFPDFArchitectExt Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Programme\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Programme\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Programme\Google\Chrome\Application\29.0.1547.66\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Programme\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Programme\Mozilla Firefox\plugins\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (ScorchPlugin) - C:\Programme\Mozilla Firefox\plugins\NPSibelius.dll () CHR Plugin: (Zylom Plugin) - C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll (Zylom) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Updater) - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (iTunes Application Detector) - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Drive) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ========================== Services (Whitelisted) ================= R2 Akamai; c:\programme\gemeinsame dateien\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424 2008-11-07] (Apple Inc.) R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [238888 2008-08-29] (Apple Inc.) R2 btwdins; C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe [163840 2004-08-16] (Broadcom Corporation) R2 CCALib8; C:\Programme\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194104 2011-09-17] (Google) S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [536872 2008-11-20] (Apple Inc.) R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-09-18] (Mozilla Foundation) S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation) R2 ogmservice; C:\Programme\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.) S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation) R2 PDF Architect Helper Service; C:\Programme\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Programme\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [160944 2012-07-13] (Skype Technologies) R2 SymWSC; C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe [316544 2004-11-02] (Symantec Corporation) S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation) R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [25244 1999-09-10] (Adaptec) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R3 BrScnUsb; C:\Windows\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [17024 2004-08-16] (Broadcom Corporation) R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30267 2004-08-16] (Broadcom Corporation) R0 BTKRNL; C:\Windows\System32\drivers\btkrnl.sys [1241034 2004-08-16] (Broadcom Corporation) R2 BTSERIAL; C:\WINDOWS\system32\drivers\btserial.sys [23271 2004-08-16] (Broadcom Corporation) R2 BTSLBCSP; C:\WINDOWS\system32\drivers\btslbcsp.sys [222876 2004-08-16] (Broadcom Corporation) R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [147896 2004-08-16] (Broadcom Corporation) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [54328 2004-08-18] (Broadcom Corporation) R2 drvnddm; C:\Windows\System32\drivers\drvnddm.sys [40544 2005-04-21] (Sonic Solutions) S3 GigasetGenericUSB; C:\Windows\System32\DRIVERS\GigasetGenericUSB.sys [44032 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.) S3 MIINPazX; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [19200 2010-08-27] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation) R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [66048 2005-09-29] (Protection Technology) R1 sscdbhk5; C:\Windows\System32\drivers\sscdbhk5.sys [5627 2005-05-13] (Sonic Solutions) R1 SSHDRV5C; C:\WINDOWS\system32\drivers\SSHDRV5C.sys [34816 2005-11-27] () R1 SSHDRV86; C:\WINDOWS\system32\drivers\SSHDRV86.sys [81408 2005-11-22] () S3 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-05] (Avira GmbH) R1 ssrtln; C:\Windows\System32\drivers\ssrtln.sys [23545 2005-05-13] (Sonic Solutions) R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2008-10-16] () R2 STEC3; C:\WINDOWS\system32\STEC3.sys [2368 2007-04-16] (AntiCracking) R3 STHDA; C:\Windows\System32\drivers\sthda.sys [180864 2005-06-15] (SigmaTel, Inc.) R2 tfsnboio; C:\Windows\System32\dla\tfsnboio.sys [25725 2005-05-31] (Sonic Solutions) R2 tfsncofs; C:\Windows\System32\dla\tfsncofs.sys [34845 2005-05-31] (Sonic Solutions) R2 tfsndrct; C:\Windows\System32\dla\tfsndrct.sys [4125 2005-05-31] (Sonic Solutions) R2 tfsndres; C:\Windows\System32\dla\tfsndres.sys [2273 2005-05-31] (Sonic Solutions) R2 tfsnifs; C:\Windows\System32\dla\tfsnifs.sys [86876 2005-05-31] (Sonic Solutions) R2 tfsnopio; C:\Windows\System32\dla\tfsnopio.sys [15069 2005-05-31] (Sonic Solutions) R2 tfsnpool; C:\Windows\System32\dla\tfsnpool.sys [6365 2005-05-31] (Sonic Solutions) R2 tfsnudf; C:\Windows\System32\dla\tfsnudf.sys [98716 2005-05-31] (Sonic Solutions) R2 tfsnudfa; C:\Windows\System32\dla\tfsnudfa.sys [100605 2005-05-31] (Sonic Solutions) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.) U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-10-23 16:46 - 2013-10-23 16:46 - 01088127 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 16:41 - 2013-10-23 16:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 14:50 - 2013-10-23 14:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 10:43 - 2013-10-23 10:44 - 00061936 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 10:39 - 2013-10-23 10:39 - 00000000 ____D C:\FRST 2013-10-22 13:10 - 2013-10-23 16:23 - 00000000 ____D C:\AdwCleaner 2013-10-22 13:09 - 2013-10-22 13:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 09:54 - 2013-10-22 09:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 09:52 - 2013-10-22 09:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-14 16:11 - 2013-10-14 16:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 18:08 - 2013-10-10 18:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 18:05 - 2013-10-10 18:06 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 18:05 - 2013-10-10 18:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 17:59 - 2013-10-10 17:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 17:59 - 2013-10-10 17:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 17:55 - 2013-10-10 17:56 - 00014017 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 17:25 - 2013-10-10 18:08 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 17:24 - 2013-07-03 04:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2013-10-10 17:24 - 2013-07-03 03:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys 2013-10-10 17:19 - 2013-08-09 02:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2013-10-10 17:19 - 2013-08-09 02:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2013-10-10 17:19 - 2009-03-18 13:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2013-10-10 17:09 - 2013-10-10 17:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 16:49 - 2013-10-09 16:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-09-27 12:02 - 2013-09-27 12:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 2013-09-25 07:54 - 2013-09-25 07:54 - 97673008 _____ C:\WINDOWS\system32\ᆌ蘒各7 ==================== One Month Modified Files and Folders ======= 2013-10-23 16:47 - 2012-04-16 12:12 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-23 16:46 - 2013-10-23 16:46 - 01088127 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 16:41 - 2013-10-23 16:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 16:32 - 2013-08-20 19:32 - 00000414 _____ C:\WINDOWS\Tasks\At2.job 2013-10-23 16:32 - 2013-08-20 19:32 - 00000410 _____ C:\WINDOWS\Tasks\At1.job 2013-10-23 16:29 - 2005-08-20 02:51 - 00000259 _____ C:\WINDOWS\wiadebug.log 2013-10-23 16:28 - 2005-08-20 02:56 - 01770518 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-23 16:28 - 2005-08-20 02:54 - 00000000 ____D C:\WINDOWS\Registration 2013-10-23 16:28 - 2005-08-20 02:34 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-23 16:27 - 2005-08-20 02:51 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-23 16:26 - 2010-05-13 15:48 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Akamai 2013-10-23 16:26 - 2010-01-07 19:36 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-23 16:26 - 2005-08-20 03:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-23 16:25 - 2005-08-20 03:05 - 00032028 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-23 16:24 - 2005-11-22 09:54 - 00000300 ___SH C:\Dokumente und Einstellungen\Kiki\ntuser.ini 2013-10-23 16:23 - 2013-10-22 13:10 - 00000000 ____D C:\AdwCleaner 2013-10-23 16:23 - 2005-11-15 20:30 - 00000364 _____ C:\WINDOWS\Tasks\Symantec NetDetect.job 2013-10-23 16:12 - 2010-01-07 19:36 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-23 16:00 - 2006-12-10 21:18 - 00000280 ____H C:\WINDOWS\Tasks\AF6E075493B5BAA8.job 2013-10-23 14:50 - 2013-10-23 14:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 14:46 - 2013-08-07 18:13 - 00000000 ____D C:\Programme\Mozilla Thunderbird 2013-10-23 13:53 - 2009-03-22 15:45 - 00001044 _____ C:\WINDOWS\Tasks\Google Software Updater.job 2013-10-23 10:44 - 2013-10-23 10:43 - 00061936 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 10:39 - 2013-10-23 10:39 - 00000000 ____D C:\FRST 2013-10-23 09:35 - 2013-08-22 08:32 - 00000113 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WB.CFG 2013-10-23 09:35 - 2013-08-22 08:32 - 00000006 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WBPU-TTL.DAT 2013-10-23 08:59 - 2013-02-20 11:06 - 00002503 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Microsoft Office Word 2007.lnk 2013-10-22 18:07 - 2005-11-22 09:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki 2013-10-22 13:09 - 2013-10-22 13:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 12:52 - 2013-05-01 20:26 - 00000000 __HDC C:\WINDOWS\$NtUninstallWdf01007$ 2013-10-22 10:09 - 2013-04-27 17:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Eigene Dateien\Online-BankingPlus 2013-10-22 09:54 - 2013-10-22 09:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 09:52 - 2013-10-22 09:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-22 09:46 - 2013-07-11 12:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2833951$ 2013-10-16 18:32 - 2005-11-21 20:16 - 00000000 ____D C:\Dokumente und Einstellungen\Toni 2013-10-14 18:41 - 2005-08-20 02:48 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2013-10-14 16:52 - 2005-08-20 02:53 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-10-14 16:11 - 2013-10-14 16:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 18:44 - 2005-08-20 02:43 - 00461232 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-10 18:13 - 2013-02-20 10:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help 2013-10-10 18:12 - 2005-08-20 02:49 - 01201066 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-10 18:08 - 2013-10-10 18:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 18:08 - 2013-10-10 17:25 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00687906 _____ C:\WINDOWS\iis6.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00634366 _____ C:\WINDOWS\FaxSetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00304468 _____ C:\WINDOWS\ocgen.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00290585 _____ C:\WINDOWS\tsoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00211967 _____ C:\WINDOWS\comsetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00205397 _____ C:\WINDOWS\updspapi.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00194526 _____ C:\WINDOWS\msmqinst.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00128194 _____ C:\WINDOWS\ntdtcsetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00111549 _____ C:\WINDOWS\netfxocm.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00070967 _____ C:\WINDOWS\plusoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00044290 _____ C:\WINDOWS\MedCtrOC.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00035226 _____ C:\WINDOWS\ocmsn.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00034814 _____ C:\WINDOWS\ehOCGen.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00032033 _____ C:\WINDOWS\tabletoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00031827 _____ C:\WINDOWS\msgsocm.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00001393 _____ C:\WINDOWS\imsins.log 2013-10-10 18:06 - 2013-10-10 18:05 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 18:06 - 2013-10-10 18:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 18:06 - 2012-04-12 12:49 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-10-10 18:05 - 2013-07-21 13:00 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-10 18:05 - 2012-03-23 13:46 - 00265140 _____ C:\WINDOWS\setupapi.log 2013-10-10 18:00 - 2005-11-24 10:26 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-10 17:59 - 2013-10-10 17:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 17:59 - 2013-10-10 17:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 17:56 - 2013-10-10 17:55 - 00014017 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 17:55 - 2009-04-29 17:38 - 00000000 ____D C:\WINDOWS\ie8updates 2013-10-10 17:09 - 2013-10-10 17:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-10 17:08 - 2005-08-20 02:49 - 00000000 ____D C:\Programme 2013-10-09 16:49 - 2013-10-09 16:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-09 16:49 - 2012-04-16 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-09 16:49 - 2011-12-03 13:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-09 16:05 - 2006-05-03 20:10 - 00000000 ____D C:\Programme\Yahoo! 2013-10-06 21:25 - 2008-12-03 12:22 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Skype 2013-10-06 21:21 - 2012-09-13 10:08 - 00002243 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk 2013-09-27 12:02 - 2013-09-27 12:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 2013-09-26 14:09 - 2012-12-12 20:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$ 2013-09-25 09:00 - 2009-07-21 21:24 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ 2013-09-25 07:54 - 2013-09-25 07:54 - 97673008 _____ C:\WINDOWS\system32\ᆌ蘒各7 2013-09-23 23:36 - 2006-11-07 04:26 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe 2013-09-23 23:36 - 2005-08-20 02:33 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-09-23 20:23 - 2012-06-13 14:10 - 00522240 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll 2013-09-23 20:23 - 2010-06-09 16:03 - 00743424 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll 2013-09-23 20:23 - 2009-06-13 10:31 - 00247808 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll 2013-09-23 20:23 - 2009-06-13 10:31 - 00012800 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll 2013-09-23 20:23 - 2009-03-08 05:33 - 00018944 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 11113472 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 02006016 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 00630272 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll 2013-09-23 20:23 - 2007-05-10 10:16 - 00055296 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2013-09-23 20:23 - 2006-11-07 22:03 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-09-23 20:23 - 2006-11-07 22:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2013-09-23 20:23 - 2006-11-07 22:03 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll 2013-09-23 20:23 - 2006-11-07 04:27 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll 2013-09-23 20:23 - 2006-10-17 13:05 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl 2013-09-23 20:23 - 2006-10-17 13:05 - 00105984 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll 2013-09-23 20:23 - 2006-10-17 13:05 - 00043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll 2013-09-23 20:23 - 2006-10-17 13:04 - 00206848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll 2013-09-23 20:23 - 2006-10-17 12:57 - 02006016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-09-23 20:23 - 2006-09-18 16:14 - 00759296 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll 2013-09-23 20:23 - 2006-05-19 17:06 - 06017536 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 01215488 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00920064 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00611840 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00184320 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00067072 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll 2013-09-23 20:23 - 2006-05-10 07:26 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 06017536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 01215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00611840 ____N (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00206848 ____N (Microsoft Corporation) C:\WINDOWS\system32\occache.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2013-09-23 20:23 - 2005-08-20 02:34 - 00067072 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2013-09-23 20:23 - 2005-08-20 02:33 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00184320 ____N (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2013-09-23 20:23 - 2005-08-20 02:33 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\corpol.dll 2013-09-23 20:06 - 2005-08-20 02:33 - 00385024 ____N (Microsoft Corporation) C:\WINDOWS\system32\html.iec Files to move or delete: ==================== C:\Windows\Tasks\At1.job C:\Windows\Tasks\At2.job Some content of TEMP: ==================== C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\718631~1.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AskSLib.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10380_b19770de.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10641_b1977ba6.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10750_b1977f85.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10878_b197838c.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoRun.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoRunGUI.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\bstrapInstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\drm_dialogs.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\drm_dyndata_7270012.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\EAInstall.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\eauninstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Elev-CD.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Elev-CD2.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQInstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQRT.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQTIK.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\IcqUpdater.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u10-windows-i586-p-iftw_3ca5d6e4.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u11-windows-i586-p-iftw.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u13-windows-i586-p-iftw.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u3-windows-i586-p-iftw_2cd32978.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u5-windows-i586-p-iftw_1b121abb.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u7-windows-i586-p-iftw_bdb28397.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Need for Speed Carbon_uninst.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ose00000.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\secuniasi7313982473488777106.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\setup_wm.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\SkypeSetup.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\_is35.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2005-08-20 02:33] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e C:\Windows\System32\winlogon.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a C:\Windows\System32\svchost.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 C:\Windows\System32\services.exe [2005-08-20 02:34] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc C:\Windows\System32\User32.dll [2005-08-20 02:34] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd C:\Windows\System32\userinit.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 C:\Windows\System32\Drivers\volsnap.sys [2005-08-20 02:34] - [2008-04-14 03:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d ==================== End Of Log ============================ --- --- --- --- --- --- LG Christine Hatte grad wieder die Salesresourcepartners Seite auf dem Bildschirm. Mir ist aufgefallen, dass die Seite immer nach dem ersten Hochfahren aufgeht. Ich schalte meinen Computer ein und lasse ihn dann längere Zeit werken(seit dieser Popup-Geschichte braucht er ewig bis ich mit normaler Geschwindigkeit arbeiten kann), und wenn dann eben länger keine Aktivität am Computer ist, dann öffnet sich diese Seite. LG Christine |
24.10.2013, 11:31 | #4 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartnersESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
25.10.2013, 06:58 | #5 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hier mal als erstes die ESET Logdatei Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5974f52b7d26144fb6a814c51bd71052 # engine=15616 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-10-24 01:38:30 # local_time=2013-10-24 03:38:30 (+0100, Westeuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=1799 16775165 100 97 30549 153293215 5889 0 # scanned=220258 # found=1 # cleaned=0 # scan_time=9676 sh=B4F8C4ED7D61935B4B2AAE8096A3E72F461E5969 ft=1 fh=6888dbd8d4850c22 vn="a variant of Win32/Kryptik.BYC trojan" ac=I fn="C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ZGIA0.tmp" Code:
ATTFilter Results of screen317's Security Check version 0.99.74 Windows XP Service Pack 3 x86 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` AntiVir PersonalEdition Classic Virenschutz Avira Desktop AntiVir PersonalEdition Classic Virenschutz Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Java(TM) 6 Update 31 Java 7 Update 25 Java version out of Date! Adobe Flash Player 11.9.900.117 Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox (Firefox,. Firefox out of Date! Mozilla Thunderbird (17.0.8) Google Chrome 30.0.1599.101 Google Chrome 30.0.1599.69 ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe Online Games Manager ogmservice.exe T-Online T-Online_Software_6 Basis-Software Basis1\ToADiMon.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C:: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2013 01 Ran by Kiki (administrator) on CHRISTINE on 24-10-2013 16:02:18 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe (Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe (RealNetworks, Inc.) C:\Programme\Online Games Manager\ogmservice.exe (pdfforge GmbH) C:\Programme\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Programme\PDF Architect\ConversionService.exe (Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe (Symantec Corporation) C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe (Canon Inc.) C:\Programme\Canon\CAL\CALMAIN.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (SigmaTel, Inc.) C:\WINDOWS\stsystra.exe (CyberLink Corp.) C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe (InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Sonic Solutions) C:\WINDOWS\system32\dla\tfswctrl.exe (Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe (Nuance Communications, Inc.) C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Microsoft Corporation) C:\Programme\Microsoft IntelliPoint\ipoint.exe (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcmon.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Apple Inc.) C:\Programme\iPod\bin\iPodService.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation) HKLM\...\Run: [SigmatelSysTrayApp] - C:\Windows\stsystra.exe [339968 2005-03-23] (SigmaTel, Inc.) HKLM\...\Run: [ATIPTA] - C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064 2005-08-05] (ATI Technologies, Inc.) HKLM\...\Run: [DVDLauncher] - C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe [53248 2005-02-23] (CyberLink Corp.) HKLM\...\Run: [ISUSPM Startup] - C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe [221184 2004-07-27] (InstallShield Software Corporation) HKLM\...\Run: [ISUSScheduler] - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM\...\Run: [HPDJ Taskbar Utility] - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [188416 2002-03-28] (HP) HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [dla] - C:\WINDOWS\system32\dla\tfswctrl.exe [122941 2005-05-31] (Sonic Solutions) HKLM\...\Run: [Corel Reminder] - [x] HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [413696 2008-11-04] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [290088 2008-11-20] (Apple Inc.) HKLM\...\Run: [SSBkgdUpdate] - C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [PaperPort PTD] - C:\Programme\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [IndexSearch] - C:\Programme\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [PPort11reminder] - C:\Programme\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM\...\Run: [BrMfcWnd] - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe [1089536 2008-02-19] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Programme\Brother\ControlCenter3\brctrcen.exe [86016 2007-12-21] (Brother Industries, Ltd.) HKLM\...\Run: [IntelliPoint] - c:\Programme\Microsoft IntelliPoint\ipoint.exe [1468296 2009-05-28] (Microsoft Corporation) HKLM\...\Run: [Google Updater] - C:\Programme\Google\Google Updater\GoogleUpdater.exe [161336 2011-09-17] (Google) HKLM\...\Run: [ToADiMon.exe] - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe [286720 2010-04-08] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Policies\Explorer: [NoCDBurning] 0 HKCU\...\Run: [Akamai NetSession Interface] - C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\Default User\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Broadcom Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programme\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File Toolbar: HKCU - No Name - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} hxxp://arcade.icq.com/carlo/zuma/popcaploader_v5.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll (Broadcom Corporation) Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll () Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [147456] (Apple Inc.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @garmin.com/GpsControl - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.3.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @zylom.com/ZylomGamesPlayer - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: No Name - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\Extensions.rdf FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\installed-extensions-processed.txt FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Programme\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Programme\PDF Architect\FFPDFArchitectExt Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Programme\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Programme\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Programme\Google\Chrome\Application\29.0.1547.66\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Programme\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Programme\Mozilla Firefox\plugins\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (ScorchPlugin) - C:\Programme\Mozilla Firefox\plugins\NPSibelius.dll () CHR Plugin: (Zylom Plugin) - C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll (Zylom) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Updater) - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (iTunes Application Detector) - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Drive) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ========================== Services (Whitelisted) ================= R2 Akamai; c:\programme\gemeinsame dateien\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424 2008-11-07] (Apple Inc.) R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [238888 2008-08-29] (Apple Inc.) R2 btwdins; C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe [163840 2004-08-16] (Broadcom Corporation) R2 CCALib8; C:\Programme\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194104 2011-09-17] (Google) S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [536872 2008-11-20] (Apple Inc.) R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-09-18] (Mozilla Foundation) S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation) R2 ogmservice; C:\Programme\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.) S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation) R2 PDF Architect Helper Service; C:\Programme\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Programme\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [160944 2012-07-13] (Skype Technologies) R2 SymWSC; C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe [316544 2004-11-02] (Symantec Corporation) S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation) R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== R2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [25244 1999-09-10] (Adaptec) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R3 BrScnUsb; C:\Windows\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [17024 2004-08-16] (Broadcom Corporation) R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30267 2004-08-16] (Broadcom Corporation) R0 BTKRNL; C:\Windows\System32\drivers\btkrnl.sys [1241034 2004-08-16] (Broadcom Corporation) R2 BTSERIAL; C:\WINDOWS\system32\drivers\btserial.sys [23271 2004-08-16] (Broadcom Corporation) R2 BTSLBCSP; C:\WINDOWS\system32\drivers\btslbcsp.sys [222876 2004-08-16] (Broadcom Corporation) R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [147896 2004-08-16] (Broadcom Corporation) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [54328 2004-08-18] (Broadcom Corporation) R2 drvnddm; C:\Windows\System32\drivers\drvnddm.sys [40544 2005-04-21] (Sonic Solutions) S3 GigasetGenericUSB; C:\Windows\System32\DRIVERS\GigasetGenericUSB.sys [44032 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.) S3 MIINPazX; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [19200 2010-08-27] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation) R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [66048 2005-09-29] (Protection Technology) R1 sscdbhk5; C:\Windows\System32\drivers\sscdbhk5.sys [5627 2005-05-13] (Sonic Solutions) R1 SSHDRV5C; C:\WINDOWS\system32\drivers\SSHDRV5C.sys [34816 2005-11-27] () R1 SSHDRV86; C:\WINDOWS\system32\drivers\SSHDRV86.sys [81408 2005-11-22] () S3 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-05] (Avira GmbH) R1 ssrtln; C:\Windows\System32\drivers\ssrtln.sys [23545 2005-05-13] (Sonic Solutions) R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2008-10-16] () R2 STEC3; C:\WINDOWS\system32\STEC3.sys [2368 2007-04-16] (AntiCracking) R3 STHDA; C:\Windows\System32\drivers\sthda.sys [180864 2005-06-15] (SigmaTel, Inc.) R2 tfsnboio; C:\Windows\System32\dla\tfsnboio.sys [25725 2005-05-31] (Sonic Solutions) R2 tfsncofs; C:\Windows\System32\dla\tfsncofs.sys [34845 2005-05-31] (Sonic Solutions) R2 tfsndrct; C:\Windows\System32\dla\tfsndrct.sys [4125 2005-05-31] (Sonic Solutions) R2 tfsndres; C:\Windows\System32\dla\tfsndres.sys [2273 2005-05-31] (Sonic Solutions) R2 tfsnifs; C:\Windows\System32\dla\tfsnifs.sys [86876 2005-05-31] (Sonic Solutions) R2 tfsnopio; C:\Windows\System32\dla\tfsnopio.sys [15069 2005-05-31] (Sonic Solutions) R2 tfsnpool; C:\Windows\System32\dla\tfsnpool.sys [6365 2005-05-31] (Sonic Solutions) R2 tfsnudf; C:\Windows\System32\dla\tfsnudf.sys [98716 2005-05-31] (Sonic Solutions) R2 tfsnudfa; C:\Windows\System32\dla\tfsnudfa.sys [100605 2005-05-31] (Sonic Solutions) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.) U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-10-24 15:52 - 2013-10-24 15:52 - 00891167 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\SecurityCheck.exe 2013-10-24 13:10 - 2013-10-24 13:10 - 102787172 _____ C:\WINDOWS\system32\饦鵳各7 2013-10-24 12:52 - 2013-10-24 12:52 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kiki\Desktop\esetsmartinstaller_enu.exe 2013-10-23 16:46 - 2013-10-24 16:00 - 01088113 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 16:41 - 2013-10-23 16:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 14:50 - 2013-10-23 14:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 10:43 - 2013-10-23 10:44 - 00061936 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 10:39 - 2013-10-23 10:39 - 00000000 ____D C:\FRST 2013-10-22 13:10 - 2013-10-23 16:23 - 00000000 ____D C:\AdwCleaner 2013-10-22 13:09 - 2013-10-22 13:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 09:54 - 2013-10-22 09:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 09:52 - 2013-10-22 09:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-14 16:11 - 2013-10-14 16:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 18:08 - 2013-10-10 18:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 18:05 - 2013-10-10 18:06 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 18:05 - 2013-10-10 18:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 17:59 - 2013-10-10 17:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 17:59 - 2013-10-10 17:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 17:55 - 2013-10-10 17:56 - 00014017 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 17:25 - 2013-10-10 18:08 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 17:24 - 2013-07-03 04:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2013-10-10 17:24 - 2013-07-03 03:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys 2013-10-10 17:23 - 2013-07-17 02:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys 2013-10-10 17:19 - 2013-08-09 02:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2013-10-10 17:19 - 2013-08-09 02:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2013-10-10 17:19 - 2009-03-18 13:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2013-10-10 17:09 - 2013-10-10 17:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 16:49 - 2013-10-09 16:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-09-27 12:02 - 2013-09-27 12:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 2013-09-25 07:54 - 2013-09-25 07:54 - 97673008 _____ C:\WINDOWS\system32\ᆌ蘒各7 ==================== One Month Modified Files and Folders ======= 2013-10-24 16:00 - 2013-10-23 16:46 - 01088113 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-24 16:00 - 2006-12-10 21:18 - 00000280 ____H C:\WINDOWS\Tasks\AF6E075493B5BAA8.job 2013-10-24 15:52 - 2013-10-24 15:52 - 00891167 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\SecurityCheck.exe 2013-10-24 15:50 - 2005-08-20 02:49 - 00000000 ____D C:\Programme 2013-10-24 15:49 - 2005-08-20 02:56 - 01789516 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-24 15:47 - 2012-04-16 12:12 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-24 15:32 - 2013-08-20 19:32 - 00000414 _____ C:\WINDOWS\Tasks\At2.job 2013-10-24 15:32 - 2013-08-20 19:32 - 00000410 _____ C:\WINDOWS\Tasks\At1.job 2013-10-24 15:12 - 2010-01-07 19:36 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-24 13:53 - 2009-03-22 15:45 - 00001044 _____ C:\WINDOWS\Tasks\Google Software Updater.job 2013-10-24 13:10 - 2013-10-24 13:10 - 102787172 _____ C:\WINDOWS\system32\饦鵳各7 2013-10-24 12:52 - 2013-10-24 12:52 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kiki\Desktop\esetsmartinstaller_enu.exe 2013-10-24 12:23 - 2005-11-15 20:30 - 00000364 _____ C:\WINDOWS\Tasks\Symantec NetDetect.job 2013-10-24 12:12 - 2013-08-07 18:13 - 00000000 ____D C:\Programme\Mozilla Thunderbird 2013-10-24 07:32 - 2013-08-22 08:32 - 00000110 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WB.CFG 2013-10-24 07:32 - 2013-08-22 08:32 - 00000006 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WBPU-TTL.DAT 2013-10-24 07:11 - 2005-08-20 02:51 - 00000259 _____ C:\WINDOWS\wiadebug.log 2013-10-24 07:08 - 2005-08-20 02:34 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-24 07:07 - 2010-05-13 15:48 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Akamai 2013-10-24 07:07 - 2010-01-07 19:36 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-24 07:07 - 2005-08-20 02:54 - 00000000 ____D C:\WINDOWS\Registration 2013-10-24 07:07 - 2005-08-20 02:51 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-24 07:06 - 2005-08-20 03:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-23 19:46 - 2005-11-22 09:54 - 00000300 ___SH C:\Dokumente und Einstellungen\Kiki\ntuser.ini 2013-10-23 19:46 - 2005-11-22 09:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki 2013-10-23 19:46 - 2005-08-20 03:05 - 00032406 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-23 19:33 - 2005-11-24 11:26 - 00002429 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Neues Office-Dokument.lnk 2013-10-23 16:41 - 2013-10-23 16:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 16:23 - 2013-10-22 13:10 - 00000000 ____D C:\AdwCleaner 2013-10-23 14:50 - 2013-10-23 14:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 10:44 - 2013-10-23 10:43 - 00061936 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 10:39 - 2013-10-23 10:39 - 00000000 ____D C:\FRST 2013-10-23 08:59 - 2013-02-20 11:06 - 00002503 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Microsoft Office Word 2007.lnk 2013-10-22 13:09 - 2013-10-22 13:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 12:52 - 2013-05-01 20:26 - 00000000 __HDC C:\WINDOWS\$NtUninstallWdf01007$ 2013-10-22 10:09 - 2013-04-27 17:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Eigene Dateien\Online-BankingPlus 2013-10-22 09:54 - 2013-10-22 09:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 09:52 - 2013-10-22 09:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-22 09:46 - 2013-07-11 12:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2833951$ 2013-10-16 18:32 - 2005-11-21 20:16 - 00000000 ____D C:\Dokumente und Einstellungen\Toni 2013-10-14 18:41 - 2005-08-20 02:48 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2013-10-14 16:52 - 2005-08-20 02:53 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-10-14 16:11 - 2013-10-14 16:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 18:44 - 2005-08-20 02:43 - 00461232 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-10 18:13 - 2013-02-20 10:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help 2013-10-10 18:12 - 2005-08-20 02:49 - 01201066 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-10 18:08 - 2013-10-10 18:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 18:08 - 2013-10-10 17:25 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00687906 _____ C:\WINDOWS\iis6.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00634366 _____ C:\WINDOWS\FaxSetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00304468 _____ C:\WINDOWS\ocgen.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00290585 _____ C:\WINDOWS\tsoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00211967 _____ C:\WINDOWS\comsetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00205397 _____ C:\WINDOWS\updspapi.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00194526 _____ C:\WINDOWS\msmqinst.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00128194 _____ C:\WINDOWS\ntdtcsetup.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00111549 _____ C:\WINDOWS\netfxocm.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00070967 _____ C:\WINDOWS\plusoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00044290 _____ C:\WINDOWS\MedCtrOC.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00035226 _____ C:\WINDOWS\ocmsn.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00034814 _____ C:\WINDOWS\ehOCGen.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00032033 _____ C:\WINDOWS\tabletoc.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00031827 _____ C:\WINDOWS\msgsocm.log 2013-10-10 18:08 - 2012-04-12 12:49 - 00001393 _____ C:\WINDOWS\imsins.log 2013-10-10 18:06 - 2013-10-10 18:05 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 18:06 - 2013-10-10 18:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 18:06 - 2012-04-12 12:49 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-10-10 18:05 - 2013-07-21 13:00 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-10 18:05 - 2012-03-23 13:46 - 00265140 _____ C:\WINDOWS\setupapi.log 2013-10-10 18:00 - 2005-11-24 10:26 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-10 17:59 - 2013-10-10 17:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 17:59 - 2013-10-10 17:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 17:56 - 2013-10-10 17:55 - 00014017 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 17:55 - 2013-10-10 17:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 17:55 - 2009-04-29 17:38 - 00000000 ____D C:\WINDOWS\ie8updates 2013-10-10 17:09 - 2013-10-10 17:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 16:49 - 2013-10-09 16:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-09 16:49 - 2012-04-16 12:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-09 16:49 - 2011-12-03 13:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-09 16:05 - 2006-05-03 20:10 - 00000000 ____D C:\Programme\Yahoo! 2013-10-06 21:25 - 2008-12-03 12:22 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Skype 2013-10-06 21:21 - 2012-09-13 10:08 - 00002243 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk 2013-09-27 12:02 - 2013-09-27 12:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 2013-09-26 14:09 - 2012-12-12 20:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$ 2013-09-25 09:00 - 2009-07-21 21:24 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ 2013-09-25 07:54 - 2013-09-25 07:54 - 97673008 _____ C:\WINDOWS\system32\ᆌ蘒各7 Files to move or delete: ==================== C:\Windows\Tasks\At1.job C:\Windows\Tasks\At2.job Some content of TEMP: ==================== C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\718631~1.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AskSLib.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10380_b19770de.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10641_b1977ba6.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10750_b1977f85.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoDL%3FBundleId=10878_b197838c.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoRun.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\AutoRunGUI.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\bstrapInstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\drm_dialogs.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\drm_dyndata_7270012.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\EAInstall.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\eauninstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Elev-CD.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Elev-CD2.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQInstall.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQRT.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ICQTIK.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\IcqUpdater.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u10-windows-i586-p-iftw_3ca5d6e4.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u11-windows-i586-p-iftw.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u13-windows-i586-p-iftw.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u3-windows-i586-p-iftw_2cd32978.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u5-windows-i586-p-iftw_1b121abb.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\jre-6u7-windows-i586-p-iftw_bdb28397.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\Need for Speed Carbon_uninst.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\ose00000.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\secuniasi7313982473488777106.dll C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\setup_wm.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\SkypeSetup.exe C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Temp\_is35.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2005-08-20 02:33] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e C:\Windows\System32\winlogon.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a C:\Windows\System32\svchost.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 C:\Windows\System32\services.exe [2005-08-20 02:34] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc C:\Windows\System32\User32.dll [2005-08-20 02:34] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd C:\Windows\System32\userinit.exe [2005-08-20 02:34] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 C:\Windows\System32\Drivers\volsnap.sys [2005-08-20 02:34] - [2008-04-14 03:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d ==================== End Of Log ============================ --- --- --- Da ist er wieder, IE hat sich grad wieder geöffnet, wieder nach dem Hochfahren Geändert von chris6565 (24.10.2013 um 15:07 Uhr) |
25.10.2013, 11:04 | #6 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Java, Adobe und Firefox updaten. IE komplett zurücksetzen. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.
__________________ --> immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners |
26.10.2013, 15:53 | #7 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Java und Adobe sind aktualisiert, Mozilla sagt dass meine Version aktuell ist und deshalb war kein Update möglich. IE zurückgesetzt, TFC ausgeführt ABER: Heute Computer hochgefahren, etwas warten und schwups, da isser wieder. Wieder der IE, obwohl ich den eigentlich gar nicht verwende, sondern nur Firefox. Salesresourcepartners taucht auch immer nur einmal am Anfang auf, den restlichen Tag habe ich dann Ruhe, auch wenn ich den Computer neu hochfahre. Ganz schön hartnäckig das Kerlchen. Brauche bitte weiterhin Hilfe. LG Christine |
27.10.2013, 07:14 | #8 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Öffnet der völlig von alleine? Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.10.2013, 10:24 | #9 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hi Schrauber, ja, die Seite öffnet sich von alleine, aber eben immer nur einmal am Anfang wenn ich den Computer das erste mal hochfahre und nicht gleich das arbeiten anfange. Wobei heute das erste Mal nichts passiert ist. Habe gestern aber nichts verändert, außer dass ich Dateien aus einem alten Scan aus der Quarantäne von Avira gelöscht habe. Hier die Log-Dateien FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-10-2013 01 Ran by Kiki (administrator) on CHRISTINE on 27-10-2013 09:23:36 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe (Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe (RealNetworks, Inc.) C:\Programme\Online Games Manager\ogmservice.exe (pdfforge GmbH) C:\Programme\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Programme\PDF Architect\ConversionService.exe (Symantec Corporation) C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe (Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe (Canon Inc.) C:\Programme\Canon\CAL\CALMAIN.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (SigmaTel, Inc.) C:\WINDOWS\stsystra.exe (CyberLink Corp.) C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe (InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Sonic Solutions) C:\WINDOWS\system32\dla\tfswctrl.exe (Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe (Nuance Communications, Inc.) C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Microsoft Corporation) C:\Programme\Microsoft IntelliPoint\ipoint.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcmon.exe (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe (Apple Inc.) C:\Programme\iPod\bin\iPodService.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation) HKLM\...\Run: [SigmatelSysTrayApp] - C:\Windows\stsystra.exe [339968 2005-03-23] (SigmaTel, Inc.) HKLM\...\Run: [ATIPTA] - C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064 2005-08-05] (ATI Technologies, Inc.) HKLM\...\Run: [DVDLauncher] - C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe [53248 2005-02-23] (CyberLink Corp.) HKLM\...\Run: [ISUSPM Startup] - C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe [221184 2004-07-27] (InstallShield Software Corporation) HKLM\...\Run: [ISUSScheduler] - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM\...\Run: [HPDJ Taskbar Utility] - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [188416 2002-03-28] (HP) HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [dla] - C:\WINDOWS\system32\dla\tfswctrl.exe [122941 2005-05-31] (Sonic Solutions) HKLM\...\Run: [Corel Reminder] - [x] HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [413696 2008-11-04] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [290088 2008-11-20] (Apple Inc.) HKLM\...\Run: [SSBkgdUpdate] - C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [PaperPort PTD] - C:\Programme\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [IndexSearch] - C:\Programme\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [PPort11reminder] - C:\Programme\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM\...\Run: [BrMfcWnd] - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe [1089536 2008-02-19] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Programme\Brother\ControlCenter3\brctrcen.exe [86016 2007-12-21] (Brother Industries, Ltd.) HKLM\...\Run: [IntelliPoint] - c:\Programme\Microsoft IntelliPoint\ipoint.exe [1468296 2009-05-28] (Microsoft Corporation) HKLM\...\Run: [Google Updater] - C:\Programme\Google\Google Updater\GoogleUpdater.exe [161336 2011-09-17] (Google) HKLM\...\Run: [ToADiMon.exe] - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe [286720 2010-04-08] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM\...\Policies\Explorer: [NoCDBurning] 0 HKCU\...\Run: [Akamai NetSession Interface] - C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\Administrator\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\Default User\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Broadcom Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programme\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File Toolbar: HKCU - No Name - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} hxxp://arcade.icq.com/carlo/zuma/popcaploader_v5.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll (Broadcom Corporation) Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll () Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [147456] (Apple Inc.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @garmin.com/GpsControl - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.3.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @zylom.com/ZylomGamesPlayer - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: No Name - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\Extensions.rdf FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\installed-extensions-processed.txt FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Programme\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Programme\PDF Architect\FFPDFArchitectExt Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Programme\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Programme\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Programme\Google\Chrome\Application\29.0.1547.66\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Programme\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Programme\Mozilla Firefox\plugins\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (ScorchPlugin) - C:\Programme\Mozilla Firefox\plugins\NPSibelius.dll () CHR Plugin: (Zylom Plugin) - C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll (Zylom) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Updater) - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Programme\Java\jre6\bin\plugin2\npjp2.dll No File CHR Plugin: (iTunes Application Detector) - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Drive) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ========================== Services (Whitelisted) ================= R2 Akamai; c:\programme\gemeinsame dateien\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424 2008-11-07] (Apple Inc.) R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [238888 2008-08-29] (Apple Inc.) R2 btwdins; C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe [163840 2004-08-16] (Broadcom Corporation) R2 CCALib8; C:\Programme\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194104 2011-09-17] (Google) S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [536872 2008-11-20] (Apple Inc.) R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-09-18] (Mozilla Foundation) S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation) R2 ogmservice; C:\Programme\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.) S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation) R2 PDF Architect Helper Service; C:\Programme\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Programme\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [160944 2012-07-13] (Skype Technologies) R2 SymWSC; C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe [316544 2004-11-02] (Symantec Corporation) S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation) R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== S4 abp480n5; C:\Windows\system32\DRIVERS\ABP480N5.SYS [23552 2001-08-17] (Microsoft Corporation) R2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [25244 1999-09-10] (Adaptec) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R3 BrScnUsb; C:\Windows\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [17024 2004-08-16] (Broadcom Corporation) R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30267 2004-08-16] (Broadcom Corporation) R0 BTKRNL; C:\Windows\System32\drivers\btkrnl.sys [1241034 2004-08-16] (Broadcom Corporation) R2 BTSERIAL; C:\WINDOWS\system32\drivers\btserial.sys [23271 2004-08-16] (Broadcom Corporation) R2 BTSLBCSP; C:\WINDOWS\system32\drivers\btslbcsp.sys [222876 2004-08-16] (Broadcom Corporation) R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [147896 2004-08-16] (Broadcom Corporation) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [54328 2004-08-18] (Broadcom Corporation) R2 drvnddm; C:\Windows\System32\drivers\drvnddm.sys [40544 2005-04-21] (Sonic Solutions) S3 GigasetGenericUSB; C:\Windows\System32\DRIVERS\GigasetGenericUSB.sys [44032 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.) S3 MIINPazX; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [19200 2010-08-27] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation) R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [66048 2005-09-29] (Protection Technology) R1 sscdbhk5; C:\Windows\System32\drivers\sscdbhk5.sys [5627 2005-05-13] (Sonic Solutions) R1 SSHDRV5C; C:\WINDOWS\system32\drivers\SSHDRV5C.sys [34816 2005-11-27] () R1 SSHDRV86; C:\WINDOWS\system32\drivers\SSHDRV86.sys [81408 2005-11-22] () S3 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-05] (Avira GmbH) R1 ssrtln; C:\Windows\System32\drivers\ssrtln.sys [23545 2005-05-13] (Sonic Solutions) R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2008-10-16] () R2 STEC3; C:\WINDOWS\system32\STEC3.sys [2368 2007-04-16] (AntiCracking) R3 STHDA; C:\Windows\System32\drivers\sthda.sys [180864 2005-06-14] (SigmaTel, Inc.) R2 tfsnboio; C:\Windows\System32\dla\tfsnboio.sys [25725 2005-05-31] (Sonic Solutions) R2 tfsncofs; C:\Windows\System32\dla\tfsncofs.sys [34845 2005-05-31] (Sonic Solutions) R2 tfsndrct; C:\Windows\System32\dla\tfsndrct.sys [4125 2005-05-31] (Sonic Solutions) R2 tfsndres; C:\Windows\System32\dla\tfsndres.sys [2273 2005-05-31] (Sonic Solutions) R2 tfsnifs; C:\Windows\System32\dla\tfsnifs.sys [86876 2005-05-31] (Sonic Solutions) R2 tfsnopio; C:\Windows\System32\dla\tfsnopio.sys [15069 2005-05-31] (Sonic Solutions) R2 tfsnpool; C:\Windows\System32\dla\tfsnpool.sys [6365 2005-05-31] (Sonic Solutions) R2 tfsnudf; C:\Windows\System32\dla\tfsnudf.sys [98716 2005-05-31] (Sonic Solutions) R2 tfsnudfa; C:\Windows\System32\dla\tfsnudfa.sys [100605 2005-05-31] (Sonic Solutions) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.) U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-10-27 09:03 - 2013-10-27 09:03 - 103214166 _____ C:\WINDOWS\system32\各7 2013-10-25 11:32 - 2013-10-25 11:32 - 00448512 _____ (OldTimer Tools) C:\Dokumente und Einstellungen\Kiki\Desktop\TFC.exe 2013-10-25 11:30 - 2013-10-25 11:30 - 00001804 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk 2013-10-25 11:30 - 2013-10-25 11:30 - 00001714 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader XI.lnk 2013-10-24 16:10 - 2013-10-24 16:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java 2013-10-24 16:10 - 2013-10-08 06:50 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-24 16:10 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-24 16:10 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-24 16:10 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-24 16:10 - 2013-10-08 06:29 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-24 16:09 - 2013-10-24 16:10 - 00004837 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-24 14:52 - 2013-10-24 14:52 - 00891167 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\SecurityCheck.exe 2013-10-24 11:52 - 2013-10-24 11:52 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kiki\Desktop\esetsmartinstaller_enu.exe 2013-10-23 15:46 - 2013-10-27 09:22 - 01089001 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 15:41 - 2013-10-23 15:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 13:50 - 2013-10-23 13:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 09:43 - 2013-10-23 09:44 - 00061936 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 09:39 - 2013-10-23 09:39 - 00000000 ____D C:\FRST 2013-10-22 12:10 - 2013-10-23 15:23 - 00000000 ____D C:\AdwCleaner 2013-10-22 12:09 - 2013-10-22 12:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 08:54 - 2013-10-22 08:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 08:52 - 2013-10-22 08:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-14 15:11 - 2013-10-14 15:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 17:08 - 2013-10-10 17:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 17:05 - 2013-10-10 17:06 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 17:05 - 2013-10-10 17:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 16:59 - 2013-10-10 16:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 16:55 - 2013-10-25 12:02 - 00018667 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 16:25 - 2013-10-10 17:08 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 16:24 - 2013-07-03 03:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2013-10-10 16:24 - 2013-07-03 02:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys 2013-10-10 16:23 - 2013-07-17 01:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2013-10-10 16:23 - 2013-07-17 01:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys 2013-10-10 16:23 - 2013-07-17 01:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys 2013-10-10 16:19 - 2013-08-09 01:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2013-10-10 16:19 - 2013-08-09 01:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2013-10-10 16:19 - 2009-03-18 12:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2013-10-10 16:09 - 2013-10-10 16:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 15:49 - 2013-10-09 15:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-09-27 11:02 - 2013-09-27 11:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 ==================== One Month Modified Files and Folders ======= 2013-10-27 09:22 - 2013-10-23 15:46 - 01089001 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-27 09:12 - 2010-01-07 18:36 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-27 09:04 - 2005-08-20 01:49 - 01247790 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-27 09:03 - 2013-10-27 09:03 - 103214166 _____ C:\WINDOWS\system32\各7 2013-10-27 09:02 - 2005-08-20 01:51 - 00000259 _____ C:\WINDOWS\wiadebug.log 2013-10-27 09:01 - 2005-08-20 01:34 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-27 09:00 - 2006-12-10 20:18 - 00000280 ____H C:\WINDOWS\Tasks\AF6E075493B5BAA8.job 2013-10-27 09:00 - 2005-08-20 01:56 - 01850845 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-27 09:00 - 2005-08-20 01:54 - 00000000 ____D C:\WINDOWS\Registration 2013-10-27 08:59 - 2010-05-13 14:48 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Akamai 2013-10-27 08:59 - 2010-01-07 18:36 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-27 08:59 - 2005-08-20 01:51 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-27 08:58 - 2005-08-20 02:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-26 20:37 - 2005-11-22 08:54 - 00000300 ___SH C:\Dokumente und Einstellungen\Kiki\ntuser.ini 2013-10-26 20:37 - 2005-08-20 02:05 - 00032568 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-26 20:36 - 2005-11-22 08:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki 2013-10-26 20:35 - 2013-08-07 17:13 - 00000000 ____D C:\Programme\Mozilla Thunderbird 2013-10-26 20:32 - 2013-08-20 18:32 - 00000414 _____ C:\WINDOWS\Tasks\At2.job 2013-10-26 20:32 - 2013-08-20 18:32 - 00000410 _____ C:\WINDOWS\Tasks\At1.job 2013-10-26 19:47 - 2012-04-16 11:12 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-26 19:23 - 2005-11-15 19:30 - 00000364 _____ C:\WINDOWS\Tasks\Symantec NetDetect.job 2013-10-26 15:36 - 2013-08-22 07:32 - 00000113 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WB.CFG 2013-10-26 15:36 - 2013-08-22 07:32 - 00000006 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WBPU-TTL.DAT 2013-10-25 12:02 - 2013-10-10 16:55 - 00018667 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-25 11:32 - 2013-10-25 11:32 - 00448512 _____ (OldTimer Tools) C:\Dokumente und Einstellungen\Kiki\Desktop\TFC.exe 2013-10-25 11:30 - 2013-10-25 11:30 - 00001804 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk 2013-10-25 11:30 - 2013-10-25 11:30 - 00001714 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader XI.lnk 2013-10-25 11:30 - 2005-11-24 09:03 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Adobe 2013-10-25 11:30 - 2005-08-20 01:48 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2013-10-25 11:29 - 2005-11-24 09:02 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Adobe 2013-10-25 11:28 - 2007-11-20 15:11 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe 2013-10-25 11:28 - 2005-11-15 19:27 - 00000000 ____D C:\Programme\Adobe 2013-10-24 16:10 - 2013-10-24 16:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java 2013-10-24 16:10 - 2013-10-24 16:09 - 00004837 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-24 16:10 - 2005-11-15 19:22 - 00000000 ____D C:\Programme\Java 2013-10-24 16:10 - 2005-11-15 19:22 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Java 2013-10-24 14:52 - 2013-10-24 14:52 - 00891167 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\SecurityCheck.exe 2013-10-24 14:50 - 2005-08-20 01:49 - 00000000 ____D C:\Programme 2013-10-24 12:53 - 2009-03-22 14:45 - 00001044 _____ C:\WINDOWS\Tasks\Google Software Updater.job 2013-10-24 11:52 - 2013-10-24 11:52 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kiki\Desktop\esetsmartinstaller_enu.exe 2013-10-23 18:33 - 2005-11-24 10:26 - 00002429 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Neues Office-Dokument.lnk 2013-10-23 15:41 - 2013-10-23 15:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 15:23 - 2013-10-22 12:10 - 00000000 ____D C:\AdwCleaner 2013-10-23 13:50 - 2013-10-23 13:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 09:44 - 2013-10-23 09:43 - 00061936 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 09:39 - 2013-10-23 09:39 - 00000000 ____D C:\FRST 2013-10-23 07:59 - 2013-02-20 10:06 - 00002503 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Microsoft Office Word 2007.lnk 2013-10-22 12:09 - 2013-10-22 12:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 11:52 - 2013-05-01 19:26 - 00000000 __HDC C:\WINDOWS\$NtUninstallWdf01007$ 2013-10-22 09:09 - 2013-04-27 16:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Eigene Dateien\Online-BankingPlus 2013-10-22 08:54 - 2013-10-22 08:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 08:52 - 2013-10-22 08:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-22 08:46 - 2013-07-11 11:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2833951$ 2013-10-16 17:32 - 2005-11-21 19:16 - 00000000 ____D C:\Dokumente und Einstellungen\Toni 2013-10-14 15:52 - 2005-08-20 01:53 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-10-14 15:11 - 2013-10-14 15:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 17:44 - 2005-08-20 01:43 - 00461232 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-10 17:13 - 2013-02-20 09:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help 2013-10-10 17:08 - 2013-10-10 17:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 17:08 - 2013-10-10 16:25 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00687906 _____ C:\WINDOWS\iis6.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00634366 _____ C:\WINDOWS\FaxSetup.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00304468 _____ C:\WINDOWS\ocgen.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00290585 _____ C:\WINDOWS\tsoc.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00211967 _____ C:\WINDOWS\comsetup.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00205397 _____ C:\WINDOWS\updspapi.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00194526 _____ C:\WINDOWS\msmqinst.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00128194 _____ C:\WINDOWS\ntdtcsetup.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00111549 _____ C:\WINDOWS\netfxocm.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00070967 _____ C:\WINDOWS\plusoc.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00044290 _____ C:\WINDOWS\MedCtrOC.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00035226 _____ C:\WINDOWS\ocmsn.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00034814 _____ C:\WINDOWS\ehOCGen.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00032033 _____ C:\WINDOWS\tabletoc.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00031827 _____ C:\WINDOWS\msgsocm.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00001393 _____ C:\WINDOWS\imsins.log 2013-10-10 17:06 - 2013-10-10 17:05 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 17:06 - 2013-10-10 17:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 17:06 - 2012-04-12 11:49 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-10-10 17:05 - 2013-07-21 12:00 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-10 17:05 - 2012-03-23 12:46 - 00265140 _____ C:\WINDOWS\setupapi.log 2013-10-10 17:00 - 2005-11-24 09:26 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-10 16:59 - 2013-10-10 16:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 16:55 - 2009-04-29 16:38 - 00000000 ____D C:\WINDOWS\ie8updates 2013-10-10 16:09 - 2013-10-10 16:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 15:49 - 2013-10-09 15:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-09 15:49 - 2012-04-16 11:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-09 15:49 - 2011-12-03 12:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-09 15:05 - 2006-05-03 19:10 - 00000000 ____D C:\Programme\Yahoo! 2013-10-08 06:50 - 2013-10-24 16:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-08 06:46 - 2013-10-24 16:10 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-08 06:46 - 2013-10-24 16:10 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-08 06:46 - 2013-10-24 16:10 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-08 06:29 - 2013-10-24 16:10 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-06 20:25 - 2008-12-03 11:22 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Skype 2013-10-06 20:21 - 2012-09-13 09:08 - 00002243 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk 2013-09-27 11:02 - 2013-09-27 11:02 - 98201609 _____ C:\WINDOWS\system32\锐뜸各7 Files to move or delete: ==================== C:\Windows\Tasks\At1.job C:\Windows\Tasks\At2.job ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2005-08-20 01:33] - [2008-04-14 03:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e C:\Windows\System32\winlogon.exe [2005-08-20 01:34] - [2008-04-14 03:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a C:\Windows\System32\svchost.exe [2005-08-20 01:34] - [2008-04-14 03:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 C:\Windows\System32\services.exe [2005-08-20 01:34] - [2009-02-09 12:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc C:\Windows\System32\User32.dll [2005-08-20 01:34] - [2008-04-14 03:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd C:\Windows\System32\userinit.exe [2005-08-20 01:34] - [2008-04-14 03:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 C:\Windows\System32\Drivers\volsnap.sys [2005-08-20 01:34] - [2008-04-14 02:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d ==================== End Of Log ============================ --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 26-10-2013 01 Ran by Kiki at 2013-10-27 09:25:41 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611B434-FFA4-0100-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616663C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DFDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AEDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618F764-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614FDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610F284-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F7DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861545A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F632C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF6DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {864B3DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617D474-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F2674-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B3474-FFA4-0100-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8626C2D4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612AC74-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86037DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86161554-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861404A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86062484-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610CDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {862CE9CC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86401DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8608E20C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618F464-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866CC31C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86038DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860AA70C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86237CE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602A2A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FA127C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861709E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86120A94-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865EF98C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616E16C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861BF45C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E36C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86114A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614D2DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860ED5C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8630B940-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86124DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AC964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8613BC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8634C424-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86151DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D8B44-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A02E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E070C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615B29C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F55BC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86012BCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606EDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86094C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DB6E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602493C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86115DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602552C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86008A5C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {863D4B6C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86102AA4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861F6364-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8613AA34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8639162C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B4A14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DAA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861BBDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861C3534-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610845C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619D634-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86399D8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {862A9DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86189DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86177DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {863087F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FE4C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE18C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A0C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8639289C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619A7DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D6DB4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE4F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B5C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861E18AC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FB68C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606A59C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8637AAAC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866A88B4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F5DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86135564-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000000-0000-0000-0000-000000000000} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86399704-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86119DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A6DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86119B24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861963B4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861745E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617DDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8632ADDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D4734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86100A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612C5C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FD994-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86175734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FDC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86368514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861DDA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D9B8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8604C964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612CA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86040054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865F66E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86153284-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861FA494-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A4234-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86437054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EA2C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861681A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D477C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86004DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618EBCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861214A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8607CB24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86057054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EADDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86460054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8640B9CC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86082A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616AA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606423C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618B454-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861874AC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619FB64-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B9DB4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612A54C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611A26C-FFA4-00EF-0D24-347CA8A3377C} AV: Avira Desktop (Disabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86170DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866A04EC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861DFA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D5964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FB514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {BADB0D00-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8644C5EC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E92BC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D432C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610799C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF893C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A0A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614BDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612B874-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86047C1C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8600A6FC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8668D24C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86168854-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A35D4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86063384-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8622A94C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86684734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {852C5AE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615DDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86058574-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A75E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85F7BCE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F9354-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F98F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861288DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606CA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86191C34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A560C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616077C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86187434-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000246-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618621C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617EB4C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE62C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86689914-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615589C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616DAD4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86490DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DBC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860C453C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86110DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AB1FC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610EC44-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A793C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8621D8F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865178A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865D4DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FF4C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F4554-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617124C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611D63C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8603839C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86056734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610DC34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EAA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860C3614-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860ACDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86175A14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F6A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86120514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DEBCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86174C2C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86146DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612077C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF630C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8668F354-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86691994-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86683DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86393054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B9054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860BBDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86127A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861C15C4-FFA4-00EF-0D24-347CA8A3377C} Could not list Security Center items. Check WMI. ==================== Installed Programs ====================== Adobe Acrobat 5.0 (Version: 5.0) Adobe Flash Player 11 ActiveX (Version: 11.9.900.117) Adobe Flash Player 11 Plugin (Version: 11.9.900.117) Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05) Adobe Shockwave Player (Version: 10.2.0.23) Akamai NetSession Interface Service Apple Mobile Device Support (Version: 2.1.2.7) Apple Software Update (Version: 2.1.1.116) ARTEuro (Version: 1.00.0000) ATI Display Driver (Version: 8.162-050803a2-025672C-Dell) ATI Systemsteuerung (Version: 6.14.10.5160) Avira Free Antivirus (Version: 13.0.0.4052) BDE Bonjour (Version: 1.0.105) Brother MFL-Pro Suite DCP-165C (Version: 1.0.0.0) Canon Camera Access Library (Version: 8.4.0.1) Canon Camera Support Core Library (Version: 7.3.1.6) Canon G.726 WMP-Decoder (Version: 1.1.0.4) CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.5.0.3) Canon Internet Library for ZoomBrowser EX (Version: 1.6.1.6) Canon MovieEdit Task for ZoomBrowser EX (Version: 2.6.0.4) Canon RAW Image Task for ZoomBrowser EX (Version: 0.9.3.9) Canon Utilities CameraWindow (Version: 7.1.0.2) Canon Utilities CameraWindow DC (Version: 7.1.0.7) Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX (Version: 5.4.5.17) Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX (Version: 6.4.2.16) Canon Utilities EOS Utility (Version: 1.1.0.8) Canon Utilities MyCamera (Version: 6.4.0.5) Canon Utilities MyCamera DC (Version: 7.0.1.8) Canon Utilities PhotoStitch (Version: 3.1.21.45) Canon Utilities RemoteCapture Task for ZoomBrowser EX (Version: 1.7.1.9) Canon Utilities ZoomBrowser EX (Version: 6.1.0.20) Canon ZoomBrowser EX Memory Card Utility (Version: 1.1.0.8) CCleaner (Version: 3.16) CDex extraction audio Citrix-ICA-Client Codeur Windows Media Série 9 Codeur Windows Media Série 9 (Version: 9.00.2980) ContentSAFER for Wizmax CorelDRAW 10 CorelDRAW 10 (Version: 10) Dell Driver Reset Tool (Version: 1.02.0000) Dell Picture Studio v3.0 (Version: 3.0.0) Dell System Restore (Version: 2.00.0000) ElsterFormular (Version: 14.3.11574) ElsterFormular 2007/2008 (Version: 9.1.0.0) ElsterFormular 2008/2009 (Version: 10.3.1.0) Free Audio Converter version 5.0.17.903 (Version: 5.0.17.903) Free Studio version 5.3.3 Free YouTube to MP3 Converter version 3.11.35.1031 (Version: 3.11.35.1031) Garmin BaseCamp (Version: 4.2.2) Garmin TransAlpin v2 (Version: 2.0.0.0) Garmin Trip and Waypoint Manager v5 (Version: 5.0.0.0) Garmin USB Drivers (Version: 2.3.1.0) GemMaster Mystic Gigaset QuickSync (Version: 7.2.0844.6) Google Chrome (Version: 30.0.1599.101) Google Earth (Version: 7.1.1.1888) Google Updater (Version: 2.4.2432.1652) Google Video Player GPSBabel 1.4.1 GPS-Track-Analyse.NET 6.0 Hotfix für Windows Internet Explorer 7 (KB947864) (Version: 1) Hotfix für Windows XP (KB2756822) (Version: 1) Hotfix für Windows XP (KB2779562) (Version: 1) ICQ6.5 (Version: 6.5) Image Resizer Powertoy for Windows XP (Version: 1.00.0001) Intel(R) PRO Network Connections Drivers Intel(R) PROSet for Wired Connections (Version: 9.20.0000) IrfanView (remove only) (Version: 4.28) iTunes (Version: 8.0.2.20) Jasc Paint Shop Photo Album 5 (Version: 5.22) Jasc Paint Shop Pro Studio, Dell Editon (Version: 1.01.0000) Java 7 Update 45 (Version: 7.0.450) Java Auto Updater (Version: 2.1.9.8) LiveUpdate 2.5 (Symantec Corporation) (Version: 2.5.55.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Messenger Plus! Live & Sponsor (CiD) (Version: 4.82.0.368) Microsoft .NET Framework 1.0 Hotfix (KB2604042) Microsoft .NET Framework 1.0 Hotfix (KB2656378) Microsoft .NET Framework 1.0 Security Update (KB2698035) Microsoft .NET Framework 1.0 Security Update (KB2742607) Microsoft .NET Framework 1.0 Security Update (KB2833951) Microsoft .NET Framework 1.1 (Version: 1.1.4322) Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322) Microsoft .NET Framework 1.1 Security Update (KB2698023) Microsoft .NET Framework 1.1 Security Update (KB2833941) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 2.0 Language Pack - DEU Microsoft .NET Framework 2.0 Language Pack - DEU (Version: 1.1.50727.42) Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729) Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Choice Guard (Version: 2.0.48.0) Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1) Microsoft IntelliPoint 7.0 (Version: 7.0.260.0) Microsoft Internationalized Domain Names Mitigation APIs Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft National Language Support Downlevel APIs Microsoft Office 2000 Disc 2 (Version: 9.00.2816) Microsoft Office 2000 Professional (Version: 9.00.2816) Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Software Update for Web Folders (German) 12 (Version: 12.0.6612.1000) Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft WinUsb 1.0 Microsoft Works 7.0 (Version: 07.02.0702) Mozilla Firefox 24.0 (x86 de) (Version: 24.0) Mozilla Maintenance Service (Version: 24.0) Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8) MSN MSVCRT (Version: 14.0.1468.721) MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0) MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0) Musicload Manager NetObjects Fusion 7 Norton Security Center (Version: 2005.1.0.111) OLYMPUS CAMEDIA Master 4.1 Online Games Manager v1.21 (Version: 1.21.2) Online-Banking+ Online-Banking+ (Version: 15.2.1.18) PaperPort Image Printer (Version: 1.00.0000) PC Inspector File Recovery (Version: 4.0) PDF Architect (Version: 1.1.83.9982) PDFCreator (Version: 1.7.0) Phonetik (Version: 1.0.0) PixiePack Codec Pack (Version: 1.0.100.0) PowerDVD 5.5 QuickTime (Version: 7.55.90.70) RealPlayer SAMSUNG Mobile Modem Driver Set Samsung Mobile phone USB driver Software SAMSUNG Mobile USB Modem 1.0 Software SAMSUNG Mobile USB Modem Software Samsung PC Studio 3 (Version: 3.0.0.71207) Samsung PC Studio 3 (Version: 3.2.2.80705) Samsung PC Studio 3 USB Driver Installer (Version: 3.2.0.70701) SamsungMediaStudio Sandlot Games Client Services 1.2.2 ScanSoft PaperPort 11 (Version: 11.1.0000) Schmidt Solitaire SEGA Rally AUTO BILD DEMO (Version: 1.00.0000) Segoe UI (Version: 14.0.4327.805) Sibelius Scorch (Firefox, Opera, Netscape only) (Version: 5.2.1) Sicherheitsupdate für Windows Internet Explorer 7 (KB928090) (Version: 20070117.120000) Sicherheitsupdate für Windows Internet Explorer 7 (KB929969) (Version: 20061222.120000) Sicherheitsupdate für Windows Internet Explorer 7 (KB931768) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB933566) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB937143) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB938127) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB939653) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB942615) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB944533) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB950759) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB953838) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB956390) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB958215) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB960714) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB961260) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB963027) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2761465) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2792100) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2797052) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2799329) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2809289) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2817183) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2829530) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2838727) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2847204) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2870699) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2879017) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (Version: 1) Sicherheitsupdate für Windows Media Player (KB2834904) Sicherheitsupdate für Windows Media Player (KB2834904-v2) Sicherheitsupdate für Windows Media Player 6.4 (KB925398) Sicherheitsupdate für Windows XP (KB2621440) (Version: 1) Sicherheitsupdate für Windows XP (KB2641653) (Version: 1) Sicherheitsupdate für Windows XP (KB2647518) (Version: 1) Sicherheitsupdate für Windows XP (KB2653956) (Version: 1) Sicherheitsupdate für Windows XP (KB2655992) (Version: 1) Sicherheitsupdate für Windows XP (KB2659262) (Version: 1) Sicherheitsupdate für Windows XP (KB2676562) (Version: 1) Sicherheitsupdate für Windows XP (KB2685939) (Version: 1) Sicherheitsupdate für Windows XP (KB2686509) (Version: 1) Sicherheitsupdate für Windows XP (KB2691442) (Version: 1) Sicherheitsupdate für Windows XP (KB2695962) (Version: 1) Sicherheitsupdate für Windows XP (KB2698365) (Version: 1) Sicherheitsupdate für Windows XP (KB2705219) (Version: 1) Sicherheitsupdate für Windows XP (KB2707511) (Version: 1) Sicherheitsupdate für Windows XP (KB2709162) (Version: 1) Sicherheitsupdate für Windows XP (KB2712808) (Version: 1) Sicherheitsupdate für Windows XP (KB2718523) (Version: 1) Sicherheitsupdate für Windows XP (KB2719985) (Version: 1) Sicherheitsupdate für Windows XP (KB2723135) (Version: 1) Sicherheitsupdate für Windows XP (KB2724197) (Version: 1) Sicherheitsupdate für Windows XP (KB2727528) (Version: 1) Sicherheitsupdate für Windows XP (KB2731847) (Version: 1) Sicherheitsupdate für Windows XP (KB2753842) (Version: 1) Sicherheitsupdate für Windows XP (KB2753842-v2) (Version: 2) Sicherheitsupdate für Windows XP (KB2757638) (Version: 1) Sicherheitsupdate für Windows XP (KB2758857) (Version: 1) Sicherheitsupdate für Windows XP (KB2761226) (Version: 1) Sicherheitsupdate für Windows XP (KB2770660) (Version: 1) Sicherheitsupdate für Windows XP (KB2778344) (Version: 1) Sicherheitsupdate für Windows XP (KB2779030) (Version: 1) Sicherheitsupdate für Windows XP (KB2780091) (Version: 1) Sicherheitsupdate für Windows XP (KB2799494) (Version: 1) Sicherheitsupdate für Windows XP (KB2802968) (Version: 1) Sicherheitsupdate für Windows XP (KB2807986) (Version: 1) Sicherheitsupdate für Windows XP (KB2808735) (Version: 1) Sicherheitsupdate für Windows XP (KB2813170) (Version: 1) Sicherheitsupdate für Windows XP (KB2813345) (Version: 1) Sicherheitsupdate für Windows XP (KB2820197) (Version: 1) Sicherheitsupdate für Windows XP (KB2820917) (Version: 1) Sicherheitsupdate für Windows XP (KB2829361) (Version: 1) Sicherheitsupdate für Windows XP (KB2834886) (Version: 1) Sicherheitsupdate für Windows XP (KB2839229) (Version: 1) Sicherheitsupdate für Windows XP (KB2845187) (Version: 1) Sicherheitsupdate für Windows XP (KB2847311) (Version: 1) Sicherheitsupdate für Windows XP (KB2849470) (Version: 1) Sicherheitsupdate für Windows XP (KB2850851) (Version: 1) Sicherheitsupdate für Windows XP (KB2850869) (Version: 1) Sicherheitsupdate für Windows XP (KB2859537) (Version: 1) Sicherheitsupdate für Windows XP (KB2862330) (Version: 1) Sicherheitsupdate für Windows XP (KB2862335) (Version: 1) Sicherheitsupdate für Windows XP (KB2864063) (Version: 1) Sicherheitsupdate für Windows XP (KB2868038) (Version: 1) Sicherheitsupdate für Windows XP (KB2876217) (Version: 1) Sicherheitsupdate für Windows XP (KB2876315) (Version: 1) Sicherheitsupdate für Windows XP (KB2883150) (Version: 1) Sicherheitsupdate für Windows XP (KB923689) Sitecom Bluetooth Software (Version: 3.0.1.910) Skype Click to Call (Version: 5.6.8442) Skype™ 5.10 (Version: 5.10.116) Sonic DLA (Version: 4.98) Sonic Encoders (Version: 1.00) Sonic MyDVD LE (Version: 6.1.1) Sonic RecordNow Audio (Version: 2.0.0) Sonic RecordNow Copy (Version: 2.0.0) Sonic RecordNow Data (Version: 2.0.0) Sonic Update Manager (Version: 3.0.0) StarOffice 8 (Version: 8.00.8945) Tiscali Internet (Version: 1.0.0.25) T-Online 6.0 T-Online Installationsdateien (Version: 5.0) Transalp 2003 Ulead COOL 360 1.0 Ulead Photo Explorer 8.0 SE Basic (Version: 8.0) Ulead Photo Express 5 SE (Version: 5.0) Uninstall 1.0.0.1 Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update für Windows Internet Explorer 8 (KB2598845) (Version: 1) Update für Windows XP (KB2661254-v2) (Version: 2) Update für Windows XP (KB2718704) (Version: 1) Update für Windows XP (KB2736233) (Version: 1) Update für Windows XP (KB2749655) (Version: 1) Update für Windows XP (KB2863058) (Version: 1) WebFldrs XP (Version: 9.50.7523) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0) Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0017.0) Windows Genuine Advantage Validation Tool (KB892130) Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2) Windows Internet Explorer 7 (Version: 20061107.210142) Windows Internet Explorer 8 (Version: 20090308.140743) Windows Live Anmelde-Assistent (Version: 5.000.818.6) Windows Live Call (Version: 14.0.8064.0206) Windows Live Communications Platform (Version: 14.0.8064.206) Windows Live Essentials (Version: 14.0.8089.0726) Windows Live Essentials (Version: 14.0.8089.726) Windows Live Messenger (Version: 14.0.8089.0726) Windows Live-Uploadtool (Version: 14.0.8014.1029) Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player Firefox Plugin (Version: 1.0.0.8) Windows XP Service Pack 3 (Version: 20080414.031514) WinGDB3 3.62 (Version: 3.62 ) WinRAR Archivierer XviD MPEG-4 Video Codec (Version: XviD-1.0.3-20122004) Zylom Games Player Plugin ==================== Restore Points ========================= 29-07-2013 06:16:48 Systemprüfpunkt 30-07-2013 07:30:37 Systemprüfpunkt 31-07-2013 15:16:47 Systemprüfpunkt 01-08-2013 16:06:28 Systemprüfpunkt 02-08-2013 16:36:20 Systemprüfpunkt 04-08-2013 12:27:33 Systemprüfpunkt 05-08-2013 12:46:53 Systemprüfpunkt 06-08-2013 13:34:17 Systemprüfpunkt 07-08-2013 15:49:11 Systemprüfpunkt 08-08-2013 16:32:24 Systemprüfpunkt 09-08-2013 16:45:04 Systemprüfpunkt 10-08-2013 16:51:27 Systemprüfpunkt 11-08-2013 17:44:31 Systemprüfpunkt 12-08-2013 17:46:09 Systemprüfpunkt 14-08-2013 06:43:28 Software Distribution Service 3.0 15-08-2013 07:41:07 Systemprüfpunkt 16-08-2013 08:44:19 Systemprüfpunkt 17-08-2013 09:35:10 Systemprüfpunkt 19-08-2013 07:41:27 Systemprüfpunkt 19-08-2013 12:10:16 Java 7 Update 10 wird entfernt 19-08-2013 12:11:11 Java 7 Update 25 wird installiert 20-08-2013 16:59:15 Systemprüfpunkt 22-08-2013 06:14:34 Systemprüfpunkt 23-08-2013 07:07:53 Systemprüfpunkt 26-08-2013 10:07:19 Systemprüfpunkt 27-08-2013 14:16:43 Systemprüfpunkt 28-08-2013 07:44:27 Software Distribution Service 3.0 29-08-2013 08:30:53 Systemprüfpunkt 30-08-2013 09:17:10 Systemprüfpunkt 31-08-2013 14:59:48 Systemprüfpunkt 01-09-2013 15:50:58 Systemprüfpunkt 02-09-2013 16:40:46 Systemprüfpunkt 04-09-2013 17:14:02 Systemprüfpunkt 08-09-2013 15:14:10 Systemprüfpunkt 10-09-2013 07:44:02 Systemprüfpunkt 12-09-2013 08:25:08 Systemprüfpunkt 13-09-2013 06:35:23 Software Distribution Service 3.0 13-09-2013 07:35:03 Software Distribution Service 3.0 13-09-2013 07:41:42 Software Distribution Service 3.0 17-09-2013 08:45:58 Systemprüfpunkt 18-09-2013 08:48:17 Systemprüfpunkt 19-09-2013 09:56:48 Systemprüfpunkt 20-09-2013 11:41:32 Systemprüfpunkt 22-09-2013 10:32:30 Systemprüfpunkt 23-09-2013 11:08:45 Systemprüfpunkt 25-09-2013 06:27:56 Systemprüfpunkt 26-09-2013 08:58:07 Systemprüfpunkt 27-09-2013 09:04:43 Systemprüfpunkt 05-10-2013 09:05:39 Systemprüfpunkt 06-10-2013 19:05:06 Systemprüfpunkt 09-10-2013 14:55:33 Systemprüfpunkt 10-10-2013 15:25:29 Systemprüfpunkt 10-10-2013 15:51:09 Software Distribution Service 3.0 14-10-2013 14:40:37 Software Distribution Service 3.0 16-10-2013 09:25:58 Systemprüfpunkt 22-10-2013 07:36:27 Systemprüfpunkt 23-10-2013 08:14:23 Systemprüfpunkt 24-10-2013 08:35:59 Systemprüfpunkt 24-10-2013 15:06:12 Java(TM) 6 Update 31 wird entfernt 24-10-2013 15:08:53 Java 7 Update 45 wird installiert 25-10-2013 11:00:08 Software Distribution Service 3.0 26-10-2013 15:11:56 Systemprüfpunkt ==================== Hosts content: ========================== 2005-08-20 01:33 - 2006-12-25 20:03 - 00004188 ____N C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 127.0.0.1 cdn.errorsafe.com ## added by CiD 127.0.0.1 cdn.winsoftware.com ## added by CiD 127.0.0.1 de.errorsafe.com ## added by CiD 127.0.0.1 de.winantivirus.com ## added by CiD 127.0.0.1 download.cdn.drivecleaner.com ## added by CiD 127.0.0.1 download.cdn.errorsafe.com ## added by CiD 127.0.0.1 download.cdn.winsoftware.com ## added by CiD 127.0.0.1 download.errorsafe.com ## added by CiD 127.0.0.1 download.systemdoctor.com ## added by CiD 127.0.0.1 download.winantispyware.com ## added by CiD 127.0.0.1 download.windrivecleaner.com ## added by CiD 127.0.0.1 download.winfixer.com ## added by CiD 127.0.0.1 drivecleaner.com ## added by CiD 127.0.0.1 dynamique.drivecleaner.com ## added by CiD 127.0.0.1 errorprotector.com ## added by CiD 127.0.0.1 errorsafe.com ## added by CiD 127.0.0.1 es.winantivirus.com ## added by CiD 127.0.0.1 fr.winantivirus.com ## added by CiD 127.0.0.1 fr.winfixer.com ## added by CiD 127.0.0.1 go.drivecleaner.com ## added by CiD 127.0.0.1 go.errorsafe.com ## added by CiD 127.0.0.1 go.winantispyware.com ## added by CiD 127.0.0.1 go.winantivirus.com ## added by CiD There are 41 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\AF6E075493B5BAA8.job => c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe Task: C:\WINDOWS\Tasks\At1.job => C:\DOKUME~1\Toni\ANWEND~1\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\WINDOWS\Tasks\At2.job => C:\DOKUME~1\Toni\ANWEND~1\Dealply\UPDATE~1\UPDATE~1.EXE Task: C:\WINDOWS\Tasks\Google Software Updater.job => C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\ISP-Anmeldungserinnerung 1.job => C:\WINDOWS\system32\OOBE\oobebaln.exe Task: C:\WINDOWS\Tasks\Symantec NetDetect.job => C:\Programme\Symantec\LiveUpdate\NDETECT.EXE ==================== Loaded Modules (whitelisted) ============= 2013-03-05 08:21 - 2013-03-05 08:12 - 00397704 _____ () C:\Programme\Avira\AntiVir Desktop\sqlite3.dll 2005-08-20 01:34 - 2011-02-04 17:48 - 00291840 _____ () C:\WINDOWS\system32\sbe.dll 2005-08-20 01:34 - 2008-04-14 03:22 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2006-03-08 14:27 - 2005-10-19 11:56 - 00125952 ____N () C:\Programme\WinRAR\rarext.dll 2004-08-16 18:53 - 2004-08-16 18:53 - 00053248 ____N () C:\Programme\Sitecom\Bluetooth Software\btkeyind.dll 2013-09-18 08:42 - 2013-09-18 08:42 - 03279768 _____ () C:\Programme\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtest AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-2PHI-2B2UA19M6VT8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVF7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVK0} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVKE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVMI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVR9} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVRR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVTN} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVV1} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVMH} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVNL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVP5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVPR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVRB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVSQ} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVVB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-3BG4-281NL05DCVTL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-3BG4-281NL05DCVUC} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-6E2T-2B6FMQRBGVUF} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-7LLS-29TK0CI52VR7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-7LLS-29TK0CI52VTU} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-J24H-293SB52ICVVE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-J24H-2981HI7ICVVG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28T8P0TASVVS} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28UD62RUEVV9} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVGU} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVHS} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVIR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVLT} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVR8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVRM} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVUQ} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-Q64S-2675H2E5QVVI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-1EMN-28M5NPU00VT1} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-90CN-262FTCDKSVUC} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-9P7R-292OFTVD6VST} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-L1G2-28QRSPMS6VVV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-NGIN-25I8KVHMGVVK} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVT8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVVB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVVP} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVV7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-0ANJ-25JQU97JCVVO} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-3S8E-27J3AJ6UT000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-5TO3-2831TOKLCVUL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-B3Q1-28C117F43000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-HU68-27ADSL5PEVUL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-HU68-27ADSL5PEVVR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-OIBL-25SSVB6LMVVT} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-8A6T-26VOTC6OMVQV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-FGLT-28R1BF9D2VSE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-KO19-25DIJFDG6VUO} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVFR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVH4} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVI0} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVIG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJ8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJM} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVKL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVPA} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVS5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-64CA-2ASVQDAHMVOI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-64CA-2ASVQDAHMVR5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-L514-25CJ6NICMVUV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVOV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVPH} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVQD} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVUG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVVE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFRER000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-E9E4-28HCA9OPAVSD} AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:07D9FF25 AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:1ECED34B AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:3D36932D AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:5F64C164 AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:8DCF53BE ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/25/2013 10:50:32 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/25/2013 10:50:23 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/25/2013 10:46:55 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/25/2013 10:32:31 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/10/2013 05:46:11 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (10/09/2013 02:33:14 PM) (Source: COM+) (User: ) Description: In der Laufzeitumgebung wurde ein inkonsistenter interner Status erkannt. Dies deutet auf eine potenzielle Instabilität des Prozesses hin. Diese Instabilität wird durch die in der COM+-Anwendung ausgeführten benutzerdefinierten Komponenten, die von ihnen verwendeten Komponenten oder durch andere Faktoren verursacht. Fehler in f:\xpsp3\com\com1x\src\comsvcs\package\cpackage.cpp(1184), hr = 8007041d: InitEventCollector failed Error: (09/24/2013 07:56:53 AM) (Source: Application Hang) (User: ) Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (09/23/2013 11:28:57 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:43:11 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:09:50 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. System errors: ============= Error: (10/26/2013 08:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 07:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 06:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 05:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 04:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 03:32:09 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/25/2013 11:36:13 AM) (Source: Service Control Manager) (User: ) Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (10/25/2013 11:36:11 AM) (Source: Service Control Manager) (User: ) Description: Dienst "Canon Camera Access Library 8" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (10/25/2013 11:36:11 AM) (Source: Service Control Manager) (User: ) Description: Dienst "SymWMI Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (10/25/2013 11:36:11 AM) (Source: Service Control Manager) (User: ) Description: Dienst "PDF Architect Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 69% Total physical RAM: 1022.07 MB Available physical RAM: 311.88 MB Total Pagefile: 2458.66 MB Available Pagefile: 1658.06 MB Total Virtual: 2047.88 MB Available Virtual: 1948.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:228.11 GB) (Free:94.86 GB) NTFS ==>[Drive with boot components (Windows XP)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 233 GB) (Disk ID: 79751EB5) Partition 1: (Not Active) - (Size=63 MB) - (Type=DE) Partition 2: (Active) - (Size=228 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=5 GB) - (Type=DB) ==================== End Of Log ============================ Christine Mist, zu früh gefreut, jetzt ist grad von allein Firefox aufgegangen, diesmal mit der Seite systweak.com |
27.10.2013, 17:44 | #10 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Toolbar: HKCU - No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File Toolbar: HKCU - No Name - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File Task: C:\WINDOWS\Tasks\AF6E075493B5BAA8.job => c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe Task: C:\WINDOWS\Tasks\At1.job => C:\DOKUME~1\Toni\ANWEND~1\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\WINDOWS\Tasks\At2.job => C:\DOKUME~1\Toni\ANWEND~1\Dealply\UPDATE~1\UPDATE~1.EXE C:\DOKUME~1\Toni\ANWEND~1\DSite C:\DOKUME~1\Toni\ANWEND~1\Dealply Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.10.2013, 07:01 | #11 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hier der Fixlog Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-10-2013 Ran by Kiki at 2013-10-28 06:57:57 Run:1 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Toolbar: HKCU - No Name - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File Toolbar: HKCU - No Name - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File Task: C:\WINDOWS\Tasks\AF6E075493B5BAA8.job => c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe Task: C:\WINDOWS\Tasks\At1.job => C:\DOKUME~1\Toni\ANWEND~1\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\WINDOWS\Tasks\At2.job => C:\DOKUME~1\Toni\ANWEND~1\Dealply\UPDATE~1\UPDATE~1.EXE C:\DOKUME~1\Toni\ANWEND~1\DSite C:\DOKUME~1\Toni\ANWEND~1\Dealply ***************** HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} => Value deleted successfully. HKCR\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} => Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} => Value deleted successfully. HKCR\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} => Key not found. C:\WINDOWS\Tasks\AF6E075493B5BAA8.job => Moved successfully. "c:\dokume~1\maximi~1\anwend~1\thatdr~1\five noun chin.exe" => File/Directory not found. C:\WINDOWS\Tasks\At1.job => Moved successfully. C:\WINDOWS\Tasks\At2.job => Moved successfully. "C:\DOKUME~1\Toni\ANWEND~1\DSite" => File/Directory not found. "C:\DOKUME~1\Toni\ANWEND~1\Dealply" => File/Directory not found. ==== End of Fixlog ==== |
28.10.2013, 12:41 | #12 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Frisches FRST log bitte. Noch PRobleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.10.2013, 14:00 | #13 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hab die Kiste extra nochmal aus gemacht und später neu gestartet und aaah diesmal kein Popup. Werds morgen nochmal testen, jetzt muss ich erst mal das schöne Wetter ausnützen und meinen Garten winterfest machen. Danke einstweilen! FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-10-2013 Ran by Kiki (administrator) on CHRISTINE on 28-10-2013 13:44:49 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe (Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe (RealNetworks, Inc.) C:\Programme\Online Games Manager\ogmservice.exe (pdfforge GmbH) C:\Programme\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Programme\PDF Architect\ConversionService.exe (Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe (Symantec Corporation) C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe (Canon Inc.) C:\Programme\Canon\CAL\CALMAIN.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe (SigmaTel, Inc.) C:\WINDOWS\stsystra.exe (CyberLink Corp.) C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe (InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Sonic Solutions) C:\WINDOWS\system32\dla\tfswctrl.exe (Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe (Nuance Communications, Inc.) C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Microsoft Corporation) C:\Programme\Microsoft IntelliPoint\ipoint.exe (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (Brother Industries, Ltd.) C:\Programme\Brother\Brmfcmon\BrMfcmon.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Apple Inc.) C:\Programme\iPod\bin\iPodService.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe (Broadcom Corporation) C:\Programme\Sitecom\Bluetooth Software\BTTray.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation) HKLM\...\Run: [SigmatelSysTrayApp] - C:\WINDOWS\stsystra.exe [339968 2005-03-23] (SigmaTel, Inc.) HKLM\...\Run: [ATIPTA] - C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064 2005-08-05] (ATI Technologies, Inc.) HKLM\...\Run: [DVDLauncher] - C:\Programme\CyberLink\PowerDVD\DVDLauncher.exe [53248 2005-02-23] (CyberLink Corp.) HKLM\...\Run: [ISUSPM Startup] - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe [221184 2004-07-27] (InstallShield Software Corporation) HKLM\...\Run: [ISUSScheduler] - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) HKLM\...\Run: [HPDJ Taskbar Utility] - C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [188416 2002-03-28] (HP) HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [dla] - C:\WINDOWS\system32\dla\tfswctrl.exe [122941 2005-05-31] (Sonic Solutions) HKLM\...\Run: [Corel Reminder] - [x] HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\QTTask.exe [413696 2008-11-04] (Apple Inc.) HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [290088 2008-11-20] (Apple Inc.) HKLM\...\Run: [SSBkgdUpdate] - C:\Programme\Gemeinsame Dateien\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [PaperPort PTD] - C:\Programme\ScanSoft\PaperPort\pptd40nt.exe [29984 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [IndexSearch] - C:\Programme\ScanSoft\PaperPort\IndexSearch.exe [46368 2007-10-11] (Nuance Communications, Inc.) HKLM\...\Run: [PPort11reminder] - C:\Programme\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM\...\Run: [BrMfcWnd] - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe [1089536 2008-02-19] (Brother Industries, Ltd.) HKLM\...\Run: [ControlCenter3] - C:\Programme\Brother\ControlCenter3\BrCtrCen.exe [86016 2007-12-21] (Brother Industries, Ltd.) HKLM\...\Run: [IntelliPoint] - C:\Programme\Microsoft IntelliPoint\ipoint.exe [1468296 2009-05-28] (Microsoft Corporation) HKLM\...\Run: [Google Updater] - C:\Programme\Google\Google Updater\GoogleUpdater.exe [161336 2011-09-17] (Google) HKLM\...\Run: [ToADiMon.exe] - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe [286720 2010-04-08] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM\...\Policies\Explorer: [NoCDBurning] 0 HKCU\...\Run: [Akamai NetSession Interface] - C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\Administrator\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) HKU\Default User\...\Run: [MSMSGS] - C:\Programme\Messenger\msmsgs.exe [ 2008-04-14] (Microsoft Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BTTray.lnk ShortcutTarget: BTTray.lnk -> C:\Programme\Sitecom\Bluetooth Software\BTTray.exe (Broadcom Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x004EE2D6C2D3CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programme\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} hxxp://arcade.icq.com/carlo/zuma/popcaploader_v5.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (Broadcom Corporation) Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll () Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [147456] (Apple Inc.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @garmin.com/GpsControl - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.3.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @zylom.com/ZylomGamesPlayer - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: No Name - C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Mozilla\Firefox\Profiles\ge0f3klz.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: Skype Click to Call - C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\Extensions.rdf FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\installed-extensions-processed.txt FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Programme\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Programme\PDF Architect\FFPDFArchitectExt Chrome: ======= CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Programme\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Programme\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Programme\Google\Chrome\Application\29.0.1547.66\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Programme\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Programme\Mozilla Firefox\plugins\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (ScorchPlugin) - C:\Programme\Mozilla Firefox\plugins\NPSibelius.dll () CHR Plugin: (Zylom Plugin) - C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll (Zylom) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.5.5) - C:\Programme\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Updater) - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Programme\Java\jre6\bin\plugin2\npjp2.dll No File CHR Plugin: (iTunes Application Detector) - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Extension: (Google Drive) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Chrome In-App Payments service) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0 CHR Extension: (Gmail) - C:\DOKUME~1\Kiki\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ========================== Services (Whitelisted) ================= R2 Akamai; c:\programme\gemeinsame dateien\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424 2008-11-07] (Apple Inc.) R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [238888 2008-08-29] (Apple Inc.) R2 btwdins; C:\Programme\Sitecom\Bluetooth Software\bin\btwdins.exe [163840 2004-08-16] (Broadcom Corporation) R2 CCALib8; C:\Programme\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-01-07] (Google Inc.) S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194104 2011-09-17] (Google) S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [536872 2008-11-20] (Apple Inc.) R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-09-18] (Mozilla Foundation) S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation) R2 ogmservice; C:\Programme\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.) S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation) R2 PDF Architect Helper Service; C:\Programme\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Programme\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [160944 2012-07-13] (Skype Technologies) R2 SymWSC; C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe [316544 2004-11-02] (Symantec Corporation) S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation) R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" ==================== Drivers (Whitelisted) ==================== S4 abp480n5; C:\Windows\system32\DRIVERS\ABP480N5.SYS [23552 2001-08-17] (Microsoft Corporation) R2 Aspi32; C:\Windows\System32\Drivers\Aspi32.sys [25244 1999-09-10] (Adaptec) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-27] (Avira Operations GmbH & Co. KG) R3 BrScnUsb; C:\Windows\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.) R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [17024 2004-08-16] (Broadcom Corporation) R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30267 2004-08-16] (Broadcom Corporation) R0 BTKRNL; C:\Windows\System32\drivers\btkrnl.sys [1241034 2004-08-16] (Broadcom Corporation) R2 BTSERIAL; C:\WINDOWS\system32\drivers\btserial.sys [23271 2004-08-16] (Broadcom Corporation) R2 BTSLBCSP; C:\WINDOWS\system32\drivers\btslbcsp.sys [222876 2004-08-16] (Broadcom Corporation) R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [147896 2004-08-16] (Broadcom Corporation) S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [54328 2004-08-18] (Broadcom Corporation) R2 drvnddm; C:\Windows\System32\drivers\drvnddm.sys [40544 2005-04-21] (Sonic Solutions) S3 GigasetGenericUSB; C:\Windows\System32\DRIVERS\GigasetGenericUSB.sys [44032 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.) S3 MIINPazX; C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) S3 MTOnlPktAlyX; C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [19200 2010-08-27] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation) R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [66048 2005-09-29] (Protection Technology) R1 sscdbhk5; C:\Windows\System32\drivers\sscdbhk5.sys [5627 2005-05-13] (Sonic Solutions) R1 SSHDRV5C; C:\WINDOWS\system32\drivers\SSHDRV5C.sys [34816 2005-11-27] () R1 SSHDRV86; C:\WINDOWS\system32\drivers\SSHDRV86.sys [81408 2005-11-22] () S3 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-05] (Avira GmbH) R1 ssrtln; C:\Windows\System32\drivers\ssrtln.sys [23545 2005-05-13] (Sonic Solutions) R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2008-10-16] () R2 STEC3; C:\WINDOWS\system32\STEC3.sys [2368 2007-04-16] (AntiCracking) R3 STHDA; C:\Windows\System32\drivers\sthda.sys [180864 2005-06-14] (SigmaTel, Inc.) R2 tfsnboio; C:\Windows\System32\dla\tfsnboio.sys [25725 2005-05-31] (Sonic Solutions) R2 tfsncofs; C:\Windows\System32\dla\tfsncofs.sys [34845 2005-05-31] (Sonic Solutions) R2 tfsndrct; C:\Windows\System32\dla\tfsndrct.sys [4125 2005-05-31] (Sonic Solutions) R2 tfsndres; C:\Windows\System32\dla\tfsndres.sys [2273 2005-05-31] (Sonic Solutions) R2 tfsnifs; C:\Windows\System32\dla\tfsnifs.sys [86876 2005-05-31] (Sonic Solutions) R2 tfsnopio; C:\Windows\System32\dla\tfsnopio.sys [15069 2005-05-31] (Sonic Solutions) R2 tfsnpool; C:\Windows\System32\dla\tfsnpool.sys [6365 2005-05-31] (Sonic Solutions) R2 tfsnudf; C:\Windows\System32\dla\tfsnudf.sys [98716 2005-05-31] (Sonic Solutions) R2 tfsnudfa; C:\Windows\System32\dla\tfsnudfa.sys [100605 2005-05-31] (Sonic Solutions) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2011-10-24] (Huawei Technologies Co., Ltd.) U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) U1 WS2IFSL; ==================== NetSvcs (Whitelisted) =================== NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation) ==================== One Month Created Files and Folders ======== 2013-10-28 13:04 - 2013-10-28 13:04 - 103734365 _____ C:\WINDOWS\system32\搤犜各7 2013-10-28 06:35 - 2013-10-28 06:35 - 103622390 _____ C:\WINDOWS\system32\崞⫉各7 2013-10-25 11:32 - 2013-10-25 11:32 - 00448512 _____ (OldTimer Tools) C:\Dokumente und Einstellungen\Kiki\Desktop\TFC.exe 2013-10-25 11:30 - 2013-10-25 11:30 - 00001804 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk 2013-10-25 11:30 - 2013-10-25 11:30 - 00001714 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader XI.lnk 2013-10-24 16:10 - 2013-10-24 16:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java 2013-10-24 16:10 - 2013-10-08 06:50 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-24 16:10 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-24 16:10 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-24 16:10 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-24 16:10 - 2013-10-08 06:29 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-24 16:09 - 2013-10-24 16:10 - 00004837 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-24 14:52 - 2013-10-24 14:52 - 00891167 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\SecurityCheck.exe 2013-10-24 11:52 - 2013-10-24 11:52 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kiki\Desktop\esetsmartinstaller_enu.exe 2013-10-23 15:46 - 2013-10-28 06:57 - 01089183 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-23 15:41 - 2013-10-23 15:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 13:50 - 2013-10-23 13:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 09:43 - 2013-10-27 09:26 - 00062021 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-23 09:39 - 2013-10-23 09:39 - 00000000 ____D C:\FRST 2013-10-22 12:10 - 2013-10-23 15:23 - 00000000 ____D C:\AdwCleaner 2013-10-22 12:09 - 2013-10-22 12:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 08:54 - 2013-10-22 08:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 08:52 - 2013-10-22 08:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-14 15:11 - 2013-10-14 15:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 17:08 - 2013-10-10 17:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 17:05 - 2013-10-10 17:06 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 17:05 - 2013-10-10 17:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 16:59 - 2013-10-10 16:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 16:55 - 2013-10-25 12:02 - 00018667 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 16:25 - 2013-10-10 17:08 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 16:24 - 2013-07-03 03:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys 2013-10-10 16:24 - 2013-07-03 02:59 - 00014976 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys 2013-10-10 16:23 - 2013-07-17 01:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys 2013-10-10 16:23 - 2013-07-17 01:58 - 00060160 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys 2013-10-10 16:23 - 2013-07-17 01:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys 2013-10-10 16:19 - 2013-08-09 01:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys 2013-10-10 16:19 - 2013-08-09 01:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys 2013-10-10 16:19 - 2009-03-18 12:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys 2013-10-10 16:09 - 2013-10-10 16:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 15:49 - 2013-10-09 15:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe ==================== One Month Modified Files and Folders ======= 2013-10-28 13:12 - 2010-01-07 18:36 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-28 13:04 - 2013-10-28 13:04 - 103734365 _____ C:\WINDOWS\system32\搤犜各7 2013-10-28 13:04 - 2005-08-20 01:51 - 00000257 _____ C:\WINDOWS\wiadebug.log 2013-10-28 13:03 - 2005-08-20 01:54 - 00000000 ____D C:\WINDOWS\Registration 2013-10-28 13:01 - 2010-01-07 18:36 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-28 13:01 - 2005-08-20 01:56 - 01868615 _____ C:\WINDOWS\WindowsUpdate.log 2013-10-28 13:01 - 2005-08-20 01:34 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl 2013-10-28 13:00 - 2010-05-13 14:48 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Akamai 2013-10-28 13:00 - 2005-08-20 01:51 - 00000050 _____ C:\WINDOWS\wiaservc.log 2013-10-28 12:59 - 2005-08-20 02:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-10-28 11:46 - 2005-11-22 08:54 - 00000300 ___SH C:\Dokumente und Einstellungen\Kiki\ntuser.ini 2013-10-28 11:46 - 2005-11-22 08:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki 2013-10-28 11:46 - 2005-08-20 02:05 - 00032568 _____ C:\WINDOWS\SchedLgU.Txt 2013-10-28 11:24 - 2013-08-07 17:13 - 00000000 ____D C:\Programme\Mozilla Thunderbird 2013-10-28 11:24 - 2013-04-27 16:54 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Eigene Dateien\Online-BankingPlus 2013-10-28 10:47 - 2012-04-16 11:12 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-10-28 08:23 - 2005-11-15 19:30 - 00000364 _____ C:\WINDOWS\Tasks\Symantec NetDetect.job 2013-10-28 07:06 - 2008-07-12 13:20 - 00000276 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job 2013-10-28 06:57 - 2013-10-23 15:46 - 01089183 _____ (Farbar) C:\Dokumente und Einstellungen\Kiki\Desktop\FRST.exe 2013-10-28 06:35 - 2013-10-28 06:35 - 103622390 _____ C:\WINDOWS\system32\崞⫉各7 2013-10-28 06:35 - 2013-08-22 07:32 - 00000113 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WB.CFG 2013-10-28 06:35 - 2013-08-22 07:32 - 00000006 _____ C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\WBPU-TTL.DAT 2013-10-27 09:26 - 2013-10-23 09:43 - 00062021 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Addition.txt 2013-10-27 09:04 - 2005-08-20 01:49 - 01247790 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-10-25 12:02 - 2013-10-10 16:55 - 00018667 _____ C:\WINDOWS\KB2879017-IE8.log 2013-10-25 11:32 - 2013-10-25 11:32 - 00448512 _____ (OldTimer Tools) C:\Dokumente und Einstellungen\Kiki\Desktop\TFC.exe 2013-10-25 11:30 - 2013-10-25 11:30 - 00001804 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk 2013-10-25 11:30 - 2013-10-25 11:30 - 00001714 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader XI.lnk 2013-10-25 11:30 - 2005-11-24 09:03 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Lokale Einstellungen\Anwendungsdaten\Adobe 2013-10-25 11:30 - 2005-08-20 01:48 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2013-10-25 11:29 - 2005-11-24 09:02 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Adobe 2013-10-25 11:28 - 2007-11-20 15:11 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe 2013-10-25 11:28 - 2005-11-15 19:27 - 00000000 ____D C:\Programme\Adobe 2013-10-24 16:10 - 2013-10-24 16:10 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java 2013-10-24 16:10 - 2013-10-24 16:09 - 00004837 _____ C:\WINDOWS\system32\jupdate-1.7.0_45-b18.log 2013-10-24 16:10 - 2005-11-15 19:22 - 00000000 ____D C:\Programme\Java 2013-10-24 16:10 - 2005-11-15 19:22 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Java 2013-10-24 14:52 - 2013-10-24 14:52 - 00891167 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\SecurityCheck.exe 2013-10-24 14:50 - 2005-08-20 01:49 - 00000000 ____D C:\Programme 2013-10-24 12:53 - 2009-03-22 14:45 - 00001044 _____ C:\WINDOWS\Tasks\Google Software Updater.job 2013-10-24 11:52 - 2013-10-24 11:52 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Kiki\Desktop\esetsmartinstaller_enu.exe 2013-10-23 18:33 - 2005-11-24 10:26 - 00002429 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Neues Office-Dokument.lnk 2013-10-23 15:41 - 2013-10-23 15:41 - 00000580 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.txt 2013-10-23 15:23 - 2013-10-22 12:10 - 00000000 ____D C:\AdwCleaner 2013-10-23 13:50 - 2013-10-23 13:50 - 102551358 _____ C:\WINDOWS\system32\둰盰各7 2013-10-23 09:39 - 2013-10-23 09:39 - 00000000 ____D C:\FRST 2013-10-23 07:59 - 2013-02-20 10:06 - 00002503 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\Microsoft Office Word 2007.lnk 2013-10-22 12:09 - 2013-10-22 12:09 - 01060070 _____ C:\Dokumente und Einstellungen\Kiki\Desktop\adwcleaner.exe 2013-10-22 11:52 - 2013-05-01 19:26 - 00000000 __HDC C:\WINDOWS\$NtUninstallWdf01007$ 2013-10-22 08:54 - 2013-10-22 08:54 - 00000000 ____D C:\WINDOWS\ERUNT 2013-10-22 08:52 - 2013-10-22 08:52 - 01033335 _____ (Thisisu) C:\Dokumente und Einstellungen\Kiki\Desktop\JRT.exe 2013-10-22 08:46 - 2013-07-11 11:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2833951$ 2013-10-16 17:32 - 2005-11-21 19:16 - 00000000 ____D C:\Dokumente und Einstellungen\Toni 2013-10-14 15:52 - 2005-08-20 01:53 - 00000000 ____D C:\WINDOWS\Microsoft.NET 2013-10-14 15:11 - 2013-10-14 15:11 - 100910526 _____ C:\WINDOWS\system32\ꬭ㜗各7 2013-10-10 17:44 - 2005-08-20 01:43 - 00461232 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-10-10 17:13 - 2013-02-20 09:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help 2013-10-10 17:08 - 2013-10-10 17:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$ 2013-10-10 17:08 - 2013-10-10 16:25 - 00019123 _____ C:\WINDOWS\KB2847311.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00687906 _____ C:\WINDOWS\iis6.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00634366 _____ C:\WINDOWS\FaxSetup.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00304468 _____ C:\WINDOWS\ocgen.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00290585 _____ C:\WINDOWS\tsoc.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00211967 _____ C:\WINDOWS\comsetup.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00205397 _____ C:\WINDOWS\updspapi.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00194526 _____ C:\WINDOWS\msmqinst.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00128194 _____ C:\WINDOWS\ntdtcsetup.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00111549 _____ C:\WINDOWS\netfxocm.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00070967 _____ C:\WINDOWS\plusoc.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00044290 _____ C:\WINDOWS\MedCtrOC.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00035226 _____ C:\WINDOWS\ocmsn.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00034814 _____ C:\WINDOWS\ehOCGen.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00032033 _____ C:\WINDOWS\tabletoc.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00031827 _____ C:\WINDOWS\msgsocm.log 2013-10-10 17:08 - 2012-04-12 11:49 - 00001393 _____ C:\WINDOWS\imsins.log 2013-10-10 17:06 - 2013-10-10 17:05 - 00012271 _____ C:\WINDOWS\KB2862335.log 2013-10-10 17:06 - 2013-10-10 17:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$ 2013-10-10 17:06 - 2012-04-12 11:49 - 00001393 _____ C:\WINDOWS\imsins.BAK 2013-10-10 17:05 - 2013-07-21 12:00 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-10-10 17:05 - 2012-03-23 12:46 - 00265140 _____ C:\WINDOWS\setupapi.log 2013-10-10 17:00 - 2005-11-24 09:26 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-10-10 16:59 - 2013-10-10 16:59 - 00013327 _____ C:\WINDOWS\KB2868038.log 2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$ 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$ 2013-10-10 16:55 - 2013-10-10 16:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$ 2013-10-10 16:55 - 2009-04-29 16:38 - 00000000 ____D C:\WINDOWS\ie8updates 2013-10-10 16:09 - 2013-10-10 16:09 - 100267706 _____ C:\WINDOWS\system32\핝誀各7 2013-10-09 15:49 - 2013-10-09 15:49 - 17813896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2013-10-09 15:49 - 2012-04-16 11:11 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2013-10-09 15:49 - 2011-12-03 12:24 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-10-09 15:05 - 2006-05-03 19:10 - 00000000 ____D C:\Programme\Yahoo! 2013-10-08 06:50 - 2013-10-24 16:10 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-10-08 06:46 - 2013-10-24 16:10 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2013-10-08 06:46 - 2013-10-24 16:10 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2013-10-08 06:46 - 2013-10-24 16:10 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2013-10-08 06:29 - 2013-10-24 16:10 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2013-10-06 20:25 - 2008-12-03 11:22 - 00000000 ____D C:\Dokumente und Einstellungen\Kiki\Anwendungsdaten\Skype 2013-10-06 20:21 - 2012-09-13 09:08 - 00002243 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe [2005-08-20 01:33] - [2008-04-14 03:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e C:\Windows\System32\winlogon.exe [2005-08-20 01:34] - [2008-04-14 03:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a C:\Windows\System32\svchost.exe [2005-08-20 01:34] - [2008-04-14 03:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 C:\Windows\System32\services.exe [2005-08-20 01:34] - [2009-02-09 12:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc C:\Windows\System32\User32.dll [2005-08-20 01:34] - [2008-04-14 03:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd C:\Windows\System32\userinit.exe [2005-08-20 01:34] - [2008-04-14 03:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 C:\Windows\System32\Drivers\volsnap.sys [2005-08-20 01:34] - [2008-04-14 02:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-10-2013 Ran by Kiki at 2013-10-28 13:46:52 Running from C:\Dokumente und Einstellungen\Kiki\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611B434-FFA4-0100-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616663C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DFDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AEDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618F764-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614FDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610F284-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F7DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861545A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F632C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF6DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {864B3DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617D474-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F2674-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B3474-FFA4-0100-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8626C2D4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612AC74-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86037DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86161554-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861404A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86062484-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610CDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {862CE9CC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86401DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8608E20C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618F464-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866CC31C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86038DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860AA70C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86237CE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602A2A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FA127C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861709E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86120A94-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865EF98C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616E16C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861BF45C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E36C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86114A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614D2DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860ED5C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8630B940-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86124DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AC964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8613BC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8634C424-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86151DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D8B44-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A02E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E070C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615B29C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F55BC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86012BCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606EDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86094C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DB6E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602493C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86115DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8602552C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86008A5C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {863D4B6C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86102AA4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861F6364-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8613AA34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8639162C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B4A14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DAA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861BBDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861C3534-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610845C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619D634-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86399D8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {862A9DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86189DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86177DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {863087F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FE4C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE18C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A0C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8639289C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619A7DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D6DB4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE4F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B5C24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861E18AC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E393C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FB68C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606A59C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8637AAAC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866A88B4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F5DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86135564-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000000-0000-0000-0000-000000000000} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86399704-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86119DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A6DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86119B24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861963B4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861745E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617DDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8632ADDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D4734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86100A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612C5C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FD994-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86175734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FDC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86368514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861DDA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D9B8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8604C964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612CA8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86040054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865F66E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86153284-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861FA494-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A4234-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86437054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EA2C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861681A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D477C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86004DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618EBCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861214A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8607CB24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86057054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EADDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86460054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8640B9CC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86082A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616AA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606423C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618B454-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861874AC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8619FB64-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B9DB4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612A54C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611A26C-FFA4-00EF-0D24-347CA8A3377C} AV: Avira Desktop (Disabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86170DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {866A04EC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861DFA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860D5964-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FB514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {BADB0D00-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8644C5EC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860E92BC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861D432C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610799C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF893C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A0A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8614BDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612B874-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86047C1C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8600A6FC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8668D24C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86168854-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A35D4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86063384-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8622A94C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86684734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {852C5AE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615DDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86058574-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A75E4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85F7BCE4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F9354-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F98F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861288DC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8606CA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86191C34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860A560C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616077C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86187434-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000246-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8618621C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617EB4C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860CE62C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86689914-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8615589C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8616DAD4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86490DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DBC24-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860C453C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86110DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861AB1FC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610EC44-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861A793C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8621D8F4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865178A4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {865D4DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860FF4C4-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F4554-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8617124C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8611D63C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8603839C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86056734-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8610DC34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860EAA14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860C3614-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860ACDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86175A14-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860F6A34-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86120514-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860DEBCC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86174C2C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86146DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8612077C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {85FF630C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {8668F354-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86691994-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86683DDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86393054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860B9054-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {860BBDDC-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {86127A8C-FFA4-00EF-0D24-347CA8A3377C} AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {861C15C4-FFA4-00EF-0D24-347CA8A3377C} Could not list Security Center items. Check WMI. ==================== Installed Programs ====================== Adobe Acrobat 5.0 (Version: 5.0) Adobe Flash Player 11 ActiveX (Version: 11.9.900.117) Adobe Flash Player 11 Plugin (Version: 11.9.900.117) Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05) Adobe Shockwave Player (Version: 10.2.0.23) Akamai NetSession Interface Service Apple Mobile Device Support (Version: 2.1.2.7) Apple Software Update (Version: 2.1.1.116) ARTEuro (Version: 1.00.0000) ATI Display Driver (Version: 8.162-050803a2-025672C-Dell) ATI Systemsteuerung (Version: 6.14.10.5160) Avira Free Antivirus (Version: 13.0.0.4052) BDE Bonjour (Version: 1.0.105) Brother MFL-Pro Suite DCP-165C (Version: 1.0.0.0) Canon Camera Access Library (Version: 8.4.0.1) Canon Camera Support Core Library (Version: 7.3.1.6) Canon G.726 WMP-Decoder (Version: 1.1.0.4) CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.5.0.3) Canon Internet Library for ZoomBrowser EX (Version: 1.6.1.6) Canon MovieEdit Task for ZoomBrowser EX (Version: 2.6.0.4) Canon RAW Image Task for ZoomBrowser EX (Version: 0.9.3.9) Canon Utilities CameraWindow (Version: 7.1.0.2) Canon Utilities CameraWindow DC (Version: 7.1.0.7) Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX (Version: 5.4.5.17) Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX (Version: 6.4.2.16) Canon Utilities EOS Utility (Version: 1.1.0.8) Canon Utilities MyCamera (Version: 6.4.0.5) Canon Utilities MyCamera DC (Version: 7.0.1.8) Canon Utilities PhotoStitch (Version: 3.1.21.45) Canon Utilities RemoteCapture Task for ZoomBrowser EX (Version: 1.7.1.9) Canon Utilities ZoomBrowser EX (Version: 6.1.0.20) Canon ZoomBrowser EX Memory Card Utility (Version: 1.1.0.8) CCleaner (Version: 3.16) CDex extraction audio Citrix-ICA-Client Codeur Windows Media Série 9 Codeur Windows Media Série 9 (Version: 9.00.2980) ContentSAFER for Wizmax CorelDRAW 10 CorelDRAW 10 (Version: 10) Dell Driver Reset Tool (Version: 1.02.0000) Dell Picture Studio v3.0 (Version: 3.0.0) Dell System Restore (Version: 2.00.0000) ElsterFormular (Version: 14.3.11574) ElsterFormular 2007/2008 (Version: 9.1.0.0) ElsterFormular 2008/2009 (Version: 10.3.1.0) Free Audio Converter version 5.0.17.903 (Version: 5.0.17.903) Free Studio version 5.3.3 Free YouTube to MP3 Converter version 3.11.35.1031 (Version: 3.11.35.1031) Garmin BaseCamp (Version: 4.2.2) Garmin TransAlpin v2 (Version: 2.0.0.0) Garmin Trip and Waypoint Manager v5 (Version: 5.0.0.0) Garmin USB Drivers (Version: 2.3.1.0) GemMaster Mystic Gigaset QuickSync (Version: 7.2.0844.6) Google Chrome (Version: 30.0.1599.101) Google Earth (Version: 7.1.1.1888) Google Updater (Version: 2.4.2432.1652) Google Video Player GPSBabel 1.4.1 GPS-Track-Analyse.NET 6.0 Hotfix für Windows Internet Explorer 7 (KB947864) (Version: 1) Hotfix für Windows XP (KB2756822) (Version: 1) Hotfix für Windows XP (KB2779562) (Version: 1) ICQ6.5 (Version: 6.5) Image Resizer Powertoy for Windows XP (Version: 1.00.0001) Intel(R) PRO Network Connections Drivers Intel(R) PROSet for Wired Connections (Version: 9.20.0000) IrfanView (remove only) (Version: 4.28) iTunes (Version: 8.0.2.20) Jasc Paint Shop Photo Album 5 (Version: 5.22) Jasc Paint Shop Pro Studio, Dell Editon (Version: 1.01.0000) Java 7 Update 45 (Version: 7.0.450) Java Auto Updater (Version: 2.1.9.8) LiveUpdate 2.5 (Symantec Corporation) (Version: 2.5.55.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Messenger Plus! Live & Sponsor (CiD) (Version: 4.82.0.368) Microsoft .NET Framework 1.0 Hotfix (KB2604042) Microsoft .NET Framework 1.0 Hotfix (KB2656378) Microsoft .NET Framework 1.0 Security Update (KB2698035) Microsoft .NET Framework 1.0 Security Update (KB2742607) Microsoft .NET Framework 1.0 Security Update (KB2833951) Microsoft .NET Framework 1.1 (Version: 1.1.4322) Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322) Microsoft .NET Framework 1.1 Security Update (KB2698023) Microsoft .NET Framework 1.1 Security Update (KB2833941) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 2.0 Language Pack - DEU Microsoft .NET Framework 2.0 Language Pack - DEU (Version: 1.1.50727.42) Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729) Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Choice Guard (Version: 2.0.48.0) Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1) Microsoft IntelliPoint 7.0 (Version: 7.0.260.0) Microsoft Internationalized Domain Names Mitigation APIs Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft National Language Support Downlevel APIs Microsoft Office 2000 Disc 2 (Version: 9.00.2816) Microsoft Office 2000 Professional (Version: 9.00.2816) Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Software Update for Web Folders (German) 12 (Version: 12.0.6612.1000) Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft WinUsb 1.0 Microsoft Works 7.0 (Version: 07.02.0702) Mozilla Firefox 24.0 (x86 de) (Version: 24.0) Mozilla Maintenance Service (Version: 24.0) Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8) MSN MSVCRT (Version: 14.0.1468.721) MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0) MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0) Musicload Manager NetObjects Fusion 7 Norton Security Center (Version: 2005.1.0.111) OLYMPUS CAMEDIA Master 4.1 Online Games Manager v1.21 (Version: 1.21.2) Online-Banking+ Online-Banking+ (Version: 15.2.1.18) PaperPort Image Printer (Version: 1.00.0000) PC Inspector File Recovery (Version: 4.0) PDF Architect (Version: 1.1.83.9982) PDFCreator (Version: 1.7.0) Phonetik (Version: 1.0.0) PixiePack Codec Pack (Version: 1.0.100.0) PowerDVD 5.5 QuickTime (Version: 7.55.90.70) RealPlayer SAMSUNG Mobile Modem Driver Set Samsung Mobile phone USB driver Software SAMSUNG Mobile USB Modem 1.0 Software SAMSUNG Mobile USB Modem Software Samsung PC Studio 3 (Version: 3.0.0.71207) Samsung PC Studio 3 (Version: 3.2.2.80705) Samsung PC Studio 3 USB Driver Installer (Version: 3.2.0.70701) SamsungMediaStudio Sandlot Games Client Services 1.2.2 ScanSoft PaperPort 11 (Version: 11.1.0000) Schmidt Solitaire SEGA Rally AUTO BILD DEMO (Version: 1.00.0000) Segoe UI (Version: 14.0.4327.805) Sibelius Scorch (Firefox, Opera, Netscape only) (Version: 5.2.1) Sicherheitsupdate für Windows Internet Explorer 7 (KB928090) (Version: 20070117.120000) Sicherheitsupdate für Windows Internet Explorer 7 (KB929969) (Version: 20061222.120000) Sicherheitsupdate für Windows Internet Explorer 7 (KB931768) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB933566) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB937143) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB938127) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB939653) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB942615) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB944533) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB950759) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB953838) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB956390) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB958215) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB960714) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB961260) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 7 (KB963027) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2761465) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2792100) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2797052) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2799329) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2809289) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2817183) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2829530) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2838727) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2847204) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2870699) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB2879017) (Version: 1) Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (Version: 1) Sicherheitsupdate für Windows Media Player (KB2834904) Sicherheitsupdate für Windows Media Player (KB2834904-v2) Sicherheitsupdate für Windows Media Player 6.4 (KB925398) Sicherheitsupdate für Windows XP (KB2621440) (Version: 1) Sicherheitsupdate für Windows XP (KB2641653) (Version: 1) Sicherheitsupdate für Windows XP (KB2647518) (Version: 1) Sicherheitsupdate für Windows XP (KB2653956) (Version: 1) Sicherheitsupdate für Windows XP (KB2655992) (Version: 1) Sicherheitsupdate für Windows XP (KB2659262) (Version: 1) Sicherheitsupdate für Windows XP (KB2676562) (Version: 1) Sicherheitsupdate für Windows XP (KB2685939) (Version: 1) Sicherheitsupdate für Windows XP (KB2686509) (Version: 1) Sicherheitsupdate für Windows XP (KB2691442) (Version: 1) Sicherheitsupdate für Windows XP (KB2695962) (Version: 1) Sicherheitsupdate für Windows XP (KB2698365) (Version: 1) Sicherheitsupdate für Windows XP (KB2705219) (Version: 1) Sicherheitsupdate für Windows XP (KB2707511) (Version: 1) Sicherheitsupdate für Windows XP (KB2709162) (Version: 1) Sicherheitsupdate für Windows XP (KB2712808) (Version: 1) Sicherheitsupdate für Windows XP (KB2718523) (Version: 1) Sicherheitsupdate für Windows XP (KB2719985) (Version: 1) Sicherheitsupdate für Windows XP (KB2723135) (Version: 1) Sicherheitsupdate für Windows XP (KB2724197) (Version: 1) Sicherheitsupdate für Windows XP (KB2727528) (Version: 1) Sicherheitsupdate für Windows XP (KB2731847) (Version: 1) Sicherheitsupdate für Windows XP (KB2753842) (Version: 1) Sicherheitsupdate für Windows XP (KB2753842-v2) (Version: 2) Sicherheitsupdate für Windows XP (KB2757638) (Version: 1) Sicherheitsupdate für Windows XP (KB2758857) (Version: 1) Sicherheitsupdate für Windows XP (KB2761226) (Version: 1) Sicherheitsupdate für Windows XP (KB2770660) (Version: 1) Sicherheitsupdate für Windows XP (KB2778344) (Version: 1) Sicherheitsupdate für Windows XP (KB2779030) (Version: 1) Sicherheitsupdate für Windows XP (KB2780091) (Version: 1) Sicherheitsupdate für Windows XP (KB2799494) (Version: 1) Sicherheitsupdate für Windows XP (KB2802968) (Version: 1) Sicherheitsupdate für Windows XP (KB2807986) (Version: 1) Sicherheitsupdate für Windows XP (KB2808735) (Version: 1) Sicherheitsupdate für Windows XP (KB2813170) (Version: 1) Sicherheitsupdate für Windows XP (KB2813345) (Version: 1) Sicherheitsupdate für Windows XP (KB2820197) (Version: 1) Sicherheitsupdate für Windows XP (KB2820917) (Version: 1) Sicherheitsupdate für Windows XP (KB2829361) (Version: 1) Sicherheitsupdate für Windows XP (KB2834886) (Version: 1) Sicherheitsupdate für Windows XP (KB2839229) (Version: 1) Sicherheitsupdate für Windows XP (KB2845187) (Version: 1) Sicherheitsupdate für Windows XP (KB2847311) (Version: 1) Sicherheitsupdate für Windows XP (KB2849470) (Version: 1) Sicherheitsupdate für Windows XP (KB2850851) (Version: 1) Sicherheitsupdate für Windows XP (KB2850869) (Version: 1) Sicherheitsupdate für Windows XP (KB2859537) (Version: 1) Sicherheitsupdate für Windows XP (KB2862330) (Version: 1) Sicherheitsupdate für Windows XP (KB2862335) (Version: 1) Sicherheitsupdate für Windows XP (KB2864063) (Version: 1) Sicherheitsupdate für Windows XP (KB2868038) (Version: 1) Sicherheitsupdate für Windows XP (KB2876217) (Version: 1) Sicherheitsupdate für Windows XP (KB2876315) (Version: 1) Sicherheitsupdate für Windows XP (KB2883150) (Version: 1) Sicherheitsupdate für Windows XP (KB923689) Sitecom Bluetooth Software (Version: 3.0.1.910) Skype Click to Call (Version: 5.6.8442) Skype™ 5.10 (Version: 5.10.116) Sonic DLA (Version: 4.98) Sonic Encoders (Version: 1.00) Sonic MyDVD LE (Version: 6.1.1) Sonic RecordNow Audio (Version: 2.0.0) Sonic RecordNow Copy (Version: 2.0.0) Sonic RecordNow Data (Version: 2.0.0) Sonic Update Manager (Version: 3.0.0) StarOffice 8 (Version: 8.00.8945) Tiscali Internet (Version: 1.0.0.25) T-Online 6.0 T-Online Installationsdateien (Version: 5.0) Transalp 2003 Ulead COOL 360 1.0 Ulead Photo Explorer 8.0 SE Basic (Version: 8.0) Ulead Photo Express 5 SE (Version: 5.0) Uninstall 1.0.0.1 Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update für Windows Internet Explorer 8 (KB2598845) (Version: 1) Update für Windows XP (KB2661254-v2) (Version: 2) Update für Windows XP (KB2718704) (Version: 1) Update für Windows XP (KB2736233) (Version: 1) Update für Windows XP (KB2749655) (Version: 1) Update für Windows XP (KB2863058) (Version: 1) WebFldrs XP (Version: 9.50.7523) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0) Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0017.0) Windows Genuine Advantage Validation Tool (KB892130) Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2) Windows Internet Explorer 7 (Version: 20061107.210142) Windows Internet Explorer 8 (Version: 20090308.140743) Windows Live Anmelde-Assistent (Version: 5.000.818.6) Windows Live Call (Version: 14.0.8064.0206) Windows Live Communications Platform (Version: 14.0.8064.206) Windows Live Essentials (Version: 14.0.8089.0726) Windows Live Essentials (Version: 14.0.8089.726) Windows Live Messenger (Version: 14.0.8089.0726) Windows Live-Uploadtool (Version: 14.0.8014.1029) Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player Firefox Plugin (Version: 1.0.0.8) Windows XP Service Pack 3 (Version: 20080414.031514) WinGDB3 3.62 (Version: 3.62 ) WinRAR Archivierer XviD MPEG-4 Video Codec (Version: XviD-1.0.3-20122004) Zylom Games Player Plugin ==================== Restore Points ========================= 31-07-2013 15:16:47 Systemprüfpunkt 01-08-2013 16:06:28 Systemprüfpunkt 02-08-2013 16:36:20 Systemprüfpunkt 04-08-2013 12:27:33 Systemprüfpunkt 05-08-2013 12:46:53 Systemprüfpunkt 06-08-2013 13:34:17 Systemprüfpunkt 07-08-2013 15:49:11 Systemprüfpunkt 08-08-2013 16:32:24 Systemprüfpunkt 09-08-2013 16:45:04 Systemprüfpunkt 10-08-2013 16:51:27 Systemprüfpunkt 11-08-2013 17:44:31 Systemprüfpunkt 12-08-2013 17:46:09 Systemprüfpunkt 14-08-2013 06:43:28 Software Distribution Service 3.0 15-08-2013 07:41:07 Systemprüfpunkt 16-08-2013 08:44:19 Systemprüfpunkt 17-08-2013 09:35:10 Systemprüfpunkt 19-08-2013 07:41:27 Systemprüfpunkt 19-08-2013 12:10:16 Java 7 Update 10 wird entfernt 19-08-2013 12:11:11 Java 7 Update 25 wird installiert 20-08-2013 16:59:15 Systemprüfpunkt 22-08-2013 06:14:34 Systemprüfpunkt 23-08-2013 07:07:53 Systemprüfpunkt 26-08-2013 10:07:19 Systemprüfpunkt 27-08-2013 14:16:43 Systemprüfpunkt 28-08-2013 07:44:27 Software Distribution Service 3.0 29-08-2013 08:30:53 Systemprüfpunkt 30-08-2013 09:17:10 Systemprüfpunkt 31-08-2013 14:59:48 Systemprüfpunkt 01-09-2013 15:50:58 Systemprüfpunkt 02-09-2013 16:40:46 Systemprüfpunkt 04-09-2013 17:14:02 Systemprüfpunkt 08-09-2013 15:14:10 Systemprüfpunkt 10-09-2013 07:44:02 Systemprüfpunkt 12-09-2013 08:25:08 Systemprüfpunkt 13-09-2013 06:35:23 Software Distribution Service 3.0 13-09-2013 07:35:03 Software Distribution Service 3.0 13-09-2013 07:41:42 Software Distribution Service 3.0 17-09-2013 08:45:58 Systemprüfpunkt 18-09-2013 08:48:17 Systemprüfpunkt 19-09-2013 09:56:48 Systemprüfpunkt 20-09-2013 11:41:32 Systemprüfpunkt 22-09-2013 10:32:30 Systemprüfpunkt 23-09-2013 11:08:45 Systemprüfpunkt 25-09-2013 06:27:56 Systemprüfpunkt 26-09-2013 08:58:07 Systemprüfpunkt 27-09-2013 09:04:43 Systemprüfpunkt 05-10-2013 09:05:39 Systemprüfpunkt 06-10-2013 19:05:06 Systemprüfpunkt 09-10-2013 14:55:33 Systemprüfpunkt 10-10-2013 15:25:29 Systemprüfpunkt 10-10-2013 15:51:09 Software Distribution Service 3.0 14-10-2013 14:40:37 Software Distribution Service 3.0 16-10-2013 09:25:58 Systemprüfpunkt 22-10-2013 07:36:27 Systemprüfpunkt 23-10-2013 08:14:23 Systemprüfpunkt 24-10-2013 08:35:59 Systemprüfpunkt 24-10-2013 15:06:12 Java(TM) 6 Update 31 wird entfernt 24-10-2013 15:08:53 Java 7 Update 45 wird installiert 25-10-2013 11:00:08 Software Distribution Service 3.0 26-10-2013 15:11:56 Systemprüfpunkt 28-10-2013 06:19:59 Systemprüfpunkt ==================== Hosts content: ========================== 2005-08-20 01:33 - 2006-12-25 20:03 - 00004188 ____N C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 127.0.0.1 cdn.errorsafe.com ## added by CiD 127.0.0.1 cdn.winsoftware.com ## added by CiD 127.0.0.1 de.errorsafe.com ## added by CiD 127.0.0.1 de.winantivirus.com ## added by CiD 127.0.0.1 download.cdn.drivecleaner.com ## added by CiD 127.0.0.1 download.cdn.errorsafe.com ## added by CiD 127.0.0.1 download.cdn.winsoftware.com ## added by CiD 127.0.0.1 download.errorsafe.com ## added by CiD 127.0.0.1 download.systemdoctor.com ## added by CiD 127.0.0.1 download.winantispyware.com ## added by CiD 127.0.0.1 download.windrivecleaner.com ## added by CiD 127.0.0.1 download.winfixer.com ## added by CiD 127.0.0.1 drivecleaner.com ## added by CiD 127.0.0.1 dynamique.drivecleaner.com ## added by CiD 127.0.0.1 errorprotector.com ## added by CiD 127.0.0.1 errorsafe.com ## added by CiD 127.0.0.1 es.winantivirus.com ## added by CiD 127.0.0.1 fr.winantivirus.com ## added by CiD 127.0.0.1 fr.winfixer.com ## added by CiD 127.0.0.1 go.drivecleaner.com ## added by CiD 127.0.0.1 go.errorsafe.com ## added by CiD 127.0.0.1 go.winantispyware.com ## added by CiD 127.0.0.1 go.winantivirus.com ## added by CiD There are 41 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe Task: C:\WINDOWS\Tasks\Google Software Updater.job => C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\ISP-Anmeldungserinnerung 1.job => C:\WINDOWS\system32\OOBE\oobebaln.exe Task: C:\WINDOWS\Tasks\Symantec NetDetect.job => C:\Programme\Symantec\LiveUpdate\NDETECT.EXE ==================== Loaded Modules (whitelisted) ============= 2013-03-05 08:21 - 2013-03-05 08:12 - 00397704 _____ () C:\Programme\Avira\AntiVir Desktop\sqlite3.dll 2005-08-20 01:34 - 2011-02-04 17:48 - 00291840 _____ () C:\WINDOWS\system32\sbe.dll 2005-08-20 01:34 - 2008-04-14 03:22 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2004-08-16 18:53 - 2004-08-16 18:53 - 00053248 ____N () C:\Programme\Sitecom\Bluetooth Software\btkeyind.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtest AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-2PHI-2B2UA19M6VT8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVF7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVK0} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVKE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVMI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVR9} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVRR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVTN} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CVV1} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVMH} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVNL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVP5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVPR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVRB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVSQ} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVVB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-3BG4-281NL05DCVTL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-3BG4-281NL05DCVUC} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-6E2T-2B6FMQRBGVUF} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-7LLS-29TK0CI52VR7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-7LLS-29TK0CI52VTU} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-J24H-293SB52ICVVE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG1-J24H-2981HI7ICVVG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28T8P0TASVVS} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28UD62RUEVV9} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVGU} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVHS} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVIR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVLT} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVR8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVRM} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVUQ} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG2-Q64S-2675H2E5QVVI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-1EMN-28M5NPU00VT1} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-90CN-262FTCDKSVUC} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-9P7R-292OFTVD6VST} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-L1G2-28QRSPMS6VVV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-NGIN-25I8KVHMGVVK} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVT8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVVB} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-S3H7-2A5PQROOQVVP} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVV7} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-0ANJ-25JQU97JCVVO} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-3S8E-27J3AJ6UT000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-5TO3-2831TOKLCVUL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-B3Q1-28C117F43000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-HU68-27ADSL5PEVUL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-HU68-27ADSL5PEVVR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG4-OIBL-25SSVB6LMVVT} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-8A6T-26VOTC6OMVQV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-FGLT-28R1BF9D2VSE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG5-KO19-25DIJFDG6VUO} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVFR} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVH4} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVI0} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVIG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJ8} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJM} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVKL} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVPA} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVS5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-64CA-2ASVQDAHMVOI} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-64CA-2ASVQDAHMVR5} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG6-L514-25CJ6NICMVUV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVOV} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVPH} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVQD} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVUG} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFREQVVE} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-5P29-2A14KFRER000} AlternateDataStreams: C:\Dokumente und Einstellungen\Kiki:zylomtr{000HQ7FF-AD7A-3FG7-E9E4-28HCA9OPAVSD} AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:07D9FF25 AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:1ECED34B AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:3D36932D AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:5F64C164 AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:8DCF53BE ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/25/2013 10:50:32 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/25/2013 10:50:23 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/25/2013 10:46:55 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/25/2013 10:32:31 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (10/10/2013 05:46:11 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (10/09/2013 02:33:14 PM) (Source: COM+) (User: ) Description: In der Laufzeitumgebung wurde ein inkonsistenter interner Status erkannt. Dies deutet auf eine potenzielle Instabilität des Prozesses hin. Diese Instabilität wird durch die in der COM+-Anwendung ausgeführten benutzerdefinierten Komponenten, die von ihnen verwendeten Komponenten oder durch andere Faktoren verursacht. Fehler in f:\xpsp3\com\com1x\src\comsvcs\package\cpackage.cpp(1184), hr = 8007041d: InitEventCollector failed Error: (09/24/2013 07:56:53 AM) (Source: Application Hang) (User: ) Description: Stillstehende Anwendung firefox.exe, Version 24.0.0.5001, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (09/23/2013 11:28:57 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:43:11 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. Error: (09/23/2013 09:09:50 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070422" (konvertiert in 0x800423f4) fehlgeschlagen. System errors: ============= Error: (10/28/2013 01:01:32 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: Der Server "{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (10/28/2013 06:32:20 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: Der Server "{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (10/28/2013 06:32:02 AM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/27/2013 11:32:00 AM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/27/2013 10:32:00 AM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/27/2013 09:32:00 AM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 08:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 07:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 06:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Error: (10/26/2013 05:32:00 PM) (Source: Schedule) (User: ) Description: Der Befehl "At2.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942403 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 55% Total physical RAM: 1022.07 MB Available physical RAM: 458.77 MB Total Pagefile: 2458.66 MB Available Pagefile: 1792.91 MB Total Virtual: 2047.88 MB Available Virtual: 1948.67 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:228.11 GB) (Free:94.9 GB) NTFS ==>[Drive with boot components (Windows XP)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 233 GB) (Disk ID: 79751EB5) Partition 1: (Not Active) - (Size=63 MB) - (Type=DE) Partition 2: (Active) - (Size=228 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=5 GB) - (Type=DB) ==================== End Of Log ============================ |
28.10.2013, 19:06 | #14 |
/// the machine /// TB-Ausbilder | immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners dann teste mal und berichte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.10.2013, 08:51 | #15 |
| immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners Hallo Schrauber, kein unliebsamer Besucher mehr auf meinem Computer! Vielen, vielen Dank! Christine |
Themen zu immer wieder pop-up erst von longfintuna und jetzt von salesresourcepartners |
0x8007042, akamai, antivir, antivirus, askbar, avira, bonjour, browser, canon, converter, error, euro, excel, farbar, farbar recovery scan tool, firefox, flash player, google, homepage, maleware, mozilla, mp3, online games, plug-in, registry, scan, security, software, symantec, system, windows, windows xp |