|
Plagegeister aller Art und deren Bekämpfung: Trojaner per USB-Stick...?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
31.10.2013, 11:51 | #1 |
| Trojaner per USB-Stick...? Moin! Habe folgendes Problem: Ich wurde gebeten, einige Bilder und Videos zu bearbeiten und habe diese alle auf einem USB-Stick bekommen. Habe ihn eingesteckt und erstmal mit Avira scannen lassen. Prompt spuckt mir Avira 12 Warnungen für einen Trojaner mit der Bezeichnung "TR/FbData.a" aus. Habe den Stick daraufhin direkt ausgesteckt, ohne den Scan beenden zu lassen und ohne etwas davon auf den PC kopieren zu lassen. Habe den anscheinenden Trojaner mal gegoogelt, aber nichts gefunden? Eine Fehlermeldung würde mich auch nicht wundern. Jedenfalls habe ich meinen PC nochmal mit Avira (die kostenpflichtige Version) durchscannen lassen und es wurde nichts gefunden. Bin ich damit aus dem Schneider? Oder könnte sich doch schon Malware auf dem PC befinden? Notfalls hätte ich noch ein einige Monate altes Back-Up auf das ich zurücksetzen kann, was ich mir aber gerne sparen würde. Danke im Voraus |
31.10.2013, 11:52 | #2 |
/// the machine /// TB-Ausbilder | Trojaner per USB-Stick...? schaun mer mal
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
31.10.2013, 12:23 | #3 |
| Trojaner per USB-Stick...? Hat etwas länger gedauert, allerdings wurde mir jetzt nur die FRST.txt Datei abgespeichert, keine Addition.txt?
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013 Ran by PC (ATTENTION: The logged in user is not administrator) on PC on 31-10-2013 12:13:51 Running from C:\Users\PC\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieCtrl.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\gs_agent\dsc.exe (Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8158240 2009-10-07] (Realtek Semiconductor) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.Exe [242192 2008-02-29] (Logitech, Inc.) HKLM\...\Run: [] - [x] HKLM\...\Run: [MacroKeyManager] - WTMKM.exe HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-03-14] (CANON INC.) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation) HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000} HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196} HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196} HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1 HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1 HKCU\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [643856 2011-10-12] (SANDBOXIE L.T.D) HKCU\...\Run: [AdobeBridge] - [x] MountPoints2: {e14065ce-b476-11e1-a50c-001c4af8de07} - E:\Startme.exe MountPoints2: {ebd6e1f0-ec2b-11e0-a57a-806e6f6e6963} - E:\setup.exe -a HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-10-02] (Intel Corporation) HKLM-x32\...\Run: [ShwiconXP9106] - C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2009-07-17] (Alcor Micro Corp.) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] () HKLM-x32\...\Run: [DellSupportCenter] - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [206064 2009-05-21] (SupportSoft, Inc.) HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [1904640 2009-03-20] (AVM Berlin) HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17\Trayserver.exe [90112 2008-08-07] (MAGIX AG) HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [185896 2006-09-28] (Nuance Communications, Inc.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\PC2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\PC2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\PC2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKLM - DefaultScope {EABF22F2-302E-4CF2-9EBA-205490D2C89D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope {961DD38A-9CC4-4197-ADE2-A5AAF881AD7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {961DD38A-9CC4-4197-ADE2-A5AAF881AD7B} URL = SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {961DD38A-9CC4-4197-ADE2-A5AAF881AD7B} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default FF SelectedSearchEngine: Google FF Homepage: about:home FF Keyword.URL: hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.3&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icq-search.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-1.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-10.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-11.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-2.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-3.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-4.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-5.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-6.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-7.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-8.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin-9.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\icqplugin.xml FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: Adblock Plus - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\4ea44bm2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ ==================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [368640 2009-03-20] (AVM Berlin) R2 DeviceMonitorService; C:\Program Files (x86)\Motorola Media Link\NServiceEntry.exe [87336 2009-10-12] (Nero AG) S3 FirebirdServerMAGIXInstance; C:\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-08-10] (The Firebird Project) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] () R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [116632 2012-05-18] () R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2008-12-31] () R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [94992 2011-10-12] (SANDBOXIE L.T.D) R2 uCamMonitor; C:\Program Files (x86)\Hama\Hama Webcam Suite\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) R2 WTService; C:\Windows\System32\atwtusb.exe [665320 2010-01-27] () S2 SessionLauncher; c:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe [x] ==================== Drivers (Whitelisted) ==================== S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-14] (Microsoft Corporation) S3 AF9035HB; C:\Windows\System32\Drivers\AF9035HB.sys [907904 2010-05-15] (ITE Technologies ) S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2008-04-24] (ArcSoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2009-03-20] (AVM Berlin) R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2009-03-20] (AVM GmbH) R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527360 2007-09-10] (PixArt Imaging Inc.) S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation) S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation) S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation) S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation) S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation) S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation) S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation) S3 s1029bus; C:\Windows\System32\DRIVERS\s1029bus.sys [116264 2009-05-25] (MCCI Corporation) S3 s1029mdfl; C:\Windows\System32\DRIVERS\s1029mdfl.sys [19496 2009-05-25] (MCCI Corporation) S3 s1029mdm; C:\Windows\System32\DRIVERS\s1029mdm.sys [158760 2009-05-25] (MCCI Corporation) S3 s1029mgmt; C:\Windows\System32\DRIVERS\s1029mgmt.sys [139304 2009-05-25] (MCCI Corporation) S3 s1029nd5; C:\Windows\System32\DRIVERS\s1029nd5.sys [34856 2009-05-25] (MCCI Corporation) S3 s1029obex; C:\Windows\System32\DRIVERS\s1029obex.sys [135208 2009-05-25] (MCCI Corporation) S3 s1029unic; C:\Windows\System32\DRIVERS\s1029unic.sys [151592 2009-05-25] (MCCI Corporation) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [157824 2011-10-12] (SANDBOXIE L.T.D) R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-01-01] (Sony Ericsson Mobile Communications) S3 StarOpen; No ImagePath R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 MotDev; system32\DRIVERS\motodrv.sys [x] U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-31 12:06 - 2013-10-31 12:06 - 01956614 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe 2013-10-31 12:06 - 2013-10-31 12:06 - 00000000 ____D C:\FRST 2013-10-15 15:24 - 2013-10-17 21:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-11 00:13 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 00:13 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 00:13 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 00:13 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-11 00:13 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-11 00:13 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-11 00:13 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-11 00:13 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-11 00:13 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-11 00:13 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 00:13 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-11 00:13 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-10 21:49 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-10 21:49 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-10 21:49 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-10 21:49 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-10 21:49 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-10 21:49 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-10 21:49 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-10 21:49 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-10 21:49 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-10 21:49 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-10 21:49 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-10 21:49 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-10 21:48 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-10 21:47 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-10 21:47 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-10 21:47 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-10 21:47 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-10 21:47 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-10 21:47 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2013-10-10 21:47 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-10 21:47 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-10 21:47 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 21:47 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-10 21:47 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-10 21:47 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2013-10-10 21:47 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-10 21:47 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-10 21:46 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-10 21:46 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 21:46 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-10 21:45 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-10 21:45 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-10 21:45 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-10 21:45 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-10 21:45 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 21:45 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-10 21:45 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-10 21:45 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-10 21:45 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-10 21:45 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-10 21:45 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 21:45 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-10 21:45 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-10 21:45 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-10 21:45 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-10 21:45 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 21:45 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-07 09:21 - 2013-10-07 09:21 - 00000000 ____D C:\Users\PC\Documents\StreamTransport 2013-10-07 09:05 - 2013-10-07 09:21 - 00000000 ____D C:\Program Files (x86)\StreamTransport 2013-10-07 09:04 - 2013-10-07 09:04 - 03331742 _____ ( ) C:\Users\PC\Downloads\streamtransport2171_setup.exe 2013-10-07 08:35 - 2013-10-07 08:35 - 00000346 _____ C:\Windows\PFRO.log 2013-10-06 16:31 - 2013-10-06 16:31 - 00000000 ____D C:\Users\PC\Documents\Snagit 2013-10-06 16:30 - 2013-10-06 16:30 - 00000000 ____D C:\Users\PC\AppData\Local\TechSmith 2013-10-06 16:26 - 2013-10-06 16:28 - 58127704 _____ C:\Users\PC\Downloads\snagitde.exe 2013-10-06 16:18 - 2013-10-06 16:20 - 58127704 _____ C:\Users\PC\Downloads\snagitde_11.2.1.exe 2013-10-06 13:24 - 2013-10-06 13:26 - 22537616 _____ (Mozilla) C:\Users\PC\Downloads\Firefox_Setup_de24.0.exe 2013-10-06 13:24 - 2013-10-06 13:25 - 04425448 _____ (AVG Technologies) C:\Users\PC\Downloads\avg_free_stb_all_2014_4116.exe 2013-10-01 16:45 - 2013-10-01 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-01 15:30 - 2013-10-01 15:30 - 00015247 _____ C:\Users\PC2\Desktop\Cv.odt 2013-10-01 14:42 - 2013-10-01 14:42 - 00000838 _____ C:\Users\PC2\AppData\Local\recently-used.xbel ==================== One Month Modified Files and Folders ======= 2013-10-31 12:13 - 2013-06-22 09:37 - 00019375 _____ C:\Windows\setupact.log 2013-10-31 12:13 - 2011-10-01 14:23 - 00000000 ____D C:\Program Files (x86)\Motorola Media Link 2013-10-31 12:13 - 2011-08-01 22:06 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-31 12:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-31 12:13 - 2009-07-14 03:34 - 00000577 _____ C:\Windows\win.ini 2013-10-31 12:12 - 2011-12-17 21:28 - 01838918 _____ C:\Windows\WindowsUpdate.log 2013-10-31 12:11 - 2010-01-20 19:14 - 00000000 ____D C:\Users\PC\AppData\Local\Adobe 2013-10-31 12:08 - 2011-08-01 22:06 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-31 12:07 - 2009-07-14 05:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-31 12:07 - 2009-07-14 05:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-31 12:06 - 2013-10-31 12:06 - 01956614 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe 2013-10-31 12:06 - 2013-10-31 12:06 - 00000000 ____D C:\FRST 2013-10-31 12:05 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-10-31 12:05 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-10-31 12:05 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-30 18:39 - 2012-09-23 17:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-21 16:20 - 2013-06-30 18:05 - 301323723 _____ C:\Windows\MEMORY.DMP 2013-10-21 16:20 - 2013-06-30 18:05 - 00000000 ____D C:\Windows\Minidump 2013-10-20 12:49 - 2012-01-19 17:35 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-10-19 16:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-10-19 12:55 - 2010-01-19 18:39 - 00000000 ___RD C:\Users\PC\Desktop\Mein Zeug 2013-10-19 09:58 - 2012-06-19 13:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-17 21:06 - 2013-10-15 15:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-15 15:18 - 2011-11-03 15:38 - 00001912 _____ C:\Windows\Sandboxie.ini 2013-10-11 10:17 - 2009-07-14 05:45 - 00463560 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-11 00:12 - 2013-03-13 20:09 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-11 00:12 - 2013-03-13 20:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-11 00:10 - 2013-08-25 16:26 - 00000000 ____D C:\Windows\system32\MRT 2013-10-11 00:08 - 2010-01-18 16:33 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-09 18:41 - 2012-09-23 17:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-09 18:41 - 2012-09-23 17:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-10-07 09:21 - 2013-10-07 09:21 - 00000000 ____D C:\Users\PC\Documents\StreamTransport 2013-10-07 09:21 - 2013-10-07 09:05 - 00000000 ____D C:\Program Files (x86)\StreamTransport 2013-10-07 09:04 - 2013-10-07 09:04 - 03331742 _____ ( ) C:\Users\PC\Downloads\streamtransport2171_setup.exe 2013-10-07 08:35 - 2013-10-07 08:35 - 00000346 _____ C:\Windows\PFRO.log 2013-10-06 17:37 - 2010-01-18 10:40 - 00000000 ____D C:\Users\PC 2013-10-06 16:31 - 2013-10-06 16:31 - 00000000 ____D C:\Users\PC\Documents\Snagit 2013-10-06 16:30 - 2013-10-06 16:30 - 00000000 ____D C:\Users\PC\AppData\Local\TechSmith 2013-10-06 16:28 - 2013-10-06 16:26 - 58127704 _____ C:\Users\PC\Downloads\snagitde.exe 2013-10-06 16:20 - 2013-10-06 16:18 - 58127704 _____ C:\Users\PC\Downloads\snagitde_11.2.1.exe 2013-10-06 13:26 - 2013-10-06 13:24 - 22537616 _____ (Mozilla) C:\Users\PC\Downloads\Firefox_Setup_de24.0.exe 2013-10-06 13:25 - 2013-10-06 13:24 - 04425448 _____ (AVG Technologies) C:\Users\PC\Downloads\avg_free_stb_all_2014_4116.exe 2013-10-01 16:46 - 2010-01-18 16:38 - 00000000 ____D C:\Users\PC\AppData\Local\Mozilla 2013-10-01 16:45 - 2013-10-01 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-01 15:30 - 2013-10-01 15:30 - 00015247 _____ C:\Users\PC2\Desktop\Cv.odt 2013-10-01 14:42 - 2013-10-01 14:42 - 00000838 _____ C:\Users\PC2\AppData\Local\recently-used.xbel 2013-10-01 14:42 - 2013-01-27 19:16 - 00000000 ____D C:\Users\PC2\.gimp-2.8 2013-10-01 14:41 - 2011-04-30 14:24 - 00000000 ___RD C:\Users\PC2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-01 14:41 - 2011-04-30 14:23 - 00000000 ___RD C:\Users\PC2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Some content of TEMP: ==================== C:\Users\PC2\AppData\Local\Temp\AskSLib.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== End Of Log ============================ --- --- --- --- --- --- Ah, das Kästchen unten war deaktiviert. Kein Wunder! Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2013 Ran by PC at 2013-10-31 12:22:08 Running from C:\Users\PC\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 7-Zip 9.22 (x64 edition) (Version: 9.22.00.0) Adobe AIR (x32 Version: 3.5.0.880) Adobe Download Assistant (x32 Version: 1.2.3) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Flash Professional CS6 (x32 Version: 12.0) Adobe Help Manager (x32 Version: 4.0.244) Adobe Reader X (10.1.4) - Deutsch (x32 Version: 10.1.4) Adobe Shockwave Player 11.5 (x32 Version: 11.5.7.609) ATI Catalyst Control Center (x32 Version: 2.009.0918.2131) Avira Antivirus Premium (x32 Version: 13.0.0.4052) AVM FRITZ!Box Dokumentation (x32) AVM FRITZ!Box Druckeranschluss (x32) AVM FRITZ!WLAN (x32) Canon Easy-PhotoPrint EX (x32) Canon IJ Network Scanner Selector EX (x32) Canon IJ Network Tool (x32) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32) Canon MG3100 series Benutzerregistrierung (x32) Canon MG3100 series MP Drivers Canon MP Navigator 3.0 (x32) Canon MP Navigator EX 5.0 (x32) Canon MP600 Canon My Printer (x32) Canon Utilities Easy-PhotoPrint (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Core Implementation (x32 Version: 2009.0918.2132.36825) Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0918.2132.36825) Catalyst Control Center Graphics Full New (x32 Version: 2009.0918.2132.36825) Catalyst Control Center Graphics Light (x32 Version: 2009.0918.2132.36825) Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0918.2132.36825) Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0918.2132.36825) Catalyst Control Center InstallProxy (x32 Version: 2009.0918.2132.36825) Catalyst Control Center Localization All (x32 Version: 2009.0918.2132.36825) CCC Help Chinese Standard (x32 Version: 2009.0918.2131.36825) CCC Help Chinese Traditional (x32 Version: 2009.0918.2131.36825) CCC Help Czech (x32 Version: 2009.0918.2131.36825) CCC Help Danish (x32 Version: 2009.0918.2131.36825) CCC Help Dutch (x32 Version: 2009.0918.2131.36825) CCC Help English (x32 Version: 2009.0918.2131.36825) CCC Help Finnish (x32 Version: 2009.0918.2131.36825) CCC Help French (x32 Version: 2009.0918.2131.36825) CCC Help German (x32 Version: 2009.0918.2131.36825) CCC Help Greek (x32 Version: 2009.0918.2131.36825) CCC Help Hungarian (x32 Version: 2009.0918.2131.36825) CCC Help Italian (x32 Version: 2009.0918.2131.36825) CCC Help Japanese (x32 Version: 2009.0918.2131.36825) CCC Help Korean (x32 Version: 2009.0918.2131.36825) CCC Help Norwegian (x32 Version: 2009.0918.2131.36825) CCC Help Polish (x32 Version: 2009.0918.2131.36825) CCC Help Portuguese (x32 Version: 2009.0918.2131.36825) CCC Help Russian (x32 Version: 2009.0918.2131.36825) CCC Help Spanish (x32 Version: 2009.0918.2131.36825) CCC Help Swedish (x32 Version: 2009.0918.2131.36825) CCC Help Thai (x32 Version: 2009.0918.2131.36825) CCC Help Turkish (x32 Version: 2009.0918.2131.36825) ccc-core-static (x32 Version: 2009.0918.2132.36825) ccc-utility64 (Version: 2009.0918.2132.36825) CCleaner (Version: 3.03) CDDRV_Installer (Version: 4.60) CD-LabelPrint (x32) Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000) CyberLink PhotoNow (x32 Version: 1.1.6904) CyberLink PowerDirector (x32 Version: 7.0.4020) D3DX10 (x32 Version: 15.4.2368.0902) Dell DataSafe Local Backup - Support Software (x32 Version: 2.31) Dell DataSafe Local Backup (x32 Version: 9.3.44) Dell DataSafe Online (x32 Version: 1.2.0009) Dell Dock (Version: 2.0.0) Dell Edoc Viewer (Version: 1.0.0) Dell Getting Started Guide (x32 Version: 1.00.0000) Dell Support Center (Support Software) (x32 Version: 2.5.09100) DirectXInstallService (x32 Version: 9.0.2) erLT (x32 Version: 1.12.0117) Faraday's Electromagnetic Lab (HKCU) Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0) Fotogalerie (x32 Version: 16.4.3503.0728) Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430) Free YouTube to MP3 Converter version 3.12.2.430 (x32 Version: 3.12.2.430) GIMP 2.8.0 (Version: 2.8.0) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.165) Hama PC-Webcam Circle (x32 Version: 1.0.0.19) Intel(R) Control Center (x32 Version: 1.2.0.1006) Intel(R) Rapid Storage Technology (x32 Version: 9.5.0.1037) KhalInstallWrapper (Version: 4.60.122) Logitech SetPoint (x32 Version: 4.60) Logitech Updater (x32 Version: 1.70) MacroKey Manager (Version: 1.00.0000) MacroKey Manager (x32 Version: ) MAGIX Screenshare (x32 Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6) MAGIX Video deluxe 17 (x32 Version: 10.0.11.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Manga Studio Debut 4.0 (x32) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office PowerPoint Viewer 2007 (German) (x32 Version: 12.0.6612.1000) Microsoft Search Enhancement Pack (x32 Version: 3.0.133.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft XML Parser (x32 Version: 8.0.7820.0) Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000) Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000) Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000) Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000) Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000) MotoHelper MergeModules (x32 Version: 1.2.0) Motorola Device Manager (x32 Version: 2.2.17) Motorola Device Software Update (x32 Version: 1.0.30) MOTOROLA MEDIA LINK (x32 Version: 1.00.0005.00001) Motorola MMCP Drivers Installation 1.0.2 (Version: 1.0.2) Motorola Mobile Drivers Installation 5.6.0 (Version: 5.6.0) Motorola Software Update (x32 Version: 01.16.36) Movie Maker (x32 Version: 16.4.3503.0728) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0.1) Mozilla Thunderbird 24.0.1 (x86 de) (x32 Version: 24.0.1) Mp3tag v2.46a (x32 Version: v2.46a) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1108.0727) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Multimedia Card Reader (x32 Version: 1.4.915.1) Nostale(DE) (x32) OpenOffice.org 3.3 (x32 Version: 3.3.9567) Opera 12.02 (x32 Version: 12.02.1578) PC Inspector File Recovery (x32 Version: 4.0) PDF Settings CS6 (x32 Version: 11.0) Photo Gallery (x32 Version: 16.4.3503.0728) PhotoFiltre (HKCU) PhotoFiltre 7 (HKCU) PhotoScape (x32) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5953) Sandboxie 3.60 (64-bit) ScanSoft OmniPage SE 4.0 (x32 Version: 15.00.0020) Skins (x32 Version: 2009.0918.2132.36825) Skype Click to Call (x32 Version: 6.3.11079) Skype™ 6.1 (x32 Version: 6.1.129) TI Connect 1.6 (x32 Version: 1.6) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Video Grabber (x32 Version: 1.00.0000) VLC media player 1.1.7 (x32 Version: 1.1.7) VLC media player 2.0.2 (Version: 2.0.2) Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (Version: 06/11/2009 1.0.0.0) Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (Version: 09/02/2009 1.0.0.1) Windows Live Communications Platform (x32 Version: 16.4.3503.0728) Windows Live Essentials (x32 Version: 16.4.3503.0728) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3503.0728) Windows Live Photo Common (x32 Version: 16.4.3503.0728) Windows Live PIMT Platform (x32 Version: 16.4.3503.0728) Windows Live SOXE (x32 Version: 16.4.3503.0728) Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728) Windows Live UX Platform (x32 Version: 16.4.3503.0728) Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728) WinRAR 4.20 (64-Bit) (Version: 4.20.0) ==================== Restore Points ========================= Could not list Restore Points. Check WMI. ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ? Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ? Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ? ==================== Loaded Modules (whitelisted) ============= 2008-11-18 12:00 - 2008-11-18 12:00 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-01-08 23:34 - 2010-01-08 23:34 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/30/2013 04:50:40 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/29/2013 10:38:00 AM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (10/21/2013 04:23:04 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/20/2013 06:00:02 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (10/13/2013 06:00:01 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (10/13/2013 02:50:14 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/07/2013 04:32:12 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 24.0.0.5001, Zeitstempel: 0x522fd29f Name des fehlerhaften Moduls: xul.dll, Version: 24.0.0.5001, Zeitstempel: 0x522fd1a4 Ausnahmecode: 0xc0000005 Fehleroffset: 0x001b72a8 ID des fehlerhaften Prozesses: 0x11c0 Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0 Pfad der fehlerhaften Anwendung: firefox.exe1 Pfad des fehlerhaften Moduls: firefox.exe2 Berichtskennung: firefox.exe3 Error: (10/06/2013 06:00:03 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (10/05/2013 10:59:31 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (09/29/2013 06:32:57 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" System errors: ============= Error: (10/31/2013 00:13:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SessionLauncher" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/31/2013 00:00:59 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SessionLauncher" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/31/2013 11:24:06 AM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "OS" den Befehl "chkdsk" aus. Error: (10/31/2013 11:17:08 AM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (10/31/2013 11:16:39 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SessionLauncher" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/30/2013 04:49:13 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SessionLauncher" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/29/2013 10:27:59 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SessionLauncher" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/27/2013 00:59:39 PM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (10/27/2013 00:59:38 PM) (Source: VDS Basic Provider) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (10/27/2013 00:59:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SessionLauncher" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= Error: (10/30/2013 04:50:40 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/29/2013 10:38:00 AM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (10/21/2013 04:23:04 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/20/2013 06:00:02 PM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (10/13/2013 06:00:01 PM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (10/13/2013 02:50:14 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/07/2013 04:32:12 PM) (Source: Application Error)(User: ) Description: firefox.exe24.0.0.5001522fd29fxul.dll24.0.0.5001522fd1a4c0000005001b72a811c001cec366e4bb9f3bC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dlla2b25ef7-2f65-11e3-a3a9-001c4af8de07 Error: (10/06/2013 06:00:03 PM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (10/05/2013 10:59:31 AM) (Source: MsiInstaller)(User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (09/29/2013 06:32:57 PM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 3959.08 MB Available physical RAM: 2408.17 MB Total Pagefile: 7916.34 MB Available Pagefile: 5915.46 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:921.83 GB) (Free:765.34 GB) NTFS ==================== MBR & Partition Table ================== ==================== End Of Log ============================ |
01.11.2013, 10:51 | #4 |
/// the machine /// TB-Ausbilder | Trojaner per USB-Stick...? nüscht, sieht gut aus
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
01.11.2013, 15:55 | #5 |
| Trojaner per USB-Stick...? Super, vielen lieben Dank! |
02.11.2013, 11:20 | #6 |
/// the machine /// TB-Ausbilder | Trojaner per USB-Stick...? Gern Geschehen
__________________ --> Trojaner per USB-Stick...? |
Themen zu Trojaner per USB-Stick...? |
altes, avira, beenden, befinden, bilder, direkt, fehlermeldung, folge, folgendes, fotodateien, kopieren, malware, monate, nichts, problem, scan, scanne, scannen, schei, trojaner, version, videos, warnungen, wunder, würde, zurücksetzen |