Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Softwareupdater.UI.exe eingefangen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 12.11.2013, 21:47   #1
holgerbaer
 
Softwareupdater.UI.exe eingefangen - Standard

Softwareupdater.UI.exe eingefangen



Hallo, habe mir die Softwareupdater.UI.exe eingefangen und möchte sie gerne loswerden, dafür brauche ich eure Hilfe.

FRST-Scan 1 (ohne Optional Scan Addition.txt) ergibt für FRST.txt:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01
Ran by Holger_2 (ATTENTION: The logged in user is not administrator) on HOLGER-PC on 12-11-2013 21:44:09
Running from C:\Users\Holger_2\Desktop\From the INet\Filme
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(nabocorp. softwares) C:\Program Files (x86)\cam2pc\cam2pc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(PortableApps.com) C:\Users\Holger_2\Desktop\From the INet\FreeDownloadManagerPortable\FreeDownloadManagerPortable.exe
(FreeDownloadManager.ORG) C:\Users\Holger_2\Desktop\From the INet\FreeDownloadManagerPortable\App\FreeDownloadManager\fdm.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Seagate LLC) C:\Program Files (x86)\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\scalc.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Users\Holger_2\AppData\Local\Mozilla Thunderbird\thunderbird.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11821160 2011-05-09] (Realtek Semiconductor)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-03-14] (CANON INC.)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation)
HKLM-x32\...\RunOnce: [UnPURE] - wscript.exe //b C:\Users\Holger\AppData\Local\Temp\UnPURE.vbs [591 2013-09-02] ()
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [cam2pc] - C:\Program Files (x86)\cam2pc\cam2pc.exe [6639616 2007-10-27] (nabocorp. softwares)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: {e5839fa2-4bdd-11e2-a28d-0009dd506595} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [MaxMenuMgr] - C:\Program Files (x86)\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe [185640 2009-09-25] (Seagate LLC)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled ()
Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default
FF user.js: detected! => C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\user.js
FF DefaultSearchEngine: Google
FF Homepage: hxxp://www.google.de/|
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20((shExpMatch(host%2C%20'(*.turntable.fm%7Cturntable.fm)')%20%26%26%20url.indexOf('.css')%20%3D%3D%20-1%20%26%26%20url.indexOf('.js')%20%3D%3D%20-1)%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*'))%20%7B%20return%20'PROXY%20ab-us13.personalitycores.com%3A8000%3B%20PROXY%20ab-us01.personalitycores.com%3A8000%3B%20PROXY%20ab-us15.personalitycores.com%3A8000%3B%20PROXY%20ab-us09.personalitycores.com%3A8000%3B%20PROXY%20ab-us08.personalitycores.com%3A8000%3B%20PROXY%20ab-us20.personalitycores.com%3A8000%3B%20PROXY%20ab-us03.personalitycores.com%3A8000%3B%20PROXY%20ab-us17.personalitycores.com%3A8000%3B%20PROXY%20ab-us18.personalitycores.com%3A8000%3B%20PROXY%20ab-us07.personalitycores.com%3A8000%3B%20PROXY%20ab-us21.personalitycores.com%3A8000%3B%20PROXY%20ab-us22.personalitycores.com%3A8000%3B%20PROXY%20ab-us10.personalitycores.com%3A8000%3B%20PROXY%20ab-us12.personalitycores.com%3A8000%3B%20PROXY%20ab-us11.personalitycores.com%3A8000%3B%20PROXY%20ab-us02.personalitycores.com%3A8000%3B%20PROXY%20ab-us14.personalitycores.com%3A8000%3B%20PROXY%20ab-us16.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\chefkochde.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\familyone.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\idealode.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\imdb.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\leo-de-en.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\otr-quick-search.xml
FF SearchPlugin: C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\searchplugins\youtube.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Deutsches Wörterbuch - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\de-DE@dictionaries.addons.mozilla.org
FF Extension: Виявлення пристроїв Logitech - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\DeviceDetection@logitech.com
FF Extension: FacebookBlocker - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\facebookBlocker@webgraph.com
FF Extension: Form History Control - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\formhistory@yahoo.com
FF Extension: BlackSheep - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\jsobrier@zscaler.com
FF Extension: ScribbliesKids - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\ScribbliesKids
FF Extension: SphereGnome - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\SphereGnome
FF Extension: SphereGnomeBig - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\SphereGnomeBig
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\temp
FF Extension: iFoxFork Metal - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{0b7e0980-50bb-11df-9879-0800200c9a66}
FF Extension: iFoxFork Smooth - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{97f3d2a0-50ac-11df-9879-0800200c9a66}
FF Extension: CookieCuller - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}
FF Extension: Vuze Remote  - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
FF Extension: User Agent Switcher - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
FF Extension: alarm - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\alarm@gutscheinsammler.de.xpi
FF Extension: amznUWL2 - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\amznUWL2@amazon.com.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\contents.rdf
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\Extensions.rdf
FF Extension: fdm_ffext - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\fdm_ffext@freedownloadmanager.org
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\icon.png
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\installed-extensions.txt
FF Extension: jid1-QpHD8URtZWJC2A - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\preview.png
FF Extension: printedit - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\printedit@DW-dev.xpi
FF Extension: toolbar-ff - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\toolbar-ff@payback.de.xpi
FF Extension: toolbar - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\toolbar@qipu.de.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{19EB90DC-A456-458b-8AAC-616D91AAFCE1}.xpi
FF Extension: prefs - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{5e594888-3e8e-47da-b2c6-b0b545112f84}.xpi
FF Extension: No Name - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
FF Extension: Adblock Plus - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: downbarconfig - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF Extension: prefs - C:\Users\Holger_2\AppData\Roaming\Mozilla\Firefox\Profiles\w1gxj9zf.default\Extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-27] (Microsoft Corp.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 MSSQL$MYMOVIES; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)
R2 SpyroService; C:\Program Files (x86)\FS\Spyro Portal\FlashPortal.exe [50688 2012-09-20] (FS)
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-06-24] ()
R2 AirPrint; C:\AirPrint\airprint.exe -R _ipp._tcp,_universal -s [x]
R2 MSSQL$PP40; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PP40\Binn\sqlservr.exe -sPP40 [x]
S3 SQLAgent$PP40; C:\Program Files (x86)\Microsoft SQL Server\MSSQL$PP40\Binn\sqlagent.EXE -i PP40 [x]

==================== Drivers (Whitelisted) ====================

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [636760 2013-09-02] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 LTXMD_VAC; C:\Windows\System32\drivers\lmvac.sys [28944 2011-05-06] (Windows (R) Win 7 DDK provider)
S3 SMA_USBBUS; C:\Windows\System32\drivers\ftdibus.sys [76648 2013-02-13] (FTDI Ltd.)
S0 nvpciflt; system32\DRIVERS\nvpciflt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-12 21:26 - 2013-11-12 21:26 - 00000000 ____D C:\FRST
2013-11-12 21:14 - 2013-11-12 21:14 - 00000000 ____D C:\Users\Holger\AppData\Roaming\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-12 21:13 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-12 20:35 - 2013-11-12 20:35 - 00001787 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-12 20:34 - 2013-11-12 20:35 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 20:34 - 2013-11-12 20:35 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 20:34 - 2013-11-12 20:34 - 00000000 ____D C:\Program Files\iPod
2013-11-12 15:15 - 2013-11-10 17:36 - 00011849 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt_0.odt
2013-11-10 14:06 - 2013-11-10 14:06 - 00000130 ____H C:\Users\Natalie und Michelle\Documents\.~lock.Überschrift.odt_0.odt#
2013-11-10 14:05 - 2013-11-10 14:03 - 00012160 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt
2013-11-06 20:37 - 2013-11-06 20:38 - 00000000 ____D C:\Users\Public\Documents\Natalie_öffentlich
2013-11-05 19:57 - 2013-11-05 19:57 - 00001098 _____ C:\Users\Natalie und Michelle\Desktop\OpenOffice Writer.lnk
2013-11-05 19:51 - 2013-11-10 12:32 - 00000000 ____D C:\Users\Natalie und Michelle\Documents\Natalie
2013-11-05 19:20 - 2013-11-05 19:20 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Roaming\OpenOffice
2013-11-02 10:58 - 2013-11-02 10:58 - 00000000 ____D C:\Users\Holger_2\AppData\Local\calibre-cache
2013-11-02 10:46 - 2013-11-02 10:46 - 00000934 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2013-10-30 22:10 - 2013-11-02 10:42 - 00000000 ____D C:\Users\Holger_2\AppData\Local\Mozilla Thunderbird
2013-10-30 21:49 - 2013-10-30 21:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-30 21:42 - 2013-10-30 22:30 - 00000000 ____D C:\Users\Holger_2\Documents\ConvertXToDVD
2013-10-25 19:33 - 2013-10-25 21:15 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Free Download Manager
2013-10-25 18:25 - 2013-10-25 18:25 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-10-22 21:41 - 2013-10-22 21:41 - 00000000 ____D C:\Users\Holger\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-10-22 21:01 - 2012-02-16 12:42 - 00676968 _____ (Realtek                                            ) C:\Windows\system32\Drivers\Rt64win7.sys
2013-10-22 21:01 - 2012-02-16 12:42 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2013-10-22 20:58 - 2013-10-22 20:58 - 00015448 _____ C:\Windows\DPINST.LOG
2013-10-22 20:58 - 2013-10-22 20:58 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3
2013-10-22 20:53 - 2013-10-22 20:53 - 00000000 ____D C:\Intel
2013-10-22 20:50 - 2013-10-22 20:50 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-22 20:40 - 2013-10-22 21:00 - 00000000 ____D C:\Medion
2013-10-22 20:32 - 2013-10-22 20:32 - 00000000 ____D C:\Program Files\CPUID

==================== One Month Modified Files and Folders =======

2013-11-12 21:33 - 2012-09-11 21:00 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-12 21:26 - 2013-11-12 21:26 - 00000000 ____D C:\FRST
2013-11-12 21:14 - 2013-11-12 21:14 - 00000000 ____D C:\Users\Holger\AppData\Roaming\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-12 21:13 - 2013-11-12 21:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-12 21:13 - 2012-01-12 22:25 - 00000000 ____D C:\Users\Holger_2\Desktop\From the INet
2013-11-12 21:07 - 2009-07-14 05:45 - 00017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-12 21:07 - 2009-07-14 05:45 - 00017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-12 20:46 - 2012-01-10 19:29 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-12 20:46 - 2012-01-10 19:29 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-12 20:43 - 2013-09-02 20:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-12 20:35 - 2013-11-12 20:35 - 00001787 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-12 20:35 - 2013-11-12 20:34 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-12 20:35 - 2013-11-12 20:34 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-12 20:35 - 2012-09-15 09:50 - 00000000 ____D C:\Program Files\iTunes
2013-11-12 20:34 - 2013-11-12 20:34 - 00000000 ____D C:\Program Files\iPod
2013-11-12 20:29 - 2012-01-14 18:52 - 00000000 ____D C:\Users\Holger_2\Documents\Excel
2013-11-12 20:27 - 2012-01-10 19:27 - 01682229 _____ C:\Windows\WindowsUpdate.log
2013-11-12 15:14 - 2012-03-17 18:26 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Local\CrashDumps
2013-11-10 18:13 - 2012-01-10 19:34 - 00102360 _____ C:\Users\Holger\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-10 18:06 - 2012-01-27 22:30 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-10 17:39 - 2012-01-27 21:58 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-10 17:36 - 2013-11-12 15:15 - 00011849 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt_0.odt
2013-11-10 14:06 - 2013-11-10 14:06 - 00000130 ____H C:\Users\Natalie und Michelle\Documents\.~lock.Überschrift.odt_0.odt#
2013-11-10 14:03 - 2013-11-10 14:05 - 00012160 _____ C:\Users\Natalie und Michelle\Documents\Überschrift.odt_0.odt
2013-11-10 12:32 - 2013-11-05 19:51 - 00000000 ____D C:\Users\Natalie und Michelle\Documents\Natalie
2013-11-10 09:25 - 2011-05-16 15:04 - 00772300 _____ C:\Windows\system32\perfh007.dat
2013-11-10 09:25 - 2011-05-16 15:04 - 00179186 _____ C:\Windows\system32\perfc007.dat
2013-11-10 09:25 - 2009-07-14 06:13 - 01822438 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-09 10:38 - 2012-06-14 21:03 - 00018091 _____ C:\Windows\setupact.log
2013-11-09 10:38 - 2012-06-13 19:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-09 10:38 - 2011-09-05 23:24 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-09 10:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-06 20:40 - 2012-01-22 16:57 - 00000000 ____D C:\Users\Holger_2\AppData\Local\CrashDumps
2013-11-06 20:38 - 2013-11-06 20:37 - 00000000 ____D C:\Users\Public\Documents\Natalie_öffentlich
2013-11-06 17:06 - 2012-03-28 08:08 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Local\Adobe
2013-11-06 17:06 - 2012-01-17 21:22 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Roaming\Adobe
2013-11-05 19:57 - 2013-11-05 19:57 - 00001098 _____ C:\Users\Natalie und Michelle\Desktop\OpenOffice Writer.lnk
2013-11-05 19:20 - 2013-11-05 19:20 - 00000000 ____D C:\Users\Natalie und Michelle\AppData\Roaming\OpenOffice
2013-11-03 17:10 - 2012-05-18 18:28 - 00000000 ____D C:\Napster-Musik
2013-11-02 17:45 - 2013-01-27 19:04 - 00000000 ____D C:\Users\Holger_2\Documents\Calibre Bibliothek
2013-11-02 10:58 - 2013-11-02 10:58 - 00000000 ____D C:\Users\Holger_2\AppData\Local\calibre-cache
2013-11-02 10:46 - 2013-11-02 10:46 - 00000934 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2013-11-02 10:46 - 2013-01-27 19:02 - 00000000 ____D C:\Program Files\Calibre2
2013-11-02 10:42 - 2013-10-30 22:10 - 00000000 ____D C:\Users\Holger_2\AppData\Local\Mozilla Thunderbird
2013-11-02 10:40 - 2013-06-11 21:36 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-10-30 22:30 - 2013-10-30 21:42 - 00000000 ____D C:\Users\Holger_2\Documents\ConvertXToDVD
2013-10-30 22:30 - 2012-03-29 18:12 - 00001173 _____ C:\Users\Holger_2\AppData\Roaming\vso_ts_preview.xml
2013-10-30 22:30 - 2012-03-29 18:12 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Vso
2013-10-30 21:49 - 2013-10-30 21:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-28 17:08 - 2009-07-14 05:45 - 02336472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-28 15:04 - 2012-01-17 21:13 - 00102360 _____ C:\Users\Natalie und Michelle\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-25 21:15 - 2013-10-25 19:33 - 00000000 ____D C:\Users\Holger_2\AppData\Roaming\Free Download Manager
2013-10-25 18:25 - 2013-10-25 18:25 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-10-23 19:13 - 2012-01-12 21:06 - 00102360 _____ C:\Users\Holger_2\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-22 21:45 - 2013-08-11 15:22 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-10-22 21:41 - 2013-10-22 21:41 - 00000000 ____D C:\Users\Holger\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-10-22 21:04 - 2003-07-26 15:48 - 00020344 _____ C:\Users\Holger_2\Documents\To-Do-List.txt
2013-10-22 21:01 - 2011-08-11 22:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-10-22 21:01 - 2011-07-18 22:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-22 21:00 - 2013-10-22 20:40 - 00000000 ____D C:\Medion
2013-10-22 20:58 - 2013-10-22 20:58 - 00015448 _____ C:\Windows\DPINST.LOG
2013-10-22 20:58 - 2013-10-22 20:58 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3
2013-10-22 20:53 - 2013-10-22 20:53 - 00000000 ____D C:\Intel
2013-10-22 20:50 - 2013-10-22 20:50 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-22 20:50 - 2013-10-22 20:50 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-10-22 20:32 - 2013-10-22 20:32 - 00000000 ____D C:\Program Files\CPUID
2013-10-18 16:34 - 2012-01-14 18:51 - 00000000 ____D C:\Users\Holger_2\Documents\Word

Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\Temp\AskSLib.dll
C:\Users\Holger\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Holger\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Holger\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Holger\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Holger\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Holger\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Holger\AppData\Local\Temp\nvStInst.exe
C:\Users\Holger\AppData\Local\Temp\tyistyaz.dll
C:\Users\Holger\AppData\Local\Temp\uninstall.exe
C:\Users\Holger_2\AppData\Local\Temp\{D47C03B2-AE21-48D6-B63D-7378E1F0271D}-GoogleUpdateSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
         

FRST-Scan 2 (mit Optional Scan Addition.txt) ergibt für Addition.txt:

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2013 01
Ran by Holger_2 at 2013-11-12 21:45:45
Running from C:\Users\Holger_2\Desktop\From the INet\Filme
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky PURE 2.0 (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky PURE 2.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
FW: Kaspersky PURE 2.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

"Sarah - Die Hüterin des Einhorns" (x32 Version: - Master)
1&1 SmartFax (x32 Version: 2.00.224)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
A New Beginning - Final Cut (x32)
Abenteuer auf dem Reiterhof - Die wilden Mustangs (x32 Version: 1.00.0000)
Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Anchor Service CS3 (x32 Version: 1.0)
Adobe Asset Services CS3 (x32 Version: 3)
Adobe Bridge CS3 (x32 Version: 2)
Adobe Bridge Start Meeting (x32 Version: 1.0)
Adobe BridgeTalk Plugin CS3 (x32 Version: 1.0)
Adobe Camera Raw 4.0 (x32 Version: 4.0)
Adobe CMaps (x32 Version: 1.0)
Adobe Color - Photoshop Specific (x32 Version: 1.0)
Adobe Color Common Settings (x32 Version: 1.0)
Adobe Color EU Recommended Settings (x32 Version: 1.0)
Adobe Color JA Extra Settings (x32 Version: 1.0)
Adobe Color NA Extra Settings (x32 Version: 1.0)
Adobe Creative Suite 3 Design Premium (x32 Version: 1.0)
Adobe Creative Suite 3 Design Premium hinzufügen oder entfernen (x32 Version: 1.0)
Adobe Default Language CS3 (x32 Version: 1.0)
Adobe Device Central CS3 (x32 Version: 1.0)
Adobe Dreamweaver CS3 (x32 Version: 9)
Adobe ExtendScript Toolkit 2 (x32 Version: 2.0)
Adobe Extension Manager CS3 (x32 Version: 1.8)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Fonts All (x32 Version: 1.0)
Adobe Help Viewer CS3 (x32 Version: 1)
Adobe Illustrator CS3 (x32 Version: 13.0)
Adobe InDesign CS3 (x32 Version: 5.0)
Adobe InDesign CS3 Icon Handler (x32 Version: 5.0)
Adobe Linguistics CS3 (x32 Version: 3.0.0)
Adobe MotionPicture Color Files (x32 Version: 1.0)
Adobe PDF Library Files (x32 Version: 8.0)
Adobe Photoshop CS3 (x32 Version: 10)
Adobe Photoshop CS3 (x32 Version: 10.0)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Setup (x32 Version: 1.0)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144)
Adobe SING CS3 (x32 Version: 0.1)
Adobe Stock Photos CS3 (x32 Version: 1.5)
Adobe Type Support (x32 Version: 1.0)
Adobe Update Manager CS3 (x32 Version: 5.1.0)
Adobe Version Cue CS3 Client (x32 Version: 3)
Adobe WAS CS3 (x32 Version: 1.0)
Adobe WinSoft Linguistics Plugin (x32 Version: 1.0)
Adobe XMP Panels CS3 (x32 Version: 1.0)
AHV content for Acrobat and Flash (x32 Version: 1)
Amazon Kindle (HKCU)
Amnesia: The Dark Descent (x32)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.9.0)
Audible Download Manager (x32 Version: 6.6.0.15)
AVM FRITZ!Box Monitor (x32)
Bamboo (Version: 5.2.5-5)
Bastion (x32)
Bing-Desktop (x32 Version: 1.3.174.0)
BioShock (x32)
Bonjour (Version: 3.0.0.10)
Bonjour-Druckdienste (Version: 2.0.0.36)
Braid (x32)
calibre 64bit (Version: 1.9.0)
cam2pc Freeware Edition (remove only) (x32)
Canon Easy-PhotoPrint EX (x32)
Canon MG5300 series Benutzerregistrierung (x32)
Canon MG5300 series MP Drivers
Canon MG5300 series On-screen Manual (x32)
Canon MP Navigator EX 5.0 (x32)
Canon My Printer (x32)
Canon Solution Menu EX (x32)
CCleaner (Version: 3.19)
Chaos on Deponia (x32)
Clever Privacy (x32 Version: 1.0.0.36)
Colorelli (x32 Version: 1.0)
ConvertXtoDVD 4.0.3.313 (x32 Version: 4.0.3.313)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CPUID CPU-Z 1.67
DDBAC (x32 Version: 4.3.74)
Deponia (x32 Version: 1.1.5)
DEUTSCHLAND SPIELT GAME CENTER (x32 Version: 1.0.1.46)
DVDFab 8.1.8.5 (24/05/2012) Qt (x32)
DVDFab 9.0.1.2 (30/11/2012) (x32)
DVM_IPCam2Setup version 1.0 (x32 Version: 1.0)
Edna & Harvey: Harvey's New Eyes (x32)
Epson Copy Utility 3.5 (x32 Version: 3.5.0.0)
EPSON Scan (x32)
eReg (x32 Version: 1.20.138.34)
Exif-Viewer 2.51  (x32 Version: 2.51)
Far Cry (x32)
ffdshow v1.1.3476 [2010-06-15] (x32 Version: 1.1.3476.0)
Free Download Manager 3.9.3 (x32)
FreeCommander 2009.02b (x32 Version: 2009.02)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Geheime Fälle: Die gestohlene Venus 2 (x32 Version: 1.0.0.0)
Giana Sisters: Twisted Dreams (x32)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.165)
Half-Life 2 (x32)
Half-Life 2: Episode One (x32)
Half-Life 2: Episode Two (x32)
Half-Life 2: Lost Coast (x32)
iCloud (Version: 3.0.2.163)
ImgBurn (x32 Version: 2.5.7.0)
inSSIDer 3 (x32 Version: 3.0.5.80)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026)
Internet-TV für Windows Media Center (x32 Version: 4.2.2.0)
IPCMonitor_En version 1.0.1.7 (x32 Version: 1.0.1.7)
iTunes (Version: 11.1.3.8)
Java 7 Update 45 (64-bit) (Version: 7.0.450)
JDownloader 0.9 (x32 Version: 0.9)
Journey of a Roach (x32)
Kaspersky PURE 2.0 (x32 Version: 12.0.2.733)
Lexware Info Service (x32 Version: 2.61.00.0033)
Lexware online banking (x32 Version: 10.00.00.0102)
LIMBO (x32)
Logitech Harmony Remote Software 7 (x32 Version: 7.7.0.0)
Logitech SetPoint 6.61 (Version: 6.61.15)
Lone Survivor (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Maniac Mansion Deluxe (x32)
Medion Home Cinema (x32 Version: 8.0.2926)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 (x32)
Microsoft SQL Server 2005 Express Edition (MYMOVIES) (x32 Version: 9.4.5000.00)
Microsoft SQL Server 2005 Tools Express Edition (x32 Version: 9.4.5000.00)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server Setup Support Files (English) (x32 Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MKVToolNix 6.3.0 (x32 Version: 6.3.0)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0)
Mozilla Maintenance Service (x32 Version: 25.0)
Mozilla Thunderbird 24.1.0 (x86 de) (HKCU Version: 24.1.0)
MPC-HC 1.7.0 (64-bit) (Version: 1.7.0.7858)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Napster 5 Beta (x32 Version: 1.0.63)
Napster Rienf Repair (x32 Version: 1.1.9)
NAVIGON Fresh 3.4.1 (x32 Version: 3.4.1)
NVIDIA 3D Vision Controller-Treiber 310.70 (Version: 310.70)
NVIDIA 3D Vision Treiber 327.23 (Version: 327.23)
NVIDIA Grafiktreiber 327.23 (Version: 327.23)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.133.889)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2723)
NVIDIA Systemsteuerung 327.23 (Version: 327.23)
NVIDIA Update 1.14.17 (Version: 1.14.17)
NVIDIA Update Components (Version: 1.14.17)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
PDF Settings (x32 Version: 1.0)
Philips Photo Manager 3.00 (x32)
PhoneClean 2.2.0 (x32 Version: 2.2.0)
Picasa 3 (x32 Version: 3.9)
PixelNet Software 4.12.1 (x32 Version: 4.12.1)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Portal (x32)
Power-Project V4.5 (x32 Version: 4.5.470)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.11)
Protected Music Converter version 1.9.7.4 (x32 Version: 1.9.7.4)
Psychonauts (x32)
Quicken 2011 - ServicePack 4 (x32 Version: 18.04.00.0123)
Quicken 2011 (x32 Version: 18.00.00.0084)
QuickTime (x32 Version: 7.74.80.86)
RAF (x32 Version: 1.00.0001)
Realtek Ethernet Controller Driver (x32 Version: 7.53.216.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6368)
Remote Control USB Driver (x32 Version: 2.3.2.317)
Ripster Beta 1.0.1.5 (x32 Version: 1.0.1.5)
Safari (x32 Version: 5.34.57.2)
Seagate Manager Installer (x32 Version: 2.01.0600)
Secunia PSI (3.0.0.2004) (x32 Version: 3.0.0.2004)
Servicepack Datumsaktualisierung (x32 Version: 1.00.00.0005)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
SpyroDriver (x32 Version: 1.09.0000)
SpyroPortalDriver (Version: 1.0.0)
Steam (x32 Version: 1.0.0.0)
Sunny Data Control (x32)
Super Meat Boy (x32)
Super Meat Boy Editor (x32)
Superbrothers: Sword & Sworcery EP (x32)
swMSM (x32 Version: 12.0.0.1)
Team Fortress 2 (x32)
TeamViewer 8 (x32 Version: 8.0.16447)
The Dark Eye: Chains of Satinav (x32)
The Whispered World (x32)
TmNationsForever (x32)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
WD Link (x32 Version: 1.00.03)
WebTablet FB Plugin (x32 Version: 2.0.0.1)
WebTablet IE Plugin (x32 Version: 1.1.0.12)
WebTablet Netscape Plugin (x32 Version: 1.1.0.10)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0)

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?

==================== Loaded Modules (whitelisted) =============

2012-01-17 21:34 - 2011-09-08 16:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:C39E55C5
AlternateDataStreams: C:\Users\Holger_2\Documents\To-Do-List.txt:KAVICHS

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/12/2013 03:37:37 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5024

Error: (11/12/2013 03:37:37 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5024

Error: (11/12/2013 03:37:37 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 03:37:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025

Error: (11/12/2013 03:37:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4025

Error: (11/12/2013 03:37:36 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 03:37:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (11/12/2013 03:37:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (11/12/2013 03:37:35 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 03:37:34 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028


System errors:
=============
Error: (11/10/2013 05:39:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/10/2013 05:39:39 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (11/10/2013 09:24:28 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR4 gefunden.

Error: (11/09/2013 08:21:32 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (11/07/2013 06:41:14 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR9 gefunden.

Error: (11/05/2013 07:53:35 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR7 gefunden.

Error: (11/04/2013 09:12:41 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR6 gefunden.

Error: (11/03/2013 05:57:11 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR4 gefunden.

Error: (11/03/2013 04:50:13 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎03.‎11.‎2013 um 16:48:56 unerwartet heruntergefahren.

Error: (10/31/2013 11:16:20 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst TouchServicePen erreicht.


Microsoft Office Sessions:
=========================
Error: (11/12/2013 03:37:37 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5024

Error: (11/12/2013 03:37:37 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5024

Error: (11/12/2013 03:37:37 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 03:37:36 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4025

Error: (11/12/2013 03:37:36 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4025

Error: (11/12/2013 03:37:36 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 03:37:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3027

Error: (11/12/2013 03:37:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3027

Error: (11/12/2013 03:37:35 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 03:37:34 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2028


CodeIntegrity Errors:
===================================
  Date: 2012-03-03 00:24:44.227
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.218
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.209
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.200
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.190
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.181
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\F-Secure\Spam Control\fsscoepl_x64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.150
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:44.141
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:37.490
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-03 00:24:37.481
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 77%
Total physical RAM: 4077.64 MB
Available physical RAM: 901.2 MB
Total Pagefile: 8153.46 MB
Available Pagefile: 3729.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:1811.92 GB) (Free:1004.63 GB) NTFS
Drive d: (Recover) (Fixed) (Total:50 GB) (Free:25.54 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         
Vielen Dank schon mal für eure Hilfe!

 

Themen zu Softwareupdater.UI.exe eingefangen
adblock, adobe, browser, converter, cpu-z, desktop, entfernen, error, farbar, farbar recovery scan tool, firefox, flash player, free download, helper, home, homepage, installation, kaspersky, logfile, loswerden, monitor, mozilla, nvpciflt.sys, photoshop, plug-in, realtek, registry, rundll, secunia psi, security, spam, svchost.exe, tablet, tastatur, user agent, wscript.exe




Ähnliche Themen: Softwareupdater.UI.exe eingefangen


  1. SoftwareUpdater.UI.exe
    Log-Analyse und Auswertung - 17.11.2014 (7)
  2. SoftwareUpdater.Ui.exe
    Log-Analyse und Auswertung - 04.11.2014 (13)
  3. SoftwareUpdater.ui
    Plagegeister aller Art und deren Bekämpfung - 09.05.2014 (13)
  4. Windows 7: Auf Festplattenpartition für Daten befindet sich ein Ordner "SoftwareUpdater" mit einer Datei "SoftwareUpdater.Bootstrapper"
    Plagegeister aller Art und deren Bekämpfung - 10.02.2014 (13)
  5. SoftwareUpdater.Ui.exe
    Plagegeister aller Art und deren Bekämpfung - 31.01.2014 (32)
  6. Windows 7: SoftwareUpdater eingefangen
    Log-Analyse und Auswertung - 18.01.2014 (8)
  7. SoftwareUpdater eingefangen!
    Plagegeister aller Art und deren Bekämpfung - 06.01.2014 (13)
  8. SoftwareUpdater.Ui.exe
    Log-Analyse und Auswertung - 19.12.2013 (5)
  9. Softwareupdater.Ui.exe
    Log-Analyse und Auswertung - 29.10.2013 (3)
  10. Softwareupdater.UI.exe eingefangen
    Plagegeister aller Art und deren Bekämpfung - 22.10.2013 (3)
  11. Softwareupdater.ui.exe auf Windows Vista (SP2) eingefangen
    Log-Analyse und Auswertung - 27.09.2013 (10)
  12. C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper nicht zu löschen
    Log-Analyse und Auswertung - 05.09.2013 (7)
  13. Softwareupdater.ui.exe eingefangen und möchte bei jedem Neustart zustimmung für update
    Log-Analyse und Auswertung - 28.08.2013 (4)
  14. SoftwareUpdater.ui.exe
    Plagegeister aller Art und deren Bekämpfung - 14.07.2013 (19)
  15. c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe
    Plagegeister aller Art und deren Bekämpfung - 12.07.2013 (14)
  16. softwareupdater.bootstrapper.exe "c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe"
    Log-Analyse und Auswertung - 08.07.2013 (14)
  17. SoftwareUpdater.UI.exe
    Plagegeister aller Art und deren Bekämpfung - 02.07.2013 (10)

Zum Thema Softwareupdater.UI.exe eingefangen - Hallo, habe mir die Softwareupdater.UI.exe eingefangen und möchte sie gerne loswerden, dafür brauche ich eure Hilfe. FRST-Scan 1 (ohne Optional Scan Addition.txt) ergibt für FRST.txt: FRST Logfile: Code: Alles auswählen - Softwareupdater.UI.exe eingefangen...
Archiv
Du betrachtest: Softwareupdater.UI.exe eingefangen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.