| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC verhält sich komisch, langsam, Phishing Mail mit PW erhaltenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
28.11.2013, 15:20
| #1 |
| |  PC verhält sich komisch, langsam, Phishing Mail mit PW erhalten Hallo, mein PC ist in letzter Zeit sehr langsam geworden. Chrome geht bei neuen Suchen in die Adresszeile und letztens bekam ich eine Phising Mail. Meine Mail adresse war gespeichert mit einem PW, welches ich häufig benutze... Vielen Dank schonmal für die Hilfe.... Lg Nina P.S ich bin eine Frau und nicht so firm in Technik dingen :-) hier die frst logfiles FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-11-2013 01 Ran by Marina (administrator) on NETBOOK on 28-11-2013 14:55:10 Running from D:\Installationsdateien Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgwdsvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Teruten) C:\Windows\System32\FsUsbExService.Exe (Deutsche Telekom AG) C:\Program Files\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe (pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.) C:\Programme\AVG\AVG9\avgcsrvx.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Windows Live\Mail\wlmail.exe (Microsoft Corporation) C:\Program Files\Windows Live\Contacts\wlcomm.exe (Google Inc.) C:\Users\Marina\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7539232 2009-06-09] (Realtek Semiconductor) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [703008 2009-08-28] (Acer Incorporated) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1434920 2009-02-27] (Synaptics Incorporated) HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM\...\Run: [] - [x] HKLM\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKCU\...\Run: [ISUSPM] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation) HKCU\...\Run: [Google Update] - C:\Users\Marina\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-10-01] (Google Inc.) HKCU\...\Run: [DB3ADF9DF439D598491A75588BAD301F5315DAD0._service_run] - C:\Users\M\AppData\Local\Google\Chrome\Application\chrome.exe [863184 2013-11-14] (Google Inc.) HKU\Default\...\RunOnce: [ScrSav] - HKU\Default\...\RunOnce: [RUN] - HKU\Default User\...\RunOnce: [ScrSav] - HKU\Default User\...\RunOnce: [RUN] - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F031002556C15473&affID=119357&tsp=4963 SearchScopes: HKCU - {ABF17040-DF58-48F6-8E6B-980C19A8A814} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms} BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\System32\CbFsMntNtf3.dll (EldoS Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: {0006F063-0000-0000-C000-000000000046} hxxp://activex.microsoft.com/activex/controls/office/outlctlx.CAB DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {5EA13312-8764-496F-B4AB-F7A872B51E14} hxxp://cdn03.oovoo.com/oovoomelink/oovoome/webvc/ooVooWeb.dll DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.5.0.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default FF user.js: detected! => C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\user.js FF Homepage: user_pref("browser.startup.homepage", ); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\M....\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\M.....\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\searchplugins\babylon.xml FF Extension: softonic.com - C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\Extensions\ffxtlbra@softonic.com FF Extension: No Name - C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\Extensions\pdfforge@mybrowserbar.com FF Extension: No Name - C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\Extensions\wtxpcom@mybrowserbar.com FF Extension: Microsoft .NET Framework Assistant - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: DVDVideoSoft Menu - C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} FF Extension: Babylon-English Toolbar - C:\Users\M....\AppData\Roaming\Mozilla\Firefox\Profiles\df7w6zci.default\Extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad} FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt Chrome: ======= CHR HomePage: hxxp://www.google.de/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Plugin: (Shockwave Flash) - C:\Users\M....\AppData\Local\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\M....\AppData\Local\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\M...\AppData\Local\Google\Chrome\Application\31.0.1650.57\pdf.dll () CHR Plugin: (Babylon Chrome Plugin) - C:\Users\M....\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.) CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Google Update) - C:\Users\Marina\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Extension: (YouTube) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Google Wallet) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [68096 2010-02-28] () R2 avg9emc; C:\Programme\AVG\AVG9\avgemc.exe [921952 2010-07-21] (AVG Technologies CZ, s.r.o.) R2 avg9wd; C:\Programme\AVG\AVG9\avgwdsvc.exe [308136 2010-07-15] (AVG Technologies CZ, s.r.o.) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-08-28] (Acer Incorporated) R2 MCSWASVR; C:\Program Files\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe [12800 2011-11-23] (Deutsche Telekom AG) R2 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-05-14] (Egis Technology Inc.) R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [237568 2009-02-05] (Acer Incorporated) ==================== Drivers (Whitelisted) ==================== R1 AvgLdx86; C:\Windows\System32\Drivers\avgldx86.sys [226016 2013-01-15] (AVG Technologies CZ, s.r.o.) R1 AvgMfx86; C:\Windows\System32\Drivers\avgmfx86.sys [29712 2011-09-13] (AVG Technologies CZ, s.r.o.) R1 AvgTdiX; C:\Windows\System32\Drivers\avgtdix.sys [243152 2011-05-05] (AVG Technologies CZ, s.r.o.) R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [20104 2010-04-06] (IVT Corporation.) S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [25864 2010-04-06] () R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [265800 2010-05-15] (EldoS Corporation) S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] () R1 DPMemGridVista; C:\Program Files\GridVista\DPMemGridVista.sys [10504 2008-10-01] (Dritek System Inc.) R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36640 2010-10-25] () S3 int15.sys; C:\Windows\System32\OEM\Factory\int15.sys [69632 2003-10-01] () S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [23048 2010-04-06] (IVT Corporation.) R3 L1C; C:\Windows\System32\DRIVERS\L1C60x86.sys [50176 2009-04-27] (Atheros Communications, Inc.) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [19504 2008-12-04] (Egis Incorporated.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2008-12-04] (Egis Incorporated.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [59952 2008-12-04] (Egis Incorporated.) S3 sscebus; C:\Windows\System32\DRIVERS\sscebus.sys [98560 2010-08-27] (MCCI Corporation) S3 sscemdfl; C:\Windows\System32\DRIVERS\sscemdfl.sys [14848 2010-08-27] (MCCI Corporation) S3 sscemdm; C:\Windows\System32\DRIVERS\sscemdm.sys [123648 2010-08-27] (MCCI Corporation) S3 ssceserd; C:\Windows\System32\DRIVERS\ssceserd.sys [100352 2010-08-27] (MCCI Corporation) S3 SSDISK; C:\Windows\System32\DRIVERS\SSDISK.sys [10752 2009-03-30] (Alcor Micro, Corp.) S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [181432 2012-02-24] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 SSUSB; C:\Windows\System32\DRIVERS\SSUSB.sys [14848 2009-04-07] (Alcor Micro, Corp.) S3 BT; system32\DRIVERS\btnetdrv.sys [x] S3 BTCOM; system32\DRIVERS\btcomport.sys [x] S3 BTCOMBUS; System32\Drivers\btcombus.sys [x] S3 Btcsrusb; System32\Drivers\btcusb.sys [x] S3 dgderdrv; System32\drivers\dgderdrv.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-28 14:54 - 2013-11-28 14:54 - 00000000 ____D C:\FRST 2013-11-28 14:39 - 2013-11-28 14:39 - 00001105 _____ C:\Users\M\Desktop\Continue VuuPC Installation.lnk 2013-11-28 14:26 - 2013-11-28 14:26 - 00001110 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-28 14:26 - 2013-11-28 14:26 - 00000000 ____D C:\Users\M\AppData\Roaming\Malwarebytes 2013-11-28 14:26 - 2013-11-28 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-28 14:26 - 2013-11-28 14:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-28 14:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-25 20:14 - 2013-11-25 20:14 - 00001464 _____ C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-25 19:56 - 2013-11-25 19:56 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-25 19:56 - 2013-11-25 19:56 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-25 19:56 - 2013-11-25 19:56 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-25 19:56 - 2013-11-25 19:56 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-25 19:56 - 2013-11-25 19:56 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-25 19:56 - 2013-11-25 19:56 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-22 04:30 - 2013-11-25 20:00 - 00025780 _____ C:\Windows\IE11_main.log 2013-11-18 17:46 - 2013-11-18 17:47 - 01085542 _____ C:\Users\Marina\Downloads\AdwCleaner.exe 2013-11-17 08:26 - 2013-11-17 08:29 - 00000000 ____D C:\1cb2e59b94e0900e24283259f1 2013-11-17 08:21 - 2013-11-17 08:21 - 00145856 _____ C:\Windows\Minidump\111713-32666-01.dmp 2013-11-15 07:55 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-15 07:55 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-15 07:55 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-15 07:55 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-15 07:55 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-15 07:55 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-15 07:55 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-15 07:55 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-15 07:55 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-15 07:55 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-15 07:55 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-15 07:55 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-15 07:55 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-15 07:55 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-15 07:55 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-15 07:55 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-15 07:55 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-15 07:55 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys ==================== One Month Modified Files and Folders ======= 2013-11-28 14:54 - 2013-11-28 14:54 - 00000000 ____D C:\FRST 2013-11-28 14:41 - 2010-03-04 16:14 - 00010880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-28 14:41 - 2010-03-04 16:14 - 00010880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-28 14:39 - 2013-11-28 14:39 - 00001105 _____ C:\Users\Marina\Desktop\Continue VuuPC Installation.lnk 2013-11-28 14:38 - 2010-03-04 16:39 - 01172226 _____ C:\Windows\WindowsUpdate.log 2013-11-28 14:36 - 2012-04-18 07:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-28 14:32 - 2012-10-01 06:45 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1219656536-1975504004-2675106834-1000UA.job 2013-11-28 14:26 - 2013-11-28 14:26 - 00001110 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-28 14:26 - 2013-11-28 14:26 - 00000000 ____D C:\Users\Marina\AppData\Roaming\Malwarebytes 2013-11-28 14:26 - 2013-11-28 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-28 14:26 - 2013-11-28 14:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-11-28 11:32 - 2012-10-01 06:45 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1219656536-1975504004-2675106834-1000Core.job 2013-11-28 10:00 - 2010-01-03 22:05 - 00000000 ____D C:\Windows\system32\Drivers\Avg 2013-11-25 20:19 - 2010-03-04 16:52 - 01503478 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-25 20:15 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-11-25 20:14 - 2013-11-25 20:14 - 00001464 _____ C:\Users\Marina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-25 20:14 - 2012-08-19 03:56 - 00151643 _____ C:\Windows\setupact.log 2013-11-25 20:14 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-25 20:13 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-11-25 20:00 - 2013-11-22 04:30 - 00025780 _____ C:\Windows\IE11_main.log 2013-11-25 19:56 - 2013-11-25 19:56 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-25 19:56 - 2013-11-25 19:56 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-25 19:56 - 2013-11-25 19:56 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-25 19:56 - 2013-11-25 19:56 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-25 19:56 - 2013-11-25 19:56 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-25 19:56 - 2013-11-25 19:56 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-25 19:56 - 2013-11-25 19:56 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-25 19:56 - 2013-11-25 19:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-19 11:20 - 2009-12-29 15:04 - 00000000 ____D C:\Users\M\AppData\Roaming\Adobe 2013-11-19 11:20 - 2009-06-29 14:35 - 00000000 ____D C:\ProgramData\Adobe 2013-11-19 09:28 - 2012-10-01 06:48 - 00002366 _____ C:\Users\M\Desktop\Google Chrome.lnk 2013-11-18 17:47 - 2013-11-18 17:46 - 01085542 _____ C:\Users\M\Downloads\AdwCleaner.exe 2013-11-18 17:47 - 2011-08-12 17:03 - 00000000 ____D C:\Users\M\AppData\Local\Samsung 2013-11-18 17:47 - 2010-12-03 14:43 - 00000000 ____D C:\ProgramData\Samsung 2013-11-18 17:47 - 2009-06-29 13:34 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2013-11-17 09:27 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-11-17 08:48 - 2012-08-24 08:42 - 00129466 _____ C:\Windows\PFRO.log 2013-11-17 08:32 - 2009-06-29 13:58 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-17 08:29 - 2013-11-17 08:26 - 00000000 ____D C:\1cb2e59b94e0900e24283259f1 2013-11-17 08:29 - 2013-08-16 09:35 - 00000000 ____D C:\Windows\system32\MRT 2013-11-17 08:26 - 2010-08-23 19:52 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-17 08:21 - 2013-11-17 08:21 - 00145856 _____ C:\Windows\Minidump\111713-32666-01.dmp 2013-11-17 08:21 - 2012-11-07 18:45 - 257856247 _____ C:\Windows\MEMORY.DMP 2013-11-17 08:21 - 2010-07-02 12:10 - 00000000 ____D C:\Windows\Minidump 2013-11-05 08:25 - 2010-01-03 22:04 - 00000000 ____D C:\ProgramData\avg9 Some content of TEMP: ==================== C:\Users\M\AppData\Local\Temp\1qdyfrb2.dll C:\Users\M\AppData\Local\Temp\ICReinstall_SetupFRST.exe C:\Users\M\AppData\Local\Temp\IminentSetup.exe C:\Users\M\AppData\Local\Temp\MSN46A3.exe C:\Users\M\AppData\Local\Temp\uninst1.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-21 10:06 ==================== End Of Log ============================ --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-11-2013 01
Ran by Marina at 2013-11-28 14:58:28
Running from D:\Installationsdateien
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG Anti-Virus Free (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AS: AVG Anti-Virus Free (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Sansa Media Converter (Version: 1.0-B4.256)
Update for Microsoft Office 2007 (KB2508958)
Acer Crystal Eye webcam Ver:1.1.87.603 (Version: 1.1.87.603)
Acer ePower Management (Version: 4.05.3003)
Acer VCM (Version: 4.00.3008)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Photoshop CS (Version: CS)
Adobe Photoshop Lightroom 4.1 (Version: 4.1.2)
Adobe Reader 9.5.1 - Deutsch (Version: 9.5.1)
Adobe Shockwave Player 11.5 (Version: 11.5.6.606)
Alcor Micro Card Rader Driver and Utility (Version: 1.1.1017.1)
AmoK Exif Sorter 2.5.6 (nur deinstallieren)
Apple Application Support (Version: 2.1.9)
Apple Mobile Device Support (Version: 5.2.0.6)
Apple Software Update (Version: 2.1.3.127)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.19)
Avery Wizard 3.1 (Version: 3.1.9)
AVG Free 9.0
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
CyberLink PowerDVD 8 (Version: 8.1.2815o.50)
Exif-Viewer 2.50 (Version: 2.50)
Google Chrome (HKCU Version: 31.0.1650.57)
GridVista (Version: 2.77.0507)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Officejet 6500 E710n-z Hilfe (Version: 140.0.2.2)
HP Update (Version: 5.002.006.003)
I.R.I.S. OCR (Version: 12.3.4.0)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1892)
Intel(R) TV Wizard
Intel® Matrix Storage Manager
iTunes (Version: 10.6.3.25)
Java Auto Updater (Version: 2.0.7.1)
Java(TM) 6 Update 31 (Version: 6.0.310)
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager (Version: 3.0.00)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Marketsplash Schnellzugriffe (Version: 1.0.1.7)
Mediencenter Assistent (Version: 2.6.0.1277)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Müller Foto (Version: 4.8.4)
MyWinLocker (Version: 3.1.59.0)
NEF Codec (Version: 1.00.0000)
PDF Architect (Version: 1.1.83.9982)
PDFCreator (Version: 1.7.0)
QuickTime (Version: 7.72.80.56)
Ravensburger tiptoi
Realtek High Definition Audio Driver (Version: 6.0.1.5869)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.4.0)
Sansa Updater
Skype™ 5.10 (Version: 5.10.116)
Sunny Explorer (Version: 1.2.7)
Synaptics Pointing Device Driver (Version: 12.2.4.1)
System Requirements Lab for Intel (Version: 4.5.5.0)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Upgrade Kit (Version: 1.00.3002)
WIDCOMM Bluetooth Software (Version: 6.2.0.8800)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8098.930)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Family Safety (Version: 14.0.8093.805)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
==================== Restore Points =========================
12-11-2013 14:36:53 Geplanter Prüfpunkt
17-11-2013 07:25:51 Windows Update
18-11-2013 16:44:03 Removed Samsung Kies
19-11-2013 08:20:48 Avg Update
22-11-2013 03:29:24 Windows Update
23-11-2013 10:49:57 Windows Update
25-11-2013 16:17:40 Windows Update
25-11-2013 18:53:54 Windows Update
==================== Hosts content: ==========================
2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {07EF5F30-10BA-4341-92F3-6F7667BBE03C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1219656536-1975504004-2675106834-1000Core => C:\Users\Marina\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-01] (Google Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {235DD406-D7F1-465B-8A0A-22ADC4B6E13F} - System32\Tasks\{AAE37FF2-893E-4F8F-8170-10A543703B11} => C:\Program Files\Skype\\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {3FA506B5-DA13-49E4-8DE9-5EAEF5D91A68} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {6317FBD7-2E7E-4DFF-B6F9-99D2DDB4DCD6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1219656536-1975504004-2675106834-1000UA => C:\Users\Marina\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-01] (Google Inc.)
Task: {A1E333C9-7C5D-45A7-B864-D6B4D1DF3B83} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Marina => C:\Program Files\Windows Calendar\WinCal.exe
Task: {ADEC5CA7-ADDA-4F7B-AC0B-1D5914D5361B} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-09-13] (Microsoft Corporation)
Task: {DB569E2C-F451-4281-AE03-140229853E73} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {E89B7F80-2231-4F78-BADC-777EF64E6B68} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-08-01] (Microsoft Corporation)
Task: {E89CD22F-AA0D-4333-A0C9-7EBBE7B76000} - System32\Tasks\DealPly => C:\Users\Marina\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-02-27] () <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1219656536-1975504004-2675106834-1000Core.job => C:\Users\Marina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1219656536-1975504004-2675106834-1000UA.job => C:\Users\Marina\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-11-19 09:28 - 2013-11-14 12:28 - 00702416 _____ () C:\Users\Marina\AppData\Local\Google\Chrome\Application\31.0.1650.57\libglesv2.dll
2013-11-19 09:28 - 2013-11-14 12:28 - 00099792 _____ () C:\Users\Marina\AppData\Local\Google\Chrome\Application\31.0.1650.57\libegl.dll
2013-11-19 09:28 - 2013-11-14 12:29 - 04055504 _____ () C:\Users\Marina\AppData\Local\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-19 09:28 - 2013-11-14 12:29 - 00399312 _____ () C:\Users\Marina\AppData\Local\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-19 09:28 - 2013-11-14 12:28 - 01619408 _____ () C:\Users\Marina\AppData\Local\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
2013-11-19 09:28 - 2013-11-14 12:29 - 13582800 _____ () C:\Users\Marina\AppData\Local\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/25/2013 08:15:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/18/2013 06:24:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:24:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:24:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:24:29 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:23:54 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:23:54 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:23:53 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:23:53 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/18/2013 06:23:53 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
System errors:
=============
Error: (11/25/2013 08:14:10 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (11/25/2013 07:53:51 PM) (Source: DCOM) (User: )
Description: {FFF2D28F-E4EE-44D9-8104-8E71556757F6}
Error: (11/25/2013 07:53:22 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (11/25/2013 05:20:45 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
Error: (11/23/2013 11:55:51 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
Error: (11/22/2013 06:29:43 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.
Error: (11/22/2013 04:31:39 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
Error: (11/21/2013 10:31:01 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.
Error: (11/19/2013 10:41:34 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MCSWASVR erreicht.
Error: (11/19/2013 05:11:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
Microsoft Office Sessions:
=========================
Error: (06/02/2011 05:27:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 10 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2010-01-17 21:16:56.357
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2010-01-17 21:16:55.563
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2010-01-17 21:16:54.538
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2010-01-17 21:16:53.766
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2010-01-17 21:16:52.558
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 55%
Total physical RAM: 1978.92 MB
Available physical RAM: 875.59 MB
Total Pagefile: 3957.84 MB
Available Pagefile: 2404.49 MB
Total Virtual: 2047.88 MB
Available Virtual: 1889.07 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:114.07 GB) (Free:66.73 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:106.81 GB) (Free:19.81 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: A7BC3029)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=114 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=107 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ach ja, Malwarebytes hatte ich auch schon runtergeladen und ein halbes mal durchlaufen lassen, mir aaber überlegt, ich wende mich lieber hierhin :-). Geändert von Rettetmich (28.11.2013 um 15:16 Uhr) |
| Themen zu PC verhält sich komisch, langsam, Phishing Mail mit PW erhalten |
| adresse, adresszeile, chrome, continue, device driver, dinge, erhalte, erhalten, gen, gespeichert, häufig, icreinstall, komisch, langsam, mail, minidump, neue, neuen, officejet, phishing, phishing mail, phising, plug-in, schonmal, sehr langsam, suche, technik, verhält, vuupc, wlansvc |
Baum-Darstellung