| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Internet-Browser zeigt beim Start automatisch eine Survey-SeiteWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
29.12.2013, 04:19
| #1 |
| |  Internet-Browser zeigt beim Start automatisch eine Survey-Seite Hallo, ich bin neu hier und das ist mein erster Post. Ich habe auch wirklich keine Ahnung, ob das hier hin gehört, bitte verzeiht mir wenn ja. Ich bin aber so ratlos und weiß gar nicht, was ich unternehmen soll. Ich hoffe einfach, Ihr kennt euch da aus. Auf das Forum hier kam ich, weil beim Eingeben meines Problems in ask ein Thread vom Trojaner-Board kam, der mir aber nicht weiterhalf. Also, das Problem ist folgendes: Ich starte meinen Browser, egal ob IE, Firefox oder (mein üblicher) Safari und immer erscheint diese Survey-Seite. Das an sich hätte ich ja verkraften können, aber wenn ich Seiten wie Google, Yahoo! oder YouTube besuchen will, kann ich diese nicht aufrufen sondern komme auf diese Survey-Seite. Aus Verzweiflung habe ich dann Avira AntiVirus installiert, in der Hoffnung, er wird das beseitigen (vorher hatte ich leider kein Antivirusprogramm), aber dem war nicht so. Dann habe ich den gesamten Verlauf und die Cookies gelöscht, den Browser dann nochmal gesamt zurückgesetzt. Leider bleibt die Seite. Hier ist das Bild der Seite, die dann immer kommt: hxxp://bin.smwcentral.net/u/17686/survey.png Ich kann auch noch kurz erzählen, wie ich zu der Seite kam: Ich wollte ganz normal etwas herunterladen, habe auf einen Link mit mediafire im Namen geklickt und dann kam ich dorthin. Ich habe mir nichts dabei gedacht und habe die Seite geschlossen, aber dann ging's los... Ich würde mich wirklich sehr über Eure Antworten freuen und noch einmal Entschuldigung, falls das hier nicht reinpasst. Viele Grüße, Lennart |
|
29.12.2013, 10:42
| #2 |
| /// the machine /// TB-Ausbilder    |  Internet-Browser zeigt beim Start automatisch eine Survey-Seite hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
29.12.2013, 15:36
| #3 |
| | Internet-Browser zeigt beim Start automatisch eine Survey-Seite Hallo,
__________________danke für Deine Antwort. Hier sind die beiden Dateien: FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013
Ran by Lennart (administrator) on PCLENNART on 29-12-2013 15:29:32
Running from C:\Users\Lennart\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KJMWMK3T
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
() C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla Server\FileZilla server.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Program Files (x86)\Tor\tor.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
() C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Dropbox, Inc.) C:\Users\Lennart\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Roccat GmbH) C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(APN LLC.) C:\Users\Lennart\AppData\Local\VNT\vntldr.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_17_Premium_Download-Version\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [337432 2013-04-15] (Power Software Ltd)
HKLM-x32\...\Run: [RoccatKova+] - C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.exe [536576 2010-06-23] (Roccat GmbH)
HKLM-x32\...\Run: [FileZilla Server Interface] - C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe [1044992 2012-02-26] (FileZilla Project)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-29] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20588704 2013-11-15] (Skype Technologies S.A.)
HKCU\...\Run: [Dxtory Update Checker 2.0] - C:\Program Files (x86)\Dxtory Software\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3551576 2013-11-21] (Electronic Arts)
HKCU\...\Run: [ThreadManager.exe] - C:\Program Files (x86)\Thread Manager\ThreadManager.exe [10914904 2013-12-28] (Digital Generation Inc.)
MountPoints2: E - E:\Installer.exe
MountPoints2: {c4e31301-9470-11e2-b8f3-ace6ab7bd057} - E:\pushinst.exe
AppInit_DLLs: C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll [1958880 2013-11-18] ()
Startup: C:\Users\Lennart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lennart\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=119520&tt=gc_&babsrc=HP_ss_din2g&mntrId=E43F001C4AF18925
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x428D32FB8028CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=119520&tt=gc_&babsrc=HP_ss_din2g&mntrId=E43F001C4AF18925
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1388188910&from=vtt&uid=ST1000DM003-1CH162_S1D949XZXXXXS1D949XZ
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1388188910&from=vtt&uid=ST1000DM003-1CH162_S1D949XZXXXXS1D949XZ
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=121845&babsrc=SP_ss_din2g&mntrId=E43F001C4AF18925
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=121845&babsrc=SP_ss_din2g&mntrId=E43F001C4AF18925
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Flagfox - {BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24} - C:\Users\Lennart\AppData\LocalLow\Flagfox\IE\Flagfox.dll (Dave G)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Chrome:
=======
CHR HomePage: hxxp://www.nationzoom.com/?type=hp&ts=1388188910&from=vtt&uid=ST1000DM003-1CH162_S1D949XZXXXXS1D949XZ
CHR RestoreOnStartup: "hxxp://www.nationzoom.com/?type=hp&ts=1388188910&from=vtt&uid=ST1000DM003-1CH162_S1D949XZXXXXS1D949XZ"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Docs) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Flagfox) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid\4.2.781_0
CHR Extension: (Google Search) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: ("name":"Avira SearchFree Toolbar plus Web Protection","version":"30.1","manifest_version":2,"description":"Convenient tools and links to make your browsing more enjoyable","icons":{"128":"config/skin/images/logo/logo_128x.png","32":"config/skin/images/logo/logo_32x.png","24":"config/skin/images/logo/logo_24x.png"},"browser_action":{"default_icon":"config/skin/images/logo/logo_19x.png","default_title":"Control the Avira SearchFree Toolbar","default_popup":"config/skin/chrome-options.html"},"background":{"page":"background/background.html"},"chrome_url_overrides":{"newtab":"config/skin/new-tab-page.html"},"content_scripts":[{"matches":["*://*/*"],"js":["lib/constant.js","lib/default-config.js","config/tb-config.js","lib/protocol.js","lib/tb-message.js","lib/widget-messaging.js","content_script/inline-html.js"],"all_frames":true,"run_at":"document_end"},{"matches":["*://*/*"],"js":["lib/jquery.js","lib/constant.js","lib/default-config.js","config/tb-config.js","config/widget-config.js","lib/protocol.js","lib/tb-message.js","lib/state-machine.js","lib/async-gate.js","lib/window-position.js","lib/DataStore.js","lib/tb-config-update.js","content_script/positioning.js","content_script/toolbar.js","content_script/widget.js","content_script/injector.js"],"run_at":"document_start"},{"matches":["*://*.facebook.com/*"],"css":["content_script/hack/facebook.css"]},{"matches":["*://*.google.com/*","*://*.ask.com/","*://*.bagsbuy.com/*","*://*.csaa.com/*","*://*.childrenschorus.org/*","*://*.wikipedia.org/*","*://*.mercurynews.com/*","*://*.usnews.com/*"],"css":["content_script/hack/relative.css"],"run_at":"document_start"},{"matches":["*://*.google.com/imgres*","*://images.google.com/*","*://codesearch.google.com/*"],"css":["content_script/hack/static.css"],"run_at":"document_start"}],"permissions":["bookmarks","contextMenus","contentSettings","cookies","geolocation","history","idle","management","notifications","tabs","storage","unlimitedStorage","webRequest","webRequestBlocking","hxxp://*/*","https://*/*","chrome://favicon/*","bookmarks","contextMenus","contentSettings","cookies","geolocation","history","idle","management","notifications","tabs","unlimitedStorage","hxxp://*/*","https://*/*","chrome://favicon/*","webRequest","webRequestBlocking"],"plugins":[{"path":"background/ChromeUtilPlugin.dll","public":false}],"web_accessible_resources":["config/skin/css/containers.css","config/skin/toolbar.html","widgets/search-suggestion/search-suggestion.html","widgets/options/options.html","widgets/templates/feed.html","widgets/templates/menu.html","config/skin/widgets/com.avira.dnt/widget/background.html","config/skin/widgets/com.avira.dnt/widget/button.html","config/skin/widgets/com.avira.dnt/widget/window.html","config/skin/widgets/com.avira.dnt/widget/blank.html","config/skin/widgets/com.avira.dnt/widget/blank.gif","config/skin/widgets/toolbar-options/options.html"]}) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1
CHR Extension: (Gmail) - C:\Users\Lennart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [cfdfamfnacokbbbnmpdfmhonipnhmbid] - C:\Users\Lennart\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx
CHR HKLM-x32\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-29] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 BitGuard; C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3780064 2013-11-18] ()
R2 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [632320 2012-02-26] (FileZilla Project)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-20] ()
==================== Drivers (Whitelisted) ====================
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-29] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-22] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-29] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-18] (DT Soft Ltd)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-29 15:29 - 2013-12-29 15:29 - 00000000 ____D C:\FRST
2013-12-29 15:23 - 2013-12-29 15:23 - 00003032 _____ C:\Windows\System32\Tasks\asrRd
2013-12-29 04:23 - 2013-12-29 04:23 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\pdfforge
2013-12-29 04:22 - 2013-12-29 04:23 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-12-29 04:22 - 2012-09-11 16:51 - 00065024 _____ (pdfforge GbR) C:\Windows\system32\pdfcmon.dll
2013-12-29 04:22 - 2004-03-09 00:00 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2013-12-29 04:22 - 1998-07-06 17:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2013-12-29 04:22 - 1998-07-06 17:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2013-12-29 04:22 - 1998-07-06 17:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-12-29 04:22 - 1998-07-06 01:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2013-12-29 04:22 - 1998-06-24 00:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2013-12-29 04:00 - 2013-12-29 04:00 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\Avira
2013-12-29 03:57 - 2013-12-29 03:57 - 00000000 ____D C:\Users\Lennart\AppData\Local\AskPartnerNetwork
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\Users\Lennart\AppData\Local\VNT
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\Program Files (x86)\VNT
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-29 03:46 - 2013-12-29 03:48 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-29 03:46 - 2013-12-29 03:48 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-29 03:46 - 2013-12-29 03:48 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-29 03:46 - 2013-12-29 03:46 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 03:46 - 2013-12-29 03:46 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 03:46 - 2013-12-29 03:46 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 03:46 - 2013-11-22 12:01 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-29 03:23 - 2013-12-29 03:26 - 11128216 _____ (iOpus ) C:\Users\Lennart\Downloads\imacros-setup.exe.download
2013-12-28 01:47 - 2013-12-28 01:47 - 06259787 _____ C:\Users\Lennart\Downloads\AMFbot2013.rar
2013-12-28 01:00 - 2013-12-28 01:00 - 00513520 _____ C:\Users\Lennart\Downloads\7zip_RocketFuelInstaller.exe
2013-12-28 00:32 - 2013-12-28 00:32 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\DG
2013-12-28 00:32 - 2013-12-28 00:32 - 00000000 ____D C:\Program Files (x86)\Thread Manager
2013-12-27 16:21 - 2013-12-28 00:29 - 03528120 _____ (Digital Generation, Inc ) C:\Users\Lennart\Downloads\threadmanagersetup.exe
2013-12-22 20:57 - 2013-12-22 20:58 - 37955059 _____ C:\Users\Lennart\Downloads\HerrSommer Medieval - 1.7 - v3.zip
2013-12-22 20:56 - 2013-12-22 20:57 - 32349791 _____ C:\Users\Lennart\Downloads\HerrSommer A Christmas Carol - 1.7 - v3.zip
2013-12-22 20:37 - 2013-12-22 20:37 - 02273810 _____ C:\Users\Lennart\Downloads\mcpatcher-4.3.1.exe
2013-12-22 20:35 - 2013-12-22 20:35 - 30284442 _____ C:\Users\Lennart\Downloads\_1.7__R3D.CRAFT_Default_Realism_128x_v0.1.2.zip
2013-12-20 01:58 - 2013-12-20 01:59 - 47957102 _____ C:\Users\Lennart\Downloads\LDDManager125.zip
2013-12-20 01:56 - 2013-12-20 01:56 - 00500389 _____ C:\Users\Lennart\Downloads\Falcon2.lxf
2013-12-14 18:11 - 2013-12-14 18:11 - 00002150 _____ C:\Users\Public\Desktop\LEGO Digital Designer.lnk
2013-12-13 01:37 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 01:37 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 01:37 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 01:37 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-13 01:36 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 01:36 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 01:36 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 01:36 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 01:36 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 01:36 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 01:36 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 01:36 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 01:36 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 01:36 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 01:36 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 01:36 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 01:36 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 01:36 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 01:36 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 01:36 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 01:36 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 01:36 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 01:36 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-13 01:36 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-13 01:36 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 01:36 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 01:36 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 01:36 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-13 01:36 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 01:36 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 01:36 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 01:36 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 01:36 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-13 01:36 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 01:36 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 17:41 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 17:41 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 17:41 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 17:41 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 17:41 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 17:41 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 17:41 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 17:41 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 17:41 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 17:41 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 17:41 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 17:41 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 17:41 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 17:41 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 17:41 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 17:41 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 17:41 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 17:41 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 17:41 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 14:25 - 2013-12-10 14:25 - 00128402 _____ C:\Users\Lennart\Downloads\DamageIndicators[1.4.7]2.4.8.zip
2013-12-10 14:24 - 2013-12-10 14:24 - 00007649 _____ C:\Users\Lennart\Downloads\1.4.7-BukkitPlugin.jar
2013-12-09 13:33 - 2013-12-09 13:33 - 01622542 _____ C:\Users\Lennart\Downloads\mcpatcher_1_4_7.jar.jar
2013-12-09 13:25 - 2013-12-09 13:27 - 15850766 _____ C:\Users\Lennart\Downloads\divine rpg 1.2.6.zip
2013-12-03 15:46 - 2013-12-03 15:46 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
==================== One Month Modified Files and Folders =======
2013-12-29 15:29 - 2013-12-29 15:29 - 00000000 ____D C:\FRST
2013-12-29 15:28 - 2011-04-12 08:43 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-12-29 15:28 - 2011-04-12 08:43 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-12-29 15:28 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-29 15:26 - 2013-03-23 10:24 - 01954632 _____ C:\Windows\WindowsUpdate.log
2013-12-29 15:24 - 2013-05-09 21:26 - 00000000 ___RD C:\Users\Lennart\Dropbox
2013-12-29 15:24 - 2013-05-09 21:21 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\Dropbox
2013-12-29 15:24 - 2013-03-24 12:24 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\Skype
2013-12-29 15:23 - 2013-12-29 15:23 - 00003032 _____ C:\Windows\System32\Tasks\asrRd
2013-12-29 15:23 - 2013-09-29 17:30 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-29 15:23 - 2013-09-20 17:04 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-29 15:23 - 2013-06-09 12:34 - 00002966 _____ C:\Windows\System32\Tasks\AsrXTU
2013-12-29 15:23 - 2013-03-24 13:45 - 00000000 ____D C:\Users\Lennart\AppData\Local\LogMeIn Hamachi
2013-12-29 15:22 - 2013-08-01 17:50 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-29 15:22 - 2013-03-29 23:12 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job
2013-12-29 15:22 - 2013-03-24 10:30 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-29 15:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-29 15:22 - 2009-07-14 05:51 - 00055592 _____ C:\Windows\setupact.log
2013-12-29 04:25 - 2013-09-02 19:34 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\.minecraft
2013-12-29 04:23 - 2013-12-29 04:23 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\pdfforge
2013-12-29 04:23 - 2013-12-29 04:22 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-12-29 04:11 - 2013-08-01 17:50 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-29 04:10 - 2013-09-24 13:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-29 04:01 - 2009-07-14 05:45 - 00028912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-29 04:01 - 2009-07-14 05:45 - 00028912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-29 04:00 - 2013-12-29 04:00 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\Avira
2013-12-29 03:57 - 2013-12-29 03:57 - 00000000 ____D C:\Users\Lennart\AppData\Local\AskPartnerNetwork
2013-12-29 03:56 - 2013-03-29 23:12 - 00000000 ____D C:\Windows\AutoKMS
2013-12-29 03:54 - 2010-11-21 04:47 - 00055980 _____ C:\Windows\PFRO.log
2013-12-29 03:48 - 2013-12-29 03:46 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-29 03:48 - 2013-12-29 03:46 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-29 03:48 - 2013-12-29 03:46 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\Users\Lennart\AppData\Local\VNT
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\Program Files (x86)\VNT
2013-12-29 03:47 - 2013-12-29 03:47 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-29 03:46 - 2013-12-29 03:46 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-29 03:46 - 2013-12-29 03:46 - 00000000 ____D C:\ProgramData\Avira
2013-12-29 03:46 - 2013-12-29 03:46 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-29 03:31 - 2013-03-29 23:12 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2013-12-29 03:26 - 2013-12-29 03:23 - 11128216 _____ (iOpus ) C:\Users\Lennart\Downloads\imacros-setup.exe.download
2013-12-29 03:18 - 2013-09-03 21:07 - 00001440 _____ C:\Users\Lennart\Desktop\spcplay.stk
2013-12-29 03:18 - 2013-09-03 21:07 - 00000799 _____ C:\Users\Lennart\Desktop\spcplay.ini
2013-12-28 17:20 - 2013-05-18 12:57 - 00000000 ____D C:\Users\Lennart\Desktop\Feed the Beast
2013-12-28 01:47 - 2013-12-28 01:47 - 06259787 _____ C:\Users\Lennart\Downloads\AMFbot2013.rar
2013-12-28 01:00 - 2013-12-28 01:00 - 00513520 _____ C:\Users\Lennart\Downloads\7zip_RocketFuelInstaller.exe
2013-12-28 00:58 - 2013-03-24 12:27 - 00000000 ____D C:\Users\Lennart\AppData\Local\Apple Computer
2013-12-28 00:32 - 2013-12-28 00:32 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\DG
2013-12-28 00:32 - 2013-12-28 00:32 - 00000000 ____D C:\Program Files (x86)\Thread Manager
2013-12-28 00:29 - 2013-12-27 16:21 - 03528120 _____ (Digital Generation, Inc ) C:\Users\Lennart\Downloads\threadmanagersetup.exe
2013-12-24 14:55 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-23 22:38 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-22 21:08 - 2013-06-04 13:40 - 00000000 ____D C:\Users\Lennart\Desktop\Pokemon Diamant
2013-12-22 20:58 - 2013-12-22 20:57 - 37955059 _____ C:\Users\Lennart\Downloads\HerrSommer Medieval - 1.7 - v3.zip
2013-12-22 20:57 - 2013-12-22 20:56 - 32349791 _____ C:\Users\Lennart\Downloads\HerrSommer A Christmas Carol - 1.7 - v3.zip
2013-12-22 20:37 - 2013-12-22 20:37 - 02273810 _____ C:\Users\Lennart\Downloads\mcpatcher-4.3.1.exe
2013-12-22 20:35 - 2013-12-22 20:35 - 30284442 _____ C:\Users\Lennart\Downloads\_1.7__R3D.CRAFT_Default_Realism_128x_v0.1.2.zip
2013-12-22 18:55 - 2013-03-24 12:24 - 00000000 ____D C:\ProgramData\Skype
2013-12-22 18:54 - 2013-03-24 12:24 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-20 01:59 - 2013-12-20 01:58 - 47957102 _____ C:\Users\Lennart\Downloads\LDDManager125.zip
2013-12-20 01:56 - 2013-12-20 01:56 - 00500389 _____ C:\Users\Lennart\Downloads\Falcon2.lxf
2013-12-20 01:56 - 2013-03-24 19:43 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\LEGO Company
2013-12-17 11:07 - 2013-05-18 12:56 - 00000000 ____D C:\Users\Lennart\AppData\Roaming\ftblauncher
2013-12-17 11:07 - 2013-05-18 12:55 - 00763168 _____ () C:\Users\Lennart\Desktop\Feed the Beast.exe
2013-12-14 18:11 - 2013-12-14 18:11 - 00002150 _____ C:\Users\Public\Desktop\LEGO Digital Designer.lnk
2013-12-13 12:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-13 11:30 - 2009-07-14 05:45 - 00490112 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 18:37 - 2013-06-18 13:52 - 00502178 _____ C:\Users\Lennart\Desktop\server.log
2013-12-10 21:11 - 2013-09-24 13:04 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 21:11 - 2013-03-24 12:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-10 21:11 - 2013-03-24 12:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-10 14:25 - 2013-12-10 14:25 - 00128402 _____ C:\Users\Lennart\Downloads\DamageIndicators[1.4.7]2.4.8.zip
2013-12-10 14:24 - 2013-12-10 14:24 - 00007649 _____ C:\Users\Lennart\Downloads\1.4.7-BukkitPlugin.jar
2013-12-09 13:33 - 2013-12-09 13:33 - 01622542 _____ C:\Users\Lennart\Downloads\mcpatcher_1_4_7.jar.jar
2013-12-09 13:27 - 2013-12-09 13:25 - 15850766 _____ C:\Users\Lennart\Downloads\divine rpg 1.2.6.zip
2013-12-05 15:06 - 2013-08-01 17:50 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-05 15:06 - 2013-08-01 17:50 - 00003856 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-03 16:26 - 2013-08-01 17:48 - 00000000 ____D C:\Users\Lennart\AppData\Local\Adobe
2013-12-03 15:46 - 2013-12-03 15:46 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
Some content of TEMP:
====================
C:\Users\Lennart\AppData\Local\Temp\avgnt.exe
C:\Users\Lennart\AppData\Local\Temp\jansi-64-git-Bukkit-1.6.2-R1.0-6-g7d680d3.dll
C:\Users\Lennart\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Lennart\AppData\Local\Temp\PDFCreator-1_3_2_setup.exe
C:\Users\Lennart\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Lennart\AppData\Local\Temp\sp-downloader.exe
C:\Users\Lennart\AppData\Local\Temp\uninst1.exe
C:\Users\Lennart\AppData\Local\Temp\UpdateCheckerSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-24 16:31
==================== End Of Log ============================
--- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-12-2013
Ran by Lennart at 2013-12-29 15:30:19
Running from C:\Users\Lennart\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KJMWMK3T
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (x32 Version: 3.3.0.29342)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.22.87)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Anvil Studio 2012 (x32 Version: 13.03.01)
Any Video Converter 5 5.0.4 (x32)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
ASRock eXtreme Tuner v0.1.268 (x32)
ASRock XFast RAM v2.0.9
aTube Catcher (x32 Version: 2.9.2114)
Audacity 2.0.3 (x32 Version: 2.0.3)
Avira Free Antivirus (x32 Version: 14.0.2.286)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2951)
AVM FRITZ!WLAN (x32)
BitGuard (x32) <==== ATTENTION
Bonjour (Version: 3.0.0.10)
Camtasia Studio 7 (x32 Version: 7.0.1)
DAEMON Tools Lite (x32 Version: 4.46.1.0327)
DriverTuner 3.1.0.0 (x32 Version: 3.1.0.0)
Dropbox (HKCU Version: 2.0.22)
Dxtory 2.0.104 (x32 Version: 2.0.104)
FIFA 13 (x32 Version: 1.1.0.0)
FileZilla Server (x32 Version: beta 0.9.41)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0)
Fraps (remove only) (x32)
Free YouTube Download version 3.2.9.725 (x32 Version: 3.2.9.725)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.22.3)
GTAIII (x32)
iCloud (Version: 3.0.2.163)
ImgBurn (x32 Version: 2.5.7.0)
iTunes (Version: 11.1.2.32)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
JDownloader 0.9 (x32 Version: 0.9)
Lazarus 1.0.8 (Version: 1.0.8)
LEGO Digital Designer (x32)
LEGO® Star Wars™: Die Komplette Saga (x32 Version: 1.00.0000)
LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000)
LMMS 0.4.13 (x32 Version: 0.4.13)
LogMeIn Hamachi (x32 Version: 2.2.0.109)
Mafia II (x32)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)
MAGIX Video deluxe 17 Premium Download-Version (x32 Version: 10.0.1.14)
Media converter (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Professional 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4763.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Minecraft Note Block Studio version 3.1.3 (x32 Version: 3.1.3)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)
NVIDIA Grafiktreiber 314.22 (Version: 314.22)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
Origin (x32 Version: 9.1.10.2728)
PDFCreator (x32 Version: 1.3.2)
Phase 5 HTML-Editor (x32 Version: 5.6.2.3)
PowerISO (x32 Version: 5.6)
QuickTime (x32 Version: 7.74.80.86)
ROCCAT Kova[+] Mouse Driver (x32 Version: 1.10)
Safari (x32 Version: 5.34.57.2)
SimCity™ (x32 Version: 1.0.0.0)
Skype™ 6.11 (x32 Version: 6.11.102)
Steam (x32 Version: 1.0.0.0)
Thread Manager 3.1.0.0 (x32 Version: 3.1.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
==================== Restore Points =========================
13-12-2013 00:36:13 Windows Update
17-12-2013 13:56:21 Windows Update
22-12-2013 13:29:38 Windows Update
27-12-2013 19:59:02 Windows Update
29-12-2013 02:50:51 Avira Free Antivirus - 29.12.2013 03:50
29-12-2013 02:52:27 Avira Free Antivirus - 29.12.2013 03:52
29-12-2013 03:38:45 Windows Defender Checkpoint
==================== Hosts content: ==========================
2009-07-14 03:34 - 2013-12-29 03:22 - 00320667 ____A C:\Windows\system32\Drivers\etc\hosts
199.59.63.101 youtube.com
199.59.63.101 yahoo.com
199.59.63.101 live.com
199.59.63.101 msn.com
199.59.63.101 wikipedia.org
199.59.63.101 blogspot.com
199.59.63.101 baidu.com
199.59.63.101 microsoft.com
199.59.63.101 qq.com
199.59.63.101 bing.com
199.59.63.101 ask.com
199.59.63.101 adobe.com
199.59.63.101 taobao.com
199.59.63.101 twitter.com
199.59.63.101 youku.com
199.59.63.101 soso.com
199.59.63.101 wordpress.com
199.59.63.101 sohu.com
199.59.63.101 hao123.com
199.59.63.101 windows.com
199.59.63.101 163.com
199.59.63.101 tudou.com
199.59.63.101 amazon.com
199.59.63.101 apple.com
199.59.63.101 ebay.com
199.59.63.101 4399.com
199.59.63.101 yahoo.co.jp
199.59.63.101 linkedin.com
199.59.63.101 go.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {12C686A1-73DC-4A19-B23C-E6AFE333E62D} - System32\Tasks\EPUpdater => C:\Users\Lennart\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION
Task: {2C789232-6F3F-4444-8001-F02772FA1568} - \AdobeFlashPlayerUpdate 2 No Task File
Task: {333978AE-A9AE-46EC-B20C-D475EB590CB3} - \AdobeFlashPlayerUpdate No Task File
Task: {4971AEB1-8B68-417D-B968-FE1D29CF3297} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-01] (Google Inc.)
Task: {5F4E3901-7A78-4FFF-B567-6C5B790CF2F4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {6BE80700-654C-410F-A644-6274D2C3BE05} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6D681F74-975C-44ED-8C75-3352D4670D40} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-01] (Google Inc.)
Task: {A8EAFA9F-BD8A-4A2B-997B-7CF3D182F817} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {B739115E-E4A1-4B39-9F86-27853E7B0E8A} - System32\Tasks\asrRd => C:\Program Files\ASRock Utility\XFast RAM\asrRd.exe [2012-01-13] ()
Task: {B803A608-295F-4A71-9DCA-1FFC7601B812} - System32\Tasks\AsrXTU => C:\Program Files (x86)\ASRock Utility\AXTU\Bin\AsrXTU.exe [2012-07-31] ()
Task: {CF1EE42C-E2D6-4F21-AA0D-AAA5FE20658D} - \CPU Grid Computing No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-11-21 16:45 - 2013-11-18 15:32 - 01958880 _____ () C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll
2013-12-29 03:46 - 2013-11-22 12:01 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2013-08-21 13:18 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-09-06 11:55 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-08-07 10:31 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2013-09-29 17:32 - 2013-11-21 16:46 - 00064000 _____ () C:\Program Files (x86)\Origin\tufao.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\Lennart\AppData\Roaming\Dropbox\bin\libcef.dll
2013-05-14 18:43 - 2010-05-29 13:57 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\hiddriver.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Faulty Device Manager Devices =============
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/29/2013 03:25:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Safari.exe, Version: 5.34.57.2, Zeitstempel: 0x5009256b
Name des fehlerhaften Moduls: Safari.dll, Version: 7534.57.2.5, Zeitstempel: 0x50092531
Ausnahmecode: 0xc000041d
Fehleroffset: 0x00093503
ID des fehlerhaften Prozesses: 0x830
Startzeit der fehlerhaften Anwendung: 0xSafari.exe0
Pfad der fehlerhaften Anwendung: Safari.exe1
Pfad des fehlerhaften Moduls: Safari.exe2
Berichtskennung: Safari.exe3
Error: (12/29/2013 03:25:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Safari.exe, Version: 5.34.57.2, Zeitstempel: 0x5009256b
Name des fehlerhaften Moduls: Safari.dll, Version: 7534.57.2.5, Zeitstempel: 0x50092531
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00093503
ID des fehlerhaften Prozesses: 0x830
Startzeit der fehlerhaften Anwendung: 0xSafari.exe0
Pfad der fehlerhaften Anwendung: Safari.exe1
Pfad des fehlerhaften Moduls: Safari.exe2
Berichtskennung: Safari.exe3
Error: (12/29/2013 03:24:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/29/2013 04:38:45 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {8c69cae4-83eb-4870-84d2-878eb68851f4}
Error: (12/29/2013 04:25:18 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: update_checker.exe, Version: 4.3.0.0, Zeitstempel: 0x525d9c67
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0xe78
Startzeit der fehlerhaften Anwendung: 0xupdate_checker.exe0
Pfad der fehlerhaften Anwendung: update_checker.exe1
Pfad des fehlerhaften Moduls: update_checker.exe2
Berichtskennung: update_checker.exe3
Error: (12/29/2013 03:56:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Safari.exe, Version: 5.34.57.2, Zeitstempel: 0x5009256b
Name des fehlerhaften Moduls: Safari.dll, Version: 7534.57.2.5, Zeitstempel: 0x50092531
Ausnahmecode: 0xc000041d
Fehleroffset: 0x00093503
ID des fehlerhaften Prozesses: 0xed4
Startzeit der fehlerhaften Anwendung: 0xSafari.exe0
Pfad der fehlerhaften Anwendung: Safari.exe1
Pfad des fehlerhaften Moduls: Safari.exe2
Berichtskennung: Safari.exe3
Error: (12/29/2013 03:56:52 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Safari.exe, Version: 5.34.57.2, Zeitstempel: 0x5009256b
Name des fehlerhaften Moduls: Safari.dll, Version: 7534.57.2.5, Zeitstempel: 0x50092531
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00093503
ID des fehlerhaften Prozesses: 0xed4
Startzeit der fehlerhaften Anwendung: 0xSafari.exe0
Pfad der fehlerhaften Anwendung: Safari.exe1
Pfad des fehlerhaften Moduls: Safari.exe2
Berichtskennung: Safari.exe3
Error: (12/29/2013 03:55:58 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/29/2013 03:55:25 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AutoKMS.exe, Version: 0.0.0.0, Zeitstempel: 0x4e32f719
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x720
Startzeit der fehlerhaften Anwendung: 0xAutoKMS.exe0
Pfad der fehlerhaften Anwendung: AutoKMS.exe1
Pfad des fehlerhaften Moduls: AutoKMS.exe2
Berichtskennung: AutoKMS.exe3
Error: (12/29/2013 03:54:48 AM) (Source: .NET Runtime) (User: )
Description: Anwendung: AutoKMS.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.FileLoadException
Stapel:
System errors:
=============
Error: (12/29/2013 03:26:02 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (12/29/2013 03:26:02 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (12/29/2013 03:26:01 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (12/29/2013 03:25:57 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{AB20E7E6-A1A8-49A5-966E-5E024D928852}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (12/29/2013 03:25:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (12/29/2013 03:25:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (12/29/2013 04:24:44 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (12/29/2013 04:24:43 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (12/29/2013 04:10:53 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (12/29/2013 04:10:53 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Microsoft Office Sessions:
=========================
Error: (12/29/2013 03:25:42 PM) (Source: Application Error)(User: )
Description: Safari.exe5.34.57.25009256bSafari.dll7534.57.2.550092531c000041d0009350383001cf04a1c51dedf7C:\Program Files (x86)\Safari\Safari.exeC:\Program Files (x86)\Safari\Safari.dll185afd88-7095-11e3-9a74-00e04c2166ea
Error: (12/29/2013 03:25:39 PM) (Source: Application Error)(User: )
Description: Safari.exe5.34.57.25009256bSafari.dll7534.57.2.550092531c00000050009350383001cf04a1c51dedf7C:\Program Files (x86)\Safari\Safari.exeC:\Program Files (x86)\Safari\Safari.dll16d5de76-7095-11e3-9a74-00e04c2166ea
Error: (12/29/2013 03:24:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/29/2013 04:38:45 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {8c69cae4-83eb-4870-84d2-878eb68851f4}
Error: (12/29/2013 04:25:18 AM) (Source: Application Error)(User: )
Description: update_checker.exe4.3.0.0525d9c67ntdll.dll6.1.7601.18247521ea8e7c00000050002e3bee7801cf044535d0a6e1C:\Users\Lennart\AppData\Local\FilesFrog Update Checker\update_checker.exeC:\Windows\SysWOW64\ntdll.dlld6d0f136-7038-11e3-b102-00e04c2166ea
Error: (12/29/2013 03:56:54 AM) (Source: Application Error)(User: )
Description: Safari.exe5.34.57.25009256bSafari.dll7534.57.2.550092531c000041d00093503ed401cf04418b617c3eC:\Program Files (x86)\Safari\Safari.exeC:\Program Files (x86)\Safari\Safari.dlldf36da7d-7034-11e3-b102-00e04c2166ea
Error: (12/29/2013 03:56:52 AM) (Source: Application Error)(User: )
Description: Safari.exe5.34.57.25009256bSafari.dll7534.57.2.550092531c000000500093503ed401cf04418b617c3eC:\Program Files (x86)\Safari\Safari.exeC:\Program Files (x86)\Safari\Safari.dlldddc276a-7034-11e3-b102-00e04c2166ea
Error: (12/29/2013 03:55:58 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/29/2013 03:55:25 AM) (Source: Application Error)(User: )
Description: AutoKMS.exe0.0.0.04e32f719KERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f72001cf04414580225aC:\Windows\AutoKMS\AutoKMS.exeC:\Windows\syswow64\KERNELBASE.dlla9c47c2b-7034-11e3-b102-00e04c2166ea
Error: (12/29/2013 03:54:48 AM) (Source: .NET Runtime)(User: )
Description: Anwendung: AutoKMS.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.IO.FileLoadException
Stapel:
Lennart |
|
30.12.2013, 11:02
| #4 |
| /// the machine /// TB-Ausbilder | Internet-Browser zeigt beim Start automatisch eine Survey-Seite Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Internet-Browser zeigt beim Start automatisch eine Survey-Seite |
| antivirus, antworten, automatisch, avira, beseitigen, bild, browser, einfach, firefox, folge, forum, gelöscht, google, installiert, jeder browser, link, namen, neu, nichts, ratlos, seite öffnet sich von selbst, seiten, start, survey, verlauf, wirklich, yahoo, youtube |
Linear-Darstellung
