|
Log-Analyse und Auswertung: Kontosperre bei web.deWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
29.12.2013, 14:34 | #1 |
| Kontosperre bei web.de Hallo, in den letzten drei Wochen ist es dreimal so gewesen, dass web.de mir mitgeteilt hat, dass mein Konto vorsorglich gesperrt wurde, da über mein Postfach Spam-Mails verschickt worden sind. Das mit den Spam-Mails wurde mir auf telefonische Nachfrage mitgeteilt. Ich habe MBAM laufen lassen: keine Befunde. Microsoft Security Essentials hat auch keinen Befund, auch die WindowsFirewall hatte nichts zu bemängeln. System: Windows 7 64 Bit Fritz Box WLAN 7270 Ich hatte in einem Forum über PluginCheck gelesen, das Ergebnis lautet: Firefox 26.0 ist aktuell Flash (11,8,800,168) ist aktuell. Java (1,7,0,45) ist aktuell. Adobe Reader 11,0,5,3 ist aktuell. Gibt es weitere Analysemöglichkeiten? Da ich bislang nicht weiß, welche Protokolle ich evtl. posten müsste, da ich keine Befunde habe, hänge ich erst einmal nichts an. Ist das ein Problem von mir oder von web.de? Vielen Dank für Eure Hilfe und viele Grüße Geändert von Der Schalker (29.12.2013 um 14:35 Uhr) Grund: Rechtschreibung |
29.12.2013, 18:10 | #2 |
/// the machine /// TB-Ausbilder | Kontosperre bei web.de hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
30.12.2013, 15:12 | #3 |
| Kontosperre bei web.de ... sorry, dass ich erst jetzt antworte - ich hatte gar nicht mit einer so schnellen Rückmeldung gerechnet.
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01 Ran by Krueger (administrator) on PC on 30-12-2013 15:08:31 Running from C:\Users\Krueger\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe (SlySoft, Inc.) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe HKLM-x32\...\Run: [BrowserPlugInHelper] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [AnyDVD] - C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe [93096 2013-12-27] (SlySoft, Inc.) HKCU\...\Run: [] - [x] HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia) HKCU\...\Run: [HP Officejet 6600 (NET)] - C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) Startup: C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2510 series.lnk ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2510 series.lnk -> C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) Startup: C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 6510 series.lnk ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 6510 series.lnk -> C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - {163F7060-4723-4812-857C-7D98FEDAB19C} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKCU - {932068A1-CB31-46EE-A927-97604C76BF14} URL = hxxp://www.sm.de/?q={searchTerms} BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default FF user.js: detected! => C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default\user.js FF SearchEngineOrder.1: SuchMaschine FF Homepage: https://www.web.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default\searchplugins\search_engine.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: FRITZ!Box AddOn - C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default\Extensions\fb_add_on@avm.de Chrome: ======= CHR DefaultSearchKeyword: aartemis CHR DefaultSearchProvider: aartemis CHR DefaultSearchURL: hxxp://www.aartemis.com/web/?type=ds&ts=1388256436&from=cor&uid=SamsungXSSDX840XSeries_S14CNSAD112783T&q={searchTerms} CHR DefaultNewTabURL: CHR Extension: (Google Wallet) - C:\Users\Krueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 ==================== Services (Whitelisted) ================= R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] () R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited) S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-07-23] (RapidSolution Software AG) R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-07-23] (RapidSolution Software AG) R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [768680 2013-06-26] (Microsoft Corporation) R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2013-06-26] (Microsoft Corporation) R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29352 2013-06-26] (Microsoft Corporation) R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2013-06-26] (Microsoft Corporation) U3 DfSdkS; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-30 15:08 - 2013-12-30 15:08 - 00011051 _____ C:\Users\Krueger\Desktop\FRST.txt 2013-12-30 15:08 - 2013-12-30 15:08 - 00000000 ____D C:\FRST 2013-12-30 15:07 - 2013-12-30 15:07 - 01931302 _____ (Farbar) C:\Users\Krueger\Desktop\FRST64.exe 2013-12-29 13:40 - 2013-12-30 14:55 - 00000112 _____ C:\Windows\setupact.log 2013-12-29 13:40 - 2013-12-29 13:40 - 00000000 _____ C:\Windows\setuperr.log 2013-12-29 11:55 - 2013-12-29 11:55 - 00001317 _____ C:\DelFix.txt 2013-12-29 11:55 - 2013-12-29 11:55 - 00000000 ____D C:\Windows\ERUNT 2013-12-29 02:08 - 2013-12-29 02:08 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-12-29 02:08 - 2013-12-29 02:08 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-12-29 02:08 - 2013-12-29 02:08 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-12-29 02:08 - 2013-12-29 02:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Sun 2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Oracle 2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-29 02:06 - 2013-12-29 02:06 - 00915368 _____ (Oracle Corporation) C:\Users\Krueger\Downloads\jxpiinstall.exe 2013-12-28 20:47 - 2013-12-28 20:47 - 00000111 _____ C:\Users\Krueger\AppData\Roaming\WB.CFG 2013-12-28 20:47 - 2013-12-28 20:47 - 00000006 _____ C:\Users\Krueger\AppData\Roaming\WBPU-TTL.DAT 2013-12-28 20:14 - 2013-12-29 03:55 - 00000027 _____ C:\Users\Krueger\Desktop\Neues Textdokument.txt 2013-12-28 19:47 - 2013-12-30 02:47 - 00000300 _____ C:\Windows\Tasks\Digital Sites.job 2013-12-28 19:47 - 2013-12-28 21:26 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\DigitalSites 2013-12-28 19:47 - 2013-12-28 19:47 - 00003232 _____ C:\Windows\System32\Tasks\Digital Sites 2013-12-28 14:11 - 2013-12-28 14:12 - 10558760 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7390.exe 2013-12-26 04:10 - 2013-12-26 04:10 - 04645232 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup409.exe 2013-12-26 03:17 - 2013-12-26 03:17 - 00001318 _____ C:\Users\Public\Desktop\Moorhuhn Schatzjäger 3.lnk 2013-12-26 03:17 - 2013-12-26 03:17 - 00000000 ____D C:\Program Files (x86)\Moorhuhn Schatzjäger 3 2013-12-21 13:41 - 2013-12-21 13:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-20 04:34 - 2013-12-20 04:34 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Malwarebytes 2013-12-20 04:33 - 2013-12-20 04:33 - 00001147 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-20 04:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-20 04:32 - 2013-12-20 04:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Krueger\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-16 00:55 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-16 00:55 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-16 00:55 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-16 00:55 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-15 01:12 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-15 01:12 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-15 01:12 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-15 01:12 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-15 01:12 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-15 01:12 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-15 01:12 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-15 01:12 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-15 01:12 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-15 01:12 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-15 01:12 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-15 01:12 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-15 01:12 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-15 01:12 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-15 01:12 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-15 01:12 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-15 01:12 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-15 01:12 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-15 01:12 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-15 01:12 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-15 01:12 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-15 01:11 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-15 01:11 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-15 01:11 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-15 01:11 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-15 01:11 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-15 01:11 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-15 01:11 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-15 01:11 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-15 01:11 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-15 01:11 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-13 00:34 - 2013-12-13 00:34 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380(1).exe 2013-12-13 00:33 - 2013-12-13 00:33 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380.exe 2013-12-12 13:15 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-12 13:15 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 23:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 23:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 23:34 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 23:34 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 23:34 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 23:34 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 23:34 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 23:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 23:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 23:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 23:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 23:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 23:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 23:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 23:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 23:34 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 23:34 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-05 00:39 - 2013-12-05 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-05 00:39 - 2013-12-05 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-05 00:39 - 2013-12-05 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-05 00:39 - 2013-12-05 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-05 00:39 - 2013-12-05 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-03 16:05 - 2013-12-03 16:05 - 04618136 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup408.exe 2013-12-03 10:51 - 2013-12-30 15:05 - 01334787 _____ C:\Windows\WindowsUpdate.log 2013-12-01 17:13 - 2013-12-01 17:14 - 00002215 _____ C:\Users\Krueger\Desktop\SEPA Account Converter.lnk 2013-12-01 17:13 - 2013-12-01 17:14 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Finanz 2013-12-01 17:13 - 2013-12-01 17:14 - 00000000 ____D C:\Program Files (x86)\SEPA Account Converter 2013-12-01 17:13 - 2013-12-01 17:13 - 03846144 _____ C:\Users\Krueger\Downloads\SEPA Account Converter.msp 2013-12-01 17:13 - 2013-12-01 17:13 - 02224018 _____ C:\Users\Krueger\Downloads\sepa_account_converter_1.22.1.zip ==================== One Month Modified Files and Folders ======= 2013-12-30 15:08 - 2013-12-30 15:08 - 00011051 _____ C:\Users\Krueger\Desktop\FRST.txt 2013-12-30 15:08 - 2013-12-30 15:08 - 00000000 ____D C:\FRST 2013-12-30 15:07 - 2013-12-30 15:07 - 01931302 _____ (Farbar) C:\Users\Krueger\Desktop\FRST64.exe 2013-12-30 15:05 - 2013-12-03 10:51 - 01334787 _____ C:\Windows\WindowsUpdate.log 2013-12-30 15:02 - 2009-07-14 05:45 - 00020272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-30 15:02 - 2009-07-14 05:45 - 00020272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-30 14:59 - 2011-04-12 08:43 - 00654594 _____ C:\Windows\system32\perfh007.dat 2013-12-30 14:59 - 2011-04-12 08:43 - 00130208 _____ C:\Windows\system32\perfc007.dat 2013-12-30 14:59 - 2009-07-14 06:13 - 01500254 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-30 14:57 - 2013-03-10 14:31 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-30 14:57 - 2013-03-10 14:31 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-30 14:56 - 2013-03-09 22:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-30 14:55 - 2013-12-29 13:40 - 00000112 _____ C:\Windows\setupact.log 2013-12-30 14:55 - 2013-03-04 23:45 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-30 14:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-30 02:56 - 2013-03-05 22:09 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\SoftGrid Client 2013-12-30 02:47 - 2013-12-28 19:47 - 00000300 _____ C:\Windows\Tasks\Digital Sites.job 2013-12-29 13:40 - 2013-12-29 13:40 - 00000000 _____ C:\Windows\setuperr.log 2013-12-29 11:55 - 2013-12-29 11:55 - 00001317 _____ C:\DelFix.txt 2013-12-29 11:55 - 2013-12-29 11:55 - 00000000 ____D C:\Windows\ERUNT 2013-12-29 03:55 - 2013-12-28 20:14 - 00000027 _____ C:\Users\Krueger\Desktop\Neues Textdokument.txt 2013-12-29 02:08 - 2013-12-29 02:08 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-12-29 02:08 - 2013-12-29 02:08 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-12-29 02:08 - 2013-12-29 02:08 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-12-29 02:08 - 2013-12-29 02:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Sun 2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Oracle 2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-29 02:06 - 2013-12-29 02:06 - 00915368 _____ (Oracle Corporation) C:\Users\Krueger\Downloads\jxpiinstall.exe 2013-12-28 21:26 - 2013-12-28 19:47 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\DigitalSites 2013-12-28 20:47 - 2013-12-28 20:47 - 00000111 _____ C:\Users\Krueger\AppData\Roaming\WB.CFG 2013-12-28 20:47 - 2013-12-28 20:47 - 00000006 _____ C:\Users\Krueger\AppData\Roaming\WBPU-TTL.DAT 2013-12-28 19:52 - 2013-03-04 18:44 - 00001037 _____ C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-28 19:47 - 2013-12-28 19:47 - 00003232 _____ C:\Windows\System32\Tasks\Digital Sites 2013-12-28 14:12 - 2013-12-28 14:11 - 10558760 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7390.exe 2013-12-26 04:10 - 2013-12-26 04:10 - 04645232 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup409.exe 2013-12-26 04:10 - 2013-03-10 08:55 - 00000000 ____D C:\Program Files\CCleaner 2013-12-26 03:17 - 2013-12-26 03:17 - 00001318 _____ C:\Users\Public\Desktop\Moorhuhn Schatzjäger 3.lnk 2013-12-26 03:17 - 2013-12-26 03:17 - 00000000 ____D C:\Program Files (x86)\Moorhuhn Schatzjäger 3 2013-12-23 05:40 - 2013-03-05 00:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-21 13:41 - 2013-12-21 13:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-20 04:34 - 2013-12-20 04:34 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Malwarebytes 2013-12-20 04:33 - 2013-12-20 04:33 - 00001147 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-20 04:32 - 2013-12-20 04:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Krueger\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-19 11:17 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-16 01:54 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-15 01:11 - 2013-07-14 08:58 - 00000000 ____D C:\Windows\system32\MRT 2013-12-15 01:08 - 2013-03-05 22:58 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-13 15:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-13 00:34 - 2013-12-13 00:34 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380(1).exe 2013-12-13 00:33 - 2013-12-13 00:33 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380.exe 2013-12-12 12:48 - 2009-07-14 05:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 12:37 - 2013-11-24 19:45 - 00002243 _____ C:\Users\Public\Desktop\SteuerSparErklärung 2014.lnk 2013-12-09 04:20 - 2013-09-24 00:14 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Mp3tag 2013-12-05 11:32 - 2013-03-04 18:39 - 00000000 ____D C:\Windows\Panther 2013-12-05 11:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-05 00:39 - 2013-12-05 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-05 00:39 - 2013-12-05 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-05 00:39 - 2013-12-05 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-05 00:39 - 2013-12-05 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-05 00:39 - 2013-12-05 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-05 00:39 - 2013-12-05 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-05 00:39 - 2013-12-05 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-03 16:05 - 2013-12-03 16:05 - 04618136 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup408.exe 2013-12-01 17:14 - 2013-12-01 17:13 - 00002215 _____ C:\Users\Krueger\Desktop\SEPA Account Converter.lnk 2013-12-01 17:14 - 2013-12-01 17:13 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Finanz 2013-12-01 17:14 - 2013-12-01 17:13 - 00000000 ____D C:\Program Files (x86)\SEPA Account Converter 2013-12-01 17:13 - 2013-12-01 17:13 - 03846144 _____ C:\Users\Krueger\Downloads\SEPA Account Converter.msp 2013-12-01 17:13 - 2013-12-01 17:13 - 02224018 _____ C:\Users\Krueger\Downloads\sepa_account_converter_1.22.1.zip Some content of TEMP: ==================== C:\Users\Krueger\AppData\Local\Temp\NOSEventMessages.dll C:\Users\Krueger\AppData\Local\Temp\pcspeedmaxsetup.exe C:\Users\Krueger\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 00:17 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-12-2013 01 Ran by Krueger at 2013-12-30 15:08:58 Running from C:\Users\Krueger\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168 - Adobe Systems Incorporated) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112 - Adobe Systems, Inc.) AnyDVD (x32 Version: 7.3.9.0 - SlySoft) Ashampoo Burning Studio 2012 v.10.0.15 (x32 Version: 10.0.15 - Ashampoo GmbH & Co. KG) Ashampoo Burning Studio 2013 v.11.0.6 (x32 Version: 11.0.6 - Ashampoo GmbH & Co. KG) Ashampoo Photo Commander 9 v.9.4.3 (x32 Version: 9.4.3 - Ashampoo GmbH & Co. KG) Ashampoo Photo Optimizer 5 v.5.4.0 (x32 Version: 5.4.0 - Ashampoo GmbH & Co. KG) Ashampoo Slideshow Studio 2012 v.1.0.2 (x32 Version: 1.0.2 - Ashampoo GmbH & Co. KG) Ashampoo WinOptimizer 2012 v.8.1.4 (x32 Version: 8.1.4 - Ashampoo GmbH & Co. KG) Audials (x32 Version: 10.2.29500.0 - Audials AG) Bing Bar (x32 Version: 7.3.124.0 - Microsoft Corporation) CCleaner (Version: 4.09 - Piriform) Cut Out 3.0 (x32 Version: - Franzis.de) Free Studio version 2013 (x32 Version: 6.0.0.128 - DVDVideoSoft Ltd.) Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) HP Deskjet 2510 series - Grundlegende Software für das Gerät (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 2510 series Hilfe (x32 Version: 27.0.0 - Hewlett Packard) HP Deskjet 2510 series Setup Guide (x32 Version: 27.0.0 - Hewlett Packard) HP FWUpdateEDO2 (x32 Version: 1.2.0.0 - Hewlett-Packard) HP Officejet 6600 - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Officejet 6600 Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard) HP Photo Creations (x32 Version: 1.0.0.7702 - HP) HP Photosmart 6510 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photosmart 6510 series Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard) HP Update (x32 Version: 5.003.003.001 - Hewlett-Packard) HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office Home and Student 2010 - Deutsch (x32 Version: 14.0.6134.5003 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.6122.5000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.6122.5000 - Microsoft Corporation) Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Mipony Download Accelerator Packages (HKCU Version: - ) Moorhuhn Schatzjäger 3 (x32 Version: 1.00 - phenomedia publishing gmbh) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) Mp3tag v2.57 (x32 Version: v2.57 - Florian Heidenreich) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) MSVC90_x64 (Version: 1.0.1.2 - Nokia) MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0 - Nokia) Nokia Suite (x32 Version: 3.8.30.0 - Nokia) NVIDIA 3D Vision Controller-Treiber 314.07 (Version: 314.07 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) PC Connectivity Solution (x32 Version: 12.0.109.0 - Nokia) PC Speed Maximizer v3.2 (x32 Version: 3.2 - Smart PC Solutions) Picasa 3 (x32 Version: 3.9 - Google, Inc.) SEPA Account Converter (x32 Version: 1.23.1 - Star Finanz GmbH) Steuer-Spar-Erklärung 2013 (x32 Version: 18.09 - Wolters Kluwer Deutschland GmbH) SteuerSparErklärung 2014 (x32 Version: 19.03.37 - Akademische Arbeitsgemeinschaft) Studie zur Verbesserung von HP Deskjet 2510 series Produkten (Version: 28.0.1313.0 - Hewlett-Packard Co.) Studie zur Verbesserung von HP Officejet 6600 Produkten (Version: 28.0.1315.0 - Hewlett-Packard Co.) Studie zur Verbesserung von HP Photosmart 6510 series Produkten (Version: 28.0.1315.0 - Hewlett-Packard Co.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0 - Nokia) ==================== Restore Points ========================= 29-12-2013 10:55:34 Ende der Bereinigung ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {2A93BC5F-B515-4F61-B729-F8E85A7BE131} - System32\Tasks\HPCustParticipation HP Deskjet 2510 series => C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.) Task: {53DE6E01-6511-4396-93C6-85CFBD7BB85A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {57FBA519-E913-45A1-8F10-08C1774952F4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-10] (Google Inc.) Task: {769F241C-6D8D-439C-97AF-8E59FF85E308} - System32\Tasks\Digital Sites => C:\Users\Krueger\AppData\Roaming\DIGITA~2\UPDATE~1\UPDATE~1.EXE Task: {9587CA16-1DB3-4ACB-94F7-567440E3CA0F} - System32\Tasks\HPCustParticipation HP Photosmart 6510 series => C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.) Task: {A64FBFEB-6D57-46F8-9BAF-F518EC286B00} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-10] (Adobe Systems Incorporated) Task: {A97F50EB-5AA4-4EAC-807A-BE68DF552541} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-10] (Google Inc.) Task: {BCC86B7A-7BCE-4363-96EF-515C1796B08B} - System32\Tasks\HPCustParticipation HP Officejet 6600 => C:\Program Files\HP\HP Officejet 6600\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Krueger\AppData\Roaming\DIGITA~2\UPDATE~1\UPDATE~1.EXE Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-19 00:46 - 2013-04-19 00:46 - 08507232 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 02354016 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 01014624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00364384 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 02480992 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 01346912 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00206176 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 02653024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll 2013-04-19 00:45 - 2013-04-19 00:45 - 00033120 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll 2013-04-19 00:45 - 2013-04-19 00:45 - 00035680 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll 2013-04-19 00:45 - 2013-04-19 00:45 - 00207200 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 11166560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00276832 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll 2013-04-15 12:26 - 2013-04-15 12:26 - 00391600 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll 2013-04-15 12:26 - 2013-04-15 12:26 - 00059280 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00446304 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00520544 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00720736 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll 2013-04-19 00:45 - 2013-04-19 00:45 - 00438624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll 2013-04-19 00:44 - 2013-04-19 00:44 - 00606560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll 2013-04-19 00:46 - 2013-04-19 00:46 - 00093024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll 2013-12-21 13:41 - 2013-12-21 13:41 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-10 22:56 - 2013-09-10 22:56 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:1749E567 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/30/2013 02:57:12 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/29/2013 01:42:52 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/29/2013 10:00:37 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/29/2013 03:56:49 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/29/2013 03:56:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/29/2013 03:56:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/29/2013 03:56:37 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/28/2013 09:31:08 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/28/2013 09:30:59 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/28/2013 09:29:12 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (12/30/2013 03:05:47 PM) (Source: Microsoft Antimalware) (User: ) Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt. Neue Signaturversion: Vorherige Signaturversion: 1.165.770.0 Aktualisierungsquelle: %NT-AUTORITÄT59 Aktualisierungsphase: 4.4.0304.00 Quellpfad: 4.4.0304.01 Signaturtyp: %NT-AUTORITÄT602 Aktualisierungstyp: %NT-AUTORITÄT604 Benutzer: NT-AUTORITÄT\SYSTEM Aktuelle Modulversion: %NT-AUTORITÄT605 Vorherige Modulversion: %NT-AUTORITÄT606 Fehlercode: %NT-AUTORITÄT607 Fehlerbeschreibung: %NT-AUTORITÄT608 Error: (12/30/2013 03:05:47 PM) (Source: Microsoft Antimalware) (User: ) Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt. Neue Signaturversion: Vorherige Signaturversion: 1.165.770.0 Aktualisierungsquelle: %NT-AUTORITÄT59 Aktualisierungsphase: 4.4.0304.00 Quellpfad: 4.4.0304.01 Signaturtyp: %NT-AUTORITÄT602 Aktualisierungstyp: %NT-AUTORITÄT604 Benutzer: NT-AUTORITÄT\SYSTEM Aktuelle Modulversion: %NT-AUTORITÄT605 Vorherige Modulversion: %NT-AUTORITÄT606 Fehlercode: %NT-AUTORITÄT607 Fehlerbeschreibung: %NT-AUTORITÄT608 Error: (12/30/2013 02:56:24 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (12/29/2013 04:52:36 PM) (Source: Microsoft Antimalware) (User: ) Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt. Neue Signaturversion: Vorherige Signaturversion: 1.165.770.0 Aktualisierungsquelle: %NT-AUTORITÄT59 Aktualisierungsphase: 4.4.0304.00 Quellpfad: 4.4.0304.01 Signaturtyp: %NT-AUTORITÄT602 Aktualisierungstyp: %NT-AUTORITÄT604 Benutzer: NT-AUTORITÄT\SYSTEM Aktuelle Modulversion: %NT-AUTORITÄT605 Vorherige Modulversion: %NT-AUTORITÄT606 Fehlercode: %NT-AUTORITÄT607 Fehlerbeschreibung: %NT-AUTORITÄT608 Error: (12/29/2013 04:52:36 PM) (Source: Microsoft Antimalware) (User: ) Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt. Neue Signaturversion: Vorherige Signaturversion: 1.165.770.0 Aktualisierungsquelle: %NT-AUTORITÄT59 Aktualisierungsphase: 4.4.0304.00 Quellpfad: 4.4.0304.01 Signaturtyp: %NT-AUTORITÄT602 Aktualisierungstyp: %NT-AUTORITÄT604 Benutzer: NT-AUTORITÄT\SYSTEM Aktuelle Modulversion: %NT-AUTORITÄT605 Vorherige Modulversion: %NT-AUTORITÄT606 Fehlercode: %NT-AUTORITÄT607 Fehlerbeschreibung: %NT-AUTORITÄT608 Error: (12/29/2013 01:42:02 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (12/28/2013 09:28:21 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (12/28/2013 09:08:42 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Update Jump Flip" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (12/28/2013 09:08:37 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Update Jump Flip" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts. Error: (12/28/2013 07:54:03 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (12/30/2013 02:57:12 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/29/2013 01:42:52 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/29/2013 10:00:37 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (12/29/2013 03:56:49 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe Error: (12/29/2013 03:56:41 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe Error: (12/29/2013 03:56:41 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe Error: (12/29/2013 03:56:37 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe Error: (12/28/2013 09:31:08 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe Error: (12/28/2013 09:30:59 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe Error: (12/28/2013 09:29:12 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2013-12-28 16:36:28.611 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:28.610 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:28.608 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:28.288 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:28.281 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:28.275 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:27.965 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:27.963 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:27.962 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-28 16:36:27.763 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 36% Total physical RAM: 4094.18 MB Available physical RAM: 2604.97 MB Total Pagefile: 8186.53 MB Available Pagefile: 6521.36 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: (Windows7) (Fixed) (Total:111.69 GB) (Free:58.25 GB) NTFS Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (Windows8 und Daten) (Fixed) (Total:811.59 GB) (Free:561.08 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive f: (Volume) (Fixed) (Total:99.92 GB) (Free:99.8 GB) NTFS Drive g: (RECOVER) (Fixed) (Total:19.99 GB) (Free:8.54 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: E7E9A0BB) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: F98D6E74) Partition 1: (Active) - (Size=812 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=120 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
31.12.2013, 14:42 | #4 |
/// the machine /// TB-Ausbilder | Kontosperre bei web.de hi, Passwort schon geändert? Solche Accounts werden immer online gehackt, wenn überhaupt. Rechner ist sauber.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
31.12.2013, 14:54 | #5 |
| Kontosperre bei web.de Hallo, ja, Passwort ist geändert. Müssten wir die gleiche Aktion jetzt noch für unser Laptop machen? Auch das ruft web.de auf.Oder ist das überflüssig, weil sowieso nur online gehackt wird? Gruß |
01.01.2014, 13:09 | #6 |
/// the machine /// TB-Ausbilder | Kontosperre bei web.de Du kannst gerne mal FRST LOgs davon posten, ich schau schnell drüber
__________________ --> Kontosperre bei web.de |
01.01.2014, 13:32 | #7 |
| Kontosperre bei web.de Hallo schrauber, ich hoffe du hattest einen guten Start ins neue Jahr!!?? Hier der Laptop-Scan: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-12-2013 Ran by Linda (administrator) on LINDA-PC on 01-01-2014 13:26:49 Running from \\PC\Music Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe (AMD) C:\Windows\System32\atieclxx.exe (Realtek Semiconductor) C:\Windows\RTKAUDIOSERVICE.EXE (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Sony Corporation) C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe (Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files\Sony\Marketing Tools\MarketingTools.exe (Roxio) C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe (Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Sony Corporation) C:\Program Files\Sony\Network Utility\LANUtil.exe () C:\Users\Linda\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe (InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Sony Corporation) C:\Program Files\Sony\Network Utility\NSUService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Sonic Solutions) C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe (Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe (Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe (Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe (Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe (Sony Corporation) C:\Windows\VUAgent.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Farbar) \\PC\Music\FRST.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [835584 2007-03-10] (Synaptics, Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6295552 2008-07-03] (Realtek Semiconductor) HKLM\...\Run: [Skytel] - C:\Windows\SkyTel.exe [1826816 2008-07-03] (Realtek Semiconductor Corp.) HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM\...\Run: [ContentTransferWMDetector.exe] - C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe [423200 2008-07-11] (Sony Corporation) HKLM\...\Run: [ISBMgr.exe] - C:\Program Files\Sony\ISB Utility\ISBMgr.exe [317280 2008-04-03] (Sony Corporation) HKLM\...\Run: [MarketingTools] - C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [24576 2009-01-15] (Sony Corporation) HKLM\...\Run: [RoxioDragToDisc] - C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe [1116920 2007-03-13] (Roxio) HKLM\...\Run: [RoxWatchTray] - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [236016 2007-08-16] (Sonic Solutions) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2011-04-08] (Sun Microsystems, Inc.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation) HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.) HKLM\...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] () Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation) HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [144384 2010-11-20] (Microsoft Corporation) HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [451872 2007-07-18] (Hewlett-Packard Company) HKCU\...\Run: [NSUFloatingUI] - C:\Program Files\Sony\Network Utility\LANUtil.exe [262144 2008-06-27] (Sony Corporation) HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Linda\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.sonystyle-europe.com hxxp://www.club-vaio.com/vbc/ebay/index.html hxxp://www.club-vaio.com/vbc SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {6C46687A-47DF-4C56-9E42-77258AB738EB} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta= SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869 BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\Program Files\ArcSoft\Media Converter for Philips\Internet Video Downloader\ArcURLRecord.dll (ArcSoft, Inc.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File DPF: {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Linda\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Metaswitcher - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\metaswitcher@com.extensions.mattiasschlenker.de FF Extension: Distrust - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\trustme@gness.com FF Extension: Microsoft .NET Framework Assistant - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: FoxyTunes - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} FF Extension: Media Converter - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{6e764c17-863a-450f-bdd0-6772bd5aaa18} FF Extension: MidnightFoxy - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{dc961bb0-dfb2-11dc-95ff-0800200c9a66} FF Extension: Update Scanner - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{c07d1a49-9894-49ff-a594-38960ede8fb9}.xpi FF Extension: COMPUTER BILD Fox Config Helper - C:\Program Files\Mozilla Firefox\extensions\cbsf-config@com.extensions.mattiasschlenker.de FF Extension: Personal Menu - C:\Program Files\Mozilla Firefox\extensions\CompactMenuCE@Merci.chao FF Extension: Metaswitcher - C:\Program Files\Mozilla Firefox\extensions\metaswitcher@com.extensions.mattiasschlenker.de FF Extension: printpdf - C:\Program Files\Mozilla Firefox\extensions\printpdf@pavlov.net FF Extension: ColorfulTabs - C:\Program Files\Mozilla Firefox\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} FF Extension: Session Manager - C:\Program Files\Mozilla Firefox\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30} FF Extension: Site Launcher - C:\Program Files\Mozilla Firefox\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67} FF Extension: Split Browser - C:\Program Files\Mozilla Firefox\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d} FF Extension: Minimap Addon - C:\Program Files\Mozilla Firefox\extensions\{398e77b8-2304-11dc-8314-0800200c9a66} FF Extension: CoolPreviews - C:\Program Files\Mozilla Firefox\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} FF Extension: DownThemAll! - C:\Program Files\Mozilla Firefox\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} FF Extension: FoxTab - C:\Program Files\Mozilla Firefox\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} FF Extension: GooglePreview - C:\Program Files\Mozilla Firefox\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF HKLM\...\Firefox\Extensions: [{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}] - C:\Program Files\ArcSoft\Media Converter for Philips\Internet Video Downloader\Plugin_FireFox FF Extension: Internet Video Downloader - C:\Program Files\ArcSoft\Media Converter for Philips\Internet Video Downloader\Plugin_FireFox ========================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH) R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1516584 2007-04-03] (Cisco Systems, Inc.) S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010 CBE\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany) R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [7591312 2013-07-09] (DisplayLink Corp.) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation) R2 NSUService; C:\Program Files\Sony\Network Utility\NSUService.exe [299008 2008-06-27] (Sony Corporation) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [14848 2011-07-01] () S3 SOHCImp; C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe [103712 2008-05-20] (Sony Corporation) S3 SOHDms; C:\Program Files\Sony\VAIO Media plus\SOHDms.exe [353568 2008-05-20] (Sony Corporation) S3 SOHDs; C:\Program Files\Sony\VAIO Media plus\SOHDs.exe [62752 2008-05-20] (Sony Corporation) S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [73728 2008-05-22] (Sony Corporation) R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [182112 2008-07-07] (Sony Corporation) R2 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [411488 2008-06-19] (Sony Corporation) S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [337184 2008-06-11] (Sony Corporation) R3 Vcsw; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [279848 2008-06-19] (Sony Corporation) R3 VUAgent; C:\Windows\VUAgent.exe [1013808 2013-03-26] (Sony Corporation) R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [192512 2008-05-22] (Sony Corporation) S3 WPFFontCache_v0400; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [x] ==================== Drivers (Whitelisted) ==================== S2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306295 2007-04-03] (Cisco Systems, Inc.) S3 dlkmd; C:\Windows\system32\drivers\dlkmd.sys [287856 2008-08-18] (DisplayLink Corp.) S0 dlkmdldr; C:\Windows\System32\drivers\dlkmdldr.sys [13424 2008-08-18] (DisplayLink Corp.) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation) R1 MpKsl5d70b689; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{449F43A4-68F9-4093-A56F-9EFD7EC4B985}\MpKsl5d70b689.sys [40392 2014-01-01] (Microsoft Corporation) S4 RxFilter; C:\Windows\System32\DRIVERS\RxFilter.sys [50688 2006-12-02] (Sonic Solutions) R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project) S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [27936 2008-07-15] (RapidSolution Software AG) U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-01 13:26 - 2014-01-01 13:26 - 00000000 ____D C:\FRST 2014-01-01 13:19 - 2014-01-01 13:19 - 00001352 _____ C:\Windows\setupact.log 2014-01-01 13:19 - 2014-01-01 13:19 - 00000000 _____ C:\Windows\setuperr.log 2013-12-21 14:32 - 2013-12-21 14:32 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Users\Linda\AppData\Roaming\Malwarebytes 2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-21 14:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-21 14:31 - 2013-12-21 14:32 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Linda\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-20 01:12 - 2013-12-20 01:13 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-12 01:13 - 2013-12-12 01:13 - 00002482 _____ C:\Users\Linda\Documents\cc_20131212_011334.reg 2013-12-11 01:44 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 01:44 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 01:44 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 01:44 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 01:44 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 01:44 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 01:44 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 01:44 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 01:44 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 01:44 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 01:44 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 01:44 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 01:44 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 01:44 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 01:44 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 01:44 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 01:44 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 01:44 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 01:44 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 01:40 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 01:40 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 01:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 01:38 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 01:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 01:38 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 01:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 01:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 01:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 01:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 01:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 01:38 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 01:38 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys ==================== One Month Modified Files and Folders ======= 2014-01-01 13:27 - 2013-11-10 10:09 - 01617296 _____ C:\Windows\WindowsUpdate.log 2014-01-01 13:26 - 2014-01-01 13:26 - 00000000 ____D C:\FRST 2014-01-01 13:20 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-01 13:19 - 2014-01-01 13:19 - 00001352 _____ C:\Windows\setupact.log 2014-01-01 13:19 - 2014-01-01 13:19 - 00000000 _____ C:\Windows\setuperr.log 2013-12-31 19:58 - 2011-10-09 04:36 - 00010048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-31 19:58 - 2011-10-09 04:36 - 00010048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-21 21:05 - 2013-06-12 23:18 - 00000000 ____D C:\Windows\sk-sk 2013-12-21 14:32 - 2013-12-21 14:32 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Users\Linda\AppData\Roaming\Malwarebytes 2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2013-12-21 14:32 - 2013-12-21 14:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Linda\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-20 21:18 - 2012-05-11 20:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2013-12-20 01:13 - 2013-12-20 01:12 - 00000000 ____D C:\Program Files\Mozilla Firefox 2013-12-13 13:06 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache 2013-12-12 01:13 - 2013-12-12 01:13 - 00002482 _____ C:\Users\Linda\Documents\cc_20131212_011334.reg 2013-12-12 00:06 - 2011-10-09 05:44 - 01696546 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-11 01:53 - 2009-07-14 05:33 - 00499072 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 01:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE 2013-12-11 01:43 - 2013-07-23 12:45 - 00000000 ____D C:\Windows\system32\MRT 2013-12-11 01:40 - 2011-10-14 23:33 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-11 01:40 - 2009-01-15 17:09 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-09 01:42 - 2013-06-30 12:51 - 00000000 ____D C:\Users\Linda\AppData\Local\CrashDumps 2013-12-06 09:53 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared Files to move or delete: ==================== C:\Users\Linda\AppData\Roaming\desktop.ini C:\Users\Linda\COMPUTERBILD App-Center-Installation.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 00:00 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-12-2013 Ran by Linda at 2014-01-01 13:27:46 Running from \\PC\Music Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== 2007 Microsoft Office system (Version: 12.0.4518.1014 - Microsoft Corporation) 32 Bit HP CIO Components Installer (Version: 1.0.0 - Hewlett-Packard) 32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard) Activation Assistant for the 2007 Microsoft Office suites (Version: - Microsoft Corporation) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Adobe Flash Player 10 ActiveX (Version: 10.2.152.32 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (Version: 11.7.700.224 - Adobe Systems Incorporated) Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated) Amazon MP3-Downloader 1.0.18 (Version: 1.0.18 - Amazon Services LLC) AMD Accelerated Video Transcoding (Version: 12.5.100.21116 - Advanced Micro Devices, Inc.) AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.) AMD Catalyst Install Manager (Version: 8.0.877.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.71116.1554 - Advanced Micro Devices, Inc.) ArcSoft WebCam Companion 2 (Version: - ArcSoft) Ashampoo Burning Studio 2009 (Version: 8.0.4 - ashampoo GmbH & Co. KG) Ashampoo WinOptimizer 2010 CBE (Version: 6.5.0 - Ashampoo GmbH & Co. KG) ATI Catalyst Install Manager (Version: 3.0.664.0 - ATI Technologies, Inc.) Belkin Wireless Driver (Version: 1.0.0.20 - Belkin) Big Fish Games Spiel-Suite (Version: - ) BlackBerry Desktop Software 4.3 (Version: 4.3.0.17 - Research in Motion Ltd.) Browser Address Error Redirector (Version: - ) Business Contact Manager für Outlook 2007 (Version: 3.0.5828.0 - Microsoft Corporation) Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Catalyst Control Center (Version: 2012.1116.1515.27190 - Ihr Firmenname) Catalyst Control Center Core Implementation (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Graphics Full Existing (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Graphics Full New (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Graphics Light (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Graphics Previews Common (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Graphics Previews Common (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) Catalyst Control Center Graphics Previews Vista (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center InstallProxy (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) Catalyst Control Center Localization All (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) Catalyst Control Center Localization Chinese Standard (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Chinese Traditional (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Czech (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Danish (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Dutch (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Finnish (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization French (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization German (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Greek (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Hungarian (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Italian (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Japanese (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Korean (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Norwegian (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Polish (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Portuguese (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Russian (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Spanish (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Swedish (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Thai (Version: 2008.0408.2141.36952 - ATI) Catalyst Control Center Localization Turkish (Version: 2008.0408.2141.36952 - ATI) CCC Help Chinese Standard (Version: 2008.0408.2140.36952 - ATI) CCC Help Chinese Standard (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Chinese Traditional (Version: 2008.0408.2140.36952 - ATI) CCC Help Chinese Traditional (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Czech (Version: 2008.0408.2140.36952 - ATI) CCC Help Czech (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Danish (Version: 2008.0408.2140.36952 - ATI) CCC Help Danish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Dutch (Version: 2008.0408.2140.36952 - ATI) CCC Help Dutch (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help English (Version: 2008.0408.2140.36952 - ATI) CCC Help English (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Finnish (Version: 2008.0408.2140.36952 - ATI) CCC Help Finnish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help French (Version: 2008.0408.2140.36952 - ATI) CCC Help French (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help German (Version: 2008.0408.2140.36952 - ATI) CCC Help German (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Greek (Version: 2008.0408.2140.36952 - ATI) CCC Help Greek (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Hungarian (Version: 2008.0408.2140.36952 - ATI) CCC Help Hungarian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Italian (Version: 2008.0408.2140.36952 - ATI) CCC Help Italian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Japanese (Version: 2008.0408.2140.36952 - ATI) CCC Help Japanese (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Korean (Version: 2008.0408.2140.36952 - ATI) CCC Help Korean (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Norwegian (Version: 2008.0408.2140.36952 - ATI) CCC Help Norwegian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Polish (Version: 2008.0408.2140.36952 - ATI) CCC Help Polish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Portuguese (Version: 2008.0408.2140.36952 - ATI) CCC Help Portuguese (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Russian (Version: 2008.0408.2140.36952 - ATI) CCC Help Russian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Spanish (Version: 2008.0408.2140.36952 - ATI) CCC Help Spanish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Swedish (Version: 2008.0408.2140.36952 - ATI) CCC Help Swedish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Thai (Version: 2008.0408.2140.36952 - ATI) CCC Help Thai (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) CCC Help Turkish (Version: 2008.0408.2140.36952 - ATI) CCC Help Turkish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) ccc-core-static (Version: 2008.0408.2141.36952 - Ihr Firmenname) ccc-utility (Version: 2008.0408.2141.36952 - ATI) ccc-utility (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) CCleaner (remove only) (Version: - Piriform) Cisco Systems VPN Client 5.0.00.0340 (Version: 5.0.0 - Cisco Systems, Inc.) Click to Disc (Version: 1.2.00.06190 - Sony Corporation) Click to Disc (Version: 1.2.73.04270 - Sony Corporation) Click to Disc Editor (Version: 1.2.00 - Sony Corporation) Click to Disc Editor 2.0 Upgrade (Version: - ) COMPUTERBILD App-Center (Version: 1.1.11 - J3S) Content Transfer (Version: 1.0.0.07110 - Sony Corporation) CyberGhost VPN Patch 4.7.19 (Version: - CyberGhost S.R.L.) DisplayLink Core Software (Version: 7.3.49122.0 - DisplayLink Corp.) DisplayLink Graphics (Version: 7.3.49122.0 - DisplayLink Corp.) Feedback Tool (Version: 1.2.0 - Microsoft Corporation) HDAUDIO SoftV92 Data Fax Modem with SmartCP (Version: - ) ICQ6.5 (Version: 6.5 - ICQ) Java 7 Update 25 (Version: 7.0.250 - Oracle) Java Auto Updater (Version: 2.0.5.1 - Sun Microsystems, Inc.) Java(TM) 6 Update 29 (Version: 6.0.290 - Sun Microsystems, Inc.) Java(TM) 6 Update 6 (Version: 1.6.0.60 - Sun Microsystems, Inc.) Java(TM) 6 Update 7 (Version: 1.6.0.70 - Sun Microsystems, Inc.) JavaFX 2.1.1 (Version: 2.1.1 - Oracle Corporation) LightScribe 1.8.15.1 (Version: 1.8.15.1 - hxxp://www.lightscribe.com) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) Media Converter for Philips (Version: 2.5.2.230 - ArcSoft) Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2003 Web Components (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Professional Hybrid 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.1.2047.00 - Microsoft Corporation) Microsoft SQL Server Native Client (Version: 9.00.1399.06 - Microsoft Corporation) Microsoft SQL Server VSS Writer (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (Version: 9.0.21022.218 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) Music Transfer (Version: 1.2.00.17290 - Sony Corporation) Nokia Connectivity Cable Driver (Version: 6.80.5.1 - ) OpenMG Secure Module 5.1.00 (Version: 5.1.00.05200 - Sony Corporation) OpenMG Secure Module 5.4.00 (Version: 5.4.00.04020 - Sony Corporation) OpenOffice.org 3.2 (Version: 3.2.9502 - OpenOffice.org) OpenVPN 2.2.1 (Version: 2.2.1 - ) Picasa 3 (Version: 3.8 - Google, Inc.) PixiePack Codec Pack (Version: 0.10.6.0 - None) Primo (Version: 1.00.0000 - Your Company Name) Realtek High Definition Audio Driver (Version: - Realtek Semiconductor Corp.) Roxio Central Audio (Version: 3.7.0 - Roxio) Roxio Central Copy (Version: 3.7.0 - Roxio) Roxio Central Core (Version: 3.7.0 - Roxio) Roxio Central Data (Version: 3.7.0 - Roxio) Roxio Central Tools (Version: 3.7.0 - Roxio) Roxio Creator 9 XE (Version: 9.0.614 - Roxio) Roxio Drag-to-Disc (Version: 9.05 - Roxio) Roxio Easy Media Creator 10 LJ (Version: 10.1 - Roxio) Roxio Easy Media Creator Home (Version: 10.1.177 - Roxio) Roxio Media Manager (Version: 9.4.007 - Roxio) Ruby-186-26 (Version: 1.8.6-26 - rubyinstaller.rubyforge.org) Skins (Version: 2008.0408.2141.36952 - ATI) Sony Picture Utility (Version: 3.2.02.06170 - Sony Corporation) SONY VGP-UPR1 (Display Adapter) (Version: 4.5.13507.0 - Sony Corporation) SONY VGP-UPR1 (Display Adapter) Utility (Version: 1.01.0001 - Sony Corporation) Sony Video Shared Library (Version: 3.4.00 - Sony Corporation) Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0 - Adobe Systems Incorporated) SWI-Prolog (remove only) (Version: - ) Synaptics Pointing Device Driver (Version: 9.1.13.0 - Synaptics) Uninstall 1.0.0.1 (Version: - ) Unterstützung für VAIO-Präsentation (Version: 1.0.00.04240 - Sony Corporation) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.4035.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version: - Microsoft) Update for Office 2007 (KB934528) (Version: - Microsoft) Update for Office System 2007 Setup (KB929722) (Version: - Microsoft) VAIO Content Folder Setting (Version: 2.0.00.17290 - Sony Corporation) VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.2.00.06115 - Sony Corporation) VAIO Content Metadata Manager Setting (Version: 3.2.00.06062 - Sony Corporation) VAIO Content Metadata Manager Settings (Version: 3.6.0.09240 - Sony Corporation) VAIO Content Metadata XML Interface Library (Version: 3.2.00.06112 - Sony Corporation) VAIO Content Metadata XML Interface Library (Version: 3.6.0.09080 - Sony Corporation) VAIO Control Center (Version: 3.1.00.07040 - Sony Corporation) VAIO Data Restore Tool (Version: 1.0.04.01170 - Sony Corporation) VAIO DVD Menu Data Basic (Version: 1.0.00.08130 - Sony Corporation) VAIO Energie Verwaltung (Version: 3.1.00.06190 - Sony Corporation) VAIO Entertainment Platform (Version: 3.2.00.06200 - Sony Corporation) VAIO Event Service (Version: 4.1.00.07070 - Sony Corporation) VAIO Guide (Version: 2.4.00.06190 - Sony Corporation) VAIO Launcher (Version: 2.1.00.06130 - Sony Corporation) VAIO Marketing Tools (Version: - Sony Corporation) VAIO Media plus (Version: 1.1.00.05240 - Sony Corporation) VAIO Movie Story (Version: 1.3.00.06240 - Sony Corporation) VAIO Movie Story (Version: 1.5.01.05120 - Sony Corporation) VAIO Movie Story 1.5 Upgrade (Version: 1.5.01.05120 - Sony Corporation) VAIO Movie Story Template Data (Version: 1.5.01.05120 - Sony Corporation) VAIO MusicBox (Version: 2.1.00.06110 - Sony Corporation) VAIO MusicBox Sample Music (Version: 1.1.00.14140 - Sony Corporation) VAIO Original Function Setting (Version: 1.4.00.04230 - Sony Corporation) VAIO Smart Network (Version: 2.1.00.06270 - Sony Corporation) VAIO Update (Version: 6.1.1.10250 - Sony Corporation) VAIO Wallpaper Contents (Version: 1.2.00.05200 - Sony Corporation) VU5x86 (Version: 1.1.0 - Sony Corporation ) Wascana Desktop Developer, MinGW Edition 0.9.3 (Version: - Thw Wascana Project) Windows 7 Upgrade Advisor (Version: 2.0.5000.0 - Microsoft Corporation) WinDVD for VAIO (Version: 8.0-B9.513 - InterVideo Inc.) WinRAR (Version: - ) XMedia Recode 2.1.0.3 (Version: 2.1.0.3 - Sebastian Dörfler) ==================== Restore Points ========================= 16-10-2013 23:19:07 Windows Update 18-10-2013 08:30:46 Windows Update 19-10-2013 22:46:08 Windows Update 20-10-2013 21:31:18 Windows Update 21-10-2013 09:20:57 Windows Update 21-10-2013 12:56:37 Windows Update 21-10-2013 18:47:24 Windows Update 22-10-2013 22:57:24 Windows Update 23-10-2013 15:15:19 Windows Update 24-10-2013 23:48:51 Windows Update 25-10-2013 07:44:12 Windows Update 25-10-2013 08:29:21 Windows Update 26-10-2013 19:38:19 Windows Update 27-10-2013 22:50:56 Windows Update 28-10-2013 18:59:34 Windows Update 29-10-2013 13:41:11 Windows Update 30-10-2013 00:02:39 Windows Update 31-10-2013 22:43:18 Windows Update 02-11-2013 13:49:41 Windows Update 04-11-2013 12:36:04 Windows Update 04-11-2013 12:42:56 Windows Update 04-11-2013 12:50:05 Windows Update 06-11-2013 12:30:17 Windows Update 07-11-2013 09:12:06 Windows Update 09-11-2013 23:18:49 Windows Update 10-11-2013 09:10:42 Windows Update 12-11-2013 23:45:08 Windows Update 14-11-2013 00:17:42 Windows Update 14-11-2013 16:45:32 Windows Update 14-11-2013 17:12:54 Windows Update 18-11-2013 21:49:45 Windows Update 21-11-2013 22:19:30 Windows Update 21-11-2013 23:35:43 Windows Update 25-11-2013 00:33:59 Windows Update 25-11-2013 09:28:33 Windows Update 26-11-2013 14:10:01 Windows Update 27-11-2013 23:20:54 Windows Update 30-11-2013 00:50:27 Windows Update 03-12-2013 22:11:14 Windows Update 06-12-2013 08:49:40 Windows Update 09-12-2013 18:15:30 Windows Update 11-12-2013 00:39:15 Windows Update 15-12-2013 12:02:13 Windows Update 19-12-2013 23:38:03 Windows Update 24-12-2013 11:21:24 Windows Update 27-12-2013 16:21:11 Windows Update 31-12-2013 01:01:31 Windows Update ==================== Hosts content: ========================== 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {10C3A686-41F6-46F9-BDC6-9F51F2C149D2} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {252CB22A-6118-4532-AD2E-91B573A77A0F} - System32\Tasks\DSite => C:\Users\Linda\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {315F1C99-D3D4-4827-85D7-992B89A7BBE9} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-09-13] (Microsoft Corporation) Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs Task: {B1C09A4C-2045-42E0-9771-7EBD73E4C9F5} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs Task: {F41B69DD-D96E-4BAC-B8AE-D82953723939} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\Sony\VAIO Update\ShellExeProxy.exe [2012-10-26] (Sony Corporation) Task: {F9C22EEB-5300-4FF4-80FF-648FE22F844D} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation) ==================== Loaded Modules (whitelisted) ============= 2006-12-13 22:25 - 2006-12-13 22:25 - 00013312 _____ () C:\Program Files\Roxio\Virtual Drive 9\1031\DC_ShellExt.loc 2010-02-08 15:52 - 2009-12-21 09:50 - 00638768 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010 CBE\ContextHandler.dll 2009-01-17 20:13 - 2008-09-16 20:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll 2009-01-17 00:29 - 2007-03-13 16:13 - 00056056 _____ () C:\Windows\system32\DLAAPI_W.DLL 2007-07-03 16:07 - 2007-07-03 16:07 - 00044016 _____ () C:\Program Files\Common Files\Roxio Shared\DLLShared\apm.dll 2007-02-16 17:40 - 2007-02-16 17:40 - 01466368 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll 2007-02-16 17:40 - 2007-02-16 17:40 - 05521408 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll 2011-10-09 04:52 - 2011-10-09 04:52 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2013-12-20 01:12 - 2013-12-20 01:13 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2013-06-30 12:52 - 2013-06-30 12:56 - 16033160 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Linda\COWON Q5 CF.avi:TOC.WMV AlternateDataStreams: C:\Users\Linda\IAUDIO 6 CF.AVI:TOC.WMV AlternateDataStreams: C:\Users\Linda\IAUDIO U3 CF.avi:TOC.WMV AlternateDataStreams: C:\Users\Linda\Scannen001.tif:Roxio EMC Stream ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: dlkmdldr Description: dlkmdldr Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: dlkmdldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/01/2014 01:22:43 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module. The Windows Installer cannot continue. Error: (01/01/2014 01:22:40 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module. The Windows Installer cannot continue. Error: (01/01/2014 01:22:37 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module. The Windows Installer cannot continue. Error: (01/01/2014 01:22:29 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module. The Windows Installer cannot continue. Error: (01/01/2014 01:22:23 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module. The Windows Installer cannot continue. Error: (01/01/2014 01:22:00 PM) (Source: VzCdbSvc) (User: ) Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019) Error: (01/01/2014 01:20:01 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=23, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (01/01/2014 01:20:01 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (01/01/2014 01:20:01 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=18, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0 Error: (12/31/2013 09:09:19 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". System errors: ============= Error: (01/01/2014 01:22:02 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlkmdldr" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (01/01/2014 01:21:59 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Cisco Systems Inc. IPSec Driver" ist von folgendem Dienst abhängig: DNE. Dieser Dienst ist eventuell nicht installiert. Error: (01/01/2014 01:21:56 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: dlkmdldr Error: (01/01/2014 01:21:56 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "VAIO Content Folder Watcher" wurde nicht richtig gestartet. Error: (01/01/2014 01:20:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Cisco Systems Inc. IPSec Driver" ist von folgendem Dienst abhängig: DNE. Dieser Dienst ist eventuell nicht installiert. Error: (01/01/2014 01:19:19 PM) (Source: Application Popup) (User: ) Description: Treiber dlkmdldr.sys konnte nicht geladen werden. Error: (12/31/2013 07:52:04 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlkmdldr" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (12/31/2013 07:51:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Cisco Systems Inc. IPSec Driver" ist von folgendem Dienst abhängig: DNE. Dieser Dienst ist eventuell nicht installiert. Error: (12/31/2013 07:51:52 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: dlkmdldr Error: (12/31/2013 07:51:52 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "VAIO Content Folder Watcher" wurde nicht richtig gestartet. Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3039.04 MB Available physical RAM: 1753 MB Total Pagefile: 6076.36 MB Available Pagefile: 4682.85 MB Total Virtual: 2047.88 MB Available Virtual: 1876.34 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:289.98 GB) (Free:191.25 GB) NTFS ==>[Drive with boot components (obtained from BCD)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 4DB107D6) Partition 1: (Not Active) - (Size=8 GB) - (Type=27) Partition 2: (Active) - (Size=290 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
02.01.2014, 08:56 | #8 | |
/// the machine /// TB-Ausbilder | Kontosperre bei web.deZitat:
Nur ein wenig: Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Linda\AppData\Roaming\desktop.ini Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Danach ist die Kiste auch sauber
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.01.2014, 13:48 | #9 |
| Kontosperre bei web.de Hallo schrauber, hier der Inhalt vin Fixlog.txt: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-01-2014 01 Ran by Linda at 2014-01-02 13:46:56 Run:1 Running from C:\Users\Linda\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Users\Linda\AppData\Roaming\desktop.ini ***************** C:\Users\Linda\AppData\Roaming\desktop.ini => Moved successfully. ==== End of Fixlog ==== Zusatzfrage: Sind Windows Firewall und Microsoft Essentials eigentlich ausreichend als Schutz (zukünftig zusätzlich MBAM) oder hast du einen anderen Tipp? Viele Grüße Geändert von Der Schalker (02.01.2014 um 13:52 Uhr) Grund: ergänzende Frage |
03.01.2014, 12:06 | #10 |
/// the machine /// TB-Ausbilder | Kontosperre bei web.de Ich empfehle immer Emsisoft. Da war Adware, aber ne Kontensperrung kommt meist weil das Konto online gehackt wurde. Passwort auf jeden Fall ändern Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.01.2014, 21:29 | #11 |
| Kontosperre bei web.de Hallo schrauber, ich werde mir deine Tipps und Anregungen mal intensiv zu Gemüte führen. Falls es dann noch Fragen gibt, melde ich mich ggf. in einem neuen Thread. Ansonsten sage ich noch einmal vielen, vielen Dank für deine tolle Hilfe!! Viele Grüße |
04.01.2014, 15:47 | #12 |
/// the machine /// TB-Ausbilder | Kontosperre bei web.de Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Kontosperre bei web.de |
adobe, check, ergebnis, essen, firefox, flash, forum, gesperrt, java, konto, laufen, mbam, nachfrage, nichts, poste, posten, postfach, problem, reader, security, verschickt, windows 7, wlan, woche, wochen |