| |
| |||||||
Log-Analyse und Auswertung: Windows 7 stürzt immer ab und offnet Programme nichtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
10.01.2014, 22:29
| #1 |
 |  Windows 7 stürzt immer ab und offnet Programme nicht Guten Abend geschätztes Trojaner Board, ich sitze hier am CPU meiner Mutter und kann eigentlich gar nichts machen, weil entweder jeder Prozess ewig dauert, oder aber das System sendet mir bei ihren Lieblingsanwendungen (online Spiele wie City Ville...oder allgemein facebook Spiele) plug in und shockwave player Fehlermeldungen. AVG AntiVirus Free Edition 2013 scheint keine Bedrohungen zu finden.... Ich finde aber, dass auf diesem PC ein paar sonderbare Anwendungen laufen und sich permanent irgendwelche Pop ups öffnen....Massenwerbung und pop ups von allen Richtungen, wenn man bei google sucht (habe ich bei meinem eigenen CPU alles nicht). Daher möchte ich Euch höflich bitten, Euch dieses System anzuschauen-vielen Dank. Und die logs: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:50 on 10/01/2014 (AnnaLina)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2014
Ran by AnnaLina (administrator) on ANNALINA-PC on 10-01-2014 21:59:01
Running from C:\Users\AnnaLina\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Iminent) C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(veberGreat) C:\Program Files (x86)\veberGreat\updateveberGreat.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
() C:\Windows\SysWOW64\UMonit.exe
(Dropbox, Inc.) C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(JME) C:\Program Files (x86)\jmesoft\hotkey.exe
(Lenovo) C:\Program Files\Lenovo\HealthCare\HealthCare.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Iminent) C:\Program Files (x86)\Iminent\Iminent.exe
(Iminent) C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
() C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUDefragBackend64.exe
() C:\Program Files (x86)\veberGreat\bin\utilveberGreat.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoUpdateCheck.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM\...\Run: [UMonit] - C:\Windows\SysWOW64\UMonit.exe [49152 2011-05-25] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [jmekey] - C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME)
HKLM-x32\...\Run: [Healthcare] - C:\Program Files\Lenovo\HealthCare\HealthCare.exe [827392 2009-09-28] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2486296 2014-01-09] ()
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2013-11-20] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe [1074736 2013-12-02] (Iminent)
HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [884784 2013-12-02] (Iminent)
HKCU\...\Policies\Explorer: [NoInstrumentation] 1
Startup: C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
SearchScopes: HKLM-x32 - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - DefaultScope {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={A66FC6EF-7163-4E9F-8D3C-1C1D433315B2}&mid=ca1e7e7ccfb047d0a28895ceba32188b-01aac45d7a3993a6751346574c5d1edc8cd553fc&lang=de&ds=AVG&pr=fr&d=2012-07-29 21:19:07&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.com/websearch/ref=bit_bds-p12_serp_ie_us_display?ie=UTF8&tagbase=bds-p12&tbrId=v1_abb-channel-12_e642dc15f1fd454ba80d04409e419287_39_1006_20130429_AT_ie_ds_&query={searchTerms}
SearchScopes: HKCU - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Browser Guard - {02a0d829-4393-46fc-a37e-126263035883} - C:\Program Files (x86)\Browser Guard\browserguard.dll (Browser Guard)
BHO-x32: iminent Helper Object - {112BA211-334C-4A90-90EC-2AD1CDAB287C} - C:\Program Files (x86)\IminentToolbar\1.8.28.3\bh\iminent.dll (Iminent)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (SIEN)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: veberGreat - {b31866d6-c268-4c1f-a40d-d2cf874ac95c} - C:\Program Files (x86)\veberGreat\veberGreatBHO.dll (veberGreat)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - Iminent Toolbar - {1FAFD711-ABF9-4F6A-8130-5166C7371427} - C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminentTlbr.dll (Iminent)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
FireFox:
========
FF ProfilePath: C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default
FF DefaultSearchEngine: AVG Secure Search
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://www.google.at/
FF Keyword.URL: hxxp://isearch.avg.com/search?cid={A66FC6EF-7163-4E9F-8D3C-1C1D433315B2}&mid=ca1e7e7ccfb047d0a28895ceba32188b-01aac45d7a3993a6751346574c5d1edc8cd553fc&lang=de&ds=AVG&pr=fr&d=2012-07-29 21:19:07&pid=avg&sg=0&v=15.2.0.5&sap=ku&q=
FF SelectedSearchEngine: SearchTheWeb
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\AnnaLina\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\AnnaLina\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\searchplugins\iminent.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF Extension: Iminent Toolbar - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\ffxtlbr@iminent.com
FF Extension: No Name - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\staged
FF Extension: Iminent - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\webbooster@iminent.com.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.3.0.49
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\17.3.0.49
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi
FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi
FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: Wajam - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: Wajam - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "spdy": {
"servers": [ "checkout.google.com:443", "ssl.gstatic.com:443", "fonts.googleapis.com:443", "s.youtube.com:443", "securepubads.g.doubleclick.net:443", "static.doubleclick.net:443", "www.youtube.com:443", "accounts.google.com:443", "plusone.google.com:443", "googleads.g.doubleclick.net:443", "tpc.googlesyndication.com:443", "ssl.google-analytics.com:443", "toolbarqueries.google.com:443", "ad.de.doubleclick.net:443", "ad.doubleclick.net:443", "clients2.google.com:443", "lh6.googleusercontent.com:443", "partner.googleadservices.com:443", "themes.googleusercontent.com:443", "www.google.com:443", "apis.google.com:443", "www.googleadservices.com:443", "www.googletagservices.com:443", "ajax.googleapis.com:443"
CHR DefaultSearchKeyword: search.iminent.com
CHR DefaultSearchProvider: SearchTheWeb
CHR DefaultSearchURL: hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll No File
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll No File
CHR Plugin: (Windows Live\u00C2\u2122 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Iminent) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\7.51.3.1_0
CHR Extension: (Wajam) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0
CHR Extension: (Browser Guard) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfepagcelbegkpkcjgfeecmlnmkedjin\0.1_0
CHR Extension: (veberGreat) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfmnkjncbnamljngeeanamfojiaicpbo\1.0.0_0
CHR Extension: (AVG Security Toolbar) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.3.0.49_0
CHR Extension: (Google Wallet) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Iminent Chrome Toolbar) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_2
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\AnnaLina\AppData\Local\Wajam\Chrome\wajam.crx
CHR HKLM-x32\...\Chrome\Extension: [kfepagcelbegkpkcjgfeecmlnmkedjin] - C:\Program Files (x86)\Browser Guard\browserguard.crx
CHR HKLM-x32\...\Chrome\Extension: [mfmnkjncbnamljngeeanamfojiaicpbo] - C:\Program Files (x86)\veberGreat\mfmnkjncbnamljngeeanamfojiaicpbo.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\17.3.0.49\avg.crx
CHR HKLM-x32\...\Chrome\Extension: [pkhojieggfgllhllcegoffdcnmdeojgb] - C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminent.crx
CHR StartMenuInternet: Google Chrome - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2905408 2013-12-02] (Iminent)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
S2 SystemStoreService; C:\PROGRAM FILES\SOFTWAREUPDATER\SYSTEMSTORE.EXE [297984 2014-01-10] ()
R2 TuneUp.UtilitiesSvc; C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUNEUPUTILITIESSERVICE64.EXE [2099000 2013-10-30] (AVG)
R2 Update veberGreat; C:\Program Files (x86)\veberGreat\updateveberGreat.exe [65824 2013-10-23] (veberGreat)
R2 Util veberGreat; C:\Program Files (x86)\veberGreat\bin\utilveberGreat.exe [97056 2014-01-10] ()
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG)
R2 vToolbarUpdater17.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [1771544 2014-01-09] (AVG Secure Search)
==================== Drivers (Whitelisted) ====================
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [46368 2013-11-11] (AVG Technologies)
R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-08-10] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWow64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
S1 SBRE; \??\C:\windows\system32\drivers\SBREdrv.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-10 21:58 - 2014-01-10 21:59 - 00023359 _____ C:\Users\AnnaLina\Desktop\FRST.txt
2014-01-10 21:54 - 2014-01-10 21:54 - 00000000 ____D C:\FRST
2014-01-10 21:53 - 2014-01-10 21:53 - 01932166 _____ (Farbar) C:\Users\AnnaLina\Desktop\FRST64.exe
2014-01-10 21:50 - 2014-01-10 21:50 - 00000478 _____ C:\Users\AnnaLina\Desktop\defogger_disable.log
2014-01-10 21:50 - 2014-01-10 21:50 - 00000000 _____ C:\Users\AnnaLina\defogger_reenable
2014-01-10 21:49 - 2014-01-10 21:49 - 00050477 _____ C:\Users\AnnaLina\Desktop\Defogger.exe
2014-01-10 11:04 - 2014-01-10 11:04 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{9C7573C4-C4C6-404B-A71E-F0DCF155184F}
2014-01-09 16:49 - 2014-01-09 16:49 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp (1).exe
2014-01-09 16:48 - 2014-01-09 16:48 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp.exe
2014-01-09 16:09 - 2014-01-09 16:09 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{FE803940-77EB-4E30-96D0-F33BB3D702D5}
2014-01-07 10:14 - 2014-01-07 10:14 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{882D771F-0B95-4BA0-B0E5-05EEEF3701C5}
2014-01-06 15:24 - 2014-01-06 15:24 - 00671712 _____ C:\Users\AnnaLina\Downloads\TuneUp Utilities 2014 Downloader.exe
2014-01-06 01:26 - 2014-01-06 01:26 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7F70C0C8-E81E-447B-9F72-8454821953C0}
2014-01-05 11:33 - 2014-01-05 11:33 - 04959656 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupmarm_marm453041071at.exe
2014-01-04 14:16 - 2014-01-04 14:16 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{E5A7164F-11E9-4F0D-BFFD-7EDA9BB978D3}
2014-01-03 08:29 - 2014-01-03 08:29 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{6186C6ED-603D-4787-B315-29851C6EF94C}
2014-01-01 10:41 - 2014-01-01 10:42 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{2E8806CA-C8B9-4891-88A6-2F9D472D0C1F}
2013-12-29 20:24 - 2013-12-29 20:24 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{520C2B53-2560-4280-A36B-A30BDF3886B9}
2013-12-26 22:12 - 2013-12-26 22:13 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{78895226-4202-4E26-814F-22941C4A097E}
2013-12-25 14:59 - 2013-12-25 14:59 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{1A5E7AF1-5727-42B9-9F3C-E6B79DB7C2EC}
2013-12-21 20:00 - 2013-12-21 20:00 - 04436952 _____ (AVG Technologies) C:\Users\AnnaLina\Downloads\avg_isct_stb_all_2014_4259.exe
2013-12-21 19:57 - 2013-12-21 19:58 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7E2C5AF4-7148-40C0-A7FB-2649BA63686E}
2013-12-20 07:45 - 2013-12-20 07:45 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{02521F41-23F4-470A-8139-EF454D542334}
2013-12-18 18:08 - 2013-12-18 18:08 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\SoftwareUpdater
2013-12-15 12:52 - 2013-12-15 12:52 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{C3E24ECB-7226-4318-BDEC-8783BFD8A906}
2013-12-14 10:51 - 2013-12-14 10:51 - 00002762 _____ C:\windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-13 13:35 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\windows\system32\uxtuneup.dll
2013-12-13 13:35 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\windows\SysWOW64\uxtuneup.dll
2013-12-13 13:34 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\windows\system32\TURegOpt.exe
2013-12-13 13:34 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\windows\system32\authuitu.dll
2013-12-13 13:34 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\windows\SysWOW64\authuitu.dll
2013-12-13 13:30 - 2013-12-13 13:42 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28.exe
2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28 (1).exe
2013-12-13 03:55 - 2013-12-13 03:55 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{4BE1DB36-A68F-482B-9945-0B4D0BF7C8C1}
2013-12-13 00:12 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-13 00:12 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-13 00:12 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-13 00:12 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-13 00:11 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-13 00:11 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-13 00:11 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-13 00:11 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-13 00:11 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-13 00:11 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-13 00:11 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-13 00:11 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-13 00:11 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-13 00:11 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-13 00:11 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-13 00:11 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-13 00:11 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-13 00:11 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-13 00:11 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-13 00:11 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-13 00:11 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-13 00:11 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-13 00:11 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-13 00:11 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-13 00:11 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-13 00:11 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-13 00:11 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-13 00:11 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-13 00:11 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-13 00:11 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-13 00:11 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-13 00:11 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-13 00:11 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-13 00:11 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-13 00:11 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-12 06:05 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-12 06:05 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-12 06:05 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-12 06:05 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-12 06:05 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-12 06:05 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-12 06:05 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-12 06:05 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-12 06:05 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-12 06:05 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-12 06:05 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-12 06:05 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-12 06:05 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-12 06:05 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-12 06:05 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-12 06:05 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-12 06:05 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-12 06:05 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-12 06:05 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
==================== One Month Modified Files and Folders =======
2014-01-10 21:59 - 2014-01-10 21:58 - 00023359 _____ C:\Users\AnnaLina\Desktop\FRST.txt
2014-01-10 21:58 - 2009-07-14 05:45 - 00017360 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-10 21:58 - 2009-07-14 05:45 - 00017360 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-10 21:54 - 2014-01-10 21:54 - 00000000 ____D C:\FRST
2014-01-10 21:53 - 2014-01-10 21:53 - 01932166 _____ (Farbar) C:\Users\AnnaLina\Desktop\FRST64.exe
2014-01-10 21:50 - 2014-01-10 21:50 - 00000478 _____ C:\Users\AnnaLina\Desktop\defogger_disable.log
2014-01-10 21:50 - 2014-01-10 21:50 - 00000000 _____ C:\Users\AnnaLina\defogger_reenable
2014-01-10 21:50 - 2011-04-09 15:49 - 00000000 ____D C:\Users\AnnaLina
2014-01-10 21:49 - 2014-01-10 21:49 - 00050477 _____ C:\Users\AnnaLina\Desktop\Defogger.exe
2014-01-10 21:45 - 2012-01-05 21:20 - 00001132 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA.job
2014-01-10 21:42 - 2012-07-29 20:14 - 00000000 ____D C:\ProgramData\MFAData
2014-01-10 21:39 - 2013-08-10 12:36 - 00004184 _____ C:\windows\System32\Tasks\Software Updater Ui
2014-01-10 21:39 - 2013-08-10 12:35 - 00004196 _____ C:\windows\System32\Tasks\Software Updater
2014-01-10 21:39 - 2011-06-09 17:53 - 00001114 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-10 21:38 - 2013-08-10 11:13 - 00000000 ____D C:\ProgramData\Spyware Terminator
2014-01-10 21:38 - 2012-07-29 21:46 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-10 21:38 - 2010-09-03 21:19 - 01603966 _____ C:\windows\WindowsUpdate.log
2014-01-10 11:04 - 2014-01-10 11:04 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{9C7573C4-C4C6-404B-A71E-F0DCF155184F}
2014-01-10 10:11 - 2012-07-30 18:11 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Dropbox
2014-01-10 10:10 - 2011-06-09 17:53 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-10 10:08 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-10 10:08 - 2009-07-14 05:51 - 00108243 _____ C:\windows\setupact.log
2014-01-09 16:49 - 2014-01-09 16:49 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp (1).exe
2014-01-09 16:48 - 2014-01-09 16:48 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp.exe
2014-01-09 16:41 - 2011-04-24 15:23 - 00003954 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{7D6B12DA-386D-421D-8385-F28D8F8F95FC}
2014-01-09 16:09 - 2014-01-09 16:09 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{FE803940-77EB-4E30-96D0-F33BB3D702D5}
2014-01-09 12:24 - 2012-07-29 20:19 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2014-01-09 06:36 - 2012-07-30 18:12 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-09 06:36 - 2011-04-09 15:49 - 00000000 ___RD C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-07 10:14 - 2014-01-07 10:14 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{882D771F-0B95-4BA0-B0E5-05EEEF3701C5}
2014-01-06 15:24 - 2014-01-06 15:24 - 00671712 _____ C:\Users\AnnaLina\Downloads\TuneUp Utilities 2014 Downloader.exe
2014-01-06 01:45 - 2012-01-05 21:20 - 00001080 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core.job
2014-01-06 01:26 - 2014-01-06 01:26 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7F70C0C8-E81E-447B-9F72-8454821953C0}
2014-01-05 11:33 - 2014-01-05 11:33 - 04959656 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupmarm_marm453041071at.exe
2014-01-04 14:16 - 2014-01-04 14:16 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{E5A7164F-11E9-4F0D-BFFD-7EDA9BB978D3}
2014-01-03 08:29 - 2014-01-03 08:29 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{6186C6ED-603D-4787-B315-29851C6EF94C}
2014-01-01 10:42 - 2014-01-01 10:41 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{2E8806CA-C8B9-4891-88A6-2F9D472D0C1F}
2013-12-29 20:24 - 2013-12-29 20:24 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{520C2B53-2560-4280-A36B-A30BDF3886B9}
2013-12-26 22:13 - 2013-12-26 22:12 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{78895226-4202-4E26-814F-22941C4A097E}
2013-12-26 22:10 - 2013-08-10 12:35 - 00000000 ____D C:\Program Files\SoftwareUpdater
2013-12-26 22:10 - 2009-07-26 05:47 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-26 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-26 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\registration
2013-12-25 14:59 - 2013-12-25 14:59 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{1A5E7AF1-5727-42B9-9F3C-E6B79DB7C2EC}
2013-12-25 08:49 - 2011-06-09 17:36 - 00196608 _____ C:\windows\system32\Ikeext.etl
2013-12-25 08:31 - 2009-07-14 04:20 - 00000000 ____D C:\windows\tracing
2013-12-21 20:00 - 2013-12-21 20:00 - 04436952 _____ (AVG Technologies) C:\Users\AnnaLina\Downloads\avg_isct_stb_all_2014_4259.exe
2013-12-21 19:58 - 2013-12-21 19:57 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7E2C5AF4-7148-40C0-A7FB-2649BA63686E}
2013-12-20 07:45 - 2013-12-20 07:45 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{02521F41-23F4-470A-8139-EF454D542334}
2013-12-18 18:08 - 2013-12-18 18:08 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\SoftwareUpdater
2013-12-15 12:52 - 2013-12-15 12:52 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{C3E24ECB-7226-4318-BDEC-8783BFD8A906}
2013-12-15 04:29 - 2013-08-15 02:02 - 00000000 ____D C:\windows\system32\MRT
2013-12-15 04:27 - 2011-05-03 14:06 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-15 03:51 - 2009-09-14 07:03 - 00654602 _____ C:\windows\system32\perfh007.dat
2013-12-15 03:51 - 2009-09-14 07:03 - 00130216 _____ C:\windows\system32\perfc007.dat
2013-12-15 03:51 - 2009-07-14 06:13 - 01500294 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-15 03:32 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-14 10:51 - 2013-12-14 10:51 - 00002762 _____ C:\windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2013-12-13 13:44 - 2012-12-16 08:58 - 00003694 _____ C:\windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2013-12-13 13:42 - 2013-12-13 13:30 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-12-13 13:42 - 2012-12-16 08:49 - 00000000 __SHD C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2013-12-13 13:36 - 2012-12-16 08:49 - 00000000 ____D C:\ProgramData\AVG
2013-12-13 13:33 - 2012-12-16 08:50 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\AVG
2013-12-13 13:33 - 2012-07-29 20:16 - 00000000 ____D C:\Program Files (x86)\AVG
2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28.exe
2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28 (1).exe
2013-12-13 03:55 - 2013-12-13 03:55 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{4BE1DB36-A68F-482B-9945-0B4D0BF7C8C1}
2013-12-13 03:36 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-12-13 03:35 - 2009-07-14 05:45 - 00283104 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-11 13:39 - 2012-07-29 21:46 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 13:39 - 2012-07-29 21:46 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 13:39 - 2012-07-29 21:46 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
Files to move or delete:
====================
C:\ProgramData\flashax10.exe
C:\Users\Public\AlexaNSISPlugin.512.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-09 07:13
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2014
Ran by AnnaLina at 2014-01-10 21:59:34
Running from C:\Users\AnnaLina\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2013 (Disabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
==================== Installed Programs ======================
7 Wonders - Treasures of Seven (x32 Version: 1.1.0.0 - MumboJumbo)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122 - Adobe Systems, Inc.)
ATI Catalyst Install Manager (Version: 3.0.765.0 - ATI Technologies, Inc.)
AVG 2013 (Version: 13.0.3462 - AVG Technologies) Hidden
AVG 2013 (Version: 13.0.3658 - AVG Technologies) Hidden
AVG 2013 (Version: 2013.0.3462 - AVG Technologies)
AVG PC TuneUp 2014 (de-DE) (x32 Version: 14.0.1001.229 - AVG) Hidden
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG)
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG) Hidden
AVG Security Toolbar (x32 Version: 17.3.0.49 - AVG Technologies)
Browser Guard (x32 Version: - )
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0302.2233.40412 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0302.2233.40412 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help English (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help French (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help German (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0302.2233.40412 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0302.2233.40412 - ATI) Hidden
Cradle of Persia (x32 Version: - cerasus.media GmbH)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Foxit Reader (x32 Version: 5.3.1.606 - Foxit Corporation)
Free Driver Scout (Version: 1.0.1.0 - Covus Freemium) Hidden
Free Driver Scout (x32 Version: 1.0.1.0 - Covus Freemium)
Genesys USB Mass Storage Device (x32 Version: 1.0.0.0 - Genesys Logic)
Genesys USB Mass Storage Device (x32 Version: 4.0.2.1 - Genesys Logic)
Google Chrome (HKCU Version: 31.0.1650.63 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Iminent (x32 Version: 6.46.1.0 - Iminent) <==== ATTENTION
Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION
Iminent Toolbar on IE and Chrome (x32 Version: 1.8.28.3 - IminentToolbar) <==== ATTENTION
IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan)
Java 7 Update 9 (x32 Version: 7.0.90 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 33 (x32 Version: 6.0.330 - Oracle)
Jewel Master (x32 Version: - cerasus.media GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Codec Pack 9.1.0 (Full) (x32 Version: 9.1.0 - )
Lenovo Healthcare Software (x32 Version: 3.0.0.090928 - Lenovo)
Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.)
Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.) Hidden
Lenovo Rescue System (Version: 3.0.1029 - CyberLink Corp.) Hidden
Lenovo Rescue System (x32 Version: 3.0.1029 - CyberLink Corp.)
Lenovo Software Instruction (x32 Version: 1.0.0.090907 - Lenovo)
Lenovo Treiber- und Anwendungsinstallation (x32 Version: 5.1.0.1126 - Lenovo)
Logitech Vid HD (x32 Version: 7.2 (7248) - Logitech Inc..)
Logitech Webcam Software (x32 Version: 2.0 - Logitech Inc.)
LVT (x32 Version: 4.1.1.0930 - Lenovo)
LWS Facebook (x32 Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (x32 Version: 13.50.854.0 - Logitech) Hidden
LWS Help_main (x32 Version: 13.50.862.0 - Logitech) Hidden
LWS Launcher (x32 Version: 13.50.859.0 - Logitech) Hidden
LWS Motion Detection (x32 Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (x32 Version: 13.50.861.0 - Logitech) Hidden
LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (x32 Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (x32 Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden
LXH-JME2207FN Hotkey Driver (x32 Version: 5.1.0804 - Lenovo)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Notepad++ (x32 Version: 6.1.5 - )
OpenAL (x32 Version: - )
Paint.NET v3.5.10 (Version: 3.60.0 - dotPDN LLC)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6954 - Realtek Semiconductor Corp.)
Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.)
Spyware Terminator 2012 (x32 Version: 3.0.0.82 - Crawler.com)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 7 (x32 Version: 7.0.13989 - TeamViewer)
TeraCopy 2.27 (Version: - Code Sector)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
veberGreat 1.0.0 (Version: 1.0.0 - veberGreat)
Verbatim GREEN BUTTON 1.49 (x32 Version: - Verbatim)
VIS (x32 Version: - )
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1 - AVG Technologies)
Wajam (x32 Version: 2.05 - Wajam) <==== ATTENTION
Winamp (x32 Version: 5.63 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Restore Points =========================
15-12-2013 03:25:59 Windows Update
16-12-2013 00:56:23 Windows-Sicherung
23-12-2013 20:12:10 Geplanter Prüfpunkt
26-12-2013 21:05:54 Wiederherstellungsvorgang
03-01-2014 09:03:05 Geplanter Prüfpunkt
10-01-2014 13:25:49 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {01C96E35-6BBF-40E8-8AFB-93C51222348C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2013-10-30] (AVG)
Task: {30A0BCEB-D49A-4C6C-9C3E-21761C997A7D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {32D4BEAF-FE1C-4A50-B3DB-4F44A55DC6F6} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {3640EC75-92F2-4724-A428-A90428E1FAEF} - System32\Tasks\{E7C2D354-2351-44FE-88E6-FF73EDE2D2ED} => Chrome.exe
Task: {6BB4E4CB-3BB2-4077-917F-2B8A20CFC619} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1924030428-2953040618-1691018352-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {72B084AB-0756-4D03-AC24-8BB1F2C0E435} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-18] ()
Task: {7333841E-6FA3-4873-9104-FE1B95AE97DD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.)
Task: {745BF243-CB3A-42C8-9943-54AE03526E7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-09] (Google Inc.)
Task: {91806EE6-A668-4ABA-9CAA-2DE5D0FFBC26} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-09] (Google Inc.)
Task: {AFBFDAE6-46F8-4B7E-A92E-58A09ED0585B} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1924030428-2953040618-1691018352-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {B57117C4-58D1-4C1F-A3DF-1CE76914C341} - System32\Tasks\Google Updater and Installer => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.)
Task: {B67B78CA-B88D-4DC6-9C04-CCA52E6F25AC} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-18] ()
Task: {BF736B66-82CE-4B51-999B-F1A04A3CF9C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {C8C057C3-E14F-4DA8-AEFB-12DA1DEF8830} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe [2013-11-21] ()
Task: {EE091551-2CC2-4D72-8F47-0F24710CCFF4} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {F11653A6-FD22-43F1-A0E5-A0F2AB3F8E16} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core.job => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA.job => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-10-30 11:27 - 2013-10-30 11:27 - 00757048 _____ () C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\avgrepliba.dll
2012-07-30 17:55 - 2011-10-26 16:41 - 00318976 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2009-11-03 16:03 - 2009-11-03 16:03 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-09-03 21:20 - 2010-09-03 21:20 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-07-30 17:55 - 2011-10-26 16:41 - 00126464 _____ () C:\Program Files\TeraCopy\TeraCopy64.dll
2014-01-09 12:24 - 2014-01-09 12:23 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\log4cplusU.dll
2012-01-16 20:06 - 2012-01-16 20:06 - 00577621 _____ () C:\Program Files (x86)\Spyware Terminator\sqlite3.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\libcef.dll
2010-09-03 21:21 - 2009-07-16 08:20 - 00032768 _____ () C:\Program Files (x86)\jmesoft\Keyhook.dll
2010-09-03 21:21 - 2007-12-31 09:27 - 00007168 _____ () C:\Program Files (x86)\jmesoft\VistaVolume.dll
2010-09-03 21:40 - 2008-09-27 07:39 - 00045056 _____ () C:\Program Files\Lenovo\HealthCare\HOOK.dll
2010-09-03 21:40 - 2009-09-09 08:24 - 00057344 _____ () C:\Program Files\Lenovo\HealthCare\de-de\de-de.dll
2009-06-03 19:59 - 2009-06-03 19:59 - 00619816 ____N () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll
2009-06-03 19:59 - 2009-06-03 19:59 - 00013096 ____N () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2013-12-09 22:48 - 2013-12-09 22:48 - 00332800 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_2\ctb.dll
2013-12-06 05:50 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 05:50 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 05:50 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 05:50 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 05:50 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 05:50 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: SBRE
Description: SBRE
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SBRE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/06/2014 11:15:48 PM) (Source: Chrome) (User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\97e76d56-7115-4221-acb1-fc67fa8a397d.dmp
Error: (01/06/2014 03:07:40 PM) (Source: Chrome) (User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\40efbb0a-9e36-403d-9d96-a52982336d9c.dmp
Error: (01/06/2014 01:36:13 PM) (Source: Chrome) (User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\48871265-a33c-4fb8-bf08-00a45d2287da.dmp
Error: (01/05/2014 07:00:03 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "I:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (01/05/2014 02:46:27 PM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm ToolbarU Application (Official) wurde wegen dieses Fehlers geschlossen.
Programm: ToolbarU Application (Official)
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (01/05/2014 02:46:27 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: ToolbarUpdater.exe, Version: 17.2.0.38, Zeitstempel: 0x529dd18e
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000096
Fehleroffset: 0x00048665
ID des fehlerhaften Prozesses: 0xb00
Startzeit der fehlerhaften Anwendung: 0xToolbarUpdater.exe0
Pfad der fehlerhaften Anwendung: ToolbarUpdater.exe1
Pfad des fehlerhaften Moduls: ToolbarUpdater.exe2
Berichtskennung: ToolbarUpdater.exe3
Error: (01/05/2014 01:08:10 PM) (Source: Chrome) (User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\729ef2ef-bfae-4633-b809-397d6930539e.dmp
Error: (01/05/2014 08:41:25 AM) (Source: Chrome) (User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\4d6a40b8-b6aa-4a1c-a019-2cbf78650b2c.dmp
Error: (12/30/2013 10:05:37 PM) (Source: Chrome) (User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\e58b9fea-d280-41f5-819d-b343173a4566.dmp
Error: (12/29/2013 07:00:03 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "I:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
System errors:
=============
Error: (01/10/2014 10:09:11 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
SBRE
Error: (01/10/2014 10:09:03 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (01/10/2014 01:13:37 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (01/09/2014 08:01:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Netman erreicht.
Error: (01/09/2014 10:18:12 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UMVPFSrv erreicht.
Error: (01/09/2014 08:57:41 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UMVPFSrv erreicht.
Error: (01/09/2014 06:34:58 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
SBRE
Error: (01/09/2014 06:34:53 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (01/08/2014 11:47:33 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (01/08/2014 09:48:26 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UMVPFSrv erreicht.
Microsoft Office Sessions:
=========================
Error: (01/06/2014 11:15:48 PM) (Source: Chrome)(User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\97e76d56-7115-4221-acb1-fc67fa8a397d.dmp
Error: (01/06/2014 03:07:40 PM) (Source: Chrome)(User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\40efbb0a-9e36-403d-9d96-a52982336d9c.dmp
Error: (01/06/2014 01:36:13 PM) (Source: Chrome)(User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\48871265-a33c-4fb8-bf08-00a45d2287da.dmp
Error: (01/05/2014 07:00:03 PM) (Source: Windows Backup)(User: )
Description: I:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (01/05/2014 02:46:27 PM) (Source: Application Error)(User: )
Description: ToolbarU Application (Official)000000000
Error: (01/05/2014 02:46:27 PM) (Source: Application Error)(User: )
Description: ToolbarUpdater.exe17.2.0.38529dd18eole32.dll6.1.7601.175144ce7b96fc000009600048665b0001cf0a15b5f09729C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exeC:\windows\syswow64\ole32.dllc5da5b14-760f-11e3-80c4-4487fcd6f178
Error: (01/05/2014 01:08:10 PM) (Source: Chrome)(User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\729ef2ef-bfae-4633-b809-397d6930539e.dmp
Error: (01/05/2014 08:41:25 AM) (Source: Chrome)(User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\4d6a40b8-b6aa-4a1c-a019-2cbf78650b2c.dmp
Error: (12/30/2013 10:05:37 PM) (Source: Chrome)(User: AnnaLina-PC)
Description: Chrome has encountered a fatal error.
ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\e58b9fea-d280-41f5-819d-b343173a4566.dmp
Error: (12/29/2013 07:00:03 PM) (Source: Windows Backup)(User: )
Description: I:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
==================== Memory info ===========================
Percentage of memory in use: 88%
Total physical RAM: 2047.24 MB
Available physical RAM: 232.09 MB
Total Pagefile: 4318.48 MB
Available Pagefile: 1179.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:440.59 GB) (Free:392.36 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: B3F25E7C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25 GB) - (Type=12)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-10 22:13:40
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST3500418AS rev.CC66 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\AnnaLina\AppData\Local\Temp\pxdyqkow.sys
---- User code sections - GMER 2.1 ----
.text C:\PROGRAM FILES (X86)\AVG SECURE SEARCH\VPROT.EXE[648] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076881465 2 bytes [88, 76]
.text C:\PROGRAM FILES (X86)\AVG SECURE SEARCH\VPROT.EXE[648] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000768814bb 2 bytes [88, 76]
.text ... * 2
.text C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUAUTOUPDATECHECK.EXE[6512] C:\windows\syswow64\kernel32.dll!CreateThread + 28 0000000075e93491 4 bytes {CALL 0xffffffffeb4a1e6c}
.text C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUAUTOUPDATECHECK.EXE[6512] C:\windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000076881465 2 bytes [88, 76]
.text C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUAUTOUPDATECHECK.EXE[6512] C:\windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000768814bb 2 bytes [88, 76]
.text ... * 2
---- Registry - GMER 2.1 ----
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\AnnaLina\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe 1
---- EOF - GMER 2.1 ----
|
|
10.01.2014, 23:17
| #2 | |
| /// the machine /// TB-Ausbilder    | Windows 7 stürzt immer ab und offnet Programme nicht hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
11.01.2014, 23:18
| #3 |
| | Windows 7 stürzt immer ab und offnet Programme nicht Guten Abend Schrauber,
__________________danke erstmal und hier das gewünschte log: Code:
ATTFilter ComboFix 14-01-08.03 - AnnaLina 11.01.2014 23:01:20.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.43.1031.18.2047.806 [GMT 1:00]
ausgeführt von:: c:\users\AnnaLina\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
FW: AVG Internet Security 2013 *Disabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Browser Guard\brOWserguard.dll
c:\program files (x86)\IminentToolbar\1.8.28.3\bh\imINent.dll
c:\program files (x86)\IminentToolbar\1.8.28.3\imINenttlbr.dll
c:\users\Public\AlexaNSISPlugin.512.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-12-11 bis 2014-01-11 ))))))))))))))))))))))))))))))
.
.
2014-01-11 22:10 . 2014-01-11 22:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-10 20:54 . 2014-01-10 20:54 -------- d-----w- C:\FRST
2013-12-18 17:08 . 2013-12-18 17:08 -------- d-----w- c:\users\AnnaLina\AppData\Local\SoftwareUpdater
2013-12-13 12:35 . 2013-10-30 10:27 42808 ----a-w- c:\windows\system32\uxtuneup.dll
2013-12-13 12:35 . 2013-10-30 10:27 35640 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2013-12-13 12:34 . 2013-10-30 10:27 40248 ----a-w- c:\windows\system32\TURegOpt.exe
2013-12-13 12:34 . 2013-10-30 10:27 29496 ----a-w- c:\windows\system32\authuitu.dll
2013-12-13 12:34 . 2013-10-30 10:27 25400 ----a-w- c:\windows\SysWow64\authuitu.dll
2013-12-13 12:30 . 2013-12-13 12:42 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2013-12-12 23:12 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-12 23:12 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-12 23:12 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-12 23:12 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2013-12-12 23:12 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-15 03:27 . 2011-05-03 13:06 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-12-11 12:39 . 2012-07-29 20:46 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 12:39 . 2012-07-29 20:46 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-03 23:05 . 2013-12-03 23:05 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-03 23:05 . 2013-12-03 23:05 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-03 23:05 . 2013-12-03 23:05 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-03 23:05 . 2013-12-03 23:05 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-03 23:05 . 2013-12-03 23:05 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-03 23:05 . 2013-12-03 23:05 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-03 23:05 . 2013-12-03 23:05 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-03 23:05 . 2013-12-03 23:05 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-03 23:05 . 2013-12-03 23:05 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-03 23:05 . 2013-12-03 23:05 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-12-03 23:05 . 2013-12-03 23:05 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-03 23:05 . 2013-12-03 23:05 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-03 23:05 . 2013-12-03 23:05 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-12-03 23:05 . 2013-12-03 23:05 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-03 23:05 . 2013-12-03 23:05 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-03 23:05 . 2013-12-03 23:05 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-03 23:05 . 2013-12-03 23:05 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-12-03 23:05 . 2013-12-03 23:05 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-03 23:05 . 2013-12-03 23:05 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-03 23:05 . 2013-12-03 23:05 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-12-03 23:05 . 2013-12-03 23:05 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-03 23:05 . 2013-12-03 23:05 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-03 23:05 . 2013-12-03 23:05 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-03 23:05 . 2013-12-03 23:05 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-03 23:05 . 2013-12-03 23:05 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-03 23:05 . 2013-12-03 23:05 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-03 23:05 . 2013-12-03 23:05 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-03 23:05 . 2013-12-03 23:05 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-03 23:05 . 2013-12-03 23:05 195584 ----a-w- c:\windows\system32\msrating.dll
2013-12-03 23:05 . 2013-12-03 23:05 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-03 23:05 . 2013-12-03 23:05 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-03 23:05 . 2013-12-03 23:05 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-03 23:05 . 2013-12-03 23:05 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-03 23:05 . 2013-12-03 23:05 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-03 23:05 . 2013-12-03 23:05 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-03 23:05 . 2013-12-03 23:05 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-03 23:05 . 2013-12-03 23:05 413696 ----a-w- c:\windows\system32\html.iec
2013-12-03 23:05 . 2013-12-03 23:05 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 23:05 . 2013-12-03 23:05 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-03 23:05 . 2013-12-03 23:05 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-03 23:05 . 2013-12-03 23:05 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-03 23:05 . 2013-12-03 23:05 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-03 23:05 . 2013-12-03 23:05 235520 ----a-w- c:\windows\system32\url.dll
2013-12-03 23:05 . 2013-12-03 23:05 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-03 23:05 . 2013-12-03 23:05 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-03 23:05 . 2013-12-03 23:05 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-12-03 23:05 . 2013-12-03 23:05 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-03 23:05 . 2013-12-03 23:05 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-03 23:05 . 2013-12-03 23:05 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-03 23:05 . 2013-12-03 23:05 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-03 23:05 . 2013-12-03 23:05 101376 ----a-w- c:\windows\system32\inseng.dll
2013-12-03 23:05 . 2013-12-03 23:05 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-12-03 23:05 . 2013-12-03 23:05 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-03 23:05 . 2013-12-03 23:05 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-03 23:05 . 2013-12-03 23:05 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-03 23:05 . 2013-12-03 23:05 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-03 23:05 . 2013-12-03 23:05 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-03 23:05 . 2013-12-03 23:05 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-03 23:05 . 2013-12-03 23:05 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-25 00:48 . 2013-11-25 00:48 246072 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys
2013-11-23 18:26 . 2013-12-12 05:05 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 05:05 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-12 02:23 . 2013-12-12 05:05 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-12 05:05 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-11-11 06:31 . 2012-07-29 19:19 46368 ----a-w- c:\windows\system32\drivers\avgtpx64.sys
2013-10-30 02:32 . 2013-12-12 05:05 335360 ----a-w- c:\windows\system32\msieftp.dll
2013-10-30 02:19 . 2013-12-12 05:05 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2013-10-30 01:24 . 2013-12-12 05:05 3155968 ----a-w- c:\windows\system32\win32k.sys
2013-10-23 00:05 . 2013-10-23 00:05 45880 ----a-w- c:\windows\system32\drivers\avgrkx64.sys
2013-10-19 02:18 . 2013-12-12 05:05 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-10-19 01:36 . 2013-12-12 05:05 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-10-14 17:00 . 2013-12-03 23:08 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2014-01-09 11:23 3349528 ----a-w- c:\program files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{b31866d6-c268-4c1f-a40d-d2cf874ac95c}]
2013-10-23 19:03 249632 ----a-w- c:\program files (x86)\veberGreat\veberGreatBHO.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll" [2014-01-09 3349528]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-03-02 98304]
"jmekey"="c:\program files (x86)\jmesoft\hotkey.exe" [2009-07-16 114688]
"Healthcare"="c:\program files\Lenovo\HealthCare\HealthCare.exe" [2009-09-28 827392]
"CLMLServer"="c:\program files (x86)\Lenovo\Power2Go\CLMLSvc.exe" [2009-06-03 103720]
"UpdateP2GoShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2014-01-09 2486296]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-11-11 205336]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-11-20 4411952]
"Iminent"="c:\program files (x86)\Iminent\Iminent.exe" [2013-12-02 1074736]
"IminentMessenger"="c:\program files (x86)\Iminent\Iminent.Messengers.exe" [2013-12-02 884784]
.
c:\users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys;c:\windows\SYSNATIVE\drivers\SBREdrv.sys [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SystemStoreService;System Store;c:\program files\SOFTWAREUPDATER\SYSTEMSTORE.EXE -displayname System Store -servicename SystemStoreService;c:\program files\SOFTWAREUPDATER\SYSTEMSTORE.EXE -displayname System Store -servicename SystemStoreService [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x]
S2 SProtection;SProtection;c:\program files (x86)\Common Files\Umbrella\umbrella.exe;c:\program files (x86)\Common Files\Umbrella\umbrella.exe [x]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x]
S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TUNEUP\TUNEUPUTILITIESSERVICE64.EXE;c:\program files (x86)\AVG\AVG PC TUNEUP\TUNEUPUTILITIESSERVICE64.EXE [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S2 Update veberGreat;Update veberGreat;c:\program files (x86)\veberGreat\updateveberGreat.exe;c:\program files (x86)\veberGreat\updateveberGreat.exe [x]
S2 Util veberGreat;Util veberGreat;c:\program files (x86)\veberGreat\bin\utilveberGreat.exe;c:\program files (x86)\veberGreat\bin\utilveberGreat.exe [x]
S2 vToolbarUpdater17.3.0;vToolbarUpdater17.3.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [x]
S2 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver;c:\windows\system32\drivers\DDCDrv.sys;c:\windows\SYSNATIVE\drivers\DDCDrv.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 GeneStor;Genesys Logic Storage Driver;c:\windows\system32\DRIVERS\GeneStor.sys;c:\windows\SYSNATIVE\DRIVERS\GeneStor.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Webcam C310(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TUNEUP\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TUNEUP\TuneUpUtilitiesDriver64.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-29 12:39]
.
2014-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-09 16:53]
.
2014-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-09 16:53]
.
2014-01-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core.job
- c:\users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-05 23:21]
.
2014-01-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA.job
- c:\users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-05 23:21]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\AnnaLina\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2013-04-03 2777736]
"SpywareTerminatorUpdater"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2013-04-03 3684488]
"UMonit"="c:\windows\SysWOW64\UMonit.exe" [2011-05-25 49152]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{02a0d829-4393-46fc-a37e-126263035883} - c:\program files (x86)\Browser Guard\browserguard.dll
BHO-{112BA211-334C-4A90-90EC-2AD1CDAB287C} - c:\program files (x86)\IminentToolbar\1.8.28.3\bh\iminent.dll
Toolbar-Locked - (no file)
Toolbar-{1FAFD711-ABF9-4F6A-8130-5166C7371427} - c:\program files (x86)\IminentToolbar\1.8.28.3\iminentTlbr.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1924030428-2953040618-1691018352-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1924030428-2953040618-1691018352-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-01-11 23:13:25
ComboFix-quarantined-files.txt 2014-01-11 22:13
.
Vor Suchlauf: 10 Verzeichnis(se), 421.428.604.928 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 421.132.734.464 Bytes frei
.
- - End Of File - - 9E6571964591E00A5FB03B38A41FCF8F
A36C5E4F47E84449FF07ED3517B43A31
|
|
12.01.2014, 09:15
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7 stürzt immer ab und offnet Programme nicht Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
14.01.2014, 18:37
| #5 |
| | Windows 7 stürzt immer ab und offnet Programme nicht Hallo Schrauber, zweiter Anlauf dieser Antwort, wollte die elends langen files gerade wie üblich verschicken-das geht anscheinend nicht  - weil zu gross...also bitteschon, habe nun alle 4 logs in eine Datei gezipped-hoffe, das ist ok so?  Dankeschön. |
|
15.01.2014, 10:14
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7 stürzt immer ab und offnet Programme nicht Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Windows 7 stürzt immer ab und offnet Programme nicht |
|
15.01.2014, 18:19
| #7 |
| | Windows 7 stürzt immer ab und offnet Programme nicht Guten Abend Schrauber, vielen Dank für den Hinweis wegen der Riesenlogs. Der Eset scan hat sich etwa 3 Stundenlang ausgeführt und sich dann bei halbem Balken fertig gestellt. Log kann ich keines finden-trotz der Anleitung. Im Eset Folder befinden sich nur 3 Dateien. Code:
ATTFilter Results of screen317's Security Check version 0.99.78 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` AVG AntiVirus Free Edition 2013 Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Spyware Terminator 2012 Malwarebytes Anti-Malware Version 1.75.0.1300 AVG PC TuneUp 2014 AVG PC TuneUp 2014 (de-DE) Java(TM) 6 Update 33 Java 7 Update 9 Java version out of Date! Adobe Flash Player 11.9.900.170 Adobe Reader 10.1.8 Adobe Reader out of Date! Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` AVG avgwdsvc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 01
Ran by AnnaLina (administrator) on ANNALINA-PC on 15-01-2014 17:58:15
Running from C:\Users\AnnaLina\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
() C:\Windows\SysWOW64\UMonit.exe
(Dropbox, Inc.) C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(JME) C:\Program Files (x86)\jmesoft\hotkey.exe
(Lenovo) C:\Program Files\Lenovo\HealthCare\HealthCare.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoUpdateCheck.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe
(Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM\...\Run: [UMonit] - C:\windows\SysWOW64\UMonit.exe [49152 2011-05-25] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [jmekey] - C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME)
HKLM-x32\...\Run: [Healthcare] - C:\Program Files\Lenovo\HealthCare\HealthCare.exe [827392 2009-09-28] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2013-11-20] (AVG Technologies CZ, s.r.o.)
HKCU\...\Policies\Explorer: [NoInstrumentation] 1
Startup: C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Browser Guard - {02a0d829-4393-46fc-a37e-126263035883} - C:\Program Files (x86)\Browser Guard\browserguard.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
FireFox:
========
FF ProfilePath: C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default
FF Homepage: hxxp://www.google.at/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\AnnaLina\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\AnnaLina\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Extension: No Name - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\staged [2013-12-09]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-30]
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi
FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi [2013-08-27]
Chrome:
=======
CHR HomePage:
CHR RestoreOnStartup: "spdy": {
"servers": [ "checkout.google.com:443", "ssl.gstatic.com:443", "fonts.googleapis.com:443", "s.youtube.com:443", "securepubads.g.doubleclick.net:443", "static.doubleclick.net:443", "www.youtube.com:443", "accounts.google.com:443", "plusone.google.com:443", "googleads.g.doubleclick.net:443", "tpc.googlesyndication.com:443", "ssl.google-analytics.com:443", "toolbarqueries.google.com:443", "ad.de.doubleclick.net:443", "ad.doubleclick.net:443", "clients2.google.com:443", "lh6.googleusercontent.com:443", "partner.googleadservices.com:443", "themes.googleusercontent.com:443", "www.google.com:443", "apis.google.com:443", "www.googleadservices.com:443", "www.googletagservices.com:443", "ajax.googleapis.com:443"
CHR DefaultSearchKeyword: search.iminent.com
CHR DefaultSearchProvider: SearchTheWeb
CHR DefaultSearchURL: hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll No File
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll No File
CHR Plugin: (Windows Live\u00C2\u2122 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-04-11]
CHR Extension: (Google Search) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-03-28]
CHR Extension: (Browser Guard) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfepagcelbegkpkcjgfeecmlnmkedjin\0.1_0 [2013-12-09]
CHR Extension: (Google Wallet) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-21]
CHR Extension: (Gmail) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 [2012-11-10]
CHR HKLM-x32\...\Chrome\Extension: [kfepagcelbegkpkcjgfeecmlnmkedjin] - C:\Program Files (x86)\Browser Guard\browserguard.crx [2013-08-27]
CHR HKLM-x32\...\Chrome\Extension: [mfmnkjncbnamljngeeanamfojiaicpbo] - C:\Program Files (x86)\veberGreat\mfmnkjncbnamljngeeanamfojiaicpbo.crx [2013-08-27]
CHR StartMenuInternet: Google Chrome - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
R2 TuneUp.UtilitiesSvc; C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUNEUPUTILITIESSERVICE64.EXE [2099000 2013-10-30] (AVG)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG)
==================== Drivers (Whitelisted) ====================
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [46368 2013-11-11] (AVG Technologies)
R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-08-10] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S1 SBRE; \??\C:\windows\system32\drivers\SBREdrv.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-15 17:57 - 2014-01-15 17:57 - 00001034 _____ C:\Users\AnnaLina\Desktop\checkup.txt
2014-01-15 17:53 - 2014-01-15 17:53 - 00987410 _____ C:\Users\AnnaLina\Desktop\SecurityCheck.exe
2014-01-15 15:27 - 2014-01-15 15:27 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-15 15:26 - 2014-01-15 15:26 - 02347384 _____ (ESET) C:\Users\AnnaLina\Downloads\esetsmartinstaller_enu.exe
2014-01-15 15:26 - 2014-01-15 15:26 - 02347384 _____ (ESET) C:\Users\AnnaLina\Desktop\esetsmartinstaller_enu (1).exe
2014-01-14 18:35 - 2014-01-14 18:36 - 00031894 _____ C:\Users\AnnaLina\Downloads\Desktop.zip
2014-01-14 18:33 - 2014-01-14 18:33 - 00031894 _____ C:\Users\AnnaLina\Desktop\Desktop.zip
2014-01-14 18:30 - 2014-01-14 18:30 - 01110476 _____ C:\Users\AnnaLina\Desktop\7z920.exe
2014-01-14 18:30 - 2014-01-14 18:30 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-14 18:00 - 2014-01-15 17:58 - 00000000 ____D C:\Users\AnnaLina\Desktop\FRST-OlderVersion
2014-01-14 17:54 - 2014-01-14 17:54 - 00043794 _____ C:\Users\AnnaLina\Desktop\JRT.txt
2014-01-14 17:46 - 2014-01-14 17:46 - 01037068 _____ (Thisisu) C:\Users\AnnaLina\Desktop\JRT.exe
2014-01-14 17:46 - 2014-01-14 17:46 - 00000000 ____D C:\windows\ERUNT
2014-01-14 17:41 - 2014-01-14 17:41 - 00025377 _____ C:\Users\AnnaLina\Desktop\AdwCleaner[S0].txt
2014-01-14 17:35 - 2014-01-14 17:37 - 00000000 ____D C:\AdwCleaner
2014-01-14 17:34 - 2014-01-14 17:34 - 01236282 _____ C:\Users\AnnaLina\Desktop\adwcleaner.exe
2014-01-14 17:06 - 2014-01-14 17:06 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Malwarebytes
2014-01-14 17:06 - 2014-01-14 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-14 17:06 - 2014-01-14 17:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-14 17:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-14 17:04 - 2014-01-14 17:04 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\AnnaLina\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-14 17:03 - 2014-01-14 17:04 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\AnnaLina\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-11 23:15 - 2014-01-11 23:15 - 00028607 _____ C:\Users\AnnaLina\Desktop\Combofix.txt
2014-01-11 23:13 - 2014-01-11 23:13 - 00028607 _____ C:\ComboFix.txt
2014-01-11 22:59 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2014-01-11 22:59 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2014-01-11 22:59 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-01-11 22:59 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-01-11 22:59 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-01-11 22:59 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2014-01-11 22:59 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2014-01-11 22:59 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2014-01-11 22:58 - 2014-01-11 23:13 - 00000000 ____D C:\Qoobox
2014-01-11 22:57 - 2014-01-11 23:12 - 00000000 ____D C:\windows\erdnt
2014-01-11 22:50 - 2014-01-11 22:55 - 05162489 ____R (Swearware) C:\Users\AnnaLina\Desktop\ComboFix.exe
2014-01-10 22:13 - 2014-01-10 22:13 - 00002213 _____ C:\Users\AnnaLina\Desktop\Gmer.txt
2014-01-10 22:04 - 2014-01-10 22:04 - 00377856 _____ C:\Users\AnnaLina\Desktop\gmer_2.1.19163.exe
2014-01-10 21:59 - 2014-01-10 22:00 - 00032186 _____ C:\Users\AnnaLina\Desktop\Addition.txt
2014-01-10 21:58 - 2014-01-15 17:58 - 00016886 _____ C:\Users\AnnaLina\Desktop\FRST.txt
2014-01-10 21:54 - 2014-01-15 17:58 - 00000000 ____D C:\FRST
2014-01-10 21:53 - 2014-01-15 17:58 - 02076160 _____ (Farbar) C:\Users\AnnaLina\Desktop\FRST64.exe
2014-01-10 21:50 - 2014-01-10 21:50 - 00000478 _____ C:\Users\AnnaLina\Desktop\defogger_disable.log
2014-01-10 21:50 - 2014-01-10 21:50 - 00000000 _____ C:\Users\AnnaLina\defogger_reenable
2014-01-10 21:49 - 2014-01-10 21:49 - 00050477 _____ C:\Users\AnnaLina\Desktop\Defogger.exe
2014-01-09 16:49 - 2014-01-09 16:49 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp (1).exe
2014-01-09 16:48 - 2014-01-09 16:48 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp.exe
2014-01-05 11:33 - 2014-01-05 11:33 - 04959656 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupmarm_marm453041071at.exe
2013-12-21 20:00 - 2013-12-21 20:00 - 04436952 _____ (AVG Technologies) C:\Users\AnnaLina\Downloads\avg_isct_stb_all_2014_4259.exe
==================== One Month Modified Files and Folders =======
2014-01-15 17:58 - 2014-01-14 18:00 - 00000000 ____D C:\Users\AnnaLina\Desktop\FRST-OlderVersion
2014-01-15 17:58 - 2014-01-10 21:58 - 00016886 _____ C:\Users\AnnaLina\Desktop\FRST.txt
2014-01-15 17:58 - 2014-01-10 21:54 - 00000000 ____D C:\FRST
2014-01-15 17:58 - 2014-01-10 21:53 - 02076160 _____ (Farbar) C:\Users\AnnaLina\Desktop\FRST64.exe
2014-01-15 17:57 - 2014-01-15 17:57 - 00001034 _____ C:\Users\AnnaLina\Desktop\checkup.txt
2014-01-15 17:57 - 2012-07-30 17:55 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Notepad++
2014-01-15 17:53 - 2014-01-15 17:53 - 00987410 _____ C:\Users\AnnaLina\Desktop\SecurityCheck.exe
2014-01-15 17:45 - 2012-01-05 21:20 - 00001132 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA.job
2014-01-15 17:30 - 2012-07-29 21:46 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-15 17:16 - 2010-09-03 21:19 - 01825348 _____ C:\windows\WindowsUpdate.log
2014-01-15 17:09 - 2011-06-09 17:53 - 00001114 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-15 15:27 - 2014-01-15 15:27 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-15 15:26 - 2014-01-15 15:26 - 02347384 _____ (ESET) C:\Users\AnnaLina\Downloads\esetsmartinstaller_enu.exe
2014-01-15 15:26 - 2014-01-15 15:26 - 02347384 _____ (ESET) C:\Users\AnnaLina\Desktop\esetsmartinstaller_enu (1).exe
2014-01-15 14:04 - 2011-04-24 15:23 - 00003954 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{7D6B12DA-386D-421D-8385-F28D8F8F95FC}
2014-01-15 14:03 - 2012-07-29 20:14 - 00000000 ____D C:\ProgramData\MFAData
2014-01-15 13:58 - 2009-07-14 05:45 - 00017360 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-15 13:58 - 2009-07-14 05:45 - 00017360 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-15 13:51 - 2013-08-10 11:13 - 00000000 ____D C:\ProgramData\Spyware Terminator
2014-01-15 13:51 - 2012-07-30 18:11 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Dropbox
2014-01-15 13:51 - 2011-06-09 17:53 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-15 13:50 - 2013-12-09 22:48 - 00000000 ____D C:\Program Files (x86)\Browser Guard
2014-01-15 13:50 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-15 13:50 - 2009-07-14 05:51 - 00109083 _____ C:\windows\setupact.log
2014-01-14 18:36 - 2014-01-14 18:35 - 00031894 _____ C:\Users\AnnaLina\Downloads\Desktop.zip
2014-01-14 18:33 - 2014-01-14 18:33 - 00031894 _____ C:\Users\AnnaLina\Desktop\Desktop.zip
2014-01-14 18:30 - 2014-01-14 18:30 - 01110476 _____ C:\Users\AnnaLina\Desktop\7z920.exe
2014-01-14 18:30 - 2014-01-14 18:30 - 00000000 ____D C:\Program Files (x86)\7-Zip
2014-01-14 17:54 - 2014-01-14 17:54 - 00043794 _____ C:\Users\AnnaLina\Desktop\JRT.txt
2014-01-14 17:46 - 2014-01-14 17:46 - 01037068 _____ (Thisisu) C:\Users\AnnaLina\Desktop\JRT.exe
2014-01-14 17:46 - 2014-01-14 17:46 - 00000000 ____D C:\windows\ERUNT
2014-01-14 17:41 - 2014-01-14 17:41 - 00025377 _____ C:\Users\AnnaLina\Desktop\AdwCleaner[S0].txt
2014-01-14 17:37 - 2014-01-14 17:35 - 00000000 ____D C:\AdwCleaner
2014-01-14 17:34 - 2014-01-14 17:34 - 01236282 _____ C:\Users\AnnaLina\Desktop\adwcleaner.exe
2014-01-14 17:30 - 2010-09-03 21:53 - 00919694 _____ C:\windows\PFRO.log
2014-01-14 17:06 - 2014-01-14 17:06 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Malwarebytes
2014-01-14 17:06 - 2014-01-14 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-14 17:06 - 2014-01-14 17:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-14 17:04 - 2014-01-14 17:04 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\AnnaLina\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-14 17:04 - 2014-01-14 17:03 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\AnnaLina\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-11 23:15 - 2014-01-11 23:15 - 00028607 _____ C:\Users\AnnaLina\Desktop\Combofix.txt
2014-01-11 23:13 - 2014-01-11 23:13 - 00028607 _____ C:\ComboFix.txt
2014-01-11 23:13 - 2014-01-11 22:58 - 00000000 ____D C:\Qoobox
2014-01-11 23:12 - 2014-01-11 22:57 - 00000000 ____D C:\windows\erdnt
2014-01-11 23:10 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2014-01-11 22:55 - 2014-01-11 22:50 - 05162489 ____R (Swearware) C:\Users\AnnaLina\Desktop\ComboFix.exe
2014-01-10 22:13 - 2014-01-10 22:13 - 00002213 _____ C:\Users\AnnaLina\Desktop\Gmer.txt
2014-01-10 22:04 - 2014-01-10 22:04 - 00377856 _____ C:\Users\AnnaLina\Desktop\gmer_2.1.19163.exe
2014-01-10 22:00 - 2014-01-10 21:59 - 00032186 _____ C:\Users\AnnaLina\Desktop\Addition.txt
2014-01-10 21:50 - 2014-01-10 21:50 - 00000478 _____ C:\Users\AnnaLina\Desktop\defogger_disable.log
2014-01-10 21:50 - 2014-01-10 21:50 - 00000000 _____ C:\Users\AnnaLina\defogger_reenable
2014-01-10 21:50 - 2011-04-09 15:49 - 00000000 ____D C:\Users\AnnaLina
2014-01-10 21:49 - 2014-01-10 21:49 - 00050477 _____ C:\Users\AnnaLina\Desktop\Defogger.exe
2014-01-09 16:49 - 2014-01-09 16:49 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp (1).exe
2014-01-09 16:48 - 2014-01-09 16:48 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp.exe
2014-01-09 06:36 - 2012-07-30 18:12 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-09 06:36 - 2011-04-09 15:49 - 00000000 ___RD C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-06 01:45 - 2012-01-05 21:20 - 00001080 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core.job
2014-01-05 11:33 - 2014-01-05 11:33 - 04959656 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupmarm_marm453041071at.exe
2013-12-26 22:10 - 2009-07-26 05:47 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-26 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-26 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\registration
2013-12-25 08:49 - 2011-06-09 17:36 - 00196608 _____ C:\windows\system32\Ikeext.etl
2013-12-25 08:31 - 2009-07-14 04:20 - 00000000 ____D C:\windows\tracing
2013-12-21 20:00 - 2013-12-21 20:00 - 04436952 _____ (AVG Technologies) C:\Users\AnnaLina\Downloads\avg_isct_stb_all_2014_4259.exe
Files to move or delete:
====================
C:\ProgramData\flashax10.exe
Some content of TEMP:
====================
C:\Users\AnnaLina\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-09 07:13
==================== End Of Log ============================
--- --- --- Ausserdem macht sich immer wieder ein Täfelchen für eine gefordertes update des AVG Tune ups am Bildschirm breit-ist das sicher und kann das installiert werden? Ich werde das nächste Mal am Freitag an diesem Computer sein-ich lasse das Eset tool absichtlich nicht nochmal rennen, ich warte auf Deine Anweisung. Vielen Dank bis hierhin und bis Freitag.  |
|
16.01.2014, 09:18
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7 stürzt immer ab und offnet Programme nicht Java und Adobe updaten. Deinstalliere am Besten den AVG Krempel. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.01.2014, 15:40
| #9 |
| | Windows 7 stürzt immer ab und offnet Programme nicht Lieber Schrauber, vielen Dank, alles erledigt. Alles funktioniert. Danke.  |
|
19.01.2014, 10:07
| #10 |
| /// the machine /// TB-Ausbilder | Windows 7 stürzt immer ab und offnet Programme nicht Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7 stürzt immer ab und offnet Programme nicht |
| antivirus, avg security toolbar, branding, browser, cid, computer, error, festplatte, flash player, freemium, google, googleads.g.doubleclick.net, helper, home, homepage, minidump, object, plug in, plug-in, pop ups, realtek, scan, secure search, security, software, spyware, svchost.exe, system, trojaner, trojaner board, vista, vtoolbarupdater, wajam, werbung, windows |
Linear-Darstellung
