![]() |
|
Log-Analyse und Auswertung: Windows 7 stürzt immer ab und offnet Programme nichtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Windows 7 stürzt immer ab und offnet Programme nicht Guten Abend geschätztes Trojaner Board, ich sitze hier am CPU meiner Mutter und kann eigentlich gar nichts machen, weil entweder jeder Prozess ewig dauert, oder aber das System sendet mir bei ihren Lieblingsanwendungen (online Spiele wie City Ville...oder allgemein facebook Spiele) plug in und shockwave player Fehlermeldungen. AVG AntiVirus Free Edition 2013 scheint keine Bedrohungen zu finden.... Ich finde aber, dass auf diesem PC ein paar sonderbare Anwendungen laufen und sich permanent irgendwelche Pop ups öffnen....Massenwerbung und pop ups von allen Richtungen, wenn man bei google sucht (habe ich bei meinem eigenen CPU alles nicht). Daher möchte ich Euch höflich bitten, Euch dieses System anzuschauen-vielen Dank. Und die logs: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 21:50 on 10/01/2014 (AnnaLina) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2014 Ran by AnnaLina (administrator) on ANNALINA-PC on 10-01-2014 21:59:01 Running from C:\Users\AnnaLina\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe (AMD) C:\Windows\System32\atiesrxx.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (AMD) C:\Windows\System32\atieclxx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Iminent) C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (veberGreat) C:\Program Files (x86)\veberGreat\updateveberGreat.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe () C:\Windows\SysWOW64\UMonit.exe (Dropbox, Inc.) C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe (JME) C:\Program Files (x86)\jmesoft\hotkey.exe (Lenovo) C:\Program Files\Lenovo\HealthCare\HealthCare.exe (CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe () C:\Program Files (x86)\AVG Secure Search\vprot.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe (Iminent) C:\Program Files (x86)\Iminent\Iminent.exe (Iminent) C:\Program Files (x86)\Iminent\Iminent.Messengers.exe () C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUDefragBackend64.exe () C:\Program Files (x86)\veberGreat\bin\utilveberGreat.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoUpdateCheck.exe (Google Inc.) C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com) HKLM\...\Run: [UMonit] - C:\Windows\SysWOW64\UMonit.exe [49152 2011-05-25] () HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-02] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [jmekey] - C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME) HKLM-x32\...\Run: [Healthcare] - C:\Program Files\Lenovo\HealthCare\HealthCare.exe [827392 2009-09-28] (Lenovo) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink) HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2486296 2014-01-09] () HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2013-11-20] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe [1074736 2013-12-02] (Iminent) HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [884784 2013-12-02] (Iminent) HKCU\...\Policies\Explorer: [NoInstrumentation] 1 Startup: C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM-x32 - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms} SearchScopes: HKCU - DefaultScope {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms} SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={A66FC6EF-7163-4E9F-8D3C-1C1D433315B2}&mid=ca1e7e7ccfb047d0a28895ceba32188b-01aac45d7a3993a6751346574c5d1edc8cd553fc&lang=de&ds=AVG&pr=fr&d=2012-07-29 21:19:07&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.com/websearch/ref=bit_bds-p12_serp_ie_us_display?ie=UTF8&tagbase=bds-p12&tbrId=v1_abb-channel-12_e642dc15f1fd454ba80d04409e419287_39_1006_20130429_AT_ie_ds_&query={searchTerms} SearchScopes: HKCU - {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms} BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Browser Guard - {02a0d829-4393-46fc-a37e-126263035883} - C:\Program Files (x86)\Browser Guard\browserguard.dll (Browser Guard) BHO-x32: iminent Helper Object - {112BA211-334C-4A90-90EC-2AD1CDAB287C} - C:\Program Files (x86)\IminentToolbar\1.8.28.3\bh\iminent.dll (Iminent) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll (AVG Secure Search) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (SIEN) BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam) BHO-x32: veberGreat - {b31866d6-c268-4c1f-a40d-d2cf874ac95c} - C:\Program Files (x86)\veberGreat\veberGreatBHO.dll (veberGreat) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll (AVG Secure Search) Toolbar: HKLM-x32 - Iminent Toolbar - {1FAFD711-ABF9-4F6A-8130-5166C7371427} - C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminentTlbr.dll (Iminent) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll (AVG Secure Search) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 FireFox: ======== FF ProfilePath: C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default FF DefaultSearchEngine: AVG Secure Search FF SelectedSearchEngine: AVG Secure Search FF Homepage: hxxp://www.google.at/ FF Keyword.URL: hxxp://isearch.avg.com/search?cid={A66FC6EF-7163-4E9F-8D3C-1C1D433315B2}&mid=ca1e7e7ccfb047d0a28895ceba32188b-01aac45d7a3993a6751346574c5d1edc8cd553fc&lang=de&ds=AVG&pr=fr&d=2012-07-29 21:19:07&pid=avg&sg=0&v=15.2.0.5&sap=ku&q= FF SelectedSearchEngine: SearchTheWeb FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll (AVG Technologies) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\AnnaLina\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\AnnaLina\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\searchplugins\iminent.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml FF Extension: Iminent Toolbar - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\ffxtlbr@iminent.com FF Extension: No Name - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\staged FF Extension: Iminent - C:\Users\AnnaLina\AppData\Roaming\Mozilla\Firefox\Profiles\kvdll5p0.default\Extensions\webbooster@iminent.com.xpi FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.3.0.49 FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\17.3.0.49 FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi FF Extension: Wajam - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi FF Extension: Wajam - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi Chrome: ======= CHR HomePage: CHR RestoreOnStartup: "spdy": { "servers": [ "checkout.google.com:443", "ssl.gstatic.com:443", "fonts.googleapis.com:443", "s.youtube.com:443", "securepubads.g.doubleclick.net:443", "static.doubleclick.net:443", "www.youtube.com:443", "accounts.google.com:443", "plusone.google.com:443", "googleads.g.doubleclick.net:443", "tpc.googlesyndication.com:443", "ssl.google-analytics.com:443", "toolbarqueries.google.com:443", "ad.de.doubleclick.net:443", "ad.doubleclick.net:443", "clients2.google.com:443", "lh6.googleusercontent.com:443", "partner.googleadservices.com:443", "themes.googleusercontent.com:443", "www.google.com:443", "apis.google.com:443", "www.googleadservices.com:443", "www.googletagservices.com:443", "ajax.googleapis.com:443" CHR DefaultSearchKeyword: search.iminent.com CHR DefaultSearchProvider: SearchTheWeb CHR DefaultSearchURL: hxxp://search.iminent.com/?appId=AF3EB721-DD58-4FBD-B7C5-9BCEB0DA3A1C&ref=toolbox&q={searchTerms} CHR DefaultNewTabURL: CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll No File CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll No File CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll No File CHR Plugin: (Windows Live\u00C2\u2122 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Extension: (YouTube) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Iminent) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl\7.51.3.1_0 CHR Extension: (Wajam) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0 CHR Extension: (Browser Guard) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfepagcelbegkpkcjgfeecmlnmkedjin\0.1_0 CHR Extension: (veberGreat) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfmnkjncbnamljngeeanamfojiaicpbo\1.0.0_0 CHR Extension: (AVG Security Toolbar) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.3.0.49_0 CHR Extension: (Google Wallet) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Gmail) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR Extension: (Iminent Chrome Toolbar) - C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_2 CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\AnnaLina\AppData\Local\Wajam\Chrome\wajam.crx CHR HKLM-x32\...\Chrome\Extension: [kfepagcelbegkpkcjgfeecmlnmkedjin] - C:\Program Files (x86)\Browser Guard\browserguard.crx CHR HKLM-x32\...\Chrome\Extension: [mfmnkjncbnamljngeeanamfojiaicpbo] - C:\Program Files (x86)\veberGreat\mfmnkjncbnamljngeeanamfojiaicpbo.crx CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\17.3.0.49\avg.crx CHR HKLM-x32\...\Chrome\Extension: [pkhojieggfgllhllcegoffdcnmdeojgb] - C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminent.crx CHR StartMenuInternet: Google Chrome - C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.) R2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2905408 2013-12-02] (Iminent) R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com) S2 SystemStoreService; C:\PROGRAM FILES\SOFTWAREUPDATER\SYSTEMSTORE.EXE [297984 2014-01-10] () R2 TuneUp.UtilitiesSvc; C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUNEUPUTILITIESSERVICE64.EXE [2099000 2013-10-30] (AVG) R2 Update veberGreat; C:\Program Files (x86)\veberGreat\updateveberGreat.exe [65824 2013-10-23] (veberGreat) R2 Util veberGreat; C:\Program Files (x86)\veberGreat\bin\utilveberGreat.exe [97056 2014-01-10] () R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-10-30] (AVG) R2 vToolbarUpdater17.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [1771544 2014-01-09] (AVG Secure Search) ==================== Drivers (Whitelisted) ==================== R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.) R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [46368 2013-11-11] (AVG Technologies) R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic) S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation ) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-08-10] (Windows (R) Win 7 DDK provider) R3 TuneUpUtilitiesDrv; C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software) R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.) R2 WinI2C-DDC; C:\windows\SysWow64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.) S1 SBRE; \??\C:\windows\system32\drivers\SBREdrv.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-10 21:58 - 2014-01-10 21:59 - 00023359 _____ C:\Users\AnnaLina\Desktop\FRST.txt 2014-01-10 21:54 - 2014-01-10 21:54 - 00000000 ____D C:\FRST 2014-01-10 21:53 - 2014-01-10 21:53 - 01932166 _____ (Farbar) C:\Users\AnnaLina\Desktop\FRST64.exe 2014-01-10 21:50 - 2014-01-10 21:50 - 00000478 _____ C:\Users\AnnaLina\Desktop\defogger_disable.log 2014-01-10 21:50 - 2014-01-10 21:50 - 00000000 _____ C:\Users\AnnaLina\defogger_reenable 2014-01-10 21:49 - 2014-01-10 21:49 - 00050477 _____ C:\Users\AnnaLina\Desktop\Defogger.exe 2014-01-10 11:04 - 2014-01-10 11:04 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{9C7573C4-C4C6-404B-A71E-F0DCF155184F} 2014-01-09 16:49 - 2014-01-09 16:49 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp (1).exe 2014-01-09 16:48 - 2014-01-09 16:48 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp.exe 2014-01-09 16:09 - 2014-01-09 16:09 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{FE803940-77EB-4E30-96D0-F33BB3D702D5} 2014-01-07 10:14 - 2014-01-07 10:14 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{882D771F-0B95-4BA0-B0E5-05EEEF3701C5} 2014-01-06 15:24 - 2014-01-06 15:24 - 00671712 _____ C:\Users\AnnaLina\Downloads\TuneUp Utilities 2014 Downloader.exe 2014-01-06 01:26 - 2014-01-06 01:26 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7F70C0C8-E81E-447B-9F72-8454821953C0} 2014-01-05 11:33 - 2014-01-05 11:33 - 04959656 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupmarm_marm453041071at.exe 2014-01-04 14:16 - 2014-01-04 14:16 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{E5A7164F-11E9-4F0D-BFFD-7EDA9BB978D3} 2014-01-03 08:29 - 2014-01-03 08:29 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{6186C6ED-603D-4787-B315-29851C6EF94C} 2014-01-01 10:41 - 2014-01-01 10:42 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{2E8806CA-C8B9-4891-88A6-2F9D472D0C1F} 2013-12-29 20:24 - 2013-12-29 20:24 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{520C2B53-2560-4280-A36B-A30BDF3886B9} 2013-12-26 22:12 - 2013-12-26 22:13 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{78895226-4202-4E26-814F-22941C4A097E} 2013-12-25 14:59 - 2013-12-25 14:59 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{1A5E7AF1-5727-42B9-9F3C-E6B79DB7C2EC} 2013-12-21 20:00 - 2013-12-21 20:00 - 04436952 _____ (AVG Technologies) C:\Users\AnnaLina\Downloads\avg_isct_stb_all_2014_4259.exe 2013-12-21 19:57 - 2013-12-21 19:58 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7E2C5AF4-7148-40C0-A7FB-2649BA63686E} 2013-12-20 07:45 - 2013-12-20 07:45 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{02521F41-23F4-470A-8139-EF454D542334} 2013-12-18 18:08 - 2013-12-18 18:08 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\SoftwareUpdater 2013-12-15 12:52 - 2013-12-15 12:52 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{C3E24ECB-7226-4318-BDEC-8783BFD8A906} 2013-12-14 10:51 - 2013-12-14 10:51 - 00002762 _____ C:\windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-13 13:35 - 2013-10-30 11:27 - 00042808 _____ (AVG) C:\windows\system32\uxtuneup.dll 2013-12-13 13:35 - 2013-10-30 11:27 - 00035640 _____ (AVG) C:\windows\SysWOW64\uxtuneup.dll 2013-12-13 13:34 - 2013-10-30 11:27 - 00040248 _____ (AVG) C:\windows\system32\TURegOpt.exe 2013-12-13 13:34 - 2013-10-30 11:27 - 00029496 _____ (AVG) C:\windows\system32\authuitu.dll 2013-12-13 13:34 - 2013-10-30 11:27 - 00025400 _____ (AVG) C:\windows\SysWOW64\authuitu.dll 2013-12-13 13:30 - 2013-12-13 13:42 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28.exe 2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28 (1).exe 2013-12-13 03:55 - 2013-12-13 03:55 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{4BE1DB36-A68F-482B-9945-0B4D0BF7C8C1} 2013-12-13 00:12 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll 2013-12-13 00:12 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL 2013-12-13 00:12 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL 2013-12-13 00:12 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll 2013-12-13 00:11 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-12-13 00:11 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-12-13 00:11 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2013-12-13 00:11 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-12-13 00:11 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-12-13 00:11 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2013-12-13 00:11 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-12-13 00:11 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-12-13 00:11 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-12-13 00:11 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-12-13 00:11 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2013-12-13 00:11 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2013-12-13 00:11 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2013-12-13 00:11 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2013-12-13 00:11 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-12-13 00:11 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-12-13 00:11 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-12-13 00:11 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-12-13 00:11 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2013-12-13 00:11 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2013-12-13 00:11 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-12-13 00:11 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2013-12-13 00:11 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-12-13 00:11 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2013-12-13 00:11 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-12-13 00:11 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-12-13 00:11 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-12-13 00:11 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2013-12-13 00:11 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2013-12-13 00:11 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-12-13 00:11 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-12-12 06:05 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll 2013-12-12 06:05 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll 2013-12-12 06:05 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2013-12-12 06:05 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2013-12-12 06:05 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll 2013-12-12 06:05 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll 2013-12-12 06:05 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2013-12-12 06:05 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll 2013-12-12 06:05 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll 2013-12-12 06:05 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx 2013-12-12 06:05 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll 2013-12-12 06:05 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx 2013-12-12 06:05 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll 2013-12-12 06:05 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe 2013-12-12 06:05 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe 2013-12-12 06:05 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe 2013-12-12 06:05 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe 2013-12-12 06:05 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys 2013-12-12 06:05 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys ==================== One Month Modified Files and Folders ======= 2014-01-10 21:59 - 2014-01-10 21:58 - 00023359 _____ C:\Users\AnnaLina\Desktop\FRST.txt 2014-01-10 21:58 - 2009-07-14 05:45 - 00017360 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-10 21:58 - 2009-07-14 05:45 - 00017360 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-10 21:54 - 2014-01-10 21:54 - 00000000 ____D C:\FRST 2014-01-10 21:53 - 2014-01-10 21:53 - 01932166 _____ (Farbar) C:\Users\AnnaLina\Desktop\FRST64.exe 2014-01-10 21:50 - 2014-01-10 21:50 - 00000478 _____ C:\Users\AnnaLina\Desktop\defogger_disable.log 2014-01-10 21:50 - 2014-01-10 21:50 - 00000000 _____ C:\Users\AnnaLina\defogger_reenable 2014-01-10 21:50 - 2011-04-09 15:49 - 00000000 ____D C:\Users\AnnaLina 2014-01-10 21:49 - 2014-01-10 21:49 - 00050477 _____ C:\Users\AnnaLina\Desktop\Defogger.exe 2014-01-10 21:45 - 2012-01-05 21:20 - 00001132 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA.job 2014-01-10 21:42 - 2012-07-29 20:14 - 00000000 ____D C:\ProgramData\MFAData 2014-01-10 21:39 - 2013-08-10 12:36 - 00004184 _____ C:\windows\System32\Tasks\Software Updater Ui 2014-01-10 21:39 - 2013-08-10 12:35 - 00004196 _____ C:\windows\System32\Tasks\Software Updater 2014-01-10 21:39 - 2011-06-09 17:53 - 00001114 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-10 21:38 - 2013-08-10 11:13 - 00000000 ____D C:\ProgramData\Spyware Terminator 2014-01-10 21:38 - 2012-07-29 21:46 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2014-01-10 21:38 - 2010-09-03 21:19 - 01603966 _____ C:\windows\WindowsUpdate.log 2014-01-10 11:04 - 2014-01-10 11:04 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{9C7573C4-C4C6-404B-A71E-F0DCF155184F} 2014-01-10 10:11 - 2012-07-30 18:11 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Dropbox 2014-01-10 10:10 - 2011-06-09 17:53 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-10 10:08 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2014-01-10 10:08 - 2009-07-14 05:51 - 00108243 _____ C:\windows\setupact.log 2014-01-09 16:49 - 2014-01-09 16:49 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp (1).exe 2014-01-09 16:48 - 2014-01-09 16:48 - 05027720 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupapnnew_apnnew2_1049999_at_bp.exe 2014-01-09 16:41 - 2011-04-24 15:23 - 00003954 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{7D6B12DA-386D-421D-8385-F28D8F8F95FC} 2014-01-09 16:09 - 2014-01-09 16:09 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{FE803940-77EB-4E30-96D0-F33BB3D702D5} 2014-01-09 12:24 - 2012-07-29 20:19 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search 2014-01-09 06:36 - 2012-07-30 18:12 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-09 06:36 - 2011-04-09 15:49 - 00000000 ___RD C:\Users\AnnaLina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-07 10:14 - 2014-01-07 10:14 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{882D771F-0B95-4BA0-B0E5-05EEEF3701C5} 2014-01-06 15:24 - 2014-01-06 15:24 - 00671712 _____ C:\Users\AnnaLina\Downloads\TuneUp Utilities 2014 Downloader.exe 2014-01-06 01:45 - 2012-01-05 21:20 - 00001080 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core.job 2014-01-06 01:26 - 2014-01-06 01:26 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7F70C0C8-E81E-447B-9F72-8454821953C0} 2014-01-05 11:33 - 2014-01-05 11:33 - 04959656 _____ (Systweak Inc ) C:\Users\AnnaLina\Downloads\rcpsetupmarm_marm453041071at.exe 2014-01-04 14:16 - 2014-01-04 14:16 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{E5A7164F-11E9-4F0D-BFFD-7EDA9BB978D3} 2014-01-03 08:29 - 2014-01-03 08:29 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{6186C6ED-603D-4787-B315-29851C6EF94C} 2014-01-01 10:42 - 2014-01-01 10:41 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{2E8806CA-C8B9-4891-88A6-2F9D472D0C1F} 2013-12-29 20:24 - 2013-12-29 20:24 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{520C2B53-2560-4280-A36B-A30BDF3886B9} 2013-12-26 22:13 - 2013-12-26 22:12 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{78895226-4202-4E26-814F-22941C4A097E} 2013-12-26 22:10 - 2013-08-10 12:35 - 00000000 ____D C:\Program Files\SoftwareUpdater 2013-12-26 22:10 - 2009-07-26 05:47 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-12-26 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF 2013-12-26 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\registration 2013-12-25 14:59 - 2013-12-25 14:59 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{1A5E7AF1-5727-42B9-9F3C-E6B79DB7C2EC} 2013-12-25 08:49 - 2011-06-09 17:36 - 00196608 _____ C:\windows\system32\Ikeext.etl 2013-12-25 08:31 - 2009-07-14 04:20 - 00000000 ____D C:\windows\tracing 2013-12-21 20:00 - 2013-12-21 20:00 - 04436952 _____ (AVG Technologies) C:\Users\AnnaLina\Downloads\avg_isct_stb_all_2014_4259.exe 2013-12-21 19:58 - 2013-12-21 19:57 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{7E2C5AF4-7148-40C0-A7FB-2649BA63686E} 2013-12-20 07:45 - 2013-12-20 07:45 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{02521F41-23F4-470A-8139-EF454D542334} 2013-12-18 18:08 - 2013-12-18 18:08 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\SoftwareUpdater 2013-12-15 12:52 - 2013-12-15 12:52 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{C3E24ECB-7226-4318-BDEC-8783BFD8A906} 2013-12-15 04:29 - 2013-08-15 02:02 - 00000000 ____D C:\windows\system32\MRT 2013-12-15 04:27 - 2011-05-03 14:06 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-12-15 03:51 - 2009-09-14 07:03 - 00654602 _____ C:\windows\system32\perfh007.dat 2013-12-15 03:51 - 2009-09-14 07:03 - 00130216 _____ C:\windows\system32\perfc007.dat 2013-12-15 03:51 - 2009-07-14 06:13 - 01500294 _____ C:\windows\system32\PerfStringBackup.INI 2013-12-15 03:32 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache 2013-12-14 10:51 - 2013-12-14 10:51 - 00002762 _____ C:\windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2013-12-13 13:44 - 2012-12-16 08:58 - 00003694 _____ C:\windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2013-12-13 13:42 - 2013-12-13 13:30 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2013-12-13 13:42 - 2012-12-16 08:49 - 00000000 __SHD C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F} 2013-12-13 13:36 - 2012-12-16 08:49 - 00000000 ____D C:\ProgramData\AVG 2013-12-13 13:33 - 2012-12-16 08:50 - 00000000 ____D C:\Users\AnnaLina\AppData\Roaming\AVG 2013-12-13 13:33 - 2012-07-29 20:16 - 00000000 ____D C:\Program Files (x86)\AVG 2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28.exe 2013-12-13 13:27 - 2013-12-13 13:27 - 78388136 _____ (AVG) C:\Users\AnnaLina\Downloads\avg_tuh_stf_all_2014_204_24c28 (1).exe 2013-12-13 03:55 - 2013-12-13 03:55 - 00000000 ____D C:\Users\AnnaLina\AppData\Local\{4BE1DB36-A68F-482B-9945-0B4D0BF7C8C1} 2013-12-13 03:36 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD 2013-12-13 03:35 - 2009-07-14 05:45 - 00283104 _____ C:\windows\system32\FNTCACHE.DAT 2013-12-11 13:39 - 2012-07-29 21:46 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 13:39 - 2012-07-29 21:46 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 13:39 - 2012-07-29 21:46 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater Files to move or delete: ==================== C:\ProgramData\flashax10.exe C:\Users\Public\AlexaNSISPlugin.512.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 07:13 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2014 Ran by AnnaLina at 2014-01-10 21:59:34 Running from C:\Users\AnnaLina\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security 2013 (Disabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== 7 Wonders - Treasures of Seven (x32 Version: 1.1.0.0 - MumboJumbo) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122 - Adobe Systems, Inc.) ATI Catalyst Install Manager (Version: 3.0.765.0 - ATI Technologies, Inc.) AVG 2013 (Version: 13.0.3462 - AVG Technologies) Hidden AVG 2013 (Version: 13.0.3658 - AVG Technologies) Hidden AVG 2013 (Version: 2013.0.3462 - AVG Technologies) AVG PC TuneUp 2014 (de-DE) (x32 Version: 14.0.1001.229 - AVG) Hidden AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG) AVG PC TuneUp 2014 (x32 Version: 14.0.1001.229 - AVG) Hidden AVG Security Toolbar (x32 Version: 17.3.0.49 - AVG Technologies) Browser Guard (x32 Version: - ) CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0302.2233.40412 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0302.2233.40412 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0302.2233.40412 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0302.2233.40412 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0302.2233.40412 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0302.2233.40412 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0302.2233.40412 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0302.2233.40412 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help English (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help French (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help German (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0302.2232.40412 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0302.2232.40412 - ATI) Hidden ccc-core-static (x32 Version: 2010.0302.2233.40412 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0302.2233.40412 - ATI) Hidden Cradle of Persia (x32 Version: - cerasus.media GmbH) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Foxit Reader (x32 Version: 5.3.1.606 - Foxit Corporation) Free Driver Scout (Version: 1.0.1.0 - Covus Freemium) Hidden Free Driver Scout (x32 Version: 1.0.1.0 - Covus Freemium) Genesys USB Mass Storage Device (x32 Version: 1.0.0.0 - Genesys Logic) Genesys USB Mass Storage Device (x32 Version: 4.0.2.1 - Genesys Logic) Google Chrome (HKCU Version: 31.0.1650.63 - Google Inc.) Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Iminent (x32 Version: 6.46.1.0 - Iminent) <==== ATTENTION Iminent (x32 Version: 6.46.1.0 - Iminent) Hidden <==== ATTENTION Iminent Toolbar on IE and Chrome (x32 Version: 1.8.28.3 - IminentToolbar) <==== ATTENTION IrfanView (remove only) (x32 Version: 4.32 - Irfan Skiljan) Java 7 Update 9 (x32 Version: 7.0.90 - Oracle) Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 33 (x32 Version: 6.0.330 - Oracle) Jewel Master (x32 Version: - cerasus.media GmbH) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 9.1.0 (Full) (x32 Version: 9.1.0 - ) Lenovo Healthcare Software (x32 Version: 3.0.0.090928 - Lenovo) Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.) Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.) Hidden Lenovo Rescue System (Version: 3.0.1029 - CyberLink Corp.) Hidden Lenovo Rescue System (x32 Version: 3.0.1029 - CyberLink Corp.) Lenovo Software Instruction (x32 Version: 1.0.0.090907 - Lenovo) Lenovo Treiber- und Anwendungsinstallation (x32 Version: 5.1.0.1126 - Lenovo) Logitech Vid HD (x32 Version: 7.2 (7248) - Logitech Inc..) Logitech Webcam Software (x32 Version: 2.0 - Logitech Inc.) LVT (x32 Version: 4.1.1.0930 - Lenovo) LWS Facebook (x32 Version: 13.50.854.0 - Logitech) Hidden LWS Gallery (x32 Version: 13.50.854.0 - Logitech) Hidden LWS Help_main (x32 Version: 13.50.862.0 - Logitech) Hidden LWS Launcher (x32 Version: 13.50.859.0 - Logitech) Hidden LWS Motion Detection (x32 Version: 13.30.1395.0 - Logitech) Hidden LWS Pictures And Video (x32 Version: 13.50.861.0 - Logitech) Hidden LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden LWS Video Mask Maker (x32 Version: 13.30.1379.0 - Logitech) Hidden LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden LWS Webcam Software (x32 Version: 13.31.1038.0 - Logitech) Hidden LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden LXH-JME2207FN Hotkey Driver (x32 Version: 5.1.0804 - Lenovo) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) Notepad++ (x32 Version: 6.1.5 - ) OpenAL (x32 Version: - ) Paint.NET v3.5.10 (Version: 3.60.0 - dotPDN LLC) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6954 - Realtek Semiconductor Corp.) Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.) Spyware Terminator 2012 (x32 Version: 3.0.0.82 - Crawler.com) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamViewer 7 (x32 Version: 7.0.13989 - TeamViewer) TeraCopy 2.27 (Version: - Code Sector) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) veberGreat 1.0.0 (Version: 1.0.0 - veberGreat) Verbatim GREEN BUTTON 1.49 (x32 Version: - Verbatim) VIS (x32 Version: - ) Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2 - AVG Technologies) Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1 - AVG Technologies) Wajam (x32 Version: 2.05 - Wajam) <==== ATTENTION Winamp (x32 Version: 5.63 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 15-12-2013 03:25:59 Windows Update 16-12-2013 00:56:23 Windows-Sicherung 23-12-2013 20:12:10 Geplanter Prüfpunkt 26-12-2013 21:05:54 Wiederherstellungsvorgang 03-01-2014 09:03:05 Geplanter Prüfpunkt 10-01-2014 13:25:49 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {01C96E35-6BBF-40E8-8AFB-93C51222348C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2013-10-30] (AVG) Task: {30A0BCEB-D49A-4C6C-9C3E-21761C997A7D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.) Task: {32D4BEAF-FE1C-4A50-B3DB-4F44A55DC6F6} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {3640EC75-92F2-4724-A428-A90428E1FAEF} - System32\Tasks\{E7C2D354-2351-44FE-88E6-FF73EDE2D2ED} => Chrome.exe Task: {6BB4E4CB-3BB2-4077-917F-2B8A20CFC619} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1924030428-2953040618-1691018352-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {72B084AB-0756-4D03-AC24-8BB1F2C0E435} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-18] () Task: {7333841E-6FA3-4873-9104-FE1B95AE97DD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.) Task: {745BF243-CB3A-42C8-9943-54AE03526E7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-09] (Google Inc.) Task: {91806EE6-A668-4ABA-9CAA-2DE5D0FFBC26} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-09] (Google Inc.) Task: {AFBFDAE6-46F8-4B7E-A92E-58A09ED0585B} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1924030428-2953040618-1691018352-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {B57117C4-58D1-4C1F-A3DF-1CE76914C341} - System32\Tasks\Google Updater and Installer => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.) Task: {B67B78CA-B88D-4DC6-9C04-CCA52E6F25AC} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-18] () Task: {BF736B66-82CE-4B51-999B-F1A04A3CF9C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: {C8C057C3-E14F-4DA8-AEFB-12DA1DEF8830} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe [2013-11-21] () Task: {EE091551-2CC2-4D72-8F47-0F24710CCFF4} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated) Task: {F11653A6-FD22-43F1-A0E5-A0F2AB3F8E16} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001Core.job => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1924030428-2953040618-1691018352-1001UA.job => C:\Users\AnnaLina\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-30 11:27 - 2013-10-30 11:27 - 00757048 _____ () C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\avgrepliba.dll 2012-07-30 17:55 - 2011-10-26 16:41 - 00318976 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll 2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll 2009-11-03 16:03 - 2009-11-03 16:03 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-03 21:20 - 2010-09-03 21:20 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2012-07-30 17:55 - 2011-10-26 16:41 - 00126464 _____ () C:\Program Files\TeraCopy\TeraCopy64.dll 2014-01-09 12:24 - 2014-01-09 12:23 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\log4cplusU.dll 2012-01-16 20:06 - 2012-01-16 20:06 - 00577621 _____ () C:\Program Files (x86)\Spyware Terminator\sqlite3.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\AnnaLina\AppData\Roaming\Dropbox\bin\libcef.dll 2010-09-03 21:21 - 2009-07-16 08:20 - 00032768 _____ () C:\Program Files (x86)\jmesoft\Keyhook.dll 2010-09-03 21:21 - 2007-12-31 09:27 - 00007168 _____ () C:\Program Files (x86)\jmesoft\VistaVolume.dll 2010-09-03 21:40 - 2008-09-27 07:39 - 00045056 _____ () C:\Program Files\Lenovo\HealthCare\HOOK.dll 2010-09-03 21:40 - 2009-09-09 08:24 - 00057344 _____ () C:\Program Files\Lenovo\HealthCare\de-de\de-de.dll 2009-06-03 19:59 - 2009-06-03 19:59 - 00619816 ____N () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll 2009-06-03 19:59 - 2009-06-03 19:59 - 00013096 ____N () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll 2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll 2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll 2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll 2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll 2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll 2013-12-09 22:48 - 2013-12-09 22:48 - 00332800 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb\2.0_2\ctb.dll 2013-12-06 05:50 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-06 05:50 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-06 05:50 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-06 05:50 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-06 05:50 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-06 05:50 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\AnnaLina\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: SBRE Description: SBRE Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: SBRE Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/06/2014 11:15:48 PM) (Source: Chrome) (User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\97e76d56-7115-4221-acb1-fc67fa8a397d.dmp Error: (01/06/2014 03:07:40 PM) (Source: Chrome) (User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\40efbb0a-9e36-403d-9d96-a52982336d9c.dmp Error: (01/06/2014 01:36:13 PM) (Source: Chrome) (User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\48871265-a33c-4fb8-bf08-00a45d2287da.dmp Error: (01/05/2014 07:00:03 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "I:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (01/05/2014 02:46:27 PM) (Source: Application Error) (User: ) Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden: Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten Speichertreibern, oder der Datenträger fehlt. Das Programm ToolbarU Application (Official) wurde wegen dieses Fehlers geschlossen. Programm: ToolbarU Application (Official) Datei: Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet. Benutzeraktion 1. Öffnen Sie die Datei erneut. Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird. 2. Wenn Sie weiterhin nicht auf die Datei zugreifen können und - diese sich im Netzwerk befindet, dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann. - diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist. 3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE. 4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht. 5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt. Zusätzliche Daten Fehlerwert: 00000000 Datenträgertyp: 0 Error: (01/05/2014 02:46:27 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: ToolbarUpdater.exe, Version: 17.2.0.38, Zeitstempel: 0x529dd18e Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000096 Fehleroffset: 0x00048665 ID des fehlerhaften Prozesses: 0xb00 Startzeit der fehlerhaften Anwendung: 0xToolbarUpdater.exe0 Pfad der fehlerhaften Anwendung: ToolbarUpdater.exe1 Pfad des fehlerhaften Moduls: ToolbarUpdater.exe2 Berichtskennung: ToolbarUpdater.exe3 Error: (01/05/2014 01:08:10 PM) (Source: Chrome) (User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\729ef2ef-bfae-4633-b809-397d6930539e.dmp Error: (01/05/2014 08:41:25 AM) (Source: Chrome) (User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\4d6a40b8-b6aa-4a1c-a019-2cbf78650b2c.dmp Error: (12/30/2013 10:05:37 PM) (Source: Chrome) (User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\e58b9fea-d280-41f5-819d-b343173a4566.dmp Error: (12/29/2013 07:00:03 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "I:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" System errors: ============= Error: (01/10/2014 10:09:11 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: SBRE Error: (01/10/2014 10:09:03 AM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (01/10/2014 01:13:37 AM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (01/09/2014 08:01:27 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Netman erreicht. Error: (01/09/2014 10:18:12 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UMVPFSrv erreicht. Error: (01/09/2014 08:57:41 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UMVPFSrv erreicht. Error: (01/09/2014 06:34:58 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: SBRE Error: (01/09/2014 06:34:53 AM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (01/08/2014 11:47:33 PM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (01/08/2014 09:48:26 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst UMVPFSrv erreicht. Microsoft Office Sessions: ========================= Error: (01/06/2014 11:15:48 PM) (Source: Chrome)(User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\97e76d56-7115-4221-acb1-fc67fa8a397d.dmp Error: (01/06/2014 03:07:40 PM) (Source: Chrome)(User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\40efbb0a-9e36-403d-9d96-a52982336d9c.dmp Error: (01/06/2014 01:36:13 PM) (Source: Chrome)(User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\48871265-a33c-4fb8-bf08-00a45d2287da.dmp Error: (01/05/2014 07:00:03 PM) (Source: Windows Backup)(User: ) Description: I:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (01/05/2014 02:46:27 PM) (Source: Application Error)(User: ) Description: ToolbarU Application (Official)000000000 Error: (01/05/2014 02:46:27 PM) (Source: Application Error)(User: ) Description: ToolbarUpdater.exe17.2.0.38529dd18eole32.dll6.1.7601.175144ce7b96fc000009600048665b0001cf0a15b5f09729C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exeC:\windows\syswow64\ole32.dllc5da5b14-760f-11e3-80c4-4487fcd6f178 Error: (01/05/2014 01:08:10 PM) (Source: Chrome)(User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\729ef2ef-bfae-4633-b809-397d6930539e.dmp Error: (01/05/2014 08:41:25 AM) (Source: Chrome)(User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\4d6a40b8-b6aa-4a1c-a019-2cbf78650b2c.dmp Error: (12/30/2013 10:05:37 PM) (Source: Chrome)(User: AnnaLina-PC) Description: Chrome has encountered a fatal error. ver=31.0.1650.63;lang=;id=;is_machine=0;oop=1;upload=1;minidump=C:\Users\AnnaLina\AppData\Local\Google\CrashReports\e58b9fea-d280-41f5-819d-b343173a4566.dmp Error: (12/29/2013 07:00:03 PM) (Source: Windows Backup)(User: ) Description: I:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) ==================== Memory info =========================== Percentage of memory in use: 88% Total physical RAM: 2047.24 MB Available physical RAM: 232.09 MB Total Pagefile: 4318.48 MB Available Pagefile: 1179.69 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:440.59 GB) (Free:392.36 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: B3F25E7C) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=25 GB) - (Type=12) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2014-01-10 22:13:40 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST3500418AS rev.CC66 465,76GB Running: gmer_2.1.19163.exe; Driver: C:\Users\AnnaLina\AppData\Local\Temp\pxdyqkow.sys ---- User code sections - GMER 2.1 ---- .text C:\PROGRAM FILES (X86)\AVG SECURE SEARCH\VPROT.EXE[648] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076881465 2 bytes [88, 76] .text C:\PROGRAM FILES (X86)\AVG SECURE SEARCH\VPROT.EXE[648] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000768814bb 2 bytes [88, 76] .text ... * 2 .text C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUAUTOUPDATECHECK.EXE[6512] C:\windows\syswow64\kernel32.dll!CreateThread + 28 0000000075e93491 4 bytes {CALL 0xffffffffeb4a1e6c} .text C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUAUTOUPDATECHECK.EXE[6512] C:\windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000076881465 2 bytes [88, 76] .text C:\PROGRAM FILES (X86)\AVG\AVG PC TUNEUP\TUAUTOUPDATECHECK.EXE[6512] C:\windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000768814bb 2 bytes [88, 76] .text ... * 2 ---- Registry - GMER 2.1 ---- Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\AnnaLina\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe 1 ---- EOF - GMER 2.1 ---- |
Themen zu Windows 7 stürzt immer ab und offnet Programme nicht |
antivirus, avg security toolbar, branding, browser, cid, computer, error, festplatte, flash player, freemium, google, googleads.g.doubleclick.net, helper, home, homepage, minidump, object, plug in, plug-in, pop ups, realtek, scan, secure search, security, software, spyware, svchost.exe, system, trojaner, trojaner board, vista, vtoolbarupdater, wajam, werbung, windows |