|
Plagegeister aller Art und deren Bekämpfung: Wieder einmal rvzr-a.akamaihd.net - BefallWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.01.2014, 00:14 | #1 |
| Wieder einmal rvzr-a.akamaihd.net - Befall Hi, habe leider wieder Probleme mit akamaihd. FRST sieht so aus: FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-01-2014 Ran by Olli at 2014-01-11 00:13:19 Running from C:\Users\Olli\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09} FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF} ==================== Installed Programs ====================== Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Acrobat.com (x32 Version: 1.2.443 - Adobe Systems Incorporated) Adobe Acrobat 9 Pro - English, Français, Deutsch (x32 Version: 9.5.5 - Adobe Systems) Hidden Adobe Acrobat 9.5.5 - CPSID_83708 (x32 Version: - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Asset Services CS4 (x32 Version: 4 - Adobe Systems Incorporated) Hidden Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color NA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color Video Profiles CS CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated) Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Device Central CS4 (x32 Version: 2 - Adobe Systems Incorporated) Hidden Adobe Dreamweaver CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Dynamiclink Support (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Fireworks CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Flash CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Flash CS4 Extension - Flash Lite STI others (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe Flash CS4 STI-other (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 10 ActiveX (x32 Version: 10.0.2.54 - Adobe Systems, Inc.) Adobe Flash Player 10 Plugin (x32 Version: 10.0.2.54 - Adobe Systems, Inc.) Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Illustrator CS4 (x32 Version: 14.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Application Feature Set Files (Roman) (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Common Base Files (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Encoder CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Media Encoder CS4 Importer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (x32 Version: 1.1 - Adobe Systems Incorporated) Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 Support (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe SGM CS4 (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe SING CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS4 Server (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Apple Application Support (x32 Version: 2.3.4 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (Version: 3.0.778.0 - ATI Technologies, Inc.) Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC) Better Surf Plus (x32 Version: 1.1 - Better Surf) <==== ATTENTION Bitdefender Internet Security (Version: 17.23.0.996 - Bitdefender) BlueStacks App Player (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.) BlueStacks Notification Center (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.) Canon Easy-WebPrint EX (x32 Version: 1.3.6.0 - Canon Inc.) Canon MP Navigator EX 2.0 (x32 Version: - ) Canon MP540 series MP Drivers (Version: - ) Canon My Printer (x32 Version: 3.1.0 - Canon Inc.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0630.510.7373 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help English (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help French (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help German (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden ccc-core-static (x32 Version: 2010.0630.510.7373 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0630.510.7373 - ATI) Hidden Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden ESU for Microsoft Windows 7 (x32 Version: 1.0.0 - Hewlett-Packard) FastStone Image Viewer 4.8 (x32 Version: 4.8 - FastStone Soft) Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden HP IDF Software (x32 Version: 11.15.1000 - Hewlett-Packard Company) HTC Driver Installer (x32 Version: 4.10.0.001 - HTC Corporation) HTC Sync Manager (x32 Version: 2.4.11.0 - HTC) IPTInstaller (x32 Version: 4.0.8 - HTC) kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Mein CEWE FOTOBUCH (x32 Version: 5.1.2 - CEWE COLOR AG u Co. OHG) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Movavi SWF to Video Converter (x32 Version: 1.0.1.0 - MOVAVI) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1 - Mozilla) Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla) Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation) Notepad++ (x32 Version: 6.5.1 - Notepad++ Team) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1011 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden Pixel Bender Toolkit (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6196 - Realtek Semiconductor Corp.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) Software Version Updater (x32 Version: 1.1.3.8 - ) <==== ATTENTION Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden SUPER © v2013.build.58+Recorder (2013/11/13) Version v2013.buil (x32 Version: v2013.build.58+Recorder - eRightSoft) Synaptics Pointing Device Driver (Version: 15.1.6.64 - Synaptics Incorporated) TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer) Trillian (x32 Version: - Cerulean Studios, LLC) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Video Player (x32 Version: 1.1 - Video Player) VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN) Winamp (x32 Version: 5.65 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc) XviD MPEG-4 Video Codec (x32 Version: XviD-1.0.3-20122004 - XviD Team (Koepi)) ==================== Restore Points ========================= 19-12-2013 20:16:40 Windows Update 21-12-2013 17:30:37 Windows Update 09-01-2014 07:34:31 Installed HTC Sync. 09-01-2014 07:41:18 Removed HTC Sync. 09-01-2014 07:46:04 Removed HTC BMP USB Driver. 09-01-2014 07:46:42 Removed HTC Driver Installer. 10-01-2014 22:22:44 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0C117458-0FDD-4798-8106-AFAC55E1FAE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\office15\msoia.exe [2013-11-18] (Microsoft Corporation) Task: {2ACF759D-5560-41DD-9981-DED674D9C2B5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {2C79136F-7B5A-4B9F-B86A-ADF3A52AA4FB} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {51F5281D-10DA-4126-A9D9-4342655596D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.) Task: {68B73626-A000-487E-BFC7-7E442B73D29F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.) Task: {A50DCDA3-9EDD-434A-A327-5BC9D078D747} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-11-02] (Microsoft Corporation) Task: {AAC88D3E-9C9C-42ED-8BC4-65040B3F8166} - System32\Tasks\AmiUpdXp => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe [2013-11-16] (Amonetizé Ltd) <==== ATTENTION Task: {AC631EC0-1D18-4BDA-9BD3-E97CF31CFC9E} - System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {F7DCDCCF-65C6-4260-9707-949FEA438992} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\office15\msoia.exe [2013-11-18] (Microsoft Corporation) Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-10 23:30 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll 2010-06-10 16:42 - 2010-06-10 16:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2013-11-03 17:45 - 2013-11-03 17:45 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-01-10 23:29 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender\bdmetrics.dll 2013-11-14 21:30 - 2013-11-14 21:30 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll 2013-11-14 21:33 - 2013-11-14 21:33 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll 2013-11-14 21:34 - 2013-11-14 21:34 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll 2014-01-10 23:29 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll 2013-11-03 22:22 - 2009-02-27 16:39 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.deu 2013-12-07 10:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-07 10:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-07 10:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-07 10:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-07 10:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-07 10:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Olli\Downloads\FRST64.exe:BDU ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc) (User: ) Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/09/2014 10:33:22 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Toolbar.exe, Version: 21.5.0.2560, Zeitstempel: 0x5272f72c Name des fehlerhaften Moduls: so.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5272f720 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0fa88870 ID des fehlerhaften Prozesses: 0x1474 Startzeit der fehlerhaften Anwendung: 0xToolbar.exe0 Pfad der fehlerhaften Anwendung: Toolbar.exe1 Pfad des fehlerhaften Moduls: Toolbar.exe2 Berichtskennung: Toolbar.exe3 Error: (01/09/2014 08:50:15 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/07/2014 07:11:26 PM) (Source: Application Hang) (User: ) Description: Programm Skype.exe, Version 6.11.0.102 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 187c Startzeit: 01cf0b8bd9382562 Endzeit: 19 Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe Berichts-ID: Error: (12/23/2013 09:23:31 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/23/2013 09:22:32 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (12/12/2013 07:01:35 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/12/2013 07:00:40 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (12/09/2013 05:26:42 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/09/2013 05:25:25 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (01/10/2014 11:35:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: %%1064 Error: (01/10/2014 11:34:04 PM) (Source: BugCheck) (User: ) Description: 0x0000004a (0x0000000076d2132a, 0x0000000000000002, 0x0000000000000000, 0xfffff8800a396ca0)C:\Windows\MEMORY.DMP011014-32947-01 Error: (01/10/2014 11:34:02 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 10.01.2014 um 23:31:31 unerwartet heruntergefahren. Error: (01/10/2014 11:08:41 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TeamViewer 8" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/10/2014 11:08:41 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst TeamViewer 8 erreicht. Error: (01/10/2014 07:52:03 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht. Error: (01/09/2014 06:23:50 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst OfficeSvc erreicht. Error: (01/08/2014 08:18:48 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (01/08/2014 08:18:48 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (01/08/2014 09:09:13 AM) (Source: ipnathlp) (User: ) Description: 0 Microsoft Office Sessions: ========================= Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc)(User: ) Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/09/2014 10:33:22 AM) (Source: Application Error)(User: ) Description: Toolbar.exe21.5.0.25605272f72cso.dll_unloaded0.0.0.05272f720c00000050fa88870147401cf0d12dbf06116C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exeso.dll143ad932-7911-11e3-b928-90fba6a2fb7f Error: (01/09/2014 08:50:15 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Olli\Downloads\SoftonicDownloader_fuer_super.exe Error: (01/07/2014 07:11:26 PM) (Source: Application Hang)(User: ) Description: Skype.exe6.11.0.102187c01cf0b8bd938256219C:\Program Files (x86)\Skype\Phone\Skype.exe Error: (12/23/2013 09:23:31 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe Error: (12/23/2013 09:22:32 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (12/12/2013 07:01:35 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe Error: (12/12/2013 07:00:40 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (12/09/2013 05:26:42 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe Error: (12/09/2013 05:25:25 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 7930.9 MB Available physical RAM: 4415.89 MB Total Pagefile: 15859.98 MB Available Pagefile: 12281.04 MB Total Virtual: 8192 MB Available Virtual: 8191.79 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:207.73 GB) (Free:66.63 GB) NTFS Drive d: (Volume) (Fixed) (Total:97.66 GB) (Free:95.43 GB) NTFS Drive e: (Volume) (Fixed) (Total:146.48 GB) (Free:55.38 GB) NTFS Drive g: (NIKON D90) (Removable) (Total:3.66 GB) (Free:3.57 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: EF83617C) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=208 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=98 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=146 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 002A5835) Partition 1: (Not Active) - (Size=4 GB) - (Type=0B) ==================== End Of Log ============================ Gruß, Hawkeye |
11.01.2014, 10:46 | #2 |
/// TB-Ausbilder | Wieder einmal rvzr-a.akamaihd.net - BefallMein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Die FRST.txt fehlt, bitte einen Kontrollscan ausführen und beide Logdateien davon posten: Kontrollscan mit FRST Führe wie zuvor beschrieben einen Scan mit FRST aus. Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan. Es werden wieder zwei Logdateien erzeugt. Poste mir diese. |
11.01.2014, 14:08 | #3 |
| Wieder einmal rvzr-a.akamaihd.net - Befall Hi,
__________________vielen Dank soweit. Ich habe die neuste Version von FRST 64 Bit runtergeladen. Aber bei der Ausführung erhalte ich folgende Fehlermeldung: hxxp://www.myimg.de/?img=screene42c5.jpg Gruß, Hawkeye |
11.01.2014, 14:45 | #4 |
/// TB-Ausbilder | Wieder einmal rvzr-a.akamaihd.net - Befall Servus, Ich hab mal eben beim Entwickler angefragt und melde mich bald wieder. |
11.01.2014, 20:30 | #5 |
/// TB-Ausbilder | Wieder einmal rvzr-a.akamaihd.net - Befall Servus, FRST neu herunterladen, dann sollte es klappen. |
12.01.2014, 11:47 | #6 |
| Wieder einmal rvzr-a.akamaihd.net - Befall Super, danke. Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2014 05 Ran by Olli at 2014-01-12 11:35:03 Running from C:\Users\Olli\Downloads\frst Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Bitdefender Antivirus (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09} FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF} ==================== Installed Programs ====================== Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Acrobat.com (x32 Version: 1.2.443 - Adobe Systems Incorporated) Adobe Acrobat 9 Pro - English, Français, Deutsch (x32 Version: 9.5.5 - Adobe Systems) Hidden Adobe Acrobat 9.5.5 - CPSID_83708 (x32 Version: - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Asset Services CS4 (x32 Version: 4 - Adobe Systems Incorporated) Hidden Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color - Photoshop Specific CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color NA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Color Video Profiles CS CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated) Adobe Creative Suite 4 Design Premium (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Device Central CS4 (x32 Version: 2 - Adobe Systems Incorporated) Hidden Adobe Dreamweaver CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Dynamiclink Support (x32 Version: 1 - Adobe Systems Incorporated) Hidden Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Fireworks CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Flash CS4 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Flash CS4 Extension - Flash Lite STI others (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe Flash CS4 STI-other (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 10 ActiveX (x32 Version: 10.0.2.54 - Adobe Systems, Inc.) Adobe Flash Player 10 Plugin (x32 Version: 10.0.2.54 - Adobe Systems, Inc.) Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Illustrator CS4 (x32 Version: 14.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Application Feature Set Files (Roman) (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Common Base Files (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Encoder CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Media Encoder CS4 Importer (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (x32 Version: 1.1 - Adobe Systems Incorporated) Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 Support (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe SGM CS4 (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden Adobe SING CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden Adobe Version Cue CS4 Server (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Apple Application Support (x32 Version: 2.3.4 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (Version: 3.0.778.0 - ATI Technologies, Inc.) Avira SearchFree Toolbar (x32 Version: 12.10.0.2949 - APN, LLC) Bitdefender Internet Security (Version: 17.23.0.996 - Bitdefender) BlueStacks App Player (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.) BlueStacks Notification Center (x32 Version: 0.8.4.3036 - BlueStack Systems, Inc.) Canon Easy-WebPrint EX (x32 Version: 1.3.6.0 - Canon Inc.) Canon MP Navigator EX 2.0 (x32 Version: - ) Canon MP540 series MP Drivers (Version: - ) Canon My Printer (x32 Version: 3.1.0 - Canon Inc.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0630.510.7373 - ATI) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0630.510.7373 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help English (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help French (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help German (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0630.0509.7373 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0630.0509.7373 - ATI) Hidden ccc-core-static (x32 Version: 2010.0630.510.7373 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0630.510.7373 - ATI) Hidden Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden ESU for Microsoft Windows 7 (x32 Version: 1.0.0 - Hewlett-Packard) FastStone Image Viewer 4.8 (x32 Version: 4.8 - FastStone Soft) Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden HP IDF Software (x32 Version: 11.15.1000 - Hewlett-Packard Company) HTC Driver Installer (x32 Version: 4.10.0.001 - HTC Corporation) HTC Sync Manager (x32 Version: 2.4.11.0 - HTC) IPTInstaller (x32 Version: 4.0.8 - HTC) kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Mein CEWE FOTOBUCH (x32 Version: 5.1.2 - CEWE COLOR AG u Co. OHG) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Movavi SWF to Video Converter (x32 Version: 1.0.1.0 - MOVAVI) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1 - Mozilla) Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla) Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation) Notepad++ (x32 Version: 6.5.1 - Notepad++ Team) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1011 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1011 - Microsoft Corporation) Hidden OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden Pixel Bender Toolkit (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6196 - Realtek Semiconductor Corp.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) Software Version Updater (x32 Version: 1.1.3.8 - ) <==== ATTENTION Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden SUPER © v2013.build.58+Recorder (2013/11/13) Version v2013.buil (x32 Version: v2013.build.58+Recorder - eRightSoft) Synaptics Pointing Device Driver (Version: 15.1.6.64 - Synaptics Incorporated) TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer) Trillian (x32 Version: - Cerulean Studios, LLC) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Video Player (x32 Version: 1.1 - Video Player) VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN) Winamp (x32 Version: 5.65 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc) XviD MPEG-4 Video Codec (x32 Version: XviD-1.0.3-20122004 - XviD Team (Koepi)) ==================== Restore Points ========================= 09-01-2014 07:34:31 Installed HTC Sync. 09-01-2014 07:41:18 Removed HTC Sync. 09-01-2014 07:46:04 Removed HTC BMP USB Driver. 09-01-2014 07:46:42 Removed HTC Driver Installer. 10-01-2014 22:22:44 Windows Update 11-01-2014 15:49:29 Windows Defender Checkpoint ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0C117458-0FDD-4798-8106-AFAC55E1FAE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-18] (Microsoft Corporation) Task: {2ACF759D-5560-41DD-9981-DED674D9C2B5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {2C79136F-7B5A-4B9F-B86A-ADF3A52AA4FB} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {51F5281D-10DA-4126-A9D9-4342655596D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.) Task: {68B73626-A000-487E-BFC7-7E442B73D29F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-03] (Google Inc.) Task: {A50DCDA3-9EDD-434A-A327-5BC9D078D747} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-11-02] (Microsoft Corporation) Task: {AAC88D3E-9C9C-42ED-8BC4-65040B3F8166} - System32\Tasks\AmiUpdXp => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe [2013-11-16] (Amonetizé Ltd) <==== ATTENTION Task: {AC631EC0-1D18-4BDA-9BD3-E97CF31CFC9E} - System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {F7DCDCCF-65C6-4260-9707-949FEA438992} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-18] (Microsoft Corporation) Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\Olli\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-10 23:30 - 2013-06-19 11:45 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll 2010-06-10 16:42 - 2010-06-10 16:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2013-11-03 17:45 - 2013-11-03 17:45 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2013-11-14 21:30 - 2013-11-14 21:30 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll 2013-11-14 21:33 - 2013-11-14 21:33 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll 2013-11-14 21:34 - 2013-11-14 21:34 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll 2014-01-10 23:29 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\antispam32\txmlutil.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00059904 _____ () C:\Program Files (x86)\Trillian\zlib1.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00187392 _____ () C:\Program Files (x86)\Trillian\libpng15.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00065536 _____ () C:\Program Files (x86)\Trillian\libungif.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00003584 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00006656 _____ () c:\program files (x86)\trillian\languages\en\events.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll 2013-10-21 00:00 - 2013-10-21 00:00 - 00007168 _____ () c:\program files (x86)\trillian\languages\en\talk.dll 2013-11-03 22:22 - 2009-02-27 16:39 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.deu 2013-12-13 19:39 - 2013-12-13 19:39 - 03017840 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2013-12-13 19:39 - 2013-12-13 19:39 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2013-12-13 19:39 - 2013-12-13 19:39 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2014-01-10 23:29 - 2013-06-19 11:44 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender\Antispam32\txmlutil.dll 2013-12-07 10:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-07 10:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-07 10:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-07 10:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-07 10:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-07 10:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/12/2014 11:15:35 AM) (Source: BstHdAndroidSvc) (User: ) Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion --- Ende der internen Ausnahmestapelüberwachung --- bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 04:49:28 PM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert . Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess. Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {b32d9d52-3c18-45c2-8f1a-fa8b2756d720} Error: (01/11/2014 04:47:34 PM) (Source: BstHdAndroidSvc) (User: ) Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion --- Ende der internen Ausnahmestapelüberwachung --- bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 02:17:58 PM) (Source: BstHdAndroidSvc) (User: ) Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion --- Ende der internen Ausnahmestapelüberwachung --- bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 02:15:07 PM) (Source: BstHdAndroidSvc) (User: ) Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 00:21:26 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/11/2014 00:20:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/11/2014 09:40:11 AM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101). Error: (01/11/2014 00:18:36 AM) (Source: Application Hang) (User: ) Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 8fc Startzeit: 01cf0e58a055bdd9 Endzeit: 17 Anwendungspfad: C:\Users\Olli\Downloads\FRST64.exe Berichts-ID: Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc) (User: ) Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) System errors: ============= Error: (01/12/2014 11:24:34 AM) (Source: ipnathlp) (User: ) Description: 0 Error: (01/12/2014 11:15:35 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: %%1064 Error: (01/11/2014 04:47:34 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: %%1064 Error: (01/11/2014 04:47:18 PM) (Source: ipnathlp) (User: ) Description: 0 Error: (01/11/2014 02:17:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: %%1064 Error: (01/11/2014 02:15:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: %%1064 Error: (01/10/2014 11:35:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: %%1064 Error: (01/10/2014 11:34:04 PM) (Source: BugCheck) (User: ) Description: 0x0000004a (0x0000000076d2132a, 0x0000000000000002, 0x0000000000000000, 0xfffff8800a396ca0)C:\Windows\MEMORY.DMP011014-32947-01 Error: (01/10/2014 11:34:02 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 10.01.2014 um 23:31:31 unerwartet heruntergefahren. Error: (01/10/2014 11:08:41 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "TeamViewer 8" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (01/12/2014 11:15:35 AM) (Source: BstHdAndroidSvc)(User: ) Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion --- Ende der internen Ausnahmestapelüberwachung --- bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 04:49:28 PM) (Source: VSS)(User: ) Description: 0x80070005, Zugriff verweigert Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {b32d9d52-3c18-45c2-8f1a-fa8b2756d720} Error: (01/11/2014 04:47:34 PM) (Source: BstHdAndroidSvc)(User: ) Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion --- Ende der internen Ausnahmestapelüberwachung --- bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 02:17:58 PM) (Source: BstHdAndroidSvc)(User: ) Description: Der Dienst kann nicht gestartet werden. System.SystemException: Bitdefender antivirus HV.sys loaded ---> System.ComponentModel.Win32Exception: Unzulässige Funktion --- Ende der internen Ausnahmestapelüberwachung --- bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 02:15:07 PM) (Source: BstHdAndroidSvc)(User: ) Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/11/2014 00:21:26 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\Olli\downloads\softonicdownloader_fuer_super.exe Error: (01/11/2014 00:20:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe Error: (01/11/2014 09:40:11 AM) (Source: System Restore)(User: ) Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101 Error: (01/11/2014 00:18:36 AM) (Source: Application Hang)(User: ) Description: FRST64.exe3.3.8.18fc01cf0e58a055bdd917C:\Users\Olli\Downloads\FRST64.exe Error: (01/10/2014 11:35:07 PM) (Source: BstHdAndroidSvc)(User: ) Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run. bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args) bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) ==================== Memory info =========================== Percentage of memory in use: 29% Total physical RAM: 7930.9 MB Available physical RAM: 5552.66 MB Total Pagefile: 15859.98 MB Available Pagefile: 13165.43 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:207.73 GB) (Free:68.29 GB) NTFS Drive d: (Volume) (Fixed) (Total:97.66 GB) (Free:95.43 GB) NTFS Drive e: (Volume) (Fixed) (Total:146.48 GB) (Free:55.38 GB) NTFS Drive g: (NIKON D90) (Removable) (Total:3.66 GB) (Free:3.57 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: EF83617C) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=208 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=98 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=146 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 002A5835) Partition 1: (Not Active) - (Size=4 GB) - (Type=0B) ==================== End Of Log ============================ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 05 Ran by Olli (administrator) on OLLI-PC on 12-01-2014 11:29:05 Running from C:\Users\Olli\Downloads\frst Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\bdagent.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe (Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2281256 2010-09-14] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6486120 2010-09-08] (Realtek Semiconductor) HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender\bdagent.exe [1735872 2014-01-11] (Bitdefender) HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2013-11-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM-x32\...\Run: [Adobe_ID0ENQBO] - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-06-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [Bitdefender-Geldbörse-Agent] - C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe [561672 2014-01-11] (Bitdefender) HKCU\...\Run: [Bitdefender-Geldbörse] - C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe [1001512 2014-01-11] (Bitdefender) HKCU\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] - C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [612696 2014-01-11] (Bitdefender) MountPoints2: {a34d90e7-59ab-11e3-aa22-90fba6a2fb7f} - G:\HTC_Sync_Manager_PC.exe Startup: C:\Users\Olli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.de SearchScopes: HKLM - DefaultScope {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKLM - {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - DefaultScope {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {94A69141-E475-4A8F-898D-166E3E01DD1C} URL = hxxp://www.sm.de/?q={searchTerms} BHO: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\pmbxie.dll (Bitdefender) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender\antispam32\pmbxie.dll (Bitdefender) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.) Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default FF SearchEngineOrder.1: SuchMaschine FF Homepage: hxxp://google.de/ FF Keyword.URL: hxxp://www.sm.de/?q= FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll (Bitdefender) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\searchplugins\search_engine.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-12-20] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-01-10] FF HKLM-x32\...\Firefox\Extensions: [ext@bettersurfplus.com] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta674.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff FF Extension: Video Player - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff [2014-01-10] FF HKLM-x32\...\Firefox\Extensions: [ffpwdman@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\ FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman\ [] FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender\bdtbext FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender\bdtbext [2014-01-10] Chrome: ======= CHR HomePage: hxxp://qip.ru CHR RestoreOnStartup: "hxxp://www.klamm.de/", "hxxp://facebook.com/" CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\30.1_0 [2013-12-21] CHR Extension: (HP Product Detection Plugin) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\2.0.5.6_0 [2013-11-03] CHR Extension: (Google Docs) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2013-11-03] CHR Extension: (Google Drive) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2013-11-03] CHR Extension: (Brushed) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg\1.0_0 [2013-11-03] CHR Extension: (YouTube) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-11-03] CHR Extension: (Bitdefender Wallet) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccahoghmggldkcdjiebjkidpfongdfbl\17.24.0_0 [2014-01-11] CHR Extension: (Adblock Plus) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0 [2013-12-19] CHR Extension: (Adblock for Youtube\u2122) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk\2.12_0 [2013-11-10] CHR Extension: (Hide My Ass! Web Proxy) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd\1.2.5_0 [2013-11-03] CHR Extension: (Google Search) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-11-03] CHR Extension: (SEO Site Tools) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc\2.91_0 [2013-11-03] CHR Extension: (Video Player) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl\1.1_0 [2014-01-10] CHR Extension: (DoNotTrackMe: Online Privacy Protection) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\3.1.1040_0 [2014-01-07] CHR Extension: (Pendule) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkffbkamcejhkcaocmkdeiiccpmjfdi\1.0.0_0 [2013-11-03] CHR Extension: (Window Resizer) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkelicaakdanhinjdeammmilcgefonfh\1.9.0.1_0 [2013-12-13] CHR Extension: (Google Wallet) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-19] CHR Extension: (Gmail) - C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 [2013-11-03] CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2013-12-20] CHR HKLM-x32\...\Chrome\Extension: [ccahoghmggldkcdjiebjkidpfongdfbl] - C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxcr.crx [2014-01-11] CHR HKLM-x32\...\Chrome\Extension: [einecjnnfjglbkjjlbekhpcmmegmgbnl] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ch\VideoPlayerV3beta674.crx [2014-01-07] CHR HKLM-x32\...\Chrome\Extension: [mmifolfpllfdhilecpdpmemhelmanajl] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ch\BetterSurfPlus.crx [2014-01-07] ==================== Services (Whitelisted) ================= S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [288112 2013-11-03] (Adobe Systems Incorporated) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.) S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe [77632 2013-11-21] (Bitdefender) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG) R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe [67320 2013-10-07] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender\vsserv.exe [1507248 2013-11-15] (Bitdefender) ==================== Drivers (Whitelisted) ==================== R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-07-19] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-07-19] (BitDefender) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC) S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-08-07] (BitDefender S.R.L.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-11 14:03 - 2014-01-12 11:29 - 00000000 ____D C:\Users\Olli\Downloads\frst 2014-01-11 09:40 - 2014-01-11 09:41 - 00260476 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-11 00:13 - 2014-01-11 00:15 - 00033346 _____ C:\Users\Olli\Downloads\Addition.txt 2014-01-11 00:07 - 2014-01-11 14:17 - 00000000 ____D C:\FRST 2014-01-11 00:06 - 2014-01-11 00:06 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2014-01-11 00:06 - 2014-01-11 00:06 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll 2014-01-10 23:33 - 2014-01-10 23:33 - 574520016 _____ C:\Windows\MEMORY.DMP 2014-01-10 23:33 - 2014-01-10 23:33 - 00278672 _____ C:\Windows\Minidump\011014-32947-01.dmp 2014-01-10 23:33 - 2014-01-10 23:33 - 00000000 ____D C:\Windows\Minidump 2014-01-10 23:31 - 2014-01-10 23:36 - 00000385 _____ C:\Users\Olli\AppData\Roaminguser_gensett.xml 2014-01-10 23:31 - 2014-01-10 23:31 - 00773550 _____ C:\ProgramData\1389392186.bdinstall.bin 2014-01-10 23:30 - 2014-01-11 00:06 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll 2014-01-10 23:30 - 2014-01-10 23:30 - 00002186 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk 2014-01-10 23:30 - 2014-01-10 23:30 - 00002067 _____ C:\Users\Public\Desktop\Bitdefender Internet Security.lnk 2014-01-10 23:30 - 2014-01-10 23:30 - 00000684 ____H C:\bdr-cf01 2014-01-10 23:30 - 2014-01-10 23:30 - 00000385 _____ C:\Windows\system32\user_gensett.xml 2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____D C:\ProgramData\BDLogging 2014-01-10 23:30 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys 2014-01-10 23:30 - 2013-02-22 18:46 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys 2014-01-10 23:30 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll 2014-01-10 23:29 - 2013-07-19 17:08 - 00601360 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2014-01-10 23:29 - 2013-07-19 17:04 - 00727592 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2014-01-10 23:29 - 2012-11-02 13:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys 2014-01-10 23:20 - 2014-01-10 23:20 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Bitdefender 2014-01-10 23:19 - 2014-01-10 23:30 - 00253404 ____H C:\bdr-ld01 2014-01-10 23:19 - 2014-01-10 23:30 - 00009216 ____H C:\bdr-ld01.mbr 2014-01-10 23:19 - 2013-09-24 15:38 - 46879860 ____H C:\bdr-im01.gz 2014-01-10 23:19 - 2013-08-13 12:38 - 03271472 ____H C:\bdr-bz01 2014-01-10 23:16 - 2014-01-11 00:06 - 00000000 ____D C:\ProgramData\Bitdefender 2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Users\Olli\AppData\Roaming\QuickScan 2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Program Files\Bitdefender 2014-01-10 23:16 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll 2014-01-10 23:16 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll 2014-01-10 23:16 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2014-01-10 23:16 - 2013-08-07 12:46 - 00389240 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2014-01-10 23:11 - 2014-01-10 23:16 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2014-01-10 21:16 - 2014-01-10 21:16 - 05701712 _____ C:\Users\Olli\Downloads\bitdefender_14isecurity.exe 2014-01-10 19:50 - 2014-01-10 19:50 - 00000000 ____D C:\Program Files (x86)\VideoPlayerV3 2014-01-09 08:59 - 2014-01-09 09:03 - 00000000 ____D C:\Users\Olli\AppData\Roaming\HTC 2014-01-09 08:58 - 2014-01-12 11:16 - 00000000 ____D C:\Users\Olli\AppData\Local\HTC MediaHub 2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\Documents\HTC 2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\.android 2014-01-09 08:57 - 2014-01-09 08:57 - 00002031 _____ C:\Users\Public\Desktop\HTC Sync Manager.lnk 2014-01-09 08:56 - 2014-01-09 08:56 - 00000000 ____D C:\Program Files (x86)\Spirent Communications 2014-01-09 08:50 - 2014-01-09 08:50 - 00000000 ____D C:\ProgramData\HTC 2014-01-09 08:35 - 2014-01-09 08:35 - 00003610 _____ C:\Windows\System32\Tasks\Launch HTC Sync Loader 2014-01-09 08:33 - 2014-01-09 08:54 - 00000000 ____D C:\Users\Olli\AppData\Local\Downloaded Installations 2014-01-09 08:32 - 2014-01-09 08:57 - 00000000 ____D C:\Program Files (x86)\HTC 2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2014-01-09 08:31 - 2014-01-09 08:31 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0 2014-01-09 08:23 - 2014-01-09 08:29 - 165708080 _____ (HTC Corporation ) C:\Users\Olli\Downloads\setup_3.3.63.exe 2014-01-08 10:10 - 2014-01-08 10:52 - 00000000 ____D C:\Users\Olli\Desktop\Fotobuch London 2014-01-08 09:49 - 2014-01-09 21:26 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf 2014-01-08 09:49 - 2014-01-09 19:57 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf~ 2014-01-08 09:49 - 2014-01-09 18:56 - 00000000 ____D C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH_mcf-Dateien 2014-01-07 19:05 - 2014-01-07 19:05 - 00002950 _____ C:\Windows\System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B} 2014-01-07 09:09 - 2014-01-07 09:09 - 00001817 _____ C:\Users\Public\Desktop\Apps.lnk 2014-01-07 09:09 - 2014-01-07 09:09 - 00001807 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2014-01-07 09:03 - 2014-01-07 09:03 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-21 18:31 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-21 18:31 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-21 18:31 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-21 18:31 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-21 18:31 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-21 18:31 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-21 18:31 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-21 18:31 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-21 18:31 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-21 18:31 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-21 18:31 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-21 18:31 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-21 18:31 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-21 18:31 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-21 18:31 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-21 18:31 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-21 18:31 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-21 18:30 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-21 18:30 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-21 18:30 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-21 18:30 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-21 18:30 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-21 18:30 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-21 18:30 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-21 18:30 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-21 18:30 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-21 18:30 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-21 18:30 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-21 18:30 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-21 18:30 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-21 18:30 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-19 21:24 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-19 21:20 - 2013-12-19 21:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-19 21:20 - 2013-12-19 21:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-19 21:19 - 2013-12-19 21:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-19 21:19 - 2013-12-19 21:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-19 21:19 - 2013-12-19 21:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-19 21:19 - 2013-12-19 21:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-19 21:18 - 2013-12-19 21:24 - 00010277 _____ C:\Windows\IE11_main.log 2013-12-13 19:45 - 2013-12-13 19:45 - 07628951 _____ C:\Users\Olli\Desktop\DSC_6815.psd 2013-12-13 19:39 - 2013-12-13 20:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird ==================== One Month Modified Files and Folders ======= 2014-01-12 11:29 - 2014-01-11 14:03 - 00000000 ____D C:\Users\Olli\Downloads\frst 2014-01-12 11:24 - 2013-11-03 10:18 - 01658573 _____ C:\Windows\WindowsUpdate.log 2014-01-12 11:22 - 2009-07-14 05:45 - 00015600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-12 11:22 - 2009-07-14 05:45 - 00015600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-12 11:16 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\AppData\Local\HTC MediaHub 2014-01-12 11:16 - 2013-11-16 09:53 - 00000352 _____ C:\Windows\Tasks\AmiUpdXp.job 2014-01-12 11:15 - 2013-11-30 14:25 - 00000434 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2014-01-12 11:15 - 2013-11-03 11:47 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-12 11:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-12 11:15 - 2009-07-14 05:51 - 00035201 _____ C:\Windows\setupact.log 2014-01-11 16:47 - 2013-11-03 11:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-11 14:17 - 2014-01-11 00:07 - 00000000 ____D C:\FRST 2014-01-11 14:13 - 2013-11-03 14:11 - 00176838 _____ C:\Windows\PFRO.log 2014-01-11 14:07 - 2013-11-03 22:47 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Skype 2014-01-11 09:41 - 2014-01-11 09:40 - 00260476 _____ C:\Windows\msxml4-KB2758694-enu.LOG 2014-01-11 00:15 - 2014-01-11 00:13 - 00033346 _____ C:\Users\Olli\Downloads\Addition.txt 2014-01-11 00:06 - 2014-01-11 00:06 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2014-01-11 00:06 - 2014-01-11 00:06 - 00074512 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin32.dll 2014-01-11 00:06 - 2014-01-10 23:30 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll 2014-01-11 00:06 - 2014-01-10 23:16 - 00000000 ____D C:\ProgramData\Bitdefender 2014-01-10 23:36 - 2014-01-10 23:31 - 00000385 _____ C:\Users\Olli\AppData\Roaminguser_gensett.xml 2014-01-10 23:33 - 2014-01-10 23:33 - 574520016 _____ C:\Windows\MEMORY.DMP 2014-01-10 23:33 - 2014-01-10 23:33 - 00278672 _____ C:\Windows\Minidump\011014-32947-01.dmp 2014-01-10 23:33 - 2014-01-10 23:33 - 00000000 ____D C:\Windows\Minidump 2014-01-10 23:31 - 2014-01-10 23:31 - 00773550 _____ C:\ProgramData\1389392186.bdinstall.bin 2014-01-10 23:30 - 2014-01-10 23:30 - 00002186 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk 2014-01-10 23:30 - 2014-01-10 23:30 - 00002067 _____ C:\Users\Public\Desktop\Bitdefender Internet Security.lnk 2014-01-10 23:30 - 2014-01-10 23:30 - 00000684 ____H C:\bdr-cf01 2014-01-10 23:30 - 2014-01-10 23:30 - 00000385 _____ C:\Windows\system32\user_gensett.xml 2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2014-01-10 23:30 - 2014-01-10 23:30 - 00000000 ____D C:\ProgramData\BDLogging 2014-01-10 23:30 - 2014-01-10 23:19 - 00253404 ____H C:\bdr-ld01 2014-01-10 23:30 - 2014-01-10 23:19 - 00009216 ____H C:\bdr-ld01.mbr 2014-01-10 23:20 - 2014-01-10 23:20 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Bitdefender 2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Users\Olli\AppData\Roaming\QuickScan 2014-01-10 23:16 - 2014-01-10 23:16 - 00000000 ____D C:\Program Files\Bitdefender 2014-01-10 23:16 - 2014-01-10 23:11 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2014-01-10 21:16 - 2014-01-10 21:16 - 05701712 _____ C:\Users\Olli\Downloads\bitdefender_14isecurity.exe 2014-01-10 19:51 - 2013-11-17 12:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-10 19:50 - 2014-01-10 19:50 - 00000000 ____D C:\Program Files (x86)\VideoPlayerV3 2014-01-09 21:26 - 2014-01-08 09:49 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf 2014-01-09 21:26 - 2013-11-19 20:54 - 00000000 ____D C:\ProgramData\tmp 2014-01-09 19:57 - 2014-01-08 09:49 - 00088455 _____ C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH.mcf~ 2014-01-09 18:56 - 2014-01-08 09:49 - 00000000 ____D C:\Users\Olli\Desktop\Mein CEWE FOTOBUCH_mcf-Dateien 2014-01-09 18:23 - 2009-07-14 05:45 - 03083704 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-09 09:03 - 2014-01-09 08:59 - 00000000 ____D C:\Users\Olli\AppData\Roaming\HTC 2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\Documents\HTC 2014-01-09 08:58 - 2014-01-09 08:58 - 00000000 ____D C:\Users\Olli\.android 2014-01-09 08:58 - 2013-11-16 15:26 - 00000000 ____D C:\Users\Olli\AppData\Local\Apple Computer 2014-01-09 08:58 - 2013-11-16 15:25 - 00000000 ____D C:\Users\Olli\AppData\Roaming\Apple Computer 2014-01-09 08:58 - 2013-11-03 11:47 - 00122064 _____ C:\Users\Olli\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 08:58 - 2013-11-03 10:32 - 00000000 ____D C:\Users\Olli 2014-01-09 08:57 - 2014-01-09 08:57 - 00002031 _____ C:\Users\Public\Desktop\HTC Sync Manager.lnk 2014-01-09 08:57 - 2014-01-09 08:32 - 00000000 ____D C:\Program Files (x86)\HTC 2014-01-09 08:57 - 2013-11-03 16:31 - 00052170 _____ C:\Windows\DPINST.LOG 2014-01-09 08:56 - 2014-01-09 08:56 - 00000000 ____D C:\Program Files (x86)\Spirent Communications 2014-01-09 08:54 - 2014-01-09 08:33 - 00000000 ____D C:\Users\Olli\AppData\Local\Downloaded Installations 2014-01-09 08:50 - 2014-01-09 08:50 - 00000000 ____D C:\ProgramData\HTC 2014-01-09 08:41 - 2009-07-14 18:58 - 00654166 _____ C:\Windows\system32\perfh007.dat 2014-01-09 08:41 - 2009-07-14 18:58 - 00130006 _____ C:\Windows\system32\perfc007.dat 2014-01-09 08:41 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-09 08:35 - 2014-01-09 08:35 - 00003610 _____ C:\Windows\System32\Tasks\Launch HTC Sync Loader 2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2014-01-09 08:32 - 2014-01-09 08:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2014-01-09 08:32 - 2013-11-03 12:02 - 00000000 ____D C:\Program Files (x86)\Adobe 2014-01-09 08:32 - 2013-11-03 12:00 - 00000000 ____D C:\Users\Olli\AppData\Local\Adobe 2014-01-09 08:31 - 2014-01-09 08:31 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0 2014-01-09 08:29 - 2014-01-09 08:23 - 165708080 _____ (HTC Corporation ) C:\Users\Olli\Downloads\setup_3.3.63.exe 2014-01-08 10:52 - 2014-01-08 10:10 - 00000000 ____D C:\Users\Olli\Desktop\Fotobuch London 2014-01-07 20:10 - 2013-11-14 21:51 - 00000000 ____D C:\Users\Olli\AppData\Roaming\vlc 2014-01-07 20:00 - 2013-11-14 21:50 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk 2014-01-07 19:05 - 2014-01-07 19:05 - 00002950 _____ C:\Windows\System32\Tasks\{7F7EBE5C-1EF8-4224-829A-EB0E36F60A1B} 2014-01-07 18:54 - 2013-11-03 17:29 - 00000000 ____D C:\Users\Olli\AppData\Roaming\FileZilla 2014-01-07 10:35 - 2013-11-03 22:47 - 00000000 ___RD C:\Program Files (x86)\Skype 2014-01-07 10:35 - 2013-11-03 22:47 - 00000000 ____D C:\ProgramData\Skype 2014-01-07 09:15 - 2013-11-03 12:34 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2014-01-07 09:09 - 2014-01-07 09:09 - 00001817 _____ C:\Users\Public\Desktop\Apps.lnk 2014-01-07 09:09 - 2014-01-07 09:09 - 00001807 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2014-01-07 09:09 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2014-01-07 09:03 - 2014-01-07 09:03 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2014-01-07 09:03 - 2013-11-03 12:34 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-23 09:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-21 17:06 - 2013-11-03 10:33 - 00001421 _____ C:\Users\Olli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-21 17:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-19 21:24 - 2013-12-19 21:18 - 00010277 _____ C:\Windows\IE11_main.log 2013-12-19 21:20 - 2013-12-19 21:20 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-19 21:20 - 2013-12-19 21:20 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-19 21:19 - 2013-12-19 21:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-19 21:19 - 2013-12-19 21:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-19 21:19 - 2013-12-19 21:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-19 21:19 - 2013-12-19 21:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-19 21:19 - 2013-12-19 21:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-19 21:19 - 2013-12-19 21:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-19 21:19 - 2013-12-19 21:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-19 21:19 - 2013-12-19 21:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-19 21:18 - 2013-11-03 12:32 - 00000000 ____D C:\Windows\system32\MRT 2013-12-19 21:17 - 2013-11-03 12:32 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-19 16:54 - 2013-11-03 12:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-13 20:57 - 2013-12-13 19:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-13 19:45 - 2013-12-13 19:45 - 07628951 _____ C:\Users\Olli\Desktop\DSC_6815.psd Some content of TEMP: ==================== C:\Users\Olli\AppData\Local\Temp\avgnt.exe C:\Users\Olli\AppData\Local\Temp\BunndleOfferManager.dll C:\Users\Olli\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe C:\Users\Olli\AppData\Local\Temp\FP_PL_MSI_INSTALLER.exe C:\Users\Olli\AppData\Local\Temp\OfficeSetup.exe C:\Users\Olli\AppData\Local\Temp\PrefJsonCpp.exe C:\Users\Olli\AppData\Local\Temp\sqlite3.exe C:\Users\Olli\AppData\Local\Temp\vlc-2.1.2-win32.exe C:\Users\Olli\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-11 12:15 ==================== End Of Log ============================ |
12.01.2014, 12:59 | #7 | |
/// TB-Ausbilder | Wieder einmal rvzr-a.akamaihd.net - Befall Servus, ich habe dich doch darum gebeten, FRST auf dem Desktop abzuspeichern und von dort zu starten... was machst du? Zitat:
Sei so nett und verschiebe bitte die FRST.exe auf dem Desktop. Alle weiteren Tools auch bitte dort abspeichern bzw. dann eben dorthin verschieben. Servus, Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 3 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 4 Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/
Bitte poste mit deiner nächsten Antwort
|
12.01.2014, 14:26 | #8 |
| Wieder einmal rvzr-a.akamaihd.net - BefallCode:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 12/01/2014 um 13:27:08 # Aktualisiert 23/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Olli - OLLI-PC # Gestartet von : C:\Users\Olli\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** Dienst Gelöscht : APNMCP ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\apn Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork Ordner Gelöscht : C:\Users\Olli\AppData\Local\AskPartnerNetwork Ordner Gelöscht : C:\Users\Olli\AppData\Local\SwvUpdater Ordner Gelöscht : C:\Users\Olli\AppData\Local\Temp\apn Ordner Gelöscht : C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh Datei Gelöscht : C:\Users\Olli\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk Datei Gelöscht : C:\Windows\Tasks\AmiUpdXp.job Datei Gelöscht : C:\Windows\System32\Tasks\AmiUpdXp ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1 Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{41564952-412D-5637-00A7-7A786E7484D7} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{41564952-412D-5637-00A7-7A786E7484D7}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D} Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork Schlüssel Gelöscht : HKLM\Software\BetterSurf Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v25.0.1 (de) [ Datei : C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\prefs.js ] -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht : homepage ************************* AdwCleaner[R0].txt - [5176 octets] - [12/01/2014 13:25:17] AdwCleaner[S0].txt - [4950 octets] - [12/01/2014 13:27:08] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5010 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Home Premium x64 Ran by Olli on 12.01.2014 at 13:40:02,68 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] "C:\Users\Olli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\startmenu\startfenster.lnk" Successfully deleted: [File] "C:\Users\Olli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk" ~~~ Folders ~~~ FireFox Successfully deleted: [File] C:\Users\Olli\AppData\Roaming\mozilla\firefox\profiles\w462gjcg.default\extensions\toolbar_avira-v7@apn.ask.com.xpi ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 12.01.2014 at 13:47:58,68 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.12.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Olli :: OLLI-PC [Administrator] Schutz: Aktiviert 12.01.2014 13:54:34 mbam-log-2014-01-12 (13-54-34).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 226322 Laufzeit: 6 Minute(n), Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 4 C:\$Recycle.Bin\S-1-5-21-208497957-186071530-2916542652-1001\$RY0LC37.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Olli\Downloads\freemakevideoconvertersetup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Olli\Downloads\SoftonicDownloader_fuer_super.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Olli\Downloads\winamp565_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter Zoek.exe v5.0.0.0 Updated 09-Januari-2014 Tool run by Olli on 12.01.2014 at 14:05:29,16. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Olli\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 12.01.2014 14:07:00 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-208497957-186071530-2916542652-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{41564952-412D-5637-00A7-7A786E7484D7} deleted successfully HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@bettersurfplus.com deleted successfully ==== Deleting Services ====================== ==== FireFox Fix ====================== Deleted from C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\prefs.js: user_pref("browser.startup.homepage", "hxxp://google.de/"); user_pref("browser.search.order.1", "SuchMaschine"); user_pref("keyword.URL", "hxxp://www.sm.de/?q="); Added to C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\prefs.js: user_pref("browser.startup.homepage", "hxxp://www.google.com"); user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "hxxp://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ProfilePath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default user.js not found ---- Lines ask.com modified from prefs.js ---- user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"ext@VideoPlayerV3beta674.net\":{\"descriptor\":\"C:\\\\Program Fi ---- FireFox user.js and prefs.js backups ---- prefs__1417_.backup ==== Deleting Files \ Folders ====================== C:\Users\Olli\.android deleted C:\PROGRA~2\VideoPlayerV3 deleted C:\Users\Olli\Favorites\Startfenster.lnk deleted C:\Users\Olli\Favorites\Links\Startfenster.lnk deleted C:\Users\Olli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk deleted C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default\searchplugins\search_engine.xml deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "ext@VideoPlayerV3beta674.net"="C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff" [] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default - Undetermined - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ff - Undetermined - C:\Program Files\Bitdefender\Bitdefender\Antispam32\ffpwdman AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Olli\AppData\Roaming\Mozilla\Firefox\Profiles\w462gjcg.default D6ED6EB98E759460AD8C66DE23070132 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll - Microsoft Office 2013 18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013 77B645B655759F574B2555276FA111D9 - C:\Windows\system32\Macromed\Flash\NPSWF32.dll - Shockwave Flash ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions einecjnnfjglbkjjlbekhpcmmegmgbnl - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta674\ch\VideoPlayerV3beta674.crx[] mmifolfpllfdhilecpdpmemhelmanajl - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ch\BetterSurfPlus.crx[] HP Product Detection Plugin - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp Hide My Ass Web Proxy - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd SEO Site Tools - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc Video Player - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl DoNotTrackMe Online Privacy Protection - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd Pendule - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkffbkamcejhkcaocmkdeiiccpmjfdi Window Resizer - Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkelicaakdanhinjdeammmilcgefonfh ==== Chrome Fix ====================== C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {94A69141-E475-4A8F-898D-166E3E01DD1C} SuchMaschine Url="hxxp://www.sm.de/?q={searchTerms}" ==== Reset Google Chrome ====================== C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ext@VideoPlayerV3beta674.net deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\einecjnnfjglbkjjlbekhpcmmegmgbnl deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mmifolfpllfdhilecpdpmemhelmanajl deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Olli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Olli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Olli\AppData\Local\Mozilla\Firefox\Profiles\w462gjcg.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Olli\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=25 folders=13 832097 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Users\Olli\AppData\Local\Temp will be emptied at reboot C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Olli\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on 12.01.2014 at 14:23:00,66 ====================== Gruß, Hawkeye |
12.01.2014, 20:36 | #9 | |
/// TB-Ausbilder | Wieder einmal rvzr-a.akamaihd.net - Befall Servus, Zitat:
Wir spüren die letzten Reste auf, damit wir sie später entfernen können: Schritt 1 Kontrollscan mit FRST Führe wie zuvor beschrieben einen Scan mit FRST aus. Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan. Es werden wieder zwei Logdateien erzeugt. Poste mir diese. Schritt 2 Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
Gibt es noch Probleme mit Malware? Wenn ja, welche? Wie läuft der Rechner derzeit? Bitte poste mit deiner nächsten Antwort
|
16.01.2014, 17:28 | #10 |
/// TB-Ausbilder | Wieder einmal rvzr-a.akamaihd.net - Befall Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen! |
Themen zu Wieder einmal rvzr-a.akamaihd.net - Befall |
acrobat, administrator, adobe, avira, bitdefender, branding, browser, defender, device driver, google, homepage, launch, memory.dmp, microsoft, probleme, pup.optional.opencandy, pup.optional.softonic.a, pup.optional.spigot.a, realtek, registry, richtlinie, server, software, system32 |