| |
| |||||||
Log-Analyse und Auswertung: Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
11.01.2014, 16:56
| #1 |
| |  Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows 7 Home Premium Edition Windows Information: Service Pack 1 (build 7601), 64-bit Base Board Manufacturer: ASUSTeK Computer Inc. BIOS Manufacturer: American Megatrends Inc. System Manufacturer: ASUSTeK Computer Inc. System Product Name: K93SV Logical Drives Mask: 0x0001000c Kernel Drivers (total 194): 0x03608000 \SystemRoot\system32\ntoskrnl.exe 0x03BED000 \SystemRoot\system32\hal.dll 0x00BB1000 \SystemRoot\system32\kdcom.dll 0x00C5B000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x00CAA000 \SystemRoot\system32\PSHED.dll 0x00CBE000 \SystemRoot\system32\CLFS.SYS 0x00D1C000 \SystemRoot\system32\CI.dll 0x00E9B000 \SystemRoot\system32\drivers\Wdf01000.sys 0x00F5D000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x010DD000 \SystemRoot\System32\Drivers\sptd.sys 0x01000000 \SystemRoot\system32\drivers\ACPI.sys 0x01057000 \SystemRoot\system32\drivers\WMILIB.SYS 0x01060000 \SystemRoot\system32\drivers\msisadrv.sys 0x0106A000 \SystemRoot\system32\drivers\vdrvroot.sys 0x01077000 \SystemRoot\system32\drivers\pci.sys 0x010AA000 \SystemRoot\System32\drivers\partmgr.sys 0x010BF000 \SystemRoot\system32\drivers\compbatt.sys 0x010C8000 \SystemRoot\system32\drivers\BATTC.SYS 0x00F6D000 \SystemRoot\system32\drivers\volmgr.sys 0x00F82000 \SystemRoot\System32\drivers\volmgrx.sys 0x010D4000 \SystemRoot\system32\drivers\pciide.sys 0x00FDE000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x00E00000 \SystemRoot\System32\drivers\mountmgr.sys 0x01204000 \SystemRoot\system32\DRIVERS\iaStor.sys 0x01358000 \SystemRoot\system32\drivers\atapi.sys 0x01361000 \SystemRoot\system32\drivers\ataport.SYS 0x0138B000 \SystemRoot\system32\drivers\msahci.sys 0x01396000 \SystemRoot\system32\drivers\amdxata.sys 0x013A1000 \SystemRoot\system32\drivers\fltmgr.sys 0x00E1A000 \SystemRoot\system32\drivers\fileinfo.sys 0x01451000 \SystemRoot\System32\Drivers\Ntfs.sys 0x00E2E000 \SystemRoot\System32\Drivers\msrpc.sys 0x01400000 \SystemRoot\System32\Drivers\ksecdd.sys 0x01600000 \SystemRoot\System32\Drivers\cng.sys 0x01672000 \SystemRoot\System32\drivers\pcw.sys 0x01683000 \SystemRoot\System32\Drivers\Fs_Rec.sys 0x0168D000 \SystemRoot\system32\drivers\ndis.sys 0x0177F000 \SystemRoot\system32\drivers\NETIO.SYS 0x0141B000 \SystemRoot\System32\Drivers\ksecpkg.sys 0x01800000 \SystemRoot\System32\drivers\tcpip.sys 0x00C00000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x01A38000 \SystemRoot\system32\drivers\volsnap.sys 0x01A84000 \SystemRoot\System32\Drivers\spldr.sys 0x01A8C000 \SystemRoot\System32\drivers\rdyboost.sys 0x01AC6000 \SystemRoot\system32\DRIVERS\nvpciflt.sys 0x01AD1000 \SystemRoot\System32\Drivers\mup.sys 0x01AE3000 \SystemRoot\System32\drivers\hwpolicy.sys 0x01AEC000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x01B26000 \SystemRoot\system32\Drivers\fsbts.sys 0x01B36000 \SystemRoot\system32\drivers\disk.sys 0x01B4C000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x04000000 \SystemRoot\system32\DRIVERS\dtsoftbus01.sys 0x04072000 \SystemRoot\System32\Drivers\Null.SYS 0x0407B000 \SystemRoot\System32\Drivers\Beep.SYS 0x041EC000 \SystemRoot\System32\drivers\vga.sys 0x04048000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x01B8A000 \SystemRoot\System32\drivers\watchdog.sys 0x01B9A000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x01BA3000 \SystemRoot\system32\drivers\rdpencdd.sys 0x01BAC000 \SystemRoot\system32\drivers\rdprefmp.sys 0x01BB5000 \SystemRoot\System32\Drivers\Msfs.SYS 0x01BC0000 \SystemRoot\System32\Drivers\Npfs.SYS 0x01BD1000 \SystemRoot\system32\DRIVERS\tdx.sys 0x01BF3000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x06EAB000 \SystemRoot\system32\drivers\afd.sys 0x06F34000 \SystemRoot\System32\DRIVERS\netbt.sys 0x06F79000 \SystemRoot\system32\DRIVERS\wfplwf.sys 0x06F82000 \SystemRoot\system32\DRIVERS\pacer.sys 0x06FA8000 \SystemRoot\system32\DRIVERS\vwififlt.sys 0x06FBE000 \SystemRoot\system32\DRIVERS\hssdrv6.sys 0x06FD3000 \SystemRoot\system32\DRIVERS\netbios.sys 0x06FE2000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x06E00000 \SystemRoot\system32\DRIVERS\termdd.sys 0x06E14000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x07495000 \SystemRoot\system32\DRIVERS\nvkflt.sys 0x074E2000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x07400000 \SystemRoot\System32\drivers\dxgmms1.sys 0x07446000 \SystemRoot\system32\drivers\nsiproxy.sys 0x07452000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x0745D000 \??\C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys 0x07465000 \??\C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys 0x07475000 \SystemRoot\System32\Drivers\ElbyCDIO.sys 0x07481000 \SystemRoot\System32\drivers\discache.sys 0x075D6000 \SystemRoot\System32\Drivers\dfsc.sys 0x06E65000 \SystemRoot\system32\DRIVERS\blbdrive.sys 0x075F4000 \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys 0x06E76000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x0F216000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys 0x0FE57000 \SystemRoot\System32\Drivers\nvBridge.kmd 0x07607000 \SystemRoot\system32\DRIVERS\igdkmd64.sys 0x07B25000 \SystemRoot\system32\DRIVERS\HECIx64.sys 0x07B36000 \SystemRoot\system32\DRIVERS\AiCharger.sys 0x07B39000 \SystemRoot\system32\drivers\usbehci.sys 0x07B4A000 \SystemRoot\system32\drivers\USBPORT.SYS 0x07BA0000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x0FE59000 \SystemRoot\system32\DRIVERS\Rt64win7.sys 0x07C95000 \SystemRoot\system32\DRIVERS\athrx.sys 0x07EBC000 \SystemRoot\system32\DRIVERS\vwifibus.sys 0x07EC9000 \SystemRoot\system32\DRIVERS\nusb3xhc.sys 0x07EFA000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x07EFC000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0x07F1A000 \SystemRoot\system32\DRIVERS\ETD.sys 0x07F3E000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x07F4D000 \SystemRoot\system32\DRIVERS\kbfiltr.sys 0x07F55000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x07F64000 \SystemRoot\system32\DRIVERS\CmBatt.sys 0x07F69000 \SystemRoot\system32\DRIVERS\wmiacpi.sys 0x07F72000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x07F88000 \SystemRoot\system32\DRIVERS\CompositeBus.sys 0x07F98000 \SystemRoot\system32\DRIVERS\AgileVpn.sys 0x07FAE000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x07FD2000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x07C00000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x07C2F000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x07C4A000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x07C6B000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x07C85000 \SystemRoot\system32\DRIVERS\swenum.sys 0x0FEDE000 \SystemRoot\system32\DRIVERS\ks.sys 0x07C87000 \SystemRoot\system32\DRIVERS\btath_bus.sys 0x07FDE000 \SystemRoot\system32\drivers\WmBEnum.sys 0x07FE3000 \SystemRoot\system32\drivers\WmXlCore.sys 0x07BC4000 \SystemRoot\system32\DRIVERS\umbus.sys 0x07BD6000 \SystemRoot\system32\drivers\nvvad64v.sys 0x0FF21000 \SystemRoot\system32\drivers\portcls.sys 0x0FF5E000 \SystemRoot\system32\drivers\drmk.sys 0x07FF5000 \SystemRoot\system32\drivers\ksthunk.sys 0x0FF80000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x07BE3000 \SystemRoot\system32\DRIVERS\nusb3hub.sys 0x0FFDA000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x090F8000 \SystemRoot\system32\drivers\RTKVHD64.sys 0x093B3000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x09000000 \SystemRoot\system32\DRIVERS\btfilter.sys 0x09048000 \SystemRoot\System32\Drivers\BTHUSB.sys 0x09060000 \SystemRoot\System32\Drivers\bthport.sys 0x093D0000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x093DE000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x093F7000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x01A00000 \SystemRoot\system32\DRIVERS\LEqdUsb.Sys 0x0FFEF000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x0F200000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x090EC000 \SystemRoot\system32\DRIVERS\LHidEqd.Sys 0x01A17000 \SystemRoot\system32\DRIVERS\LHidFilt.Sys 0x017DF000 \SystemRoot\system32\DRIVERS\LMouFilt.Sys 0x04082000 \SystemRoot\system32\DRIVERS\rfcomm.sys 0x040AE000 \SystemRoot\system32\drivers\BthEnum.sys 0x00030000 \SystemRoot\System32\win32k.sys 0x06E9C000 \SystemRoot\System32\drivers\Dxapi.sys 0x040BE000 \SystemRoot\system32\DRIVERS\bthpan.sys 0x040DE000 \SystemRoot\system32\DRIVERS\bthmodem.sys 0x040F5000 \SystemRoot\system32\drivers\modem.sys 0x04104000 \SystemRoot\system32\DRIVERS\btath_rcp.sys 0x04129000 \SystemRoot\system32\drivers\btath_a2dp.sys 0x02CC6000 \SystemRoot\system32\DRIVERS\btath_hcrp.sys 0x02D29000 \SystemRoot\system32\DRIVERS\btath_flt.sys 0x02D38000 \SystemRoot\system32\DRIVERS\btath_lwflt.sys 0x02D4B000 \SystemRoot\system32\DRIVERS\monitor.sys 0x02D59000 \SystemRoot\System32\Drivers\crashdmp.sys 0x00540000 \SystemRoot\System32\TSDDD.dll 0x03A82000 \SystemRoot\System32\Drivers\dump_iaStor.sys 0x03BD6000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0x00760000 \SystemRoot\System32\cdd.dll 0x03A00000 \SystemRoot\system32\drivers\luafv.sys 0x03A23000 \SystemRoot\system32\DRIVERS\Sftvollh.sys 0x03A2E000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x02D67000 \SystemRoot\system32\DRIVERS\nwifi.sys 0x03A43000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x03A56000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x03A6E000 \SystemRoot\system32\DRIVERS\TurboB.sys 0x03A75000 \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys 0x03BE9000 \SystemRoot\system32\DRIVERS\vwifimp.sys 0x08E3E000 \SystemRoot\system32\drivers\HTTP.sys 0x08F07000 \SystemRoot\system32\DRIVERS\bowser.sys 0x08F25000 \SystemRoot\System32\drivers\mpsdrv.sys 0x08F3D000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x08F6A000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x08FB8000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x02C00000 \SystemRoot\system32\drivers\peauth.sys 0x08FDC000 \SystemRoot\System32\Drivers\secdrv.SYS 0x0B635000 \SystemRoot\system32\DRIVERS\Sftfslh.sys 0x0B6F7000 \SystemRoot\system32\DRIVERS\Sftplaylh.sys 0x0B745000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x0B776000 \SystemRoot\System32\drivers\tcpipreg.sys 0x0B788000 \SystemRoot\System32\DRIVERS\srv2.sys 0x0C2DA000 \SystemRoot\System32\DRIVERS\srv.sys 0x0C372000 \SystemRoot\system32\DRIVERS\Sftredirlh.sys 0x0C37E000 \SystemRoot\System32\drivers\ipnat.sys 0x0C3AD000 \??\C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys 0x0C3C5000 \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys 0x0C200000 \??\C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys 0x0C235000 \SystemRoot\System32\Drivers\fastfat.SYS 0x21220000 \SystemRoot\system32\drivers\PLTGC.sys 0x777B0000 \Windows\System32\ntdll.dll 0x47BB0000 \Windows\System32\smss.exe 0xFFAD0000 \Windows\System32\apisetschema.dll Processes (total 109): 0 System Idle Process 4 System 332 C:\Windows\System32\smss.exe 516 csrss.exe 684 C:\Windows\System32\wininit.exe 704 csrss.exe 748 C:\Windows\System32\services.exe 764 C:\Windows\System32\lsass.exe 772 C:\Windows\System32\lsm.exe 828 C:\Windows\System32\winlogon.exe 924 C:\Windows\System32\svchost.exe 992 C:\Windows\System32\nvvsvc.exe 1016 C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 440 C:\Windows\System32\svchost.exe 580 C:\Windows\System32\svchost.exe 504 C:\Windows\System32\svchost.exe 872 C:\Windows\System32\svchost.exe 1036 C:\Windows\System32\svchost.exe 1120 C:\Windows\System32\svchost.exe 1216 C:\Windows\System32\svchost.exe 1324 C:\Windows\System32\FBAgent.exe 1348 C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe 1388 C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe 1504 C:\Windows\System32\spoolsv.exe 1544 C:\Windows\System32\svchost.exe 1720 C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe 1808 C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe 1816 C:\Windows\System32\nvvsvc.exe 1912 C:\Program Files (x86)\Bluetooth Suite\AdminService.exe 2016 C:\Windows\System32\taskhost.exe 1296 C:\Windows\System32\dwm.exe 1304 C:\Windows\System32\taskeng.exe 1752 D:\Programe\CheckDrive\CheckDriveBackgroundGuard.exe 1604 C:\Windows\explorer.exe 1948 C:\Windows\System32\taskeng.exe 2056 C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe 2104 C:\Program Files (x86)\F-Secure\fshoster32.exe 2148 C:\Program Files\P4G\BatteryLife.exe 2156 C:\Program Files (x86)\ASUS\Splendid\ACMON.exe 2164 C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe 2176 C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe 2208 C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2340 C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe 2368 C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe 2448 C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fsgk32.exe 2512 C:\Windows\SysWOW64\ACEngSvr.exe 2720 C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe 2132 C:\Windows\SysWOW64\PnkBstrA.exe 3088 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 3140 C:\Windows\System32\svchost.exe 3208 C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe 3260 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 3312 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 3356 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE 3428 C:\Windows\AsScrPro.exe 3520 C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe 3528 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 3652 C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe 3660 C:\Windows\System32\conhost.exe 3712 C:\Program Files\NVIDIA Corporation\Display\nvtray.exe 4004 C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe 4020 C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe 3708 WmiPrvSE.exe 3768 C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe 3504 C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe 2924 C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe 3748 C:\Program Files\Elantech\ETDCtrl.exe 4172 C:\Program Files\Plantronics\GameCom780\GameCom780.exe 4200 C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe 4272 C:\Windows\System32\hkcmd.exe 4284 C:\Windows\System32\igfxpers.exe 4464 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE 4744 C:\Windows\System32\alg.exe 4556 C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe 2772 C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe 2476 C:\Program Files\Elantech\ETDCtrlHelper.exe 5136 C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe 5240 C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE 5360 C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSHDLL64.EXE 5452 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 5468 C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe 5484 C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe 5492 C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe 5504 C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 5524 C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe 5532 C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE 5540 C:\Program Files (x86)\F-Secure\fshoster32.exe 5672 C:\PROGRA~2\Sony\CONTEN~1\CMA.exe 5680 D:\PROGRA~1\LOGITE~1\SetPoint\SetPoint.exe 5708 C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe 5760 D:\Programme\Logitech Maus\SetPoint\x86\SetPoint32.exe 5992 C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe 6064 C:\Windows\System32\svchost.exe 6136 C:\Windows\System32\svchost.exe 876 C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fssm32.exe 6556 C:\Windows\System32\svchost.exe 6628 C:\Program Files\Windows Media Player\wmpnetwk.exe 5780 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe 4536 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe 7052 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe 4336 C:\Windows\System32\taskhost.exe 4592 C:\Program Files (x86)\Mozilla Firefox\firefox.exe 6696 D:\totalcmd\TOTALCMD64.EXE 2276 WmiPrvSE.exe 2936 dllhost.exe 5272 dllhost.exe 3844 C:\Users\tikijama\Desktop\MBRCheck.exe 2888 C:\Windows\System32\conhost.exe 6700 C:\Windows\System32\dllhost.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000006`40100000 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000051`5a900000 (NTFS) \\.\Q: --> error 5 PhysicalDrive0 Model Number: ST9750423AS, Rev: 0001SDM1 Size Device Name MBR Status -------------------------------------------- 698 GB \\.\PhysicalDrive0 Windows 7 MBR code detected SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79 Ich hoffe das ist richtig so ? Grüße simtim75 |
|
11.01.2014, 18:32
| #2 |
| /// the machine /// TB-Ausbilder    | Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? hi,
__________________ So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
11.01.2014, 22:00
| #3 |
| | Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? FRST Logfile:
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2014 05
Ran by tikijama (administrator) on TIKIJAMA-MOBIL on 11-01-2014 20:47:59
Running from C:\Users\tikijama\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(ASUS) C:\Windows\AsScrPro.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files\Plantronics\GameCom780\GameCom780.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSHDLL64.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Logitech, Inc.) D:\Programme\Logitech Maus\SetPoint\SetPoint.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe
() D:\Programme\Logitech Maus\SetPoint\x86\SetPoint32.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2213992 2011-05-12] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [GamecomSound] - C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\aprp.exe [2018032 2011-04-13] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [USBChargerPlusTray] - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [496560 2011-04-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [F-Secure Manager] - C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE [310208 2013-08-12] (F-Secure Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [F-Secure Hoster (666)] - C:\Program Files (x86)\F-Secure\fshoster32.exe [191528 2013-10-30] (F-Secure Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKCU\...\Run: [RocketDock] - "C:\Program Files (x86)\RocketDock\RocketDock.exe"
HKCU\...\Policies\Explorer: [DisallowRun] 1
MountPoints2: {005b983c-4de8-11e3-9674-74de2bdb3cf6} - I:\setup.exe
MountPoints2: {0dddc08b-48ba-11e3-aab7-74de2bdb3cf6} - G:\setup.exe
MountPoints2: {0dddc08f-48ba-11e3-aab7-74de2bdb3cf6} - H:\setup.exe
MountPoints2: {64a63916-6d46-11e3-972f-74de2bdb3cf6} - E:\CMADownloader.exe
MountPoints2: {92f7cf40-4376-11e2-8c8a-74de2bdb3cf6} - F:\LaunchU3.exe -a
MountPoints2: {ad5b9a0a-4a05-11e3-88f6-74de2bdb3cf6} - Z:\setup.exe
MountPoints2: {af67f8bf-48b2-11e3-8d22-74de2bdb3cf6} - G:\raf-tr2013.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\Users\KIKKI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk
ShortcutTarget: Intel(R) Turbo Boost Technology Monitor 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x394A56162DD7CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {D4154476-5030-48FA-B444-D329200D5887} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1QzuyB0E0D0EtB0B0D0BtByDzzyC0CtDzzyDtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1183734697&ir=
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: F-Secure Online Safety - {45BBE08D-81C5-4A67-AF20-B2A077C67747} - C:\Program Files (x86)\F-Secure\apps\OnlineSafety\browser\install\fs_ie_https\fs_ie_https.dll (F-Secure Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{3739FBBD-D10C-48DE-AF71-E266A1CA42F2}: [NameServer]192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\tikijama\AppData\Roaming\Mozilla\Firefox\Profiles\72kl2gf5.default
FF Homepage: https://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - D:\Programme\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2105 - C:\Program Files (x86)\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1739 - C:\Program Files (x86)\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Computer, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Bitdefender QuickScan - C:\Users\tikijama\AppData\Roaming\Mozilla\Firefox\Profiles\72kl2gf5.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2013-11-05]
FF Extension: {58a90595-1c68-479d-83a6-684842148af9} - C:\Users\tikijama\AppData\Roaming\Mozilla\Firefox\Profiles\72kl2gf5.default\Extensions\{58a90595-1c68-479d-83a6-684842148af9}.xpi [2013-10-25]
FF Extension: PDF Print Wizard Free - C:\Users\tikijama\AppData\Roaming\Mozilla\Firefox\Profiles\72kl2gf5.default\Extensions\{957ed8f4-641c-4aa5-b8db-01c583a960c0}.xpi [2013-10-25]
FF Extension: Adblock Plus - C:\Users\tikijama\AppData\Roaming\Mozilla\Firefox\Profiles\72kl2gf5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-21]
FF HKLM-x32\...\Firefox\Extensions: [{ac8b2a85-0216-4d45-abdb-10261ce20a27}] - C:\Program Files (x86)\F-Secure\apps\OnlineSafety\browser\deploy\fs_firefox_https
FF Extension: Online Safety - C:\Program Files (x86)\F-Secure\apps\OnlineSafety\browser\deploy\fs_firefox_https [2013-12-15]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [hpnpkopfmfelleiiklcfgmbdhgnkioan] - C:\Program Files (x86)\F-Secure\apps\OnlineSafety\browser\deploy\fs_chrome_https.crx [2013-12-15]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\tikijama\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-10-25]
==================== Services (Whitelisted) =================
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
S4 F-Secure Gatekeeper Handler Starter; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fsgk32st.exe [221864 2011-10-04] (F-Secure Corporation)
R2 fshoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [191528 2013-10-30] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-12] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\F-Secure\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-25] (F-Secure Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-25] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)
S3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31968 2012-10-08] (Wondershare)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-08] (Disc Soft Ltd)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [203304 2013-12-15] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys [69296 2013-10-16] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2013-08-26] ()
R0 fsbts; C:\Windows\SysWow64\Drivers\fsbts.sys [42248 2013-03-05] ()
R3 fsni; C:\Program Files (x86)\F-Secure\apps\CCF_Scanning\fsni64.sys [81344 2013-06-20] (F-Secure Corporation)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-06-24] ()
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [41704 2012-08-01] (AnchorFree Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MEMSWEEP2; C:\Windows\system32\CE86.tmp [6144 2011-05-12] (Sophos Plc)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [300320 2013-11-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-11-08] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-11 20:47 - 2014-01-11 20:48 - 00022049 _____ C:\Users\tikijama\Desktop\FRST.txt
2014-01-11 20:47 - 2014-01-11 20:47 - 00000000 ____D C:\FRST
2014-01-11 20:46 - 2014-01-11 20:44 - 02076672 _____ (Farbar) C:\Users\tikijama\Desktop\FRST64.exe
2014-01-11 20:27 - 2014-01-11 20:27 - 00000000 ___RD C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-11 18:23 - 2014-01-11 18:23 - 00000000 ____D C:\Users\tikijama\AppData\Local\Avg2014
2014-01-11 16:43 - 2014-01-11 16:43 - 00017843 _____ C:\Users\tikijama\Desktop\MBRCheck_01.11.14_16.43.00.txt
2014-01-11 16:38 - 2014-01-11 16:35 - 00089088 _____ C:\Windows\system32\mbr.exe
2014-01-11 16:33 - 2014-01-11 16:33 - 00080384 _____ C:\Users\tikijama\Desktop\MBRCheck.exe
2014-01-11 14:22 - 2014-01-11 14:22 - 00000976 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk
2014-01-11 14:18 - 2014-01-11 14:22 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-11 13:53 - 2014-01-11 13:53 - 00000000 ____D C:\Windows\System32\Tasks\Abelssoft
2014-01-11 13:52 - 2014-01-11 13:53 - 00000000 ____D C:\Users\tikijama\AppData\Local\Abelssoft
2014-01-11 13:52 - 2014-01-11 13:52 - 00000795 _____ C:\Users\tikijama\Desktop\CheckDrive.lnk
2014-01-11 13:12 - 2014-01-11 13:12 - 00000000 __SHD C:\found.001
2014-01-10 19:38 - 2014-01-10 19:39 - 00000000 ____D C:\AdwCleaner
2014-01-10 18:39 - 2014-01-10 18:39 - 00001272 _____ C:\Windows\PFRO.log
2014-01-10 17:21 - 2014-01-11 20:26 - 00002912 _____ C:\Windows\setupact.log
2014-01-10 17:21 - 2014-01-10 17:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-10 15:52 - 2014-01-10 15:52 - 00000000 __SHD C:\found.000
2014-01-10 12:43 - 2014-01-10 12:43 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-08 16:47 - 2014-01-08 16:47 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-05 20:18 - 2014-01-05 20:18 - 00000000 ____D C:\Users\tikijama\AppData\Local\{A8DD359E-F319-42BC-9EEA-8BA64C1DCA78}
2013-12-31 15:30 - 2013-12-31 15:30 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-31 15:30 - 2013-12-31 15:30 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\Malwarebytes
2013-12-31 15:29 - 2013-12-31 15:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-31 15:29 - 2013-12-31 15:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-31 15:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-29 17:21 - 2013-12-29 17:21 - 00000000 ____D C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2013-12-27 15:40 - 2013-12-27 16:20 - 00000000 ____D C:\Program Files (x86)\Dishonored
2013-12-25 19:23 - 2013-12-25 19:23 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\XMedia Recode
2013-12-25 15:00 - 2013-12-30 11:10 - 00000000 ____D C:\Program Files (x86)\XMedia Recode
2013-12-25 13:54 - 2013-12-25 19:30 - 00000000 ____D C:\ProgramData\Freemake
2013-12-25 13:54 - 2013-12-25 19:30 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-12-25 13:54 - 2013-12-25 13:55 - 00000000 ____D C:\Users\tikijama\Documents\Freemake
2013-12-25 13:08 - 2013-12-25 13:09 - 00000000 ____D C:\Users\tikijama\Documents\PS Vita
2013-12-21 17:58 - 2013-12-21 17:59 - 00000000 ____D C:\Users\tikijama\AppData\Local\NVIDIA Corporation
2013-12-21 17:57 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-21 17:57 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-21 15:43 - 2013-12-21 15:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 13:29 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-15 13:29 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-15 13:29 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-15 13:29 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-15 13:29 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-15 13:29 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-12-15 13:29 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-12 21:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 21:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 21:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-12 21:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-12 21:29 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 21:29 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 21:29 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 21:29 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 21:29 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 21:29 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 21:29 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 21:29 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 21:29 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-12 21:29 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 21:29 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 21:29 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 21:29 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 21:29 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 21:29 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-12 21:29 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-12 21:29 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-12 21:29 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-12 21:29 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 21:29 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 21:29 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-12 21:29 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-12 21:29 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 21:29 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 21:29 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 21:29 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-12 21:29 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-12 21:29 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 21:28 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-12 21:28 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 21:28 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-12 19:03 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 19:03 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 19:03 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 19:03 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 19:03 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 19:03 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 19:03 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 19:03 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 19:03 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 19:03 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 19:03 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 19:03 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 19:03 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 19:03 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 19:03 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 19:03 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 19:03 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 19:03 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 19:03 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
==================== One Month Modified Files and Folders =======
2014-01-11 20:48 - 2014-01-11 20:47 - 00022049 _____ C:\Users\tikijama\Desktop\FRST.txt
2014-01-11 20:47 - 2014-01-11 20:47 - 00000000 ____D C:\FRST
2014-01-11 20:44 - 2014-01-11 20:46 - 02076672 _____ (Farbar) C:\Users\tikijama\Desktop\FRST64.exe
2014-01-11 20:36 - 2011-12-25 20:23 - 00000000 ____D C:\Users\tikijama\AppData\Local\CrashDumps
2014-01-11 20:34 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-11 20:34 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-11 20:30 - 2011-11-27 05:52 - 01126503 _____ C:\Windows\WindowsUpdate.log
2014-01-11 20:27 - 2014-01-11 20:27 - 00000000 ___RD C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-01-11 20:27 - 2011-12-24 17:22 - 00000000 ___HD C:\ASUS.DAT
2014-01-11 20:26 - 2014-01-10 17:21 - 00002912 _____ C:\Windows\setupact.log
2014-01-11 20:26 - 2011-12-24 17:21 - 00000000 ____D C:\Users\tikijama
2014-01-11 20:26 - 2011-11-27 06:26 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2014-01-11 20:25 - 2011-11-27 06:03 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-11 20:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-11 20:14 - 2012-03-30 19:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-11 18:46 - 2012-04-15 19:34 - 00000000 ____D C:\Users\tikijama\Documents\Outlook-Dateien
2014-01-11 18:23 - 2014-01-11 18:23 - 00000000 ____D C:\Users\tikijama\AppData\Local\Avg2014
2014-01-11 18:18 - 2013-09-28 17:45 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2014-01-11 17:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-11 17:03 - 2011-02-19 05:24 - 00722222 _____ C:\Windows\system32\perfh007.dat
2014-01-11 17:03 - 2011-02-19 05:24 - 00158028 _____ C:\Windows\system32\perfc007.dat
2014-01-11 17:03 - 2009-07-14 06:13 - 01683216 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-11 17:02 - 2013-06-01 19:15 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\vlc
2014-01-11 16:43 - 2014-01-11 16:43 - 00017843 _____ C:\Users\tikijama\Desktop\MBRCheck_01.11.14_16.43.00.txt
2014-01-11 16:35 - 2014-01-11 16:38 - 00089088 _____ C:\Windows\system32\mbr.exe
2014-01-11 16:33 - 2014-01-11 16:33 - 00080384 _____ C:\Users\tikijama\Desktop\MBRCheck.exe
2014-01-11 14:22 - 2014-01-11 14:22 - 00000976 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk
2014-01-11 14:22 - 2014-01-11 14:18 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-11 13:53 - 2014-01-11 13:53 - 00000000 ____D C:\Windows\System32\Tasks\Abelssoft
2014-01-11 13:53 - 2014-01-11 13:52 - 00000000 ____D C:\Users\tikijama\AppData\Local\Abelssoft
2014-01-11 13:52 - 2014-01-11 13:52 - 00000795 _____ C:\Users\tikijama\Desktop\CheckDrive.lnk
2014-01-11 13:12 - 2014-01-11 13:12 - 00000000 __SHD C:\found.001
2014-01-11 12:30 - 2013-04-05 17:42 - 00000000 ____D C:\Program Files\Defraggler
2014-01-11 12:30 - 2013-04-05 17:39 - 00000000 ____D C:\Program Files\CCleaner
2014-01-10 19:39 - 2014-01-10 19:38 - 00000000 ____D C:\AdwCleaner
2014-01-10 19:39 - 2011-12-24 17:22 - 00001003 _____ C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-10 19:09 - 2013-02-03 14:06 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\QuickScan
2014-01-10 18:39 - 2014-01-10 18:39 - 00001272 _____ C:\Windows\PFRO.log
2014-01-10 17:21 - 2014-01-10 17:21 - 00000000 _____ C:\Windows\setuperr.log
2014-01-10 17:21 - 2011-11-27 06:24 - 00001785 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-10 15:52 - 2014-01-10 15:52 - 00000000 __SHD C:\found.000
2014-01-10 12:59 - 2011-11-27 05:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-10 12:43 - 2014-01-10 12:43 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-08 16:47 - 2014-01-08 16:47 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2014-01-07 14:07 - 2011-11-27 06:24 - 00003044 _____ C:\Windows\system32\AutoRunFilter.ini
2014-01-06 21:16 - 2012-01-12 18:54 - 00000000 ____D C:\Users\tikijama\AppData\Local\Google
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-05 20:18 - 2014-01-05 20:18 - 00000000 ____D C:\Users\tikijama\AppData\Local\{A8DD359E-F319-42BC-9EEA-8BA64C1DCA78}
2014-01-01 21:22 - 2011-12-24 17:22 - 00000000 ___RD C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-31 15:30 - 2013-12-31 15:30 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-31 15:30 - 2013-12-31 15:30 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\Malwarebytes
2013-12-31 15:30 - 2013-12-31 15:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-31 15:29 - 2013-12-31 15:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 11:10 - 2013-12-25 15:00 - 00000000 ____D C:\Program Files (x86)\XMedia Recode
2013-12-29 17:21 - 2013-12-29 17:21 - 00000000 ____D C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2013-12-28 22:49 - 2013-11-08 21:33 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\DAEMON Tools Lite
2013-12-28 16:18 - 2012-01-01 00:53 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-27 19:59 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-27 16:20 - 2013-12-27 15:40 - 00000000 ____D C:\Program Files (x86)\Dishonored
2013-12-25 19:30 - 2013-12-25 13:54 - 00000000 ____D C:\ProgramData\Freemake
2013-12-25 19:30 - 2013-12-25 13:54 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-12-25 19:23 - 2013-12-25 19:23 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\XMedia Recode
2013-12-25 13:55 - 2013-12-25 13:54 - 00000000 ____D C:\Users\tikijama\Documents\Freemake
2013-12-25 13:09 - 2013-12-25 13:08 - 00000000 ____D C:\Users\tikijama\Documents\PS Vita
2013-12-25 13:08 - 2012-06-23 16:08 - 00000000 ____D C:\Users\tikijama\AppData\Roaming\Sony Corporation
2013-12-25 13:07 - 2012-08-17 19:25 - 00000000 ____D C:\Program Files (x86)\Sony
2013-12-23 20:05 - 2011-12-24 20:47 - 01657496 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-22 10:18 - 2013-05-11 20:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 18:00 - 2013-05-26 14:54 - 00000000 ____D C:\Users\tikijama\AppData\Local\NVIDIA
2013-12-21 17:59 - 2013-12-21 17:58 - 00000000 ____D C:\Users\tikijama\AppData\Local\NVIDIA Corporation
2013-12-21 17:59 - 2011-11-27 06:03 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-21 17:58 - 2011-11-27 06:03 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-21 17:58 - 2011-11-27 06:02 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-21 15:43 - 2013-12-21 15:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-18 10:01 - 2013-09-28 17:48 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-18 10:01 - 2013-09-28 17:48 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-18 10:01 - 2013-09-28 17:45 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-18 10:01 - 2013-09-28 17:45 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-18 10:01 - 2013-09-28 17:45 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-15 19:07 - 2011-12-25 19:17 - 00000000 ____D C:\Program Files (x86)\F-Secure
2013-12-15 18:53 - 2011-12-25 19:24 - 00019887 _____ C:\Windows\prodsett_copy.ini
2013-12-15 15:04 - 2013-11-30 13:11 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-12-15 15:04 - 2013-11-30 13:11 - 00000000 ____D C:\Windows\system32\NV
2013-12-15 13:31 - 2013-08-06 21:50 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 13:29 - 2011-12-24 21:15 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 11:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-13 11:16 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-13 11:15 - 2009-07-14 05:45 - 00374728 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 21:30 - 2012-04-15 19:24 - 00000000 ____D C:\ProgramData\Microsoft Help
Some content of TEMP:
====================
C:\Users\tikijama\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\tikijama\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\tikijama\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\tikijama\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\tikijama\AppData\Local\Temp\TUUUninstallHelper.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-09 08:26
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2014 05
Ran by tikijama at 2014-01-11 20:49:05
Running from C:\Users\tikijama\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Computer Security (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AS: Computer Security (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x32 Version: - )
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122 - Adobe Systems, Inc.)
AnyDVD (x32 Version: 7.1.5.0 - SlySoft)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ASUS AI Recovery (x32 Version: 1.0.14 - ASUS)
ASUS FancyStart (x32 Version: 1.1.0 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (x32 Version: 3.0.22 - ASUS)
ASUS Live Update (x32 Version: 2.5.9 - ASUS)
ASUS Power4Gear Hybrid (Version: 1.1.45 - ASUS)
ASUS SmartLogon (x32 Version: 1.0.0011 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0031 - ASUS)
ASUS USB Charger Plus (x32 Version: 2.0.0 - AsusTek Computer Inc.)
ASUS Virtual Camera (x32 Version: 1.0.21 - asus)
ASUS WebStorage (x32 Version: 3.0.84.161 - eCareme Technologies, Inc.)
AsusVibe2.0 (x32 Version: 2.0.4.617 - ASUSTEK)
Atheros Client Installation Program (x32 Version: 7.0 - Atheros)
ATK Package (x32 Version: 1.0.0010 - ASUS)
Awesomenauts (x32 Version: - )
Bluetooth Win7 Suite (64) (Version: 7.2.0.65 - Atheros Communications)
Bookworm Deluxe (x32 Version: - Oberon Media Inc.)
Call of Duty: Modern Warfare 3 - Multiplayer (x32 Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 (x32 Version: - Infinity Ward - Sledgehammer Games)
Canon Inkjet Printer Driver Add-On Module (Version: - )
CardiacCD (x32 Version: - )
CCleaner (Version: 4.00 - Piriform)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
CheckDrive (x32 Version: 4.4 - Abelssoft)
Computer Security 12.89.105.0 (release) (x32 Version: 12.89.105.0 - F-Secure Corporation) Hidden
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Cooking Dash (x32 Version: - Oberon Media Inc.)
Counter-Strike: Global Offensive - SDK (x32 Version: - )
Counter-Strike: Global Offensive (x32 Version: - )
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3602c - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft)
Defraggler (Version: 2.16 - Piriform)
Dishonored (x32 Version: 1.0 - Bethesda Softworks)
ElsterFormular (x32 Version: 13.2.0.8623 - Landesfinanzdirektion Thüringen)
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
ETDWare PS/2-X64 8.0.5.1_WHQL (Version: 8.0.5.1 - ELAN Microelectronic Corp.)
Far Cry® 3 (x32 Version: - Ubisoft)
Fast Boot (Version: 1.0.9 - ASUS)
F-Secure CCF Reputation (x32 Version: 1.1.25.2280 - F-Secure) Hidden
F-Secure CCF Scanning 1.28.104.70 (release) (x32 Version: 1.28.104.70 - F-Secure Corporation) Hidden
F-Secure Launch pad (x32 Version: 1.89.205.0 - F-Secure Corporation)
F-Secure Launch pad (x32 Version: 1.89.205.0 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.128 (x32 Version: 1.02.128.1 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.0.0.0 (release) (x32 Version: 1.0.0.0 - F-Secure Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (x32 Version: 6.2.1.1 - Oberon Media, Inc.)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GetDataBack for NTFS (x32 Version: 4.33.000 - Runtime Software)
Google+ Auto Backup (x32 Version: 1.0.21.81 - Google)
Governor of Poker (x32 Version: - Oberon Media Inc.)
Grand Theft Auto IV (x32 Version: - Rockstar)
Grand Theft Auto IV (x32 Version: 1.0.0011.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto: Episodes from Liberty City (x32 Version: - Rockstar)
GRID (x32 Version: - Codemasters)
Hotel Dash Suite Success (x32 Version: - Oberon Media Inc.)
Inhaltsmanager-Assistent für PlayStation(R) (x32 Version: 3.00.7187.47 - Sony Computer Entertainment Inc.)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.17.10.3347 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0 - Intel)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Jewel Quest 3 (x32 Version: - Oberon Media Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
L.A. Noire: The Complete Edition (x32 Version: - Rockstar)
Landwirtschafts Simulator 2013 (x32 Version: 1.0 - GIANTS Software)
LEGO Digital Designer (x32 Version: - LEGO A/S)
Logitech Gaming Software 5.10 (Version: 5.10.127 - Logitech)
Logitech SetPoint (x32 Version: 4.80 - Logitech)
Luxor 3 (x32 Version: - Oberon Media Inc.)
Mafia II (x32 Version: - 2K Czech)
Magical Jelly Bean KeyFinder (x32 Version: 2.0.9.8 - Magical Jelly Bean)
Mahjongg dimensions (x32 Version: - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Flight (x32 Version: - )
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Nuance PDF Reader (x32 Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (Version: 1.2.19 - NVIDIA Corporation)
Online Safety 2.93.2101.1221 (x32 Version: 2.93.2101.1221 - F-Secure Corporation) Hidden
OpenAL (x32 Version: - )
PAYDAY 2 (x32 Version: - OVERKILL - a Starbreeze Studio.)
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
Plantronics® GameCom 780 Software for Dolby® Headphone (x32 Version: 1.00.0001 - Plantronics)
Plants vs Zombies (x32 Version: - Oberon Media Inc.)
Portal 2 (x32 Version: - Valve)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Reader for PC (x32 Version: 2.0.00.07121 - Sony Corporation)
Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6370 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10008 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Rockstar Games Social Club (x32 Version: 1.0.9.5 - Rockstar Games)
Rockstar Games Social Club (x32 Version: 1.00.0000 - Rockstar Games)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.18.0 - SAMSUNG Electronics Co., Ltd.)
SeaTools for Windows (x32 Version: - Seagate Technology)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Sonic Focus (x32 Version: 1.0.0.4 - Synopsys )
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
syncables desktop SE (x32 Version: 5.5.746.11492 - syncables)
System Requirements Lab (x32 Version: - )
Tony Hawk's Pro Skater HD (x32 Version: - Robomodo)
Total Commander 64-bit (Remove or Repair) (Version: 8.0 - Ghisler Software GmbH)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft)
Uplay (x32 Version: 2.0 - Ubisoft)
VirtualDJ Home FREE (x32 Version: 7.3 - Atomix Productions)
Vista Codec Package (x32 Version: 4.2.7 - Shark007)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
VTech Download Agent Library (x32 Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (x32 Version: - VTech)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.31.1 - ASUS)
WinRAR 4.01 (64-Bit) (Version: 4.01.0 - win.rar GmbH)
Wireless Console 3 (x32 Version: 3.0.21 - ASUS)
World of Goo (x32 Version: - Oberon Media Inc.)
XMedia Recode Version 3.1.7.7 (x32 Version: 3.1.7.7 - XMedia Recode)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2 - Microsoft Corporation)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2 - Microsoft Corporation)
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2 - Microsoft Corporation)
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2 - Microsoft Corporation)
==================== Restore Points =========================
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {324B0259-B086-4575-AC46-58C3F25393AD} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => d:\Programe\CheckDrive\CheckDriveBackgroundGuard.exe [2013-09-02] (Abelssoft)
Task: {45E5B7B0-113E-45E3-B866-4DAF9A65BD05} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {48FDFBF1-A887-404B-834A-2CF019D95ED7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5067A4FA-8308-476A-9764-5B71FF9CB91F} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {75DC4C91-E6CF-4E14-8CC1-DE425D94AC31} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-12-18] (TuneUp Software)
Task: {944F52BF-0C43-45E9-B69C-9B27EF29B639} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2011-06-01] (ASUS)
Task: {9FC220DF-DE82-4A14-914B-75B0674764A3} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {CA0C4014-E6BD-4C6B-8072-D115A2C5BAEF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {CD06B58E-72C0-41D9-A94C-3B1B2CECAC4B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {E79AAA06-ECE9-4FA9-8A5A-C4B0B9C8A3F7} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {EA41CD5A-277A-466D-B2D9-4294F0C11A83} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-12-10 21:24 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2011-06-20 15:01 - 2011-03-26 08:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-12-29 21:45 - 2009-07-20 12:35 - 00018960 _____ () D:\Programme\Logitech Maus\SetPoint\khalwrapper.dll
2011-12-25 19:24 - 2013-08-12 16:04 - 00045504 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2013-05-15 15:05 - 2013-05-15 15:05 - 00220096 _____ () C:\Program Files (x86)\F-Secure\daas2.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-02-07 16:28 - 2011-12-01 20:16 - 00150760 ____N () C:\Program Files\Plantronics\GameCom780\VmixPLGC.dll
2011-12-25 19:28 - 2011-12-25 19:28 - 00030888 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2011-12-25 19:24 - 2013-12-15 18:56 - 00212008 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Spam Control\fsas.dll
2011-12-25 19:24 - 2013-10-16 14:12 - 00949184 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2011-06-10 19:49 - 2011-06-10 19:49 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2011-12-25 19:24 - 2013-08-12 16:04 - 00056256 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\fsavures.eng
2011-12-25 19:24 - 2013-08-12 16:04 - 00154560 _____ () C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\FSGUI\flyerres.eng
2013-03-05 18:10 - 2013-03-05 18:10 - 00593464 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.65_none_b59e1e0911fd55ab\QtMultimediaKit1.dll
2013-08-14 20:08 - 2013-08-14 20:08 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-11-27 05:58 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-12-21 15:43 - 2013-12-21 15:43 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-11 20:14 - 2013-12-11 20:14 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Slimtype DVD A DS8A5SH
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: DTSOFT Virtual CdRom Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: DTSOFT Virtual CdRom Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: DTSOFT Virtual CdRom Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: USB2.0 0.3M UVC WebCam
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: DTSOFT Virtual CdRom Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/11/2014 08:36:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LiveUpdt.exe, Version: 2.0.0.0, Zeitstempel: 0x4a6d7c8e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0xa28
Startzeit der fehlerhaften Anwendung: 0xLiveUpdt.exe0
Pfad der fehlerhaften Anwendung: LiveUpdt.exe1
Pfad des fehlerhaften Moduls: LiveUpdt.exe2
Berichtskennung: LiveUpdt.exe3
Error: (01/11/2014 08:27:43 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 08:27:43 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 06:35:20 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LiveUpdt.exe, Version: 2.0.0.0, Zeitstempel: 0x4a6d7c8e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x1450
Startzeit der fehlerhaften Anwendung: 0xLiveUpdt.exe0
Pfad der fehlerhaften Anwendung: LiveUpdt.exe1
Pfad des fehlerhaften Moduls: LiveUpdt.exe2
Berichtskennung: LiveUpdt.exe3
Error: (01/11/2014 06:26:09 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (01/11/2014 06:26:09 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
System errors:
=============
Error: (01/11/2014 08:27:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/11/2014 08:27:06 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (01/11/2014 08:25:52 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 11.01.2014 um 20:23:59 unerwartet heruntergefahren.
Error: (01/11/2014 08:25:42 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (01/11/2014 08:25:42 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.
Error: (01/11/2014 08:25:41 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (01/11/2014 08:25:40 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (01/11/2014 06:26:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/11/2014 06:25:45 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0x8000002a45\??\C:\System Volume Information\Syscache.hve
Error: (01/11/2014 06:25:41 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Microsoft Office Sessions:
=========================
Error: (01/11/2014 08:36:13 PM) (Source: Application Error)(User: )
Description: LiveUpdt.exe2.0.0.04a6d7c8entdll.dll6.1.7601.18247521ea8e7c00000050002e3bea2801cf0f04619496f3C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exeC:\Windows\SysWOW64\ntdll.dlla0c52220-7af7-11e3-93aa-74de2bdb3cf6
Error: (01/11/2014 08:27:43 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 08:27:43 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 08:27:02 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 06:35:20 PM) (Source: Application Error)(User: )
Description: LiveUpdt.exe2.0.0.04a6d7c8entdll.dll6.1.7601.18247521ea8e7c00000050002e3be145001cf0ef37dd54022C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exeC:\Windows\SysWOW64\ntdll.dllbda2e621-7ae6-11e3-94e9-74de2bdb3cf6
Error: (01/11/2014 06:26:09 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
Error: (01/11/2014 06:26:09 PM) (Source: SideBySide)(User: )
Description: D:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exeD:\Programme\Seagate\SeaTools for Windows\SeaToolsforWindows.exe.Config0
CodeIntegrity Errors:
===================================
Date: 2013-04-05 16:19:17.778
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 16:19:17.717
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 16:19:17.602
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 16:19:17.459
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 15:50:21.600
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 15:50:21.503
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 14:47:31.557
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 14:47:31.495
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\CE86.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 14:42:59.238
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\A69B.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-04-05 14:42:59.176
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\A69B.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 31%
Total physical RAM: 8100.97 MB
Available physical RAM: 5542.26 MB
Total Pagefile: 16200.13 MB
Available Pagefile: 13531.84 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:300.41 GB) (Free:224.66 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:373.22 GB) (Free:126.85 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: AE14F3C6)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=300 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=373 GB) - (Type=07 NTFS)
==================== End Of Log ============================
LG Tim Windows update zeigt mir an, daß ich nie ein update gemacht habe und funtioniert auch nicht mehr. teilweise bekomme ich Bluescreens. Teilweise beim rebooten die Aufforderung ein anderes Boot device zu wählen! Bin ein wenig verzweifelt! Lg Tim |
|
12.01.2014, 09:07
| #4 | |
| /// the machine /// TB-Ausbilder | Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ?Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.01.2014, 19:06
| #5 |
| | Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? Habe Antivirus deaktiviert, Systemwiederherstellungspunkt klappte nicht. Musste neustarten. Jetzt kann ich antivirus nicht deaktivieren. Combofix trotzdem ausfuehren? Verzweifelt, Feature sagt mir, das mein Abo abgelaufen ist. Wenn ich Combo fix starte bekomme ich ein bluescreen, wenn ich die systemwiederherstellung benutze auch. Wenn combofix mich auffordert einen wiederherstellungslpunkt zu setzen, muss ich das machen? Oder macht das programm irgendwann auch ohne d as s weiter. Sorry schreibe vom tablet. Hilfe. C:\windows\system32\sort.exe ist keine zulässige win32-anwendung. Und wieder absturz. |
|
13.01.2014, 11:07
| #6 |
| /// the machine /// TB-Ausbilder | Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? Poste bitte mal ein frisches FRST log.
__________________ --> Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? |
|
| Themen zu Probleme mit Festplatte nach "Sweet Page" Infektion, Kontrolle des MBR ? |
| audio, computer, desktop, error, festplatte, firefox, home, hotkey, ics, infektion, live, logitech, maus, microsoft, mozilla, nvidia, probleme, programme, realtek, scan, system32, windows live, windows media player, wireless, wmp |
Linear-Darstellung
