|
Plagegeister aller Art und deren Bekämpfung: Holen Media Player, doppelt unterstrichene Wörter in MozillaWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
22.01.2014, 16:12 | #1 |
| Holen Media Player, doppelt unterstrichene Wörter in Mozilla Hallo zusammen, ich bin seit eben angemeldet, da ich mit meinem Latein am Ende bin. Seit ein paar Tagen sind bei mir im Browser Wörter grün unterstrichen, Holen Media Player wird angezeigt. Es öffnen sich auch unregelmäßig Tabs von selbst (veralterte Adobe Version - Aktualisierung und dergleichen). Wie kann das Problem gelöst werden? Danke schonmal! MfG |
22.01.2014, 16:59 | #2 |
/// TB-Ausbilder | Holen Media Player, doppelt unterstrichene Wörter in Mozilla Hi,
__________________mach bitte einen FRST-Scan: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
22.01.2014, 17:11 | #3 |
| Holen Media Player, doppelt unterstrichene Wörter in Mozilla FRST.txt :
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 01 Ran by MatzeWinkler (administrator) on MATZEWINKLER-PC on 22-01-2014 17:07:57 Running from C:\Users\MatzeWinkler\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums ==================== Processes (Whitelisted) ================= (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Spotify Ltd) C:\Users\MatzeWinkler\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Dropbox, Inc.) C:\Users\MatzeWinkler\AppData\Roaming\Dropbox\bin\Dropbox.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Acer Incorporated) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Sleep Memory Optimizer\FFSService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [InstantUpdate] - C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-07] () HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12476520 2012-04-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2816336 2012-03-20] (ELAN Microelectronics Corp.) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft) HKLM\...\Run: [Cm106Sound] - C:\Windows\Syswow64\cm106.dll [8126464 2009-05-11] (C-Media Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation) HKLM-x32\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft) HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\MatzeWinkler\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-16] (Spotify Ltd) MountPoints2: {24a838a4-ec71-11e2-bb37-089e019e5f70} - E:\Startme.exe MountPoints2: {9a554b8b-17a3-11e3-af6b-089e019e5f70} - E:\Startme.exe MountPoints2: {c4cc92f0-ed3f-11e2-b6a3-1c3e846217a9} - F:\setup_vmc_lite.exe /checkApplicationPresence Startup: C:\Users\MatzeWinkler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\MatzeWinkler\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: No Name - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: No Name - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default FF SearchEngineOrder.1: Ask Search FF Homepage: Google FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.3 - C:\Users\MatzeWinkler\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: FreeHDSport TV V6.0 - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\01e89cb1-f65e-4d01-9a8c-16784b40f1e3@2579a6e9-6ce6-413f-94ce-37240c823447.com [2014-01-06] FF Extension: DownloadHelper - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-31] FF Extension: Avira Savings Advisor - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\ciuvo-extension@avira.de.xpi [2013-09-29] FF Extension: SoundCloud Downloader - Technowise - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2014-01-14] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\MatzeWinkler\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\MatzeWinkler\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-10-25] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-12] CHR Extension: (Google Drive) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-12] CHR Extension: (YouTube) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-12] CHR Extension: (Google-Suche) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-12] CHR Extension: (Google Wallet) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-12] CHR Extension: (Google Mail) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-12] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-01-12] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-02-17] (Diskeeper Corporation) R2 FFSOpzSvc; C:\Program Files\Sleep Memory Optimizer\FFSService.exe [141192 2011-09-17] (Acer Incorporated) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-15] () S3 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [192856 2012-03-14] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation) R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S3 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [345744 2012-11-12] (Acer Incorporated) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-02-17] (Diskeeper Corporation) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [92976 2012-02-17] (Diskeeper Corporation) R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-03-14] (Intel Corporation) S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1306624 2009-05-14] (C-Media Electronics Inc) S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-07-19] (Cisco Systems, Inc.) S0 mfewfpk; system32\drivers\mfewfpk.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-22 17:07 - 2014-01-22 17:08 - 00018725 _____ C:\Users\MatzeWinkler\Downloads\FRST.txt 2014-01-22 17:07 - 2014-01-22 17:07 - 02077184 _____ (Farbar) C:\Users\MatzeWinkler\Downloads\FRST64.exe 2014-01-22 17:07 - 2014-01-22 17:07 - 00000000 ____D C:\FRST 2014-01-21 20:15 - 2014-01-21 12:15 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Lord Steppington (Deluxe Version) 2014-01-17 14:47 - 2014-01-17 14:47 - 01069512 _____ (Solid State Networks) C:\Users\MatzeWinkler\Downloads\install_flashplayer12x32au_mssd_aaa_aih.exe 2014-01-16 18:01 - 2014-01-15 13:22 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Apollo Brown and Planet Asia - Abrasions Stitched Up (2014) 2014-01-16 12:34 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-16 12:34 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-16 12:34 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-06 15:06 - 2014-01-22 16:16 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-06 15:06 - 2014-01-22 15:16 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-06 15:06 - 2014-01-06 15:11 - 00004118 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 15:06 - 2014-01-06 15:11 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 14:58 - 2014-01-06 15:04 - 00819144 _____ (Google Inc.) C:\Users\MatzeWinkler\Downloads\GoogleEarthSetup.exe 2014-01-05 18:34 - 2014-01-05 18:35 - 00000000 ____D C:\AdwCleaner 2014-01-05 18:33 - 2014-01-05 18:33 - 01233962 _____ C:\Users\MatzeWinkler\Downloads\adwcleaner_3.016.exe 2013-12-25 14:51 - 2013-12-25 14:55 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Allgemein 2013-12-25 14:50 - 2013-12-25 14:56 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Kontoauszüge 2013-12-23 17:25 - 2013-12-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-01-22 17:08 - 2014-01-22 17:07 - 00018725 _____ C:\Users\MatzeWinkler\Downloads\FRST.txt 2014-01-22 17:07 - 2014-01-22 17:07 - 02077184 _____ (Farbar) C:\Users\MatzeWinkler\Downloads\FRST64.exe 2014-01-22 17:07 - 2014-01-22 17:07 - 00000000 ____D C:\FRST 2014-01-22 17:01 - 2013-06-25 09:13 - 01187534 _____ C:\Windows\WindowsUpdate.log 2014-01-22 16:49 - 2012-04-26 06:12 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-22 16:16 - 2014-01-06 15:06 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-22 16:15 - 2009-07-14 05:51 - 00088425 _____ C:\Windows\setupact.log 2014-01-22 15:39 - 2013-11-30 15:34 - 00002262 _____ C:\Windows\Tasks\FreeHDSport TV V6.0-firefoxinstaller.job 2014-01-22 15:34 - 2013-11-30 15:34 - 00001358 _____ C:\Windows\Tasks\FreeHDSport TV V6.0-updater.job 2014-01-22 15:16 - 2014-01-06 15:06 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-22 13:42 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-22 13:42 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-22 13:39 - 2013-06-25 19:06 - 00654400 _____ C:\Windows\system32\perfh007.dat 2014-01-22 13:39 - 2013-06-25 19:06 - 00130240 _____ C:\Windows\system32\perfc007.dat 2014-01-22 13:39 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-22 13:36 - 2013-09-25 21:36 - 00000000 ___RD C:\Users\MatzeWinkler\Dropbox 2014-01-22 13:36 - 2013-09-25 20:54 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Dropbox 2014-01-22 13:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-21 22:15 - 2013-06-30 22:12 - 00009245 _____ C:\Windows\SysWOW64\SystemData.xml 2014-01-21 12:15 - 2014-01-21 20:15 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Lord Steppington (Deluxe Version) 2014-01-18 20:15 - 2013-10-25 19:18 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\.ACEStream 2014-01-18 20:14 - 2013-10-25 19:18 - 00000000 ___HD C:\_acestream_cache_ 2014-01-17 16:24 - 2013-07-02 21:56 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Skype 2014-01-17 15:37 - 2013-06-29 13:49 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Spotify 2014-01-17 14:47 - 2014-01-17 14:47 - 01069512 _____ (Solid State Networks) C:\Users\MatzeWinkler\Downloads\install_flashplayer12x32au_mssd_aaa_aih.exe 2014-01-17 10:04 - 2013-09-25 20:55 - 00001239 _____ C:\Windows\wininit.ini 2014-01-17 10:04 - 2013-06-29 12:30 - 00000000 ___RD C:\Users\MatzeWinkler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:03 - 2013-09-25 20:55 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 10:00 - 2009-07-14 05:45 - 00466208 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-17 09:58 - 2010-11-21 04:47 - 00098034 _____ C:\Windows\PFRO.log 2014-01-16 21:55 - 2013-07-17 17:35 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 21:52 - 2013-06-30 20:14 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 15:48 - 2013-06-29 13:49 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Local\Spotify 2014-01-16 12:44 - 2013-12-18 13:23 - 00000000 ____D C:\Program Files\Microsoft Office 15 2014-01-15 13:22 - 2014-01-16 18:01 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Apollo Brown and Planet Asia - Abrasions Stitched Up (2014) 2014-01-12 15:37 - 2013-07-21 21:20 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Local\Google 2014-01-12 15:37 - 2013-07-21 21:20 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 15:11 - 2014-01-06 15:06 - 00004118 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 15:11 - 2014-01-06 15:06 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 15:04 - 2014-01-06 14:58 - 00819144 _____ (Google Inc.) C:\Users\MatzeWinkler\Downloads\GoogleEarthSetup.exe 2014-01-05 18:35 - 2014-01-05 18:34 - 00000000 ____D C:\AdwCleaner 2014-01-05 18:33 - 2014-01-05 18:33 - 01233962 _____ C:\Users\MatzeWinkler\Downloads\adwcleaner_3.016.exe 2014-01-02 22:03 - 2013-07-07 18:03 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP 2013-12-25 15:03 - 2013-10-18 13:38 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Politikwissenschaften 2013-12-25 14:56 - 2013-12-25 14:50 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Kontoauszüge 2013-12-25 14:55 - 2013-12-25 14:51 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Allgemein 2013-12-24 21:48 - 2013-06-29 12:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-23 17:25 - 2013-12-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox Some content of TEMP: ==================== C:\Users\MatzeWinkler\AppData\Local\Temp\avgnt.exe C:\Users\MatzeWinkler\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\MatzeWinkler\AppData\Local\Temp\IMsetup.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_1.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_2.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_3.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32_mssd_aaa_aih.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_reader11_de_mssd_aaa_aih.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_reader11_de_mssd_aaa_aih_1.exe C:\Users\MatzeWinkler\AppData\Local\Temp\mgsqlite3.dll C:\Users\MatzeWinkler\AppData\Local\Temp\OfficeSetup.exe C:\Users\MatzeWinkler\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 15:57 ==================== End Of Log ============================ Addition.txt :FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2014 01 Ran by MatzeWinkler at 2014-01-22 17:08:46 Running from C:\Users\MatzeWinkler\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden Ace Stream Media 2.1.5.3 (HKCU Version: 2.1.5.3 - Ace Stream Media) Acer Backup Manager (x32 Version: 3.0.0.100 - NTI Corporation) Acer Crystal Eye Webcam (x32 Version: 1.5.2728.00 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.5.2728.00 - CyberLink Corp.) Hidden Acer ePower Management (x32 Version: 6.00.3010 - Acer Incorporated) Acer eRecovery Management (x32 Version: 5.00.3508 - Acer Incorporated) Acer Games (x32 Version: 1.0.2.5 - WildTangent) Acer Instant Update Service (Version: 1.00.3004 - Acer Incorporated) Acer Registration (x32 Version: 1.04.3506 - Acer Incorporated) Acer Theft Shield (Version: 1.01.3006 - Acer Incorporated) Acer Updater (x32 Version: 1.02.3501 - Acer Incorporated) Acer USB Charge Manager (x32 Version: 1.00.3002 - Acer Incorporated) Acer VCM (x32 Version: 4.05.3501 - Acer Incorporated) Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (x32 Version: 10.1.9 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144 - Adobe Systems, Inc.) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden Atheros Bluetooth Suite (64) (Version: 7.4.0.125 - Atheros) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Broadcom NetLink Controller (Version: 15.0.6.1 - Broadcom Corporation) CDBurnerXP (x32 Version: 4.5.2.4478 - CDBurnerXP) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden clear.fi Media (x32 Version: 2.00.3004 - Acer Incorporated) clear.fi Photo (x32 Version: 2.00.3004 - Acer Incorporated) CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dolby Home Theater v4 (x32 Version: 7.2.7000.7 - Dolby Laboratories Inc) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) eBay Worldwide (x32 Version: 2.2.0409 - OEM) ETDWare PS/2-X64 10.6.10.8_WHQL (Version: 10.6.10.8 - ELAN Microelectronic Corp.) Evernote v. 4.5.2 (x32 Version: 4.5.2.5866 - Evernote Corp.) ExpressCache (Version: 1.0.82 - Diskeeper Corporation) FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Fooz Kids (x32 Version: 3.1.2 - FUHU, Inc.) Fooz Kids (x32 Version: 3.1.2 - FUHU, Inc.) Hidden Fooz Kids Platform (x32 Version: 2.1 - FUHU, Inc.) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden FreeHDSport TV V6.0 (x32 Version: 1.31.153.0 - installdaddy) <==== ATTENTION Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (x32 Version: 32.0.1700.76 - Google Inc.) Google Earth (x32 Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Identity Card (x32 Version: 1.00.3501 - Acer Incorporated) Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 8.0.4.1441 - Intel Corporation) Intel(R) OpenCL CPU Runtime (x32 Version: - Intel Corporation) Intel(R) Processor Graphics (x32 Version: 8.15.10.2712 - Intel Corporation) Intel(R) Rapid Start Technology (x32 Version: 1.0.0.1022 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 11.1.0.1006 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.23.605.1 - Intel Corporation) Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kobo (x32 Version: 2.1.5 - Kobo Inc.) Launch Manager (x32 Version: 5.1.15 - Acer Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 365 ProPlus - de-de (Version: 15.0.4551.1512 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden Norton Online Backup (x32 Version: 2.1.17869 - Symantec Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation) Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden Picasa 3 (x32 Version: 3.9 - Google, Inc.) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.6612 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (x32 Version: 6.1.7601.28104 - Realtek Semiconductor Corp.) Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) Sleep Memory Optimizer (x32 Version: 1.00.3004 - Acer Incorporated) Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Smart Timer (x32 Version: 1.00.3004 - Acer Incorporated) Sony PC Companion 2.10.179 (x32 Version: 2.10.179 - Sony) SopCast 3.8.3 (x32 Version: 3.8.3 - SopCast - Free P2P internet TV | live football, NBA, cricket) Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden Trust USB Audio (Version: - ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden VLC media player 1.1.10 (x32 Version: 1.1.10 - VideoLAN) Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden Welcome Center (x32 Version: 1.02.3507 - Acer Incorporated) WildTangent Games App (Acer Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH) YTD Video Downloader 4.6 (x32 Version: 4.6 - GreenTree Applications SRL) Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 16-01-2014 14:40:27 Geplanter Prüfpunkt 16-01-2014 20:52:24 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1E29A108-608B-4771-BD0A-58E4E9841CCF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-12-18] (Microsoft Corporation) Task: {1F482960-D880-4CA8-B7EA-C5BA6F7DF60B} - System32\Tasks\Smart Timer Task Scheduler => Smart_Timer.exe Task: {4388F572-7B26-415B-A9FE-9720A1D29EBF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-06] (Google Inc.) Task: {440F77D3-C778-45B1-ABFD-BCBF95E8CC23} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated) Task: {4F26350B-95AA-40A1-A0C0-4CD6E0C93969} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink) Task: {5E5B1008-179A-46A4-A790-C24A6FDC3BD8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-01-15] (Microsoft Corporation) Task: {78CBE010-9A2C-4AD5-A47A-24491D028F08} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-12-18] (Microsoft Corporation) Task: {7EFE3F88-1F7B-484E-9E1F-9722D7A39020} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-06] (Google Inc.) Task: {80B14299-4328-4E40-99A2-5A19FA468465} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation) Task: {87B42B43-6A5E-4D3F-B317-A41F50C79CE8} - System32\Tasks\FreeHDSport TV V6.0-firefoxinstaller => C:\Program Files (x86)\FreeHDSport TV V6.0\FreeHDSport TV V6.0-firefoxinstaller.exe [2013-11-30] (installdaddy) <==== ATTENTION Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe Task: {A561BEE6-7E7E-4CF0-9B86-DB790BC11D5F} - System32\Tasks\Theft Shield\AcerTheftShieldTask => C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe [2012-11-12] (Acer Incorporated) Task: {AAF8ABAF-8472-4D22-8029-9D6341AF31C1} - System32\Tasks\FreeHDSport TV V6.0-updater => C:\Program Files (x86)\FreeHDSport TV V6.0\FreeHDSport TV V6.0-updater.exe [2013-11-30] (installdaddy) <==== ATTENTION Task: {AB449415-8385-489C-AA5B-9433EC7F4B41} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.) Task: {B92DEADC-87CA-4110-B7A8-46643774F883} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.) Task: {F3E54CCE-7485-4386-BFFE-E99171C1C3F9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FreeHDSport TV V6.0-firefoxinstaller.job => C:\Program Files (x86)\FreeHDSport TV V6.0\FreeHDSport TV V6.0-firefoxinstaller.exe <==== ATTENTION Task: C:\Windows\Tasks\FreeHDSport TV V6.0-updater.job => C:\Program Files (x86)\FreeHDSport TV V6.0\FreeHDSport TV V6.0-updater.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-04-26 06:43 - 2012-03-26 10:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-06-29 13:13 - 2013-01-25 09:25 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2012-01-05 22:22 - 2012-01-05 22:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2012-01-05 22:22 - 2012-01-05 22:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2012-01-05 22:22 - 2012-01-05 22:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\MatzeWinkler\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-23 17:25 - 2013-12-23 17:25 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-12-11 15:49 - 2013-12-11 15:49 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll 2013-08-16 10:06 - 2013-08-16 10:06 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\67f2d87ba056e1075fce76a8c50bb57e\IsdiInterop.ni.dll 2013-06-25 09:31 - 2012-02-01 15:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-06-25 09:28 - 2012-03-06 08:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/22/2014 02:20:30 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (01/22/2014 01:34:56 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/21/2014 03:21:10 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/21/2014 01:09:20 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (01/21/2014 00:10:29 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/20/2014 07:41:29 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (01/20/2014 06:39:30 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/19/2014 03:26:05 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (01/19/2014 02:36:06 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:06:47 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 System errors: ============= Error: (01/22/2014 01:35:14 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/21/2014 03:19:49 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/21/2014 00:10:54 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/20/2014 06:39:41 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/19/2014 02:36:30 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/18/2014 02:33:59 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/17/2014 02:46:02 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/17/2014 10:01:22 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/17/2014 09:59:34 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: mfewfpk Error: (01/16/2014 09:52:51 PM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Microsoft Office Sessions: ========================= Error: (01/22/2014 02:20:30 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (01/22/2014 01:34:56 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/21/2014 03:21:10 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/21/2014 01:09:20 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (01/21/2014 00:10:29 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/20/2014 07:41:29 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (01/20/2014 06:39:30 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/19/2014 03:26:05 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (01/19/2014 02:36:06 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:06:47 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 ==================== Memory info =========================== Percentage of memory in use: 87% Total physical RAM: 3933.36 MB Available physical RAM: 506.77 MB Total Pagefile: 7864.89 MB Available Pagefile: 4025.07 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:450.16 GB) (Free:306.64 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C0F81E25) Partition 1: (Not Active) - (Size=16 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 19 GB) (Disk ID: 4F4DDBCE) Partition 1: (Not Active) - (Size=4 GB) - (Type=84) Partition 2: (Not Active) - (Size=15 GB) - (Type=73) ==================== End Of Log ============================ |
22.01.2014, 17:14 | #4 |
/// TB-Ausbilder | Holen Media Player, doppelt unterstrichene Wörter in Mozilla Ok. Schritt 1
Schritt 2 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 3 Starte noch einmal FRST.
Bitte poste in deiner nächsten Antwort:
__________________ cheers, Leo |
22.01.2014, 17:29 | #5 |
| Holen Media Player, doppelt unterstrichene Wörter in Mozilla AdW:AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 17:22:57 # Aktualisiert 12/01/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : MatzeWinkler - MATZEWINKLER-PC # Gestartet von : C:\Users\MatzeWinkler\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs ***** [ Browser ] ***** -\\ Internet Explorer v0.0.0.0 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\prefs.js ] -\\ Google Chrome v32.0.1700.76 [ Datei : C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [2406 octets] - [05/01/2014 18:34:10] AdwCleaner[R1].txt - [1213 octets] - [22/01/2014 17:21:27] AdwCleaner[S0].txt - [2303 octets] - [05/01/2014 18:35:15] AdwCleaner[S1].txt - [1134 octets] - [22/01/2014 17:22:57] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1194 octets] ########## FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 01 Ran by MatzeWinkler (administrator) on MATZEWINKLER-PC on 22-01-2014 17:27:49 Running from C:\Users\MatzeWinkler\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums ==================== Processes (Whitelisted) ================= (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Spotify Ltd) C:\Users\MatzeWinkler\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Dropbox, Inc.) C:\Users\MatzeWinkler\AppData\Roaming\Dropbox\bin\Dropbox.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Acer Incorporated) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Sleep Memory Optimizer\FFSService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [InstantUpdate] - C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-07] () HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12476520 2012-04-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2816336 2012-03-20] (ELAN Microelectronics Corp.) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft) HKLM\...\Run: [Cm106Sound] - C:\Windows\Syswow64\cm106.dll [8126464 2009-05-11] (C-Media Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation) HKLM-x32\...\Run: [OOTag] - C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft) HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\MatzeWinkler\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-16] (Spotify Ltd) MountPoints2: {24a838a4-ec71-11e2-bb37-089e019e5f70} - E:\Startme.exe MountPoints2: {9a554b8b-17a3-11e3-af6b-089e019e5f70} - E:\Startme.exe MountPoints2: {c4cc92f0-ed3f-11e2-b6a3-1c3e846217a9} - F:\setup_vmc_lite.exe /checkApplicationPresence Startup: C:\Users\MatzeWinkler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\MatzeWinkler\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: No Name - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: No Name - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default FF SearchEngineOrder.1: Ask Search FF Homepage: Google FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.3 - C:\Users\MatzeWinkler\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-31] FF Extension: Avira Savings Advisor - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\ciuvo-extension@avira.de.xpi [2013-09-29] FF Extension: SoundCloud Downloader - Technowise - C:\Users\MatzeWinkler\AppData\Roaming\Mozilla\Firefox\Profiles\6xb8by29.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2014-01-14] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\MatzeWinkler\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\MatzeWinkler\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-10-25] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-12] CHR Extension: (Google Drive) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-12] CHR Extension: (YouTube) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-12] CHR Extension: (Google-Suche) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-12] CHR Extension: (Google Wallet) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-12] CHR Extension: (Google Mail) - C:\Users\MatzeWinkler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-12] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-01-12] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-02-17] (Diskeeper Corporation) R2 FFSOpzSvc; C:\Program Files\Sleep Memory Optimizer\FFSService.exe [141192 2011-09-17] (Acer Incorporated) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-15] () S3 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [192856 2012-03-14] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation) R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S3 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [345744 2012-11-12] (Acer Incorporated) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-02-17] (Diskeeper Corporation) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [92976 2012-02-17] (Diskeeper Corporation) R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-03-14] (Intel Corporation) S3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1306624 2009-05-14] (C-Media Electronics Inc) S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-07-19] (Cisco Systems, Inc.) S0 mfewfpk; system32\drivers\mfewfpk.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-22 17:20 - 2014-01-22 17:20 - 01236282 _____ C:\Users\MatzeWinkler\Downloads\adwcleaner.exe 2014-01-22 17:08 - 2014-01-22 17:09 - 00027308 _____ C:\Users\MatzeWinkler\Downloads\Addition.txt 2014-01-22 17:07 - 2014-01-22 17:27 - 00018251 _____ C:\Users\MatzeWinkler\Downloads\FRST.txt 2014-01-22 17:07 - 2014-01-22 17:07 - 02077184 _____ (Farbar) C:\Users\MatzeWinkler\Downloads\FRST64.exe 2014-01-22 17:07 - 2014-01-22 17:07 - 00000000 ____D C:\FRST 2014-01-21 20:15 - 2014-01-21 12:15 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Lord Steppington (Deluxe Version) 2014-01-17 14:47 - 2014-01-17 14:47 - 01069512 _____ (Solid State Networks) C:\Users\MatzeWinkler\Downloads\install_flashplayer12x32au_mssd_aaa_aih.exe 2014-01-16 18:01 - 2014-01-15 13:22 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Apollo Brown and Planet Asia - Abrasions Stitched Up (2014) 2014-01-16 12:34 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-16 12:34 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-16 12:34 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-16 12:34 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-06 15:06 - 2014-01-22 17:23 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-06 15:06 - 2014-01-22 17:16 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-06 15:06 - 2014-01-06 15:11 - 00004118 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 15:06 - 2014-01-06 15:11 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 14:58 - 2014-01-06 15:04 - 00819144 _____ (Google Inc.) C:\Users\MatzeWinkler\Downloads\GoogleEarthSetup.exe 2014-01-05 18:34 - 2014-01-22 17:23 - 00000000 ____D C:\AdwCleaner 2014-01-05 18:33 - 2014-01-05 18:33 - 01233962 _____ C:\Users\MatzeWinkler\Downloads\adwcleaner_3.016.exe 2013-12-25 14:51 - 2013-12-25 14:55 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Allgemein 2013-12-25 14:50 - 2013-12-25 14:56 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Kontoauszüge 2013-12-23 17:25 - 2013-12-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-01-22 17:28 - 2014-01-22 17:07 - 00018251 _____ C:\Users\MatzeWinkler\Downloads\FRST.txt 2014-01-22 17:25 - 2013-09-25 21:36 - 00000000 ___RD C:\Users\MatzeWinkler\Dropbox 2014-01-22 17:25 - 2013-09-25 20:54 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Dropbox 2014-01-22 17:23 - 2014-01-06 15:06 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-22 17:23 - 2014-01-05 18:34 - 00000000 ____D C:\AdwCleaner 2014-01-22 17:23 - 2013-06-25 09:13 - 01203672 _____ C:\Windows\WindowsUpdate.log 2014-01-22 17:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-22 17:23 - 2009-07-14 05:51 - 00088537 _____ C:\Windows\setupact.log 2014-01-22 17:23 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-22 17:23 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-22 17:22 - 2013-06-25 19:06 - 00654400 _____ C:\Windows\system32\perfh007.dat 2014-01-22 17:22 - 2013-06-25 19:06 - 00130240 _____ C:\Windows\system32\perfc007.dat 2014-01-22 17:22 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-22 17:20 - 2014-01-22 17:20 - 01236282 _____ C:\Users\MatzeWinkler\Downloads\adwcleaner.exe 2014-01-22 17:17 - 2013-06-30 22:12 - 00009245 _____ C:\Windows\SysWOW64\SystemData.xml 2014-01-22 17:16 - 2014-01-06 15:06 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-22 17:09 - 2014-01-22 17:08 - 00027308 _____ C:\Users\MatzeWinkler\Downloads\Addition.txt 2014-01-22 17:07 - 2014-01-22 17:07 - 02077184 _____ (Farbar) C:\Users\MatzeWinkler\Downloads\FRST64.exe 2014-01-22 17:07 - 2014-01-22 17:07 - 00000000 ____D C:\FRST 2014-01-22 16:49 - 2012-04-26 06:12 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-21 12:15 - 2014-01-21 20:15 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Lord Steppington (Deluxe Version) 2014-01-18 20:15 - 2013-10-25 19:18 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\.ACEStream 2014-01-18 20:14 - 2013-10-25 19:18 - 00000000 ___HD C:\_acestream_cache_ 2014-01-17 16:24 - 2013-07-02 21:56 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Skype 2014-01-17 15:37 - 2013-06-29 13:49 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Spotify 2014-01-17 14:47 - 2014-01-17 14:47 - 01069512 _____ (Solid State Networks) C:\Users\MatzeWinkler\Downloads\install_flashplayer12x32au_mssd_aaa_aih.exe 2014-01-17 10:04 - 2013-09-25 20:55 - 00001239 _____ C:\Windows\wininit.ini 2014-01-17 10:04 - 2013-06-29 12:30 - 00000000 ___RD C:\Users\MatzeWinkler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:03 - 2013-09-25 20:55 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 10:00 - 2009-07-14 05:45 - 00466208 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-17 09:58 - 2010-11-21 04:47 - 00098034 _____ C:\Windows\PFRO.log 2014-01-16 21:55 - 2013-07-17 17:35 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 21:52 - 2013-06-30 20:14 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 15:48 - 2013-06-29 13:49 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Local\Spotify 2014-01-16 12:44 - 2013-12-18 13:23 - 00000000 ____D C:\Program Files\Microsoft Office 15 2014-01-15 13:22 - 2014-01-16 18:01 - 00000000 ____D C:\Users\MatzeWinkler\Downloads\Apollo Brown and Planet Asia - Abrasions Stitched Up (2014) 2014-01-12 15:37 - 2013-07-21 21:20 - 00000000 ____D C:\Users\MatzeWinkler\AppData\Local\Google 2014-01-12 15:37 - 2013-07-21 21:20 - 00000000 ____D C:\Program Files (x86)\Google 2014-01-06 15:11 - 2014-01-06 15:06 - 00004118 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-01-06 15:11 - 2014-01-06 15:06 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-01-06 15:04 - 2014-01-06 14:58 - 00819144 _____ (Google Inc.) C:\Users\MatzeWinkler\Downloads\GoogleEarthSetup.exe 2014-01-05 18:33 - 2014-01-05 18:33 - 01233962 _____ C:\Users\MatzeWinkler\Downloads\adwcleaner_3.016.exe 2014-01-02 22:03 - 2013-07-07 18:03 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP 2013-12-25 15:03 - 2013-10-18 13:38 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Politikwissenschaften 2013-12-25 14:56 - 2013-12-25 14:50 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Kontoauszüge 2013-12-25 14:55 - 2013-12-25 14:51 - 00000000 ____D C:\Users\MatzeWinkler\Documents\Allgemein 2013-12-24 21:48 - 2013-06-29 12:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-23 17:25 - 2013-12-23 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox Some content of TEMP: ==================== C:\Users\MatzeWinkler\AppData\Local\Temp\avgnt.exe C:\Users\MatzeWinkler\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\MatzeWinkler\AppData\Local\Temp\IMsetup.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_1.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_2.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_3.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_flashplayer11x32_mssd_aaa_aih.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_reader11_de_mssd_aaa_aih.exe C:\Users\MatzeWinkler\AppData\Local\Temp\install_reader11_de_mssd_aaa_aih_1.exe C:\Users\MatzeWinkler\AppData\Local\Temp\mgsqlite3.dll C:\Users\MatzeWinkler\AppData\Local\Temp\OfficeSetup.exe C:\Users\MatzeWinkler\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 15:57 ==================== End Of Log ============================ |
22.01.2014, 17:59 | #6 |
/// TB-Ausbilder | Holen Media Player, doppelt unterstrichene Wörter in Mozilla Bestehen die Probleme jetzt immer noch? ESET Online Scanner
__________________ --> Holen Media Player, doppelt unterstrichene Wörter in Mozilla |
22.01.2014, 18:02 | #7 |
| Holen Media Player, doppelt unterstrichene Wörter in Mozilla Ne die grünen Unterstreichungen sind komplett weg. Vielen Dank! Soll ich das mit ESET trotzdem noch machen? |
22.01.2014, 18:02 | #8 |
/// TB-Ausbilder | Holen Media Player, doppelt unterstrichene Wörter in Mozilla Ich würd den ESET-Scan noch als abschliessenden Kontrollscan vorschlagen, ja.
__________________ cheers, Leo |
Themen zu Holen Media Player, doppelt unterstrichene Wörter in Mozilla |
adobe, aktualisierung, angemeldet, browser, doppel, doppelt, gelöst, gemeldet, hallo zusammen, holen, holen media player, latein, media, media player, mozilla, player, problem, problem gelöst, regelmäßig, schonmal, tagen, unregelmäßig, version, von selbst, wörter, zusammen, öffnen |