|
Plagegeister aller Art und deren Bekämpfung: Infos über JS/Faceliker.A und .HWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
25.01.2014, 22:17 | #1 |
| Infos über JS/Faceliker.A und .H Hallo Forum, nach den ganzen BSI Sachen wo auch meine eMail betroffen war, aber ich sehr gründlich letzte Woche meinen Rechner geprüft: Hijackthis, Malware Bytes, ESET Online Scanner, Housecall, Avira, Bitdefender und sogar der Microsoft Security Scan. Alles negativ. Heute dann mal so salopp mal wieder das Microsoft Security Essentials ausgeführt (weil das hatte ich letztens schon, vor dem BSI Fall) .. und was ist da los?! Er findet etwas im Cache des Firefox, den ich vorgestern erst nochmal neuaufgesetzt hatte!? JS/Faceliker.A JS/Faceliker.H Komischerweise finde ich in Google garkeine Informationen darüber - bzw. nur ganz dubiose automatisch, abe rschlecht übersetzte Seiten aus China oder USA?! Deswegen schreib ich hier, was da los ist und wie ich das Ding wegbekomme?! MSE hat die beiden erkannt und gelöscht und nach dem Neustart und erneuten Scan war alles negativ, aber IST denn alles ok?! Oder was soll ich noch tun? Und vorallem, was sind das für Trojaner? Danke für die Infos, LG Marco |
26.01.2014, 06:11 | #2 |
/// the machine /// TB-Ausbilder | Infos über JS/Faceliker.A und .H hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
27.01.2014, 14:30 | #3 |
| Infos über JS/Faceliker.A und .H FRST
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-01-2014 01 Ran by Admin (administrator) on LOSTIES-I5-2500 on 26-01-2014 10:44:22 Running from C:\Users\Admin\Downloads Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Sphinx Software) C:\Program Files\Windows7FirewallControl\Windows7FirewallService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe () C:\Program Files\Core Temp\Core Temp.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Sphinx Software) C:\Program Files\Windows7FirewallControl\Windows7FirewallControl.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (D-Link Corp.) C:\Program Files (x86)\D-Link\DWA-547 revA\wirelesscm.exe (Dropbox, Inc.) C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.) HKLM\...\Run: [Windows7FirewallControl] - C:\Program Files\Windows7FirewallControl\Windows7FirewallControl.exe [1659904 2013-04-16] (Sphinx Software) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [237693 2009-02-03] (Creative Technology Ltd) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation) HKLM-x32\...\Run: [IJNetworkScanUtility] - C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [140640 2010-03-02] (CANON INC.) HKLM-x32\...\Run: [CTxfiHlp] - CTXFIHLP.EXE HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3227CD4B75C9CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE BHO: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No File BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.2.108/AxViewer/AxMediaControl.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\w4rkfsk5.default FF Homepage: https://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Flash and Video Download - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\w4rkfsk5.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-23] FF Extension: Ghostery - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\w4rkfsk5.default\Extensions\firefox@ghostery.com.xpi [2014-01-22] FF Extension: Status-4-Evar - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\w4rkfsk5.default\Extensions\status4evar@caligonstudios.com.xpi [2014-01-22] FF Extension: FireFTP - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\w4rkfsk5.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi [2014-01-22] FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\w4rkfsk5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-22] FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-05-18] FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-10-31] ==================== Services (Whitelisted) ================= S3 jswpsapi; C:\Program Files (x86)\D-Link\DWA-547 revA\jswpsapi.exe [954368 2008-09-26] (Atheros Communications, Inc.) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 Windows7FirewallService; C:\Program Files\Windows7FirewallControl\Windows7FirewallService.exe [1058816 2013-04-16] (Sphinx Software) ==================== Drivers (Whitelisted) ==================== R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-09-28] (SafeNet Inc.) R1 JSWPSLWF; C:\Windows\SysWOW64\DRIVERS\jswpslwfx.sys [26624 2008-05-15] (Atheros Communications, Inc.) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) R3 ALSysIO; \??\C:\Users\Admin\AppData\Local\Temp\ALSysIO64.sys [x] S3 gdrv; \??\C:\Windows\gdrv.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] S3 WinRing0_1_2_0; \??\C:\Users\Admin\AppData\Local\Temp\tmp78A8.tmp [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-26 10:44 - 2014-01-26 10:44 - 00015494 _____ C:\Users\Admin\Downloads\FRST.txt 2014-01-26 10:44 - 2014-01-26 10:44 - 00000000 ____D C:\FRST 2014-01-26 10:43 - 2014-01-26 10:43 - 02078208 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe 2014-01-25 22:53 - 2014-01-25 22:53 - 00000211 _____ C:\Users\Admin\Desktop\Trojaner-Board - Viren und Trojaner entfernen - kostenlos.URL 2014-01-23 22:52 - 2014-01-26 10:38 - 00000560 _____ C:\Windows\setupact.log 2014-01-23 22:52 - 2014-01-23 22:52 - 00213656 _____ C:\Windows\PFRO.log 2014-01-23 22:52 - 2014-01-23 22:52 - 00000000 _____ C:\Windows\setuperr.log 2014-01-23 21:04 - 2014-01-23 21:04 - 00097035 _____ C:\ProgramData\1390507258.bdinstall.bin 2014-01-23 21:00 - 2014-01-23 21:00 - 00037824 _____ C:\ProgramData\1390507255.bdinstall.bin 2014-01-23 20:52 - 2014-01-23 20:52 - 00203282 _____ C:\ProgramData\1390506589.bdinstall.bin 2014-01-23 20:52 - 2012-11-02 14:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys 2014-01-23 20:52 - 2009-07-15 01:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2014-01-22 20:53 - 2014-01-26 02:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-22 20:53 - 2014-01-22 21:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-22 20:53 - 2014-01-22 21:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-22 20:53 - 2014-01-22 21:21 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-19 11:51 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\CNMLMAT.DLL 2014-01-16 18:58 - 2014-01-16 18:58 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-01-15 18:17 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 18:17 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 18:17 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 18:17 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 18:17 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 18:17 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 18:17 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 18:17 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 18:17 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-10 20:54 - 2014-01-10 20:54 - 00000000 ____D C:\Users\Admin\AppData\Local\Evernote 2014-01-09 22:33 - 2014-01-09 22:33 - 00001789 _____ C:\Users\Public\Desktop\iTunes.lnk 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\iTunes 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\iPod 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files (x86)\iTunes 2014-01-09 22:33 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-01-07 21:51 - 2014-01-11 20:18 - 00000000 ____D C:\Users\Admin\AppData\Roaming\HandBrake 2014-01-04 23:23 - 2014-01-06 22:36 - 00000000 ____D C:\Program Files (x86)\PhoneStick 2014-01-04 23:22 - 2014-01-04 23:22 - 00003168 _____ C:\Windows\System32\Tasks\{F4B1E0D0-C0C5-4FE5-B43D-40023BE073BB} 2014-01-04 16:59 - 2014-01-04 16:59 - 00000000 ____D C:\Program Files\Common Files\Apple 2014-01-04 16:59 - 2014-01-04 16:59 - 00000000 ____D C:\Program Files\Bonjour 2014-01-04 16:59 - 2014-01-04 16:59 - 00000000 ____D C:\Program Files (x86)\Bonjour ==================== One Month Modified Files and Folders ======= 2014-01-26 10:44 - 2014-01-26 10:44 - 00015494 _____ C:\Users\Admin\Downloads\FRST.txt 2014-01-26 10:44 - 2014-01-26 10:44 - 00000000 ____D C:\FRST 2014-01-26 10:44 - 2011-04-12 08:43 - 00699432 _____ C:\Windows\system32\perfh007.dat 2014-01-26 10:44 - 2011-04-12 08:43 - 00149572 _____ C:\Windows\system32\perfc007.dat 2014-01-26 10:44 - 2009-07-14 06:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-26 10:43 - 2014-01-26 10:43 - 02078208 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe 2014-01-26 10:42 - 2013-08-12 22:51 - 01760095 _____ C:\Windows\WindowsUpdate.log 2014-01-26 10:39 - 2013-12-18 21:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc 2014-01-26 10:39 - 2012-04-02 18:21 - 00000000 ___RD C:\Users\Admin\Dropbox 2014-01-26 10:39 - 2012-04-02 18:20 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Dropbox 2014-01-26 10:38 - 2014-01-23 22:52 - 00000560 _____ C:\Windows\setupact.log 2014-01-26 10:38 - 2013-11-09 23:50 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-26 10:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-26 03:00 - 2013-11-09 23:50 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-26 02:55 - 2014-01-22 20:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-26 00:11 - 2013-02-23 16:58 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Media Player Classic 2014-01-26 00:00 - 2013-12-11 22:14 - 00000394 _____ C:\Windows\Tasks\NeroLiveEpgUpdate-LOSTIES-I5-2500_Admin.job 2014-01-25 23:42 - 2009-07-14 05:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-25 23:42 - 2009-07-14 05:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-25 23:34 - 2013-10-31 19:33 - 00000000 ____D C:\AdwCleaner 2014-01-25 22:53 - 2014-01-25 22:53 - 00000211 _____ C:\Users\Admin\Desktop\Trojaner-Board - Viren und Trojaner entfernen - kostenlos.URL 2014-01-23 23:49 - 2012-07-16 18:15 - 00000000 ____D C:\Program Files (x86)\Steam 2014-01-23 22:52 - 2014-01-23 22:52 - 00213656 _____ C:\Windows\PFRO.log 2014-01-23 22:52 - 2014-01-23 22:52 - 00000000 _____ C:\Windows\setuperr.log 2014-01-23 22:50 - 2012-02-01 22:28 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Winamp 2014-01-23 22:43 - 2012-08-18 00:24 - 00000000 ____D C:\SICHERHEIT 2014-01-23 21:04 - 2014-01-23 21:04 - 00097035 _____ C:\ProgramData\1390507258.bdinstall.bin 2014-01-23 21:00 - 2014-01-23 21:00 - 00037824 _____ C:\ProgramData\1390507255.bdinstall.bin 2014-01-23 20:52 - 2014-01-23 20:52 - 00203282 _____ C:\ProgramData\1390506589.bdinstall.bin 2014-01-23 20:52 - 2012-08-17 21:32 - 00000000 ____D C:\Users\Admin\AppData\Roaming\QuickScan 2014-01-23 18:22 - 2012-04-26 18:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-22 23:00 - 2012-08-23 19:58 - 08078730 _____ C:\Users\Admin\AppData\Local\census.cache 2014-01-22 23:00 - 2012-08-23 19:58 - 00123676 _____ C:\Users\Admin\AppData\Local\ars.cache 2014-01-22 22:02 - 2012-08-04 23:36 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster 2014-01-22 21:21 - 2014-01-22 20:53 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-22 21:21 - 2014-01-22 20:53 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-22 21:21 - 2014-01-22 20:53 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-22 21:21 - 2012-01-03 20:11 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe 2014-01-22 21:13 - 2012-01-02 18:56 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Mozilla 2014-01-22 21:11 - 2013-12-12 19:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-22 20:59 - 2012-01-02 19:04 - 00000000 ____D C:\Program Files\CCleaner 2014-01-22 20:58 - 2012-10-05 23:11 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-21 19:10 - 2011-12-28 13:55 - 00000000 ___RD C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-19 11:51 - 2012-01-17 21:24 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information 2014-01-19 08:33 - 2010-11-21 04:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-01-16 19:05 - 2013-10-15 23:56 - 00000000 ____D C:\ProgramData\Oracle 2014-01-16 18:58 - 2014-01-16 18:58 - 00005327 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-01-16 18:58 - 2012-09-02 10:47 - 00000000 ____D C:\Program Files (x86)\Java 2014-01-15 18:56 - 2009-07-14 05:45 - 04947496 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 18:46 - 2013-07-29 22:57 - 00000000 ____D C:\Windows\system32\MRT 2014-01-15 18:45 - 2011-12-28 14:27 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-13 19:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-12 19:54 - 2012-02-27 23:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Mp3tag 2014-01-12 13:34 - 2012-01-11 19:27 - 00000000 ____D C:\Users\Public\Documents\IPCAMS 2014-01-11 23:12 - 2012-02-27 23:47 - 00000000 ____D C:\Program Files (x86)\Mp3tag 2014-01-11 20:18 - 2014-01-07 21:51 - 00000000 ____D C:\Users\Admin\AppData\Roaming\HandBrake 2014-01-10 20:54 - 2014-01-10 20:54 - 00000000 ____D C:\Users\Admin\AppData\Local\Evernote 2014-01-10 20:51 - 2012-04-02 18:20 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-10 18:59 - 2012-08-21 19:54 - 00000000 ____D C:\Program Files\Windows7FirewallControl 2014-01-10 00:05 - 2011-12-28 14:35 - 00069520 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 22:40 - 2013-07-29 19:29 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2014-01-09 22:33 - 2014-01-09 22:33 - 00001789 _____ C:\Users\Public\Desktop\iTunes.lnk 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\iTunes 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\iPod 2014-01-09 22:33 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files (x86)\iTunes 2014-01-07 23:43 - 2012-01-28 18:03 - 00000000 ____D C:\Users\Admin\AppData\Local\Electronic_Arts_Inc 2014-01-07 23:27 - 2012-03-31 17:03 - 00000000 ____D C:\Users\Admin\AppData\Roaming\XMedia Recode 2014-01-07 22:47 - 2012-05-18 10:47 - 00000000 ____D C:\Program Files (x86)\XMedia Recode 2014-01-07 18:25 - 2012-09-29 18:08 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer 2014-01-06 22:36 - 2014-01-04 23:23 - 00000000 ____D C:\Program Files (x86)\PhoneStick 2014-01-05 18:19 - 2012-01-02 18:45 - 01594028 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2014-01-04 23:22 - 2014-01-04 23:22 - 00003168 _____ C:\Windows\System32\Tasks\{F4B1E0D0-C0C5-4FE5-B43D-40023BE073BB} 2014-01-04 17:00 - 2013-02-24 00:42 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple Computer 2014-01-04 17:00 - 2012-11-16 21:12 - 00000000 ____D C:\ProgramData\Apple Computer 2014-01-04 16:59 - 2014-01-04 16:59 - 00000000 ____D C:\Program Files\Common Files\Apple 2014-01-04 16:59 - 2014-01-04 16:59 - 00000000 ____D C:\Program Files\Bonjour 2014-01-04 16:59 - 2014-01-04 16:59 - 00000000 ____D C:\Program Files (x86)\Bonjour 2014-01-01 00:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache Some content of TEMP: ==================== C:\Users\Admin\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-24 20:35 ==================== End Of Log ============================ --- --- --- ADDITION Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-01-2014 01 Ran by Admin at 2014-01-26 10:44:41 Running from C:\Users\Admin\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== "Nero SoundTrax Help (x32 Version: 4.0.11.0 - Nero AG) Hidden 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) ACDSee Foto-Manager 2009 (x32 Version: 11.0.115 - ACD Systems International) ACDSee Image Decoder Update (x32 Version: 2.0.5 - ACD Systems) Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.38 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden AMD Accelerated Video Transcoding (Version: 13.15.100.31008 - Advanced Micro Devices, Inc.) Hidden AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Control Center (x32 Version: 2013.1008.932.15229 - Ihr Firmenname) Hidden AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.81008.0920 - Advanced Micro Devices, Inc.) Hidden Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) Audacity 2.0 (x32 Version: - Audacity Team) BioShock Infinite (x32 Version: - Irrational Games) Bonjour (Version: 3.0.0.10 - Apple Inc.) Canon Easy-PhotoPrint EX (x32 Version: - ) Canon Easy-WebPrint EX (x32 Version: - ) Canon IJ Network Scan Utility (x32 Version: - ) Canon IJ Network Tool (x32 Version: - ) Canon MG5200 series Benutzerregistrierung (x32 Version: - ) Canon MG5200 series MP Drivers (Version: - ) Canon MG5300 series MP Drivers (Version: - ) Canon MP Navigator EX 4.0 (x32 Version: - ) Canon My Printer (x32 Version: - ) Canon Solution Menu EX (x32 Version: - ) Canon Utilities EOS Utility (x32 Version: 2.10.2.0 - Canon Inc.) Canon Utilities PhotoStitch (x32 Version: 3.1.22.46 - Canon Inc.) Canon Utilities WFT Utility (x32 Version: 3.5.1.1 - Canon Inc.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1008.932.15229 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.1008.932.15229 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2013.1008.932.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2013.1008.0931.15229 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2013.1008.932.15229 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.09 - Piriform) Core Temp version 0.99.7 (Version: 0.99.7 - Arthur Liberman) Creative 3DMIDI Player (x32 Version: 1.11 - Creative Technology Limited) Creative ALchemy (x32 Version: 1.43 - Creative Technology Limited) Creative Audio-Systemsteuerung (x32 Version: 3.00 - Creative Technology Limited) Creative Konsole Starter (x32 Version: 2.61 - Creative Technology Limited) Creative Media Toolbox 6 (Shared Components) (x32 Version: 2.80.12 - Creative Labs) Creative Media Toolbox 6 (x32 Version: 6.02 - Creative Technology Limited) Creative MediaSource 5 (x32 Version: 5.26 - Creative Technology Limited) Creative Software AutoUpdate (x32 Version: 1.41 - Creative Technology Limited) Creative Sound Blaster Properties x64 Edition (x32 Version: 1.03 - Creative Technology Limited) Creative WaveStudio 7 (x32 Version: 7.14 - Creative Technology Limited) Creative-Diagnose (x32 Version: 5.11 - Creative Technology Limited) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DivX-Setup (x32 Version: 2.6.1.8 - DivX, LLC) Dolby Digital Live Pack (x32 Version: 3.00 - Creative Technology Limited) Dolby Home Theater v4 (x32 Version: 7.2.7000.7 - Dolby Laboratories Inc) DolbyFiles (x32 Version: 2.0 - Nero AG) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) DTS Connect Pack (x32 Version: 1.00 - Creative Technology Limited) DWA-547 (x32 Version: - D-Link) Eraser 6.0.10.2620 (Version: 6.0.2620 - The Eraser Project) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden FormatFactory 3.2.0.1 (x32 Version: 3.2.0.1 - Free Time) Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 7.0.0.1118 - Intel Corporation) Intel(R) Processor Graphics (x32 Version: 9.17.10.3347 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002 - Intel Corporation) Intelligent IP Installer (x32 Version: 1.1.16.11 - TP Link) IP Surveillance System Lite (x32 Version: 2.8.5 - Digital) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation) K-Lite Mega Codec Pack 9.7.5 (x32 Version: 9.7.5 - ) LAME v3.99.3 (for Windows) (x32 Version: - ) Logitech SetPoint 6.61 (Version: 6.61.15 - Logitech) Logitech Unifying-Software 2.10 (Version: 2.10.37 - Logitech) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) marvell 91xx driver (x32 Version: 1.1.0.6 - Marvell) Media Preview (Version: 1.3.1.343 - BabelSoft) Menu Templates - Pack 1 (x32 Version: 9.0.4.0 - Nero AG) Hidden Menu Templates - Pack 2 (x32 Version: 9.0.4.0 - Nero AG) Hidden Menu Templates - Pack 3 (x32 Version: 9.0.4.0 - Nero AG) Hidden Menu Templates - Starter Kit (x32 Version: 9.0.4.0 - Nero AG) Hidden Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Access 2003 Runtime (x32 Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Movie Templates - Pack 1 (x32 Version: 9.0.4.0 - Nero AG) Hidden Movie Templates - Starter Kit (x32 Version: 9.0.4.0 - Nero AG) Hidden Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla) Mp3tag v2.58 (x32 Version: v2.58 - Florian Heidenreich) MPC-HC 1.7.0 (x32 Version: 1.7.0.7858 - MPC-HC Team) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) Nero 9 (x32 Version: - Nero AG) Nero BurningROM (x32 Version: 9.0.0.0 - Nero AG) Hidden Nero BurnRights (x32 Version: 2.99.6.100 - Nero AG) Hidden Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden Nero Disc Copy Gadget (x32 Version: 1.53.0.0 - Nero AG) Hidden Nero Disc Copy Gadget Help (x32 Version: 2.0.0.0 - Nero AG) Hidden Nero DiscSpeed (x32 Version: 4.99.5.105 - Nero AG) Hidden Nero Express (x32 Version: 9.0.0.0 - Nero AG) Hidden Nero InfoTool (x32 Version: 5.99.5.105 - Nero AG) Hidden Nero Installer (x32 Version: 2.0.0.1 - Nero AG) Hidden Nero Live (x32 Version: 1.0.160.0 - Nero AG) Hidden Nero Live Help (x32 Version: 1.0.160.0 - Nero AG) Hidden Nero Recode (x32 Version: 3.53.0.0 - Nero AG) Hidden Nero Recode Help (x32 Version: 3.53.0.0 - Nero AG) Hidden Nero Rescue Agent (x32 Version: 1.99.0.1 - Nero AG) Hidden Nero RescueAgent Help (x32 Version: 1.99.0.1 - Nero AG) Hidden Nero ShowTime (x32 Version: 4.99.0.0 - Nero AG) Hidden Nero StartSmart (x32 Version: 9.0.6.100 - Nero AG) Hidden Nero StartSmart Help (x32 Version: 9.0.0.0 - Nero AG) Hidden Nero Vision (x32 Version: 6.0.0.100 - Nero AG) Hidden Nero Vision (x32 Version: 6.0.3.100 - Nero AG) Hidden Nero WaveEditor (x32 Version: 5.0.10.0 - Nero AG) Hidden Nero WaveEditor Help (x32 Version: 5.0.10.0 - Nero AG) Hidden NeroBurningROM (x32 Version: 9.0.6.100 - Nero AG) Hidden NeroExpress (x32 Version: 9.0.6.100 - Nero AG) Hidden neroxml (x32 Version: 1.0.0 - Nero AG) Hidden OpenAL (x32 Version: - ) OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) Origin (x32 Version: 9.1.3.2637 - Electronic Arts, Inc.) QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Realtek Ethernet Controller Driver (x32 Version: 7.46.531.2011 - Realtek) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6423 - Realtek Semiconductor Corp.) Samsung_MonSetup (x32 Version: 1.00.0000 - Samsung) SereneScreen Marine Aquarium 3 (x32 Version: 3.0 - Prolific Publishing, Inc.) SonyEditor (remove only) (x32 Version: - ) Sound Blaster X-Fi (x32 Version: 1.0 - Creative Technology Limited) SoundTrax (x32 Version: 4.0.11.0 - Nero AG) Hidden SpywareBlaster 5.0 (x32 Version: 5.0.0 - BrightFort LLC) Steam (x32 Version: 1.0.0.0 - Valve Corporation) Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN) Winamp (x32 Version: 5.63 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows7FirewallControl Plus 5.2.18.33 (Version: 5.2.18.33 - Sphinx Software) XMedia Recode Version 3.1.7.7 (x32 Version: 3.1.7.7 - XMedia Recode) ==================== Restore Points ========================= 24-01-2014 19:42:08 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:34 - 2012-01-03 20:22 - 00001362 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0D4BE2DC-5545-4F8C-A634-4066EFFAF982} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-09] (Google Inc.) Task: {3EF71122-B12E-41BB-B254-065FDC4E3D6D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-22] (Adobe Systems Incorporated) Task: {99C54A11-2DA9-4B68-A646-D70A667594DA} - System32\Tasks\NeroLiveEpgUpdate-LOSTIES-I5-2500_Admin => C:\Program Files (x86)\Nero\Nero 9\Nero Live\NeroLive.exe [2008-09-01] (Nero AG) Task: {A6D45D81-79EC-44D8-9DF1-B49784BC20F4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-09] (Google Inc.) Task: {C7E11033-D8A5-43B9-BA94-4E407C180B9E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {CD500A12-6BD6-4EFB-8F82-3B9839C847F1} - System32\Tasks\Core Temp Autostart => C:\Program Files\Core Temp\Core Temp.exe [2010-07-02] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\NeroLiveEpgUpdate-LOSTIES-I5-2500_Admin.job => C:\Program Files (x86)\Nero\Nero 9\Nero Live\NeroLive.exe ==================== Loaded Modules (whitelisted) ============= 2011-12-28 14:00 - 2011-06-10 03:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-06-21 18:47 - 2013-06-21 18:47 - 00012520 _____ () C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll 2013-06-21 18:47 - 2013-06-21 18:47 - 00015080 _____ () C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll 2013-06-21 18:47 - 2013-06-21 18:47 - 00014056 _____ () C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll 2012-10-11 21:56 - 2012-10-11 21:56 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-10-11 21:56 - 2012-10-11 21:56 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-12-28 15:23 - 2009-10-07 16:58 - 00376832 _____ () C:\Program Files (x86)\D-Link\DWA-547 revA\WlanDll.dll 2011-12-28 15:23 - 2009-09-08 18:04 - 00208896 _____ () C:\Program Files (x86)\D-Link\DWA-547 revA\WlanWPS.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Admin\AppData\Roaming\Dropbox\bin\libcef.dll 2011-12-28 14:42 - 2009-02-06 17:52 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL 2011-12-28 14:42 - 2009-06-29 09:54 - 00164864 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2012-01-05 20:46 - 2007-09-13 17:05 - 00002560 _____ () C:\Windows\system32\CTXFIGER.DLL 2014-01-22 21:11 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-08-14 20:29 - 2013-08-14 20:29 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1beb84c27c2edeb38839916524b9df4d\IsdiInterop.ni.dll 2011-12-28 14:03 - 2011-05-20 10:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Bluetooth-Gerät (PAN) Description: Bluetooth-Gerät (PAN) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: BthPan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Microsoft-Adapter für Miniports virtueller WiFis Description: Microsoft-Adapter für Miniports virtueller WiFis Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Realtek PCIe GBE Family Controller Description: Realtek PCIe GBE Family Controller Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Service: RTL8167 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (01/26/2014 01:59:10 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (01/26/2014 00:39:40 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/25/2014 10:32:33 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (01/24/2014 08:35:23 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (01/23/2014 10:51:30 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/23/2014 07:25:04 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Dropbox.exe, Version: 2.4.11.0, Zeitstempel: 0x527d91e4 Name des fehlerhaften Moduls: libcef.dll, Version: 1.1364.1352.0, Zeitstempel: 0x5213d19d Ausnahmecode: 0xc0000005 Fehleroffset: 0x000ff147 ID des fehlerhaften Prozesses: 0xe4c Startzeit der fehlerhaften Anwendung: 0xDropbox.exe0 Pfad der fehlerhaften Anwendung: Dropbox.exe1 Pfad des fehlerhaften Moduls: Dropbox.exe2 Berichtskennung: Dropbox.exe3 Error: (01/23/2014 06:25:35 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/23/2014 06:25:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/23/2014 06:25:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/23/2014 06:25:31 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (01/26/2014 10:41:04 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht. Error: (01/26/2014 10:39:34 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (01/26/2014 00:49:05 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:59 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:52 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:46 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:39 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:33 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:26 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Error: (01/26/2014 00:48:20 AM) (Source: cdrom) (User: ) Description: Fehlerhafter Block bei Gerät \Device\CdRom0. Microsoft Office Sessions: ========================= Error: (01/26/2014 01:59:10 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\program files (x86)\common files\adobe air\Versions\1.0\Adobe AIRtmp.dllc:\program files (x86)\common files\adobe air\Versions\1.0\Adobe AIRtmp.dll3 Error: (01/26/2014 00:39:40 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\$Recycle.Bin\S-1-5-21-680470512-2027574213-1766258871-1000\$RA1RCBV.exe Error: (01/25/2014 10:32:33 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\program files (x86)\common files\adobe air\Versions\1.0\Adobe AIRtmp.dllc:\program files (x86)\common files\adobe air\Versions\1.0\Adobe AIRtmp.dll3 Error: (01/24/2014 08:35:23 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\program files (x86)\common files\adobe air\Versions\1.0\Adobe AIRtmp.dllc:\program files (x86)\common files\adobe air\Versions\1.0\Adobe AIRtmp.dll3 Error: (01/23/2014 10:51:30 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe Error: (01/23/2014 07:25:04 PM) (Source: Application Error)(User: ) Description: Dropbox.exe2.4.11.0527d91e4libcef.dll1.1364.1352.05213d19dc0000005000ff147e4c01cf185fb5539942C:\Users\Admin\AppData\Roaming\Dropbox\bin\Dropbox.exeC:\Users\Admin\AppData\Roaming\Dropbox\bin\libcef.dllad17c47c-845b-11e3-bbdf-d6151661b079 Error: (01/23/2014 06:25:35 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe Error: (01/23/2014 06:25:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe Error: (01/23/2014 06:25:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe Error: (01/23/2014 06:25:31 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe CodeIntegrity Errors: =================================== Date: 2012-08-11 01:08:31.443 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Common Files\ATI Technologies\Multimedia\AMDMFTDecoder_64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 27% Total physical RAM: 8109.11 MB Available physical RAM: 5919.26 MB Total Pagefile: 16216.4 MB Available Pagefile: 13783.4 MB Total Virtual: 8192 MB Available Virtual: 8191.77 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:74.43 GB) (Free:16.2 GB) NTFS Drive d: (Media) (Fixed) (Total:232.9 GB) (Free:223.09 GB) NTFS Drive e: (Working) (Fixed) (Total:232.86 GB) (Free:203.33 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 75 GB) (Disk ID: 305B595D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=74 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 305B5928) Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Und wie geht es nun weiter? was steht in den logfiles? |
28.01.2014, 11:14 | #4 |
/// the machine /// TB-Ausbilder | Infos über JS/Faceliker.A und .H Alles sauber. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Nochmal mit MSE scannen, sollte nix mehr finden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Infos über JS/Faceliker.A und .H |
automatisch, avira, bitdefender, bytes, cache, defender, email, erkannt, eset, firefox, forum, gelöscht, google, hijack, hijackthis, malware, malware bytes, microsoft, neustart, online, rechner, scan, security, seite, seiten, trojaner |