|
Log-Analyse und Auswertung: Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
27.01.2014, 21:45 | #1 |
| Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Hallo Liebe Community, Vor gut einer Woche habe ich verschiedene Updates für meinen Laptop installiert, darunter ein Java Update ((jre-7-u51-windows-i586.exe von cnet.com) und ein Flashplayer Update (install_flashplayer12x32_mssd_aaa_aih.exe von adobe.com). Ich bin mir nicht sicher, ob es mit diesen Updates zusammenhängt, aber ungefähr seitdem hängt sich mein PC nach gut einer halben Stunde einfach auf (Sanduhr statt Mauszeiger, Task-Manager nicht mehr zu öffnen). Nach Neustart beginnt alles wieder von vorne. Ich bin nun im abgesicherten Modus unterwegs und hier treten keine Probleme auf. Habt ihr eine Idee? Danke für jede Hilfe Anbei die Logfiles, die ich im Abgesicherten Modus erstellt habe: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 01 Ran by Benni (administrator) on BURN3R on 27-01-2014 21:10:42 Running from C:\Users\Benni\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Safe Mode (with Networking) The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-02] (Crawler.com) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-19] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.) HKCU\...\Run: [AceStream] - C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2013-11-07] () HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Benni\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-09-03] (Smartbar) MountPoints2: D - D:\HTC_Sync_Manager_PC.exe MountPoints2: E - E:\HTC_Sync_Manager_PC.exe MountPoints2: {189d4d15-66a1-11e3-bb20-c0143ddcc984} - E:\HTC_Sync_Manager_PC.exe MountPoints2: {f8b96e40-5684-11e3-bd37-c0143ddcc984} - D:\HTC_Sync_Manager_PC.exe AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1344800 2014-01-01] (Conduit) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1037600 2014-01-01] (Conduit) Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://uk.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x032A8A433C58CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: PriceGong - Price Comparison - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll (PriceGong) BHO-x32: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default FF user.js: detected! => C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\user.js FF Homepage: hxxp://www.readmore.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.5 - C:\Users\Benni\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced Cookie Manager - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\cookiemgr@jayapal.com [2014-01-10] FF Extension: ProxTube - Unblock YouTube - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\ich@maltegoetz.de [2013-12-11] FF Extension: YouTube Unblocker - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-26] FF Extension: PriceGong - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} [2013-04-18] FF Extension: QuickShare Widget - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{91feafb2-c928-8ce1-6959-83a4f4a57307} [2013-09-16] FF Extension: DivX Web Player - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-11-22] FF Extension: Web Install Updater Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{3ed53ac3-002c-4242-85e7-8ff4ad43ec1a}.xpi [2014-01-17] FF Extension: {5bab8c58-503e-4275-9a4d-9c1c79c22f77} - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{5bab8c58-503e-4275-9a4d-9c1c79c22f77}.xpi [2013-11-15] FF Extension: Adblock Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF [2012-09-09] FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-09-14] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Extension: (Docs) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-07] CHR Extension: (Google Drive) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-07] CHR Extension: (YouTube) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-07] CHR Extension: (Google-Suche) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-07] CHR Extension: (Google Mail) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-07] CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx [2013-03-04] ==================== Services (Whitelisted) ================= S2 avast! Antivirus; C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-19] (AVAST Software) S2 btwdins; C:\PROGRAM FILES\LENOVO\BLUETOOTH SOFTWARE\BTWDINS.EXE [945440 2012-02-01] (Broadcom Corporation.) S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2301216 2014-01-01] (Conduit) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation) S2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-09-07] (Crawler.com) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-19] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-19] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-19] () S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-19] (AVAST Software) S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-19] (AVAST Software) S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-21] (AVAST Software) S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-19] () S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.) S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation) R3 SmbDrvAMDASF; C:\Windows\System32\DRIVERS\Smb_driver_AMDASF.sys [26424 2012-06-20] (Synaptics Incorporated) S2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-09-10] (Windows (R) Win 7 DDK provider) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) U3 ufldqpog; \??\C:\Users\Benni\AppData\Local\Temp\ufldqpog.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-27 21:06 - 2014-01-27 21:11 - 00017182 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-27 21:06 - 2014-01-27 21:06 - 02079232 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-21 22:59 - 2014-01-21 22:58 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-19 17:39 - 2014-01-21 22:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-15 22:57 - 2014-01-15 22:57 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 09:28 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 09:28 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 09:28 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2013-12-29 23:22 - 2014-01-15 22:57 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-29 23:22 - 2013-12-29 23:24 - 00000000 ____D C:\Users\Benni\AppData\Local\SearchProtect 2013-12-29 23:22 - 2013-12-29 23:23 - 00000000 ____D C:\Users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:23 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:22 - 00000000 _____ C:\END 2013-12-29 23:21 - 2013-12-29 23:21 - 32694648 _____ (DVDVideoSoft Ltd. ) C:\Users\Benni\Downloads\FreeVideoToMP3Converter_5-0-32-1219.exe 2013-12-28 16:12 - 2013-12-28 16:12 - 00000000 ____D C:\Users\Benni\Desktop\Radical Face ==================== One Month Modified Files and Folders ======= 2014-01-27 21:11 - 2014-01-27 21:06 - 00017182 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-27 21:06 - 2014-01-27 21:06 - 02079232 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:31 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-27 20:24 - 2009-07-14 18:58 - 00806178 _____ C:\Windows\system32\perfh007.dat 2014-01-27 20:24 - 2009-07-14 18:58 - 00184650 _____ C:\Windows\system32\perfc007.dat 2014-01-27 20:24 - 2009-07-14 06:13 - 01889308 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-26 23:40 - 2012-09-09 00:29 - 01247165 _____ C:\Windows\WindowsUpdate.log 2014-01-26 21:37 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-26 21:37 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-26 21:30 - 2012-11-12 18:20 - 00000000 ___RD C:\Users\Benni\Dropbox 2014-01-26 21:30 - 2012-11-12 18:15 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Dropbox 2014-01-26 21:29 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-26 21:29 - 2009-07-14 05:51 - 00116811 _____ C:\Windows\setupact.log 2014-01-26 00:18 - 2012-09-09 21:16 - 00004194 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-25 08:18 - 2013-10-21 14:31 - 00000000 ____D C:\Users\MSSQL$SQLEXPRESS 2014-01-24 18:49 - 2012-10-17 17:07 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-24 14:44 - 2012-09-10 11:45 - 00000000 ____D C:\ProgramData\Spyware Terminator 2014-01-23 16:07 - 2013-09-10 08:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2014-01-23 15:36 - 2013-02-06 22:57 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Skype 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-22 23:13 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni\AppData\Local\VirtualStore 2014-01-22 07:01 - 2012-09-09 10:58 - 00418282 _____ C:\Windows\PFRO.log 2014-01-22 00:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-21 22:59 - 2013-10-17 09:38 - 00000000 ____D C:\ProgramData\Oracle 2014-01-21 22:58 - 2014-01-21 22:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:58 - 2013-07-20 03:54 - 00000000 ____D C:\Program Files (x86)\Java 2014-01-21 22:57 - 2012-10-17 17:07 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-21 22:57 - 2012-09-16 22:28 - 00000000 ____D C:\Users\Benni\AppData\Local\Adobe 2014-01-21 22:57 - 2012-09-09 23:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-21 22:57 - 2012-09-09 23:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:31 - 2014-01-19 17:39 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-21 21:05 - 2013-01-12 00:29 - 00000020 ____H C:\ProgramData\PKP_DLev.DAT 2014-01-20 14:05 - 2013-10-21 14:31 - 00000000 ____D C:\Users\Benni\Documents\SQL Server Management Studio 2014-01-20 00:40 - 2013-09-14 21:42 - 00000000 ___HD C:\_acestream_cache_ 2014-01-19 17:39 - 2013-03-06 07:46 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-19 17:39 - 2013-03-06 07:46 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-19 17:39 - 2012-09-09 21:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00002101 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-19 17:39 - 2012-09-09 21:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-19 17:34 - 2012-09-09 21:15 - 00000000 ____D C:\ProgramData\AVAST Software 2014-01-19 17:33 - 2012-09-09 21:16 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2014-01-17 10:25 - 2012-09-09 00:29 - 00000000 ___RD C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:24 - 2012-11-12 18:17 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 09:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-17 07:34 - 2013-05-26 07:11 - 00000000 ____D C:\Windows\Minidump 2014-01-17 07:14 - 2009-07-14 05:45 - 00439360 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-17 07:13 - 2012-09-09 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-16 12:00 - 2013-08-04 01:33 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 11:56 - 2012-09-09 21:39 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 22:57 - 2014-01-15 22:57 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 22:57 - 2013-12-29 23:22 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-15 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2014-01-13 09:40 - 2013-10-21 16:09 - 00000000 ____D C:\Users\Benni\Documents\Visual Studio 2012 2014-01-11 22:21 - 2013-09-14 21:42 - 00000000 ____D C:\Users\Benni\AppData\Roaming\.ACEStream 2014-01-05 13:50 - 2012-09-10 15:04 - 00000000 ____D C:\Users\Benni\AppData\Roaming\vlc 2013-12-29 23:24 - 2013-12-29 23:22 - 00000000 ____D C:\Users\Benni\AppData\Local\SearchProtect 2013-12-29 23:23 - 2013-12-29 23:22 - 00000000 ____D C:\Users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 23:23 - 2013-12-29 23:22 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:22 - 00000000 _____ C:\END 2013-12-29 23:21 - 2013-12-29 23:21 - 32694648 _____ (DVDVideoSoft Ltd. ) C:\Users\Benni\Downloads\FreeVideoToMP3Converter_5-0-32-1219.exe 2013-12-28 16:12 - 2013-12-28 16:12 - 00000000 ____D C:\Users\Benni\Desktop\Radical Face Files to move or delete: ==================== C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\Benni\AppData\Local\Temp\1th2yvgx.dll C:\Users\Benni\AppData\Local\Temp\AskSLib.dll C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe-1.exe C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe-2.exe C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe.exe C:\Users\Benni\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Benni\AppData\Local\Temp\Installer.exe C:\Users\Benni\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\nsg3324.exe C:\Users\Benni\AppData\Local\Temp\nsgB7FF.exe C:\Users\Benni\AppData\Local\Temp\nsl3C1A.exe C:\Users\Benni\AppData\Local\Temp\nsqAFB4.exe C:\Users\Benni\AppData\Local\Temp\SPSetup.exe C:\Users\Benni\AppData\Local\Temp\vlc-2.0.4-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-22 00:48 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014 01 Ran by Benni at 2014-01-27 21:12:45 Running from C:\Users\Benni\Downloads Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Ace Stream Media 2.1.5.5 (HKCU Version: 2.1.5.5 - Ace Stream Media) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Agent Ransack 2010 (64-bit) (Version: - ) AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 3.0.859.0 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.70418.0413 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.03.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0418.355.4954 - Ihr Firmenname) Hidden avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Broadcom 802.11 Network Adapter (Version: 5.100.82.130 - Broadcom Corporation) calibre 64bit (Version: 0.9.30 - Kovid Goyal) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.03 - Piriform) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20702.00 - Microsoft Corporation) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60 - Microsoft Corporation) Free Video to MP3 Converter version 5.0.32.1224 (x32 Version: 5.0.32.1224 - DVDVideoSoft Ltd.) GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) IIS 8.0 Express (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (Version: - ) IIS Express Application Compatibility Database for x86 (Version: - ) IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan) IsoBuster 3.0 (x32 Version: 3.0 - Smart Projects) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2300 - Broadcom Corporation) Lenovo Power Management Driver (Version: 1.66.00.22 - ) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Report Viewer 2012-Laufzeit (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-Bit) (Version: - ) Hidden Microsoft SQL Server 2012 (64-Bit) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 RsFx Driver (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012-Setup (Deutsch) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Shell (Isolated) - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft VSS Writer für SQL Server 2012 (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Developer Tools - Visual Studio 2012 - DEU (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Developer Tools - Visual Studio 2012 (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Platform Installer 4.0 (Version: 4.0.1622 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) Nikon Message Center 2 (x32 Version: 2.1.0 - Nikon) Nikon Movie Editor (x32 Version: 2.6.0 - Nikon) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation) PDF24 Creator 5.4.0 (x32 Version: - PDF24.org) Picture Control Utility x64 (Version: 1.4.7 - Nikon) PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PriceGong 2.6.11 (x32 Version: 2.6.11 - PriceGong) <==== ATTENTION QuickShare (x32 Version: 1.135.60.12323 - Linkury Inc.) <==== ATTENTION Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011 - Realtek) Realtek PCIE Card Reader (x32 Version: 6.1.7601.82 - Realtek Semiconductor Corp.) Search Protect (x32 Version: 2.9.40.12 - Conduit) <==== ATTENTION Secure Download Manager (x32 Version: 3.1.0 - Kivuto Solutions Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.) Smart File Advisor 1.1.1 (x32 Version: 1.1.1 - Filefacts.net) SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com) Spyware Terminator 2012 (x32 Version: 3.0.0.80 - Crawler.com) SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server-Browser für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) ThinkPad UltraNav Driver (Version: 16.1.4.17 - ) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219 - Microsoft Corporation) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) ViewNX 2 (Version: 2.6.0 - Nikon) Visual Studio 2010 Prerequisites - English (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.8514.0 - Microsoft Corporation) Hidden VLC media player 2.0.2 (Version: 2.0.2 - VideoLAN) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0 - Microsoft Corporation) Windows App Certification Kit Native Components (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows App Certification Kit x64 (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {21EE077E-0B26-42DD-83D2-DBBF938ADA84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {B9B66B86-8F79-4ABB-8F46-DA02F3B31449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-21] (Adobe Systems Incorporated) Task: {F6A4853F-DABF-4586-980A-C0D2D2BF2D68} - System32\Tasks\avast! Emergency Update => C:\Program Files (x86)\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-19] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: aswRvrt Description: aswRvrt Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswRvrt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: avast! Network Shield Support Description: avast! Network Shield Support Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswTdi Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: aswVmm Description: aswVmm Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswVmm Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/27/2014 08:45:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/24/2014 07:45:19 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Beschreibung = Configured Microsoft Office Professional 2010; Fehler = 0x8007043c). Error: (01/24/2014 07:45:13 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Beschreibung = Configured Microsoft Office Professional 2010; Fehler = 0x8007043c). Error: (01/24/2014 06:45:30 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/24/2014 06:45:28 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/23/2014 08:51:24 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/23/2014 08:51:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/22/2014 11:41:13 PM) (Source: Application Hang) (User: ) Description: Programm IEXPLORE.EXE, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1500 Startzeit: 01cf17c30212bcdb Endzeit: 48 Anwendungspfad: C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE Berichts-ID: Error: (01/22/2014 08:32:32 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x03b69178 ID des fehlerhaften Prozesses: 0xa1c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/21/2014 10:58:00 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . System errors: ============= Error: (01/27/2014 09:13:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:13:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:13:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:11:27 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:11:27 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:11:27 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:43 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= Error: (01/27/2014 08:45:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\SoftonicDownloader_fuer_pixlr-o-matic.exe Error: (01/24/2014 07:45:19 PM) (Source: System Restore)(User: ) Description: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -EmbeddingConfigured Microsoft Office Professional 20100x8007043c Error: (01/24/2014 07:45:13 PM) (Source: System Restore)(User: ) Description: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -EmbeddingConfigured Microsoft Office Professional 20100x8007043c Error: (01/24/2014 06:45:30 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/24/2014 06:45:28 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/23/2014 08:51:24 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000500000000a5c01cf187452567495C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownbcc12d66-8467-11e3-b62c-c0143ddcc984 Error: (01/23/2014 08:51:08 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000500000000a5c01cf187452567495C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownb370b3dc-8467-11e3-b62c-c0143ddcc984 Error: (01/22/2014 11:41:13 PM) (Source: Application Hang)(User: ) Description: IEXPLORE.EXE11.0.9600.16428150001cf17c30212bcdb48C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE Error: (01/22/2014 08:32:32 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000503b69178a1c01cf17a88e8d28a1C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownef9a59b7-839b-11e3-9ce8-c0143ddcc984 Error: (01/21/2014 10:58:00 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler ==================== Memory info =========================== Percentage of memory in use: 18% Total physical RAM: 7618.1 MB Available physical RAM: 6175.4 MB Total Pagefile: 15234.38 MB Available Pagefile: 13897.65 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:1.73 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: DA3504B2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19355 - hxxp://www.gmer.net Rootkit scan 2014-01-27 20:56:59 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_SSD_830_Series rev.CXM03B1Q 119,24GB Running: ypd287xs.exe; Driver: C:\Users\Benni\AppData\Local\Temp\ufldqpog.sys ---- Processes - GMER 2.1 ---- Library C:\Users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [1112] 000007fef9e70000 Library C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FBBB8E99-E052-4EB3-BBC3-2B4F10039884}\mpengine.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [1900] (Microsoft Malware Protection Engine/Microsoft Corporation SIGNED)(2014-01-24 13:49:01) 000007fef6cc0000 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0143ddcc984 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0143ddcc984@9463d1b94634 0x25 0xE3 0x9F 0xC7 ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0143ddcc984@980d2eecb1a5 0x2A 0x43 0x72 0xA0 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0143ddcc984 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0143ddcc984@9463d1b94634 0x25 0xE3 0x9F 0xC7 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0143ddcc984@980d2eecb1a5 0x2A 0x43 0x72 0xA0 ... ---- EOF - GMER 2.1 ---- Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 20:31 on 27/01/2014 (Benni) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- |
27.01.2014, 23:18 | #2 |
/// the machine /// TB-Ausbilder | Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Hi,
__________________bitte FRST logs aus dem normalen Modus posten.
__________________ |
27.01.2014, 23:29 | #3 |
| Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Alles klar:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 01 Ran by Benni (administrator) on BURN3R on 27-01-2014 23:24:01 Running from C:\Users\Benni\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe (Smartbar) C:\Users\Benni\AppData\Local\Smartbar\Application\QuickShare.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Dropbox, Inc.) C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Nikon Corporation) C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (AVAST Software) C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-02] (Crawler.com) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-19] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.) HKCU\...\Run: [AceStream] - C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2013-11-07] () HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Benni\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-09-03] (Smartbar) MountPoints2: D - D:\HTC_Sync_Manager_PC.exe MountPoints2: E - E:\HTC_Sync_Manager_PC.exe MountPoints2: {189d4d15-66a1-11e3-bb20-c0143ddcc984} - E:\HTC_Sync_Manager_PC.exe MountPoints2: {f8b96e40-5684-11e3-bd37-c0143ddcc984} - D:\HTC_Sync_Manager_PC.exe AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1344800 2014-01-01] (Conduit) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1037600 2014-01-01] (Conduit) Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://uk.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x032A8A433C58CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: PriceGong - Price Comparison - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll (PriceGong) BHO-x32: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default FF user.js: detected! => C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\user.js FF Homepage: hxxp://www.readmore.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.5 - C:\Users\Benni\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced Cookie Manager - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\cookiemgr@jayapal.com [2014-01-10] FF Extension: ProxTube - Unblock YouTube - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\ich@maltegoetz.de [2013-12-11] FF Extension: YouTube Unblocker - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-26] FF Extension: PriceGong - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} [2013-04-18] FF Extension: QuickShare Widget - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{91feafb2-c928-8ce1-6959-83a4f4a57307} [2013-09-16] FF Extension: DivX Web Player - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-11-22] FF Extension: Web Install Updater Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{3ed53ac3-002c-4242-85e7-8ff4ad43ec1a}.xpi [2014-01-17] FF Extension: {5bab8c58-503e-4275-9a4d-9c1c79c22f77} - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{5bab8c58-503e-4275-9a4d-9c1c79c22f77}.xpi [2013-11-15] FF Extension: Adblock Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF [2012-09-09] FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-09-14] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Extension: (Docs) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-07] CHR Extension: (Google Drive) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-07] CHR Extension: (YouTube) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-07] CHR Extension: (Google-Suche) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-07] CHR Extension: (Google Mail) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-07] CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx [2013-03-04] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-19] (AVAST Software) R2 btwdins; C:\PROGRAM FILES\LENOVO\BLUETOOTH SOFTWARE\BTWDINS.EXE [945440 2012-02-01] (Broadcom Corporation.) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2301216 2014-01-01] (Conduit) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation) R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-09-07] (Crawler.com) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-19] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-19] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-19] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-19] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-19] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-21] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-19] () R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.) S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation) R3 SmbDrvAMDASF; C:\Windows\System32\DRIVERS\Smb_driver_AMDASF.sys [26424 2012-06-20] (Synaptics Incorporated) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-09-10] (Windows (R) Win 7 DDK provider) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-27 23:20 - 2014-01-27 23:24 - 00019612 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-27 21:06 - 2014-01-27 21:06 - 02079232 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-21 22:59 - 2014-01-21 22:58 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-19 17:39 - 2014-01-21 22:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-15 22:57 - 2014-01-15 22:57 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 09:28 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 09:28 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 09:28 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2013-12-29 23:22 - 2014-01-15 22:57 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-29 23:22 - 2013-12-29 23:24 - 00000000 ____D C:\Users\Benni\AppData\Local\SearchProtect 2013-12-29 23:22 - 2013-12-29 23:23 - 00000000 ____D C:\Users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:23 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:22 - 00000000 _____ C:\END 2013-12-29 23:21 - 2013-12-29 23:21 - 32694648 _____ (DVDVideoSoft Ltd. ) C:\Users\Benni\Downloads\FreeVideoToMP3Converter_5-0-32-1219.exe 2013-12-28 16:12 - 2013-12-28 16:12 - 00000000 ____D C:\Users\Benni\Desktop\Radical Face ==================== One Month Modified Files and Folders ======= 2014-01-27 23:24 - 2014-01-27 23:20 - 00019612 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-27 23:22 - 2012-11-12 18:20 - 00000000 ___RD C:\Users\Benni\Dropbox 2014-01-27 23:22 - 2012-11-12 18:15 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Dropbox 2014-01-27 23:21 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-27 23:21 - 2009-07-14 05:51 - 00116923 _____ C:\Windows\setupact.log 2014-01-27 22:58 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-27 22:58 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-27 22:57 - 2009-07-14 18:58 - 00806428 _____ C:\Windows\system32\perfh007.dat 2014-01-27 22:57 - 2009-07-14 18:58 - 00184868 _____ C:\Windows\system32\perfc007.dat 2014-01-27 22:57 - 2009-07-14 06:13 - 01889308 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-27 22:56 - 2012-09-09 00:29 - 01264887 _____ C:\Windows\WindowsUpdate.log 2014-01-27 22:52 - 2012-09-09 21:16 - 00004194 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-27 22:51 - 2012-09-10 11:45 - 00000000 ____D C:\ProgramData\Spyware Terminator 2014-01-27 21:06 - 2014-01-27 21:06 - 02079232 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:31 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-25 08:18 - 2013-10-21 14:31 - 00000000 ____D C:\Users\MSSQL$SQLEXPRESS 2014-01-24 18:49 - 2012-10-17 17:07 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-23 16:07 - 2013-09-10 08:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2014-01-23 15:36 - 2013-02-06 22:57 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Skype 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-22 23:13 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni\AppData\Local\VirtualStore 2014-01-22 07:01 - 2012-09-09 10:58 - 00418282 _____ C:\Windows\PFRO.log 2014-01-22 00:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-21 22:59 - 2013-10-17 09:38 - 00000000 ____D C:\ProgramData\Oracle 2014-01-21 22:58 - 2014-01-21 22:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:58 - 2013-07-20 03:54 - 00000000 ____D C:\Program Files (x86)\Java 2014-01-21 22:57 - 2012-10-17 17:07 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-21 22:57 - 2012-09-16 22:28 - 00000000 ____D C:\Users\Benni\AppData\Local\Adobe 2014-01-21 22:57 - 2012-09-09 23:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-21 22:57 - 2012-09-09 23:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:31 - 2014-01-19 17:39 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-21 21:05 - 2013-01-12 00:29 - 00000020 ____H C:\ProgramData\PKP_DLev.DAT 2014-01-20 14:05 - 2013-10-21 14:31 - 00000000 ____D C:\Users\Benni\Documents\SQL Server Management Studio 2014-01-20 00:40 - 2013-09-14 21:42 - 00000000 ___HD C:\_acestream_cache_ 2014-01-19 17:39 - 2013-03-06 07:46 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-19 17:39 - 2013-03-06 07:46 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-19 17:39 - 2012-09-09 21:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00002101 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-19 17:39 - 2012-09-09 21:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-19 17:34 - 2012-09-09 21:15 - 00000000 ____D C:\ProgramData\AVAST Software 2014-01-19 17:33 - 2012-09-09 21:16 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2014-01-17 10:25 - 2012-09-09 00:29 - 00000000 ___RD C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:24 - 2012-11-12 18:17 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 09:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-17 07:34 - 2013-05-26 07:11 - 00000000 ____D C:\Windows\Minidump 2014-01-17 07:14 - 2009-07-14 05:45 - 00439360 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-17 07:13 - 2012-09-09 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-16 12:00 - 2013-08-04 01:33 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 11:56 - 2012-09-09 21:39 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 22:57 - 2014-01-15 22:57 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 22:57 - 2013-12-29 23:22 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-15 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2014-01-13 09:40 - 2013-10-21 16:09 - 00000000 ____D C:\Users\Benni\Documents\Visual Studio 2012 2014-01-11 22:21 - 2013-09-14 21:42 - 00000000 ____D C:\Users\Benni\AppData\Roaming\.ACEStream 2014-01-05 13:50 - 2012-09-10 15:04 - 00000000 ____D C:\Users\Benni\AppData\Roaming\vlc 2013-12-29 23:24 - 2013-12-29 23:22 - 00000000 ____D C:\Users\Benni\AppData\Local\SearchProtect 2013-12-29 23:23 - 2013-12-29 23:22 - 00000000 ____D C:\Users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 23:23 - 2013-12-29 23:22 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:22 - 00000000 _____ C:\END 2013-12-29 23:21 - 2013-12-29 23:21 - 32694648 _____ (DVDVideoSoft Ltd. ) C:\Users\Benni\Downloads\FreeVideoToMP3Converter_5-0-32-1219.exe 2013-12-28 16:12 - 2013-12-28 16:12 - 00000000 ____D C:\Users\Benni\Desktop\Radical Face Files to move or delete: ==================== C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\Benni\AppData\Local\Temp\1th2yvgx.dll C:\Users\Benni\AppData\Local\Temp\AskSLib.dll C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe-1.exe C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe-2.exe C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe.exe C:\Users\Benni\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Benni\AppData\Local\Temp\Installer.exe C:\Users\Benni\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\nsg3324.exe C:\Users\Benni\AppData\Local\Temp\nsgB7FF.exe C:\Users\Benni\AppData\Local\Temp\nsl3C1A.exe C:\Users\Benni\AppData\Local\Temp\nsqAFB4.exe C:\Users\Benni\AppData\Local\Temp\SPSetup.exe C:\Users\Benni\AppData\Local\Temp\vlc-2.0.4-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-22 00:48 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014 01 Ran by Benni at 2014-01-27 23:25:52 Running from C:\Users\Benni\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Ace Stream Media 2.1.5.5 (HKCU Version: 2.1.5.5 - Ace Stream Media) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Agent Ransack 2010 (64-bit) (Version: - ) AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 3.0.859.0 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.70418.0413 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.03.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0418.355.4954 - Ihr Firmenname) Hidden avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Broadcom 802.11 Network Adapter (Version: 5.100.82.130 - Broadcom Corporation) calibre 64bit (Version: 0.9.30 - Kovid Goyal) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.03 - Piriform) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20702.00 - Microsoft Corporation) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60 - Microsoft Corporation) Free Video to MP3 Converter version 5.0.32.1224 (x32 Version: 5.0.32.1224 - DVDVideoSoft Ltd.) GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) IIS 8.0 Express (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (Version: - ) IIS Express Application Compatibility Database for x86 (Version: - ) IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan) IsoBuster 3.0 (x32 Version: 3.0 - Smart Projects) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2300 - Broadcom Corporation) Lenovo Power Management Driver (Version: 1.66.00.22 - ) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Report Viewer 2012-Laufzeit (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-Bit) (Version: - ) Hidden Microsoft SQL Server 2012 (64-Bit) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 RsFx Driver (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012-Setup (Deutsch) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Shell (Isolated) - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft VSS Writer für SQL Server 2012 (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Developer Tools - Visual Studio 2012 - DEU (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Developer Tools - Visual Studio 2012 (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Platform Installer 4.0 (Version: 4.0.1622 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) Nikon Message Center 2 (x32 Version: 2.1.0 - Nikon) Nikon Movie Editor (x32 Version: 2.6.0 - Nikon) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation) PDF24 Creator 5.4.0 (x32 Version: - PDF24.org) Picture Control Utility x64 (Version: 1.4.7 - Nikon) PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PriceGong 2.6.11 (x32 Version: 2.6.11 - PriceGong) <==== ATTENTION QuickShare (x32 Version: 1.135.60.12323 - Linkury Inc.) <==== ATTENTION Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011 - Realtek) Realtek PCIE Card Reader (x32 Version: 6.1.7601.82 - Realtek Semiconductor Corp.) Search Protect (x32 Version: 2.9.40.12 - Conduit) <==== ATTENTION Secure Download Manager (x32 Version: 3.1.0 - Kivuto Solutions Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.) Smart File Advisor 1.1.1 (x32 Version: 1.1.1 - Filefacts.net) SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com) Spyware Terminator 2012 (x32 Version: 3.0.0.80 - Crawler.com) SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server-Browser für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) ThinkPad UltraNav Driver (Version: 16.1.4.17 - ) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219 - Microsoft Corporation) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) ViewNX 2 (Version: 2.6.0 - Nikon) Visual Studio 2010 Prerequisites - English (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.8514.0 - Microsoft Corporation) Hidden VLC media player 2.0.2 (Version: 2.0.2 - VideoLAN) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0 - Microsoft Corporation) Windows App Certification Kit Native Components (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows App Certification Kit x64 (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {21EE077E-0B26-42DD-83D2-DBBF938ADA84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {B9B66B86-8F79-4ABB-8F46-DA02F3B31449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-21] (Adobe Systems Incorporated) Task: {F6A4853F-DABF-4586-980A-C0D2D2BF2D68} - System32\Tasks\avast! Emergency Update => C:\Program Files (x86)\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-19] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-27 12:00 - 2012-02-27 12:00 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2014-01-27 22:52 - 2014-01-27 17:58 - 02166272 _____ () C:\Program Files (x86)\AVAST Software\Avast\defs\14012701\algo.dll 2013-08-27 16:22 - 2013-11-07 17:41 - 00120832 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.Core.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_socket.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_ssl.pyd 2013-03-29 10:57 - 2013-03-29 10:57 - 00018944 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pycompat.pyd 2013-08-27 16:29 - 2013-11-07 17:41 - 02490880 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.CoreApp.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_hashlib.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00106496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_ctypes.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\select.pyd 2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\M2Crypto.__m2crypto.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pyexpat.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pywintypes27.dll 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pythoncom27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32file.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32pdh.pyd 2010-10-10 23:23 - 2010-10-10 23:23 - 00723968 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\apsw.pyd 2013-01-29 17:20 - 2013-01-29 17:20 - 00082944 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\cpyamf.util.pyd 2011-02-13 16:02 - 2011-02-13 16:02 - 00031232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\Crypto.Cipher.AES.pyd 2011-07-15 20:37 - 2011-07-15 20:37 - 00981504 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._core_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00746496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._gdi_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00670720 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._windows_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00966144 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._controls_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00674816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._misc_.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00688128 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\unicodedata.pyd 2013-01-29 17:20 - 2013-01-29 17:20 - 00066048 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\cpyamf.amf0.pyd 2013-09-03 17:49 - 2013-09-03 17:49 - 00033560 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00055064 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00149784 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00111896 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 01764632 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00055576 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00012568 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00048408 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PublisherSettingsManager.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00725272 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00081176 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00013592 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00016664 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00029464 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00019736 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00057112 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00013592 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00014104 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00051480 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll 2013-09-03 17:49 - 2013-09-03 17:49 - 00047384 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\MACTrackBarLib.dll 2013-09-03 17:48 - 2013-09-03 17:48 - 00025368 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00024856 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll 2013-09-03 17:50 - 2013-09-03 17:50 - 00245528 _____ () C:\Users\Benni\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Benni\AppData\Roaming\Dropbox\bin\libcef.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2014-01-19 17:39 - 2014-01-19 17:39 - 19336120 _____ () C:\Program Files (x86)\AVAST Software\Avast\libcef.dll 2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_socket.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_ssl.pyd 2011-07-15 20:37 - 2011-07-15 20:37 - 00981504 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._core_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00746496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._gdi_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00670720 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._windows_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00966144 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._controls_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00674816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._misc_.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_hashlib.pyd 2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\M2Crypto.__m2crypto.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\select.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pyexpat.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pywintypes27.dll 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pythoncom27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32file.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32pdh.pyd ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Realtek PCIE CardReader Description: Realtek PCIE CardReader Class Guid: {4d36e970-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Semiconduct Corp. Service: RSPCIESTOR Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/27/2014 11:23:52 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/27/2014 11:22:58 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0x9c8 Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/27/2014 08:45:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/24/2014 07:45:19 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Beschreibung = Configured Microsoft Office Professional 2010; Fehler = 0x8007043c). Error: (01/24/2014 07:45:13 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Beschreibung = Configured Microsoft Office Professional 2010; Fehler = 0x8007043c). Error: (01/24/2014 06:45:30 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/24/2014 06:45:28 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/23/2014 08:51:24 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/23/2014 08:51:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/22/2014 11:41:13 PM) (Source: Application Hang) (User: ) Description: Programm IEXPLORE.EXE, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1500 Startzeit: 01cf17c30212bcdb Endzeit: 48 Anwendungspfad: C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE Berichts-ID: System errors: ============= Error: (01/27/2014 11:22:28 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (01/27/2014 11:21:53 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 27.01.2014 um 23:20:33 unerwartet heruntergefahren. Error: (01/27/2014 10:51:25 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (01/27/2014 10:50:44 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 27.01.2014 um 21:46:05 unerwartet heruntergefahren. Error: (01/27/2014 09:42:03 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:42:03 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:42:03 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:39:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:39:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:39:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= Error: (01/27/2014 11:23:52 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\SoftonicDownloader_fuer_pixlr-o-matic.exe Error: (01/27/2014 11:22:58 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eole32.dll6.1.7601.175144ce7b96fc0000005000393429c801cf1bae33e9bf1eC:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeC:\Windows\syswow64\ole32.dll92edc29e-87a1-11e3-98a0-c0143ddcc984 Error: (01/27/2014 08:45:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\SoftonicDownloader_fuer_pixlr-o-matic.exe Error: (01/24/2014 07:45:19 PM) (Source: System Restore)(User: ) Description: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -EmbeddingConfigured Microsoft Office Professional 20100x8007043c Error: (01/24/2014 07:45:13 PM) (Source: System Restore)(User: ) Description: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -EmbeddingConfigured Microsoft Office Professional 20100x8007043c Error: (01/24/2014 06:45:30 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/24/2014 06:45:28 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/23/2014 08:51:24 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000500000000a5c01cf187452567495C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownbcc12d66-8467-11e3-b62c-c0143ddcc984 Error: (01/23/2014 08:51:08 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000500000000a5c01cf187452567495C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownb370b3dc-8467-11e3-b62c-c0143ddcc984 Error: (01/22/2014 11:41:13 PM) (Source: Application Hang)(User: ) Description: IEXPLORE.EXE11.0.9600.16428150001cf17c30212bcdb48C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE ==================== Memory info =========================== Percentage of memory in use: 26% Total physical RAM: 7618.1 MB Available physical RAM: 5575.83 MB Total Pagefile: 15234.38 MB Available Pagefile: 12967.9 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:1.75 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: DA3504B2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
28.01.2014, 15:43 | #4 | |
/// the machine /// TB-Ausbilder | Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen)Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.01.2014, 16:52 | #5 |
| Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Danke schonmal für deine Hilfe! Anbei der Combofix-Log: Code:
ATTFilter ComboFix 14-01-27.02 - Benni 28.01.2014 16:25:39.2.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1031.18.7618.5959 [GMT 1:00] Running from: c:\users\Benni\Downloads\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\PriceGong c:\program files (x86)\PriceGong\2.6.11\PriceGong.crx c:\program files (x86)\PriceGong\2.6.11\PriceGongIE.dll c:\program files (x86)\PriceGong\uninst.exe c:\program files (x86)\SearchProtect c:\program files (x86)\SearchProtect\EULA.txt c:\program files (x86)\SearchProtect\Main\bin\CltMngSvc.exe c:\program files (x86)\SearchProtect\Main\bin\SPTool.dll c:\program files (x86)\SearchProtect\Main\bin\SPtool.dll_1389823043744 c:\program files (x86)\SearchProtect\Main\bin\SPtool.dll_1390861670784 c:\program files (x86)\SearchProtect\Main\bin\uninstall.exe c:\program files (x86)\SearchProtect\Main\rep\SystemRepository.dat c:\program files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe c:\program files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll c:\program files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll c:\program files (x86)\SearchProtect\UI\bin\cltmngui.exe c:\program files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css c:\program files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html c:\program files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js c:\program files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\text-field.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\v.png c:\program files (x86)\SearchProtect\UI\dialogs\Images\x.png c:\program files (x86)\SearchProtect\UI\dialogs\libs\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\main.js c:\program files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js c:\program files (x86)\SearchProtect\UI\dialogs\protection\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.css c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.html c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.js c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js c:\program files (x86)\SearchProtect\UI\dialogs\settings.html c:\program files (x86)\SearchProtect\UI\dialogs\settings\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.css c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.html c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.js c:\program files (x86)\SearchProtect\UI\dialogs\style.css c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js c:\users\Benni\AppData\Local\assembly\tmp c:\users\Benni\AppData\Local\Microsoft\Windows\Temporary Internet Files\{293C51D3-86AF-418C-B453-A4031EC11888}.xps c:\users\Benni\AppData\Local\Microsoft\Windows\Temporary Internet Files\{31ADAE97-A53E-4C4D-BA45-2E68C6FCD872}.xps c:\users\Benni\AppData\Local\Microsoft\Windows\Temporary Internet Files\{55E763FF-4562-46A6-ADB5-E647F97E37C2}.xps c:\users\Benni\AppData\Local\Microsoft\Windows\Temporary Internet Files\{996F0CF8-106D-483D-A4EB-758AB7B08466}.xps . . ((((((((((((((((((((((((( Files Created from 2013-12-28 to 2014-01-28 ))))))))))))))))))))))))))))))) . . 2014-01-28 15:37 . 2014-01-28 15:37 -------- d-----w- c:\users\MSSQL$SQLEXPRESS\AppData\Local\temp 2014-01-28 15:37 . 2014-01-28 15:37 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-01-27 19:34 . 2014-01-27 19:34 -------- d-----w- C:\FRST 2014-01-24 13:49 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBBB8E99-E052-4EB3-BBC3-2B4F10039884}\mpengine.dll 2014-01-21 21:58 . 2014-01-21 21:58 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-01-21 21:24 . 2014-01-21 21:24 -------- d-----w- c:\users\Benni\AppData\Roaming\AVAST Software 2014-01-19 16:39 . 2014-01-21 21:31 79672 ----a-w- c:\windows\system32\drivers\aswstm.sys 2014-01-15 21:57 . 2014-01-15 21:57 -------- d-----w- c:\windows\SysWow64\SearchProtect 2014-01-15 08:28 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-01-15 08:28 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-01-15 08:28 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-01-15 08:28 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-01-15 08:28 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys 2014-01-15 08:28 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2014-01-15 08:28 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-01-15 08:28 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys 2014-01-15 08:28 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys 2013-12-29 22:22 . 2013-12-29 22:23 -------- d-----w- c:\users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 22:22 . 2013-12-29 22:23 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft 2013-12-29 22:22 . 2013-12-29 22:23 -------- d-----w- c:\program files (x86)\DVDVideoSoft 2013-12-29 22:22 . 2013-12-29 22:24 -------- d-----w- c:\users\Benni\AppData\Local\SearchProtect . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-01-21 21:57 . 2012-09-09 22:00 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-01-21 21:57 . 2012-09-09 22:00 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-01-19 16:39 . 2013-03-06 06:46 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2014-01-19 16:39 . 2013-03-06 06:46 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2014-01-19 16:39 . 2012-09-09 20:16 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2014-01-19 16:39 . 2012-09-09 20:16 422216 ----a-w- c:\windows\system32\drivers\aswSP.sys 2014-01-19 16:39 . 2012-09-09 20:16 1034464 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2014-01-19 16:39 . 2012-09-09 20:16 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2014-01-19 16:39 . 2012-09-09 20:16 334136 ----a-w- c:\windows\system32\aswBoot.exe 2014-01-19 16:39 . 2012-09-09 20:15 43152 ----a-w- c:\windows\avastSS.scr 2014-01-16 10:56 . 2012-09-09 20:39 86054176 ----a-w- c:\windows\system32\MRT.exe 2013-12-19 13:11 . 2012-09-09 20:16 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2013-12-18 05:13 . 2012-09-09 20:03 270496 ------w- c:\windows\system32\MpSigStub.exe 2013-11-26 11:54 . 2013-12-13 14:07 23183360 ----a-w- c:\windows\system32\mshtml.dll 2013-11-26 10:19 . 2013-12-13 14:07 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2013-11-26 10:18 . 2013-12-13 14:07 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2013-11-26 09:48 . 2013-12-13 14:07 66048 ----a-w- c:\windows\system32\iesetup.dll 2013-11-26 09:46 . 2013-12-13 14:07 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll 2013-11-26 09:41 . 2013-12-13 14:07 2764288 ----a-w- c:\windows\system32\iertutil.dll 2013-11-26 09:29 . 2013-12-13 14:07 53760 ----a-w- c:\windows\system32\jsproxy.dll 2013-11-26 09:27 . 2013-12-13 14:07 33792 ----a-w- c:\windows\system32\iernonce.dll 2013-11-26 09:23 . 2013-12-13 14:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb 2013-11-26 09:21 . 2013-12-13 14:07 574976 ----a-w- c:\windows\system32\ieui.dll 2013-11-26 09:18 . 2013-12-13 14:07 139264 ----a-w- c:\windows\system32\ieUnatt.exe 2013-11-26 09:18 . 2013-12-13 14:07 111616 ----a-w- c:\windows\system32\ieetwcollector.exe 2013-11-26 09:16 . 2013-12-13 14:07 708608 ----a-w- c:\windows\system32\jscript9diag.dll 2013-11-26 08:57 . 2013-12-13 14:07 218624 ----a-w- c:\windows\system32\ie4uinit.exe 2013-11-26 08:35 . 2013-12-13 14:07 5769216 ----a-w- c:\windows\system32\jscript9.dll 2013-11-26 08:28 . 2013-12-13 14:07 553472 ----a-w- c:\windows\SysWow64\jscript9diag.dll 2013-11-26 08:16 . 2013-12-13 14:07 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll 2013-11-26 08:02 . 2013-12-13 14:07 1995264 ----a-w- c:\windows\system32\inetcpl.cpl 2013-11-26 07:48 . 2013-12-13 14:07 12996608 ----a-w- c:\windows\system32\ieframe.dll 2013-11-26 07:32 . 2013-12-13 14:07 1928192 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-11-26 07:07 . 2013-12-13 14:07 2334208 ----a-w- c:\windows\system32\wininet.dll 2013-11-26 06:40 . 2013-12-13 14:07 1395200 ----a-w- c:\windows\system32\urlmon.dll 2013-11-26 06:34 . 2013-12-13 14:07 817664 ----a-w- c:\windows\system32\ieapfltr.dll 2013-11-26 06:33 . 2013-12-13 14:07 1820160 ----a-w- c:\windows\SysWow64\wininet.dll 2013-11-26 02:02 . 2013-11-26 02:02 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-11-26 02:02 . 2013-11-26 02:02 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-11-26 02:01 . 2013-11-26 02:01 942592 ----a-w- c:\windows\system32\jsIntl.dll 2013-11-26 02:01 . 2013-11-26 02:01 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-11-26 02:01 . 2013-11-26 02:01 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll 2013-11-26 02:01 . 2013-11-26 02:01 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-11-26 02:01 . 2013-11-26 02:01 81408 ----a-w- c:\windows\system32\icardie.dll 2013-11-26 02:01 . 2013-11-26 02:01 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-11-26 02:01 . 2013-11-26 02:01 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-11-26 02:01 . 2013-11-26 02:01 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2013-11-26 02:01 . 2013-11-26 02:01 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll 2013-11-26 02:01 . 2013-11-26 02:01 62464 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-11-26 02:01 . 2013-11-26 02:01 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll 2013-11-26 02:01 . 2013-11-26 02:01 61952 ----a-w- c:\windows\SysWow64\iesetup.dll 2013-11-26 02:01 . 2013-11-26 02:01 616104 ----a-w- c:\windows\system32\ieapfltr.dat 2013-11-26 02:01 . 2013-11-26 02:01 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-11-26 02:01 . 2013-11-26 02:01 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2013-11-26 02:01 . 2013-11-26 02:01 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-11-26 02:01 . 2013-11-26 02:01 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-11-26 02:01 . 2013-11-26 02:01 454656 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-11-26 02:01 . 2013-11-26 02:01 453120 ----a-w- c:\windows\system32\dxtmsft.dll 2013-11-26 02:01 . 2013-11-26 02:01 413696 ----a-w- c:\windows\system32\html.iec 2013-11-26 02:01 . 2013-11-26 02:01 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-11-26 02:01 . 2013-11-26 02:01 36352 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-11-26 02:01 . 2013-11-26 02:01 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll 2013-11-26 02:01 . 2013-11-26 02:01 337408 ----a-w- c:\windows\SysWow64\html.iec 2013-11-26 02:01 . 2013-11-26 02:01 296960 ----a-w- c:\windows\system32\dxtrans.dll 2013-11-26 02:01 . 2013-11-26 02:01 247808 ----a-w- c:\windows\system32\msls31.dll 2013-11-26 02:01 . 2013-11-26 02:01 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-11-26 02:01 . 2013-11-26 02:01 235520 ----a-w- c:\windows\system32\url.dll 2013-11-26 02:01 . 2013-11-26 02:01 235008 ----a-w- c:\windows\system32\elshyph.dll 2013-11-26 02:01 . 2013-11-26 02:01 195584 ----a-w- c:\windows\system32\msrating.dll 2013-11-26 02:01 . 2013-11-26 02:01 182272 ----a-w- c:\windows\SysWow64\msls31.dll 2013-11-26 02:01 . 2013-11-26 02:01 151552 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-11-26 02:01 . 2013-11-26 02:01 139264 ----a-w- c:\windows\SysWow64\wextract.exe 2013-11-26 02:01 . 2013-11-26 02:01 13312 ----a-w- c:\windows\SysWow64\mshta.exe 2013-11-26 02:01 . 2013-11-26 02:01 13312 ----a-w- c:\windows\system32\msfeedssync.exe 2013-11-26 02:01 . 2013-11-26 02:01 131072 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-11-26 02:01 . 2013-11-26 02:01 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-11-26 02:01 . 2013-11-26 02:01 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-11-26 02:01 . 2013-11-26 02:01 105984 ----a-w- c:\windows\system32\iesysprep.dll 2013-11-26 02:01 . 2013-11-26 02:01 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-11-26 02:01 . 2013-11-26 02:01 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-11-26 02:01 . 2013-11-26 02:01 84992 ----a-w- c:\windows\system32\mshtmled.dll 2013-11-26 02:01 . 2013-11-26 02:01 83968 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-11-26 02:01 . 2013-11-26 02:01 774144 ----a-w- c:\windows\system32\jscript.dll 2013-11-26 02:01 . 2013-11-26 02:01 626176 ----a-w- c:\windows\system32\msfeeds.dll 2013-11-26 02:01 . 2013-11-26 02:01 62464 ----a-w- c:\windows\system32\pngfilt.dll 2013-11-26 02:01 . 2013-11-26 02:01 548352 ----a-w- c:\windows\system32\vbscript.dll 2013-11-26 02:01 . 2013-11-26 02:01 48128 ----a-w- c:\windows\system32\imgutil.dll 2013-11-26 02:01 . 2013-11-26 02:01 30208 ----a-w- c:\windows\system32\licmgr10.dll 2013-11-26 02:01 . 2013-11-26 02:01 263376 ----a-w- c:\windows\system32\iedkcs32.dll 2013-11-26 02:01 . 2013-11-26 02:01 243200 ----a-w- c:\windows\system32\webcheck.dll 2013-11-26 02:01 . 2013-11-26 02:01 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-11-26 02:01 . 2013-11-26 02:01 147968 ----a-w- c:\windows\system32\occache.dll 2013-11-26 02:01 . 2013-11-26 02:01 143872 ----a-w- c:\windows\system32\wextract.exe 2013-11-26 02:01 . 2013-11-26 02:01 13824 ----a-w- c:\windows\system32\mshta.exe 2013-11-26 02:01 . 2013-11-26 02:01 135680 ----a-w- c:\windows\system32\iepeers.dll 2013-11-26 02:01 . 2013-11-26 02:01 101376 ----a-w- c:\windows\system32\inseng.dll 2013-11-23 18:26 . 2013-12-11 08:23 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-11-23 17:47 . 2013-12-11 08:23 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-11-12 02:23 . 2013-12-11 08:23 2048 ----a-w- c:\windows\system32\tzres.dll 2013-11-12 02:07 . 2013-12-11 08:23 2048 ----a-w- c:\windows\SysWow64\tzres.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}] 2010-11-04 15:58 297808 ----a-w- c:\windows\System32\mscoree.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-01-08 18706176] "AceStream"="c:\users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe" [2013-11-07 27904] "Browser Infrastructure Helper"="c:\users\Benni\AppData\Local\Smartbar\Application\QuickShare.exe" [2013-09-03 20248] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-18 343168] "Smart File Advisor"="c:\program files (x86)\Smart File Advisor\sfa.exe" [2011-04-04 280824] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] "Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2011-10-30 571392] "PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-03-20 162856] "AvastUI.exe"="c:\program files (x86)\AVAST Software\Avast\AvastUI.exe" [2014-01-19 3764024] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] . c:\users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328] OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552] OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2012-2-1 1380128] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli c:\program files\Lenovo\Bluetooth Software\BtwProximityCP.dll . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x] R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 RsFx0200;RsFx0200 Driver;c:\windows\system32\DRIVERS\RsFx0200.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0200.sys [x] R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 CltMngSvc;Search Protect by Conduit Service;c:\progra~2\SearchProtect\Main\bin\CltMngSvc.exe;c:\progra~2\SearchProtect\Main\bin\CltMngSvc.exe [x] S2 IconMan_R;IconMan_R;c:\program files (x86)\REALTEK\REALTEK PCIE CARD READER\RICONMAN.EXE;c:\program files (x86)\REALTEK\REALTEK PCIE CARD READER\RICONMAN.EXE [x] S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x] S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x] S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 SmbDrvAMDASF;SmbDrvAMDASF;c:\windows\system32\DRIVERS\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_AMDASF.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - WS2IFSL . Contents of the 'Scheduled Tasks' folder . 2014-01-28 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-09 21:57] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2014-01-19 16:39 287280 ----a-w- c:\program files (x86)\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2012-09-06 2777296] "SpywareTerminatorUpdater"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2013-04-02 3684488] . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 TCP: DhcpNameServer = 141.59.42.12 141.59.41.206 134.60.1.111 FF - ProfilePath - c:\users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.readmore.de/ FF - user.js: extensions.autoDisableScopes - 10 . - - - - ORPHANS REMOVED - - - - . BHO-{1631550F-191D-4826-B069-D9439253D926} - c:\program files (x86)\PriceGong\2.6.11\PriceGongIE.dll HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-PriceGong - c:\program files (x86)\PriceGong\uninst.exe AddRemove-SearchProtect - c:\progra~2\SearchProtect\Main\bin\uninstall.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2014-01-28 16:46:05 ComboFix-quarantined-files.txt 2014-01-28 15:46 . Pre-Run: 1.690.267.648 Bytes frei Post-Run: 4.456.034.304 Bytes frei . - - End Of File - - 8931CFC4C958647C5CA1EBEB5B1776E4 A36C5E4F47E84449FF07ED3517B43A31 |
29.01.2014, 10:53 | #6 |
/// the machine /// TB-Ausbilder | Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) |
29.01.2014, 17:19 | #7 |
| Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) AdwCleaner-log: Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 29/01/2014 um 16:31:34 # Updated 28/01/2014 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzername : Benni - BURN3R # Gestartet von : C:\Users\Benni\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\boost_interprocess Ordner Gelöscht : C:\Windows\SysWOW64\Searchprotect Ordner Gelöscht : C:\Users\Benni\AppData\Local\Searchprotect Ordner Gelöscht : C:\Users\Benni\AppData\Local\Temp\Smartbar Ordner Gelöscht : C:\Users\Benni\AppData\LocalLow\PriceGong Ordner Gelöscht : C:\Users\Benni\AppData\LocalLow\Smartbar Ordner Gelöscht : C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{8A9386B4-E958-4C4C-ADF4-8F26DB3E4829} Datei Gelöscht : C:\END Datei Gelöscht : C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\foxydeal.sqlite Datei Gelöscht : C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\user.js ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\pricegong_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\pricegong_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pixlr-o-matic_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Schlüssel Gelöscht : HKCU\Software\powerpack Schlüssel Gelöscht : HKCU\Software\smartbarbackup Schlüssel Gelöscht : HKCU\Software\smartbarlog Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong Schlüssel Gelöscht : HKLM\Software\SearchProtect Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PriceGong Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\prefs.js ] Zeile gelöscht : user_pref("extensions.enabledAddons", "DivXWebPlayer%40divx.com:2.0.2.039,ich%40maltegoetz.de:1.5.5,%7B8A9386B4-E958-4c4c-ADF4-8F26DB3E4829%7D:2.6.11,%7B91feafb2-c928-8ce1-6959-83a4f4a57307%7D:1.1,coo[...] Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false); Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false); Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false); Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false); Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de"); Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "quickobrw"); Zeile gelöscht : user_pref("extensions.helperbar.installationid", "91feafb2-c928-8ce1-6959-83a4f4a57307"); Zeile gelöscht : user_pref("extensions.helperbar.installdate", "16/09/2013"); Zeile gelöscht : user_pref("extensions.helperbar.publisher", "quickobrw"); Zeile gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...] Zeile gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*"); -\\ Google Chrome v [ Datei : C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [6620 octets] - [29/01/2014 16:29:50] AdwCleaner[S0].txt - [6189 octets] - [29/01/2014 16:31:34] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6249 octets] ########## JRT-log: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Professional x64 Ran by Benni on 29.01.2014 at 16:38:36,50 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{232f1b14-7126-491f-ac8c-6123ba58fde2} ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Benni\AppData\Roaming\mozilla\firefox\profiles\3epme9aw.default\minidumps [50 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 29.01.2014 at 16:59:31,19 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01 Ran by Benni (administrator) on BURN3R on 29-01-2014 17:03:01 Running from C:\Users\Benni\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Nikon Corporation) C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (AVAST Software) C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe () C:\Users\Benni\AppData\Roaming\ACEStream\updater\ace_update.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe (Microsoft Corporation) C:\Windows\System32\dinotify.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-02] (Crawler.com) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-19] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.) HKCU\...\Run: [AceStream] - C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2013-11-07] () Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x032A8A433C58CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default FF Homepage: hxxp://www.readmore.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.5 - C:\Users\Benni\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced Cookie Manager - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\cookiemgr@jayapal.com [2014-01-10] FF Extension: ProxTube - Unblock YouTube - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\ich@maltegoetz.de [2013-12-11] FF Extension: YouTube Unblocker - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-26] FF Extension: QuickShare Widget - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{91feafb2-c928-8ce1-6959-83a4f4a57307} [2013-09-16] FF Extension: DivX Web Player - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-11-22] FF Extension: Web Install Updater Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{3ed53ac3-002c-4242-85e7-8ff4ad43ec1a}.xpi [2014-01-17] FF Extension: {5bab8c58-503e-4275-9a4d-9c1c79c22f77} - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{5bab8c58-503e-4275-9a4d-9c1c79c22f77}.xpi [2013-11-15] FF Extension: Adblock Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF [2012-09-09] FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-09-14] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Extension: (Docs) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-07] CHR Extension: (Google Drive) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-07] CHR Extension: (YouTube) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-07] CHR Extension: (Google-Suche) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-07] CHR Extension: (Google Mail) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-07] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-19] (AVAST Software) R2 btwdins; C:\PROGRAM FILES\LENOVO\BLUETOOTH SOFTWARE\BTWDINS.EXE [945440 2012-02-01] (Broadcom Corporation.) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation) R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-09-07] (Crawler.com) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-19] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-19] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-19] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-19] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-19] (AVAST Software) S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-21] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-19] () R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation) R3 SmbDrvAMDASF; C:\Windows\System32\DRIVERS\Smb_driver_AMDASF.sys [26424 2012-06-20] (Synaptics Incorporated) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-09-10] (Windows (R) Win 7 DDK provider) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-29 17:03 - 2014-01-29 17:03 - 00018156 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-29 17:02 - 2014-01-29 17:02 - 00000000 ____D C:\Users\Benni\Downloads\FRST-OlderVersion 2014-01-29 16:59 - 2014-01-29 16:59 - 00000907 _____ C:\Users\Benni\Desktop\JRT.txt 2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D C:\Windows\ERUNT 2014-01-29 16:36 - 2014-01-29 16:36 - 01037068 _____ (Thisisu) C:\Users\Benni\Downloads\JRT.exe 2014-01-29 16:28 - 2014-01-29 16:31 - 00000000 ____D C:\AdwCleaner 2014-01-29 16:27 - 2014-01-29 16:27 - 01166132 _____ C:\Users\Benni\Downloads\adwcleaner.exe 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-29 15:48 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-29 15:47 - 2014-01-29 15:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benni\Downloads\malwarebytes.exe 2014-01-28 16:46 - 2014-01-28 16:46 - 00033460 _____ C:\ComboFix.txt 2014-01-28 16:07 - 2014-01-28 16:46 - 00000000 ____D C:\Qoobox 2014-01-28 16:07 - 2014-01-28 16:42 - 00000000 ____D C:\Windows\erdnt 2014-01-28 16:07 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-28 16:07 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-28 16:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-28 16:04 - 2014-01-28 16:04 - 05175619 ____R (Swearware) C:\Users\Benni\Downloads\ComboFix.exe 2014-01-27 21:06 - 2014-01-29 17:02 - 02079744 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-29 17:03 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-21 22:59 - 2014-01-21 22:58 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-19 17:39 - 2014-01-21 22:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-15 09:28 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 09:28 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 09:28 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps ==================== One Month Modified Files and Folders ======= 2014-01-29 17:03 - 2014-01-29 17:03 - 00018156 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-29 17:03 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-29 17:02 - 2014-01-29 17:02 - 00000000 ____D C:\Users\Benni\Downloads\FRST-OlderVersion 2014-01-29 17:02 - 2014-01-27 21:06 - 02079744 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-29 17:01 - 2009-07-14 05:51 - 00125328 _____ C:\Windows\setupact.log 2014-01-29 16:59 - 2014-01-29 16:59 - 00000907 _____ C:\Users\Benni\Desktop\JRT.txt 2014-01-29 16:49 - 2012-10-17 17:07 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-29 16:44 - 2012-09-09 00:29 - 01438366 _____ C:\Windows\WindowsUpdate.log 2014-01-29 16:40 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-29 16:40 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-29 16:39 - 2009-07-14 18:58 - 00806428 _____ C:\Windows\system32\perfh007.dat 2014-01-29 16:39 - 2009-07-14 18:58 - 00184868 _____ C:\Windows\system32\perfc007.dat 2014-01-29 16:39 - 2009-07-14 06:13 - 01889308 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D C:\Windows\ERUNT 2014-01-29 16:36 - 2014-01-29 16:36 - 01037068 _____ (Thisisu) C:\Users\Benni\Downloads\JRT.exe 2014-01-29 16:33 - 2012-11-12 18:20 - 00000000 ___RD C:\Users\Benni\Dropbox 2014-01-29 16:33 - 2012-11-12 18:15 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Dropbox 2014-01-29 16:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-29 16:31 - 2014-01-29 16:28 - 00000000 ____D C:\AdwCleaner 2014-01-29 16:27 - 2014-01-29 16:27 - 01166132 _____ C:\Users\Benni\Downloads\adwcleaner.exe 2014-01-29 16:23 - 2012-09-09 10:58 - 00717688 _____ C:\Windows\PFRO.log 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-29 15:47 - 2014-01-29 15:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benni\Downloads\malwarebytes.exe 2014-01-29 15:33 - 2013-02-06 22:57 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Skype 2014-01-28 22:30 - 2013-10-21 14:31 - 00000000 ____D C:\Users\MSSQL$SQLEXPRESS 2014-01-28 16:46 - 2014-01-28 16:46 - 00033460 _____ C:\ComboFix.txt 2014-01-28 16:46 - 2014-01-28 16:07 - 00000000 ____D C:\Qoobox 2014-01-28 16:42 - 2014-01-28 16:07 - 00000000 ____D C:\Windows\erdnt 2014-01-28 16:41 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2014-01-28 16:04 - 2014-01-28 16:04 - 05175619 ____R (Swearware) C:\Users\Benni\Downloads\ComboFix.exe 2014-01-28 12:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-28 10:48 - 2012-09-09 21:16 - 00004194 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-27 22:51 - 2012-09-10 11:45 - 00000000 ____D C:\ProgramData\Spyware Terminator 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:31 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-23 16:07 - 2013-09-10 08:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-22 23:13 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni\AppData\Local\VirtualStore 2014-01-22 00:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-21 22:59 - 2013-10-17 09:38 - 00000000 ____D C:\ProgramData\Oracle 2014-01-21 22:58 - 2014-01-21 22:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:58 - 2013-07-20 03:54 - 00000000 ____D C:\Program Files (x86)\Java 2014-01-21 22:57 - 2012-10-17 17:07 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-21 22:57 - 2012-09-16 22:28 - 00000000 ____D C:\Users\Benni\AppData\Local\Adobe 2014-01-21 22:57 - 2012-09-09 23:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-21 22:57 - 2012-09-09 23:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:31 - 2014-01-19 17:39 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-21 21:05 - 2013-01-12 00:29 - 00000020 ____H C:\ProgramData\PKP_DLev.DAT 2014-01-20 14:05 - 2013-10-21 14:31 - 00000000 ____D C:\Users\Benni\Documents\SQL Server Management Studio 2014-01-20 00:40 - 2013-09-14 21:42 - 00000000 ____D C:\_acestream_cache_ 2014-01-19 17:39 - 2013-03-06 07:46 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-19 17:39 - 2013-03-06 07:46 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-19 17:39 - 2012-09-09 21:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00002101 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-19 17:39 - 2012-09-09 21:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-19 17:34 - 2012-09-09 21:15 - 00000000 ____D C:\ProgramData\AVAST Software 2014-01-19 17:33 - 2012-09-09 21:16 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2014-01-17 10:25 - 2012-09-09 00:29 - 00000000 ___RD C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:24 - 2012-11-12 18:17 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 09:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-17 07:34 - 2013-05-26 07:11 - 00000000 ____D C:\Windows\Minidump 2014-01-17 07:14 - 2009-07-14 05:45 - 00439360 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-17 07:13 - 2012-09-09 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-16 12:00 - 2013-08-04 01:33 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 11:56 - 2012-09-09 21:39 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2014-01-13 09:40 - 2013-10-21 16:09 - 00000000 ____D C:\Users\Benni\Documents\Visual Studio 2012 2014-01-11 22:21 - 2013-09-14 21:42 - 00000000 ____D C:\Users\Benni\AppData\Roaming\.ACEStream 2014-01-05 13:50 - 2012-09-10 15:04 - 00000000 ____D C:\Users\Benni\AppData\Roaming\vlc Files to move or delete: ==================== C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\Benni\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-22 00:48 ==================== End Of Log ============================ --- --- --- FRST-Additon: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014 01 Ran by Benni at 2014-01-29 17:03:57 Running from C:\Users\Benni\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Ace Stream Media 2.1.5.5 (HKCU Version: 2.1.5.5 - Ace Stream Media) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Agent Ransack 2010 (64-bit) (Version: - ) AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 3.0.859.0 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.70418.0413 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.03.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0418.355.4954 - Ihr Firmenname) Hidden avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Broadcom 802.11 Network Adapter (Version: 5.100.82.130 - Broadcom Corporation) calibre 64bit (Version: 0.9.30 - Kovid Goyal) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.03 - Piriform) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20702.00 - Microsoft Corporation) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60 - Microsoft Corporation) Free Video to MP3 Converter version 5.0.32.1224 (x32 Version: 5.0.32.1224 - DVDVideoSoft Ltd.) GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) IIS 8.0 Express (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (Version: - ) IIS Express Application Compatibility Database for x86 (Version: - ) IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan) IsoBuster 3.0 (x32 Version: 3.0 - Smart Projects) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2300 - Broadcom Corporation) Lenovo Power Management Driver (Version: 1.66.00.22 - ) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Report Viewer 2012-Laufzeit (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-Bit) (Version: - ) Hidden Microsoft SQL Server 2012 (64-Bit) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 RsFx Driver (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012-Setup (Deutsch) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Shell (Isolated) - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft VSS Writer für SQL Server 2012 (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Developer Tools - Visual Studio 2012 - DEU (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Developer Tools - Visual Studio 2012 (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Platform Installer 4.0 (Version: 4.0.1622 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) Nikon Message Center 2 (x32 Version: 2.1.0 - Nikon) Nikon Movie Editor (x32 Version: 2.6.0 - Nikon) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation) PDF24 Creator 5.4.0 (x32 Version: - PDF24.org) Picture Control Utility x64 (Version: 1.4.7 - Nikon) PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011 - Realtek) Realtek PCIE Card Reader (x32 Version: 6.1.7601.82 - Realtek Semiconductor Corp.) Secure Download Manager (x32 Version: 3.1.0 - Kivuto Solutions Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.) Smart File Advisor 1.1.1 (x32 Version: 1.1.1 - Filefacts.net) SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com) Spyware Terminator 2012 (x32 Version: 3.0.0.80 - Crawler.com) SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server-Browser für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) ThinkPad UltraNav Driver (Version: 16.1.4.17 - ) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219 - Microsoft Corporation) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) ViewNX 2 (Version: 2.6.0 - Nikon) Visual Studio 2010 Prerequisites - English (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.8514.0 - Microsoft Corporation) Hidden VLC media player 2.0.2 (Version: 2.0.2 - VideoLAN) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0 - Microsoft Corporation) Windows App Certification Kit Native Components (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows App Certification Kit x64 (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 28-01-2014 19:46:42 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2014-01-28 16:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {21EE077E-0B26-42DD-83D2-DBBF938ADA84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {B9B66B86-8F79-4ABB-8F46-DA02F3B31449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-21] (Adobe Systems Incorporated) Task: {F6A4853F-DABF-4586-980A-C0D2D2BF2D68} - System32\Tasks\avast! Emergency Update => C:\Program Files (x86)\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-19] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-27 12:00 - 2012-02-27 12:00 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2012-04-18 02:48 - 2012-04-18 02:48 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-01-28 20:42 - 2014-01-28 17:44 - 02166272 _____ () C:\Program Files (x86)\AVAST Software\Avast\defs\14012801\algo.dll 2013-08-27 16:22 - 2013-11-07 17:41 - 00120832 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.Core.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_socket.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_ssl.pyd 2013-03-29 10:57 - 2013-03-29 10:57 - 00018944 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pycompat.pyd 2013-08-27 16:29 - 2013-11-07 17:41 - 02490880 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.CoreApp.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_hashlib.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00106496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_ctypes.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\select.pyd 2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\M2Crypto.__m2crypto.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pyexpat.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pywintypes27.dll 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pythoncom27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32file.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32pdh.pyd 2010-10-10 23:23 - 2010-10-10 23:23 - 00723968 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\apsw.pyd 2013-01-29 17:20 - 2013-01-29 17:20 - 00082944 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\cpyamf.util.pyd 2011-02-13 16:02 - 2011-02-13 16:02 - 00031232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\Crypto.Cipher.AES.pyd 2011-07-15 20:37 - 2011-07-15 20:37 - 00981504 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._core_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00746496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._gdi_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00670720 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._windows_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00966144 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._controls_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00674816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._misc_.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00688128 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\unicodedata.pyd 2013-01-29 17:20 - 2013-01-29 17:20 - 00066048 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\cpyamf.amf0.pyd 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2014-01-19 17:39 - 2014-01-19 17:39 - 19336120 _____ () C:\Program Files (x86)\AVAST Software\Avast\libcef.dll 2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_socket.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_ssl.pyd 2011-07-15 20:37 - 2011-07-15 20:37 - 00981504 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._core_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00746496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._gdi_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00670720 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._windows_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00966144 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._controls_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00674816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._misc_.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_hashlib.pyd 2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\M2Crypto.__m2crypto.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\select.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pyexpat.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pywintypes27.dll 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pythoncom27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32file.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32pdh.pyd 2013-12-20 09:51 - 2013-12-20 09:51 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-01-21 22:57 - 2014-01-21 22:57 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: CDC Serial Description: CDC Serial Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: MTP-USB-Gerät Description: MTP-USB-Gerät Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a} Manufacturer: (Standardmäßiges MTP-Gerät) Service: WUDFRd Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Realtek PCIE CardReader Description: Realtek PCIE CardReader Class Guid: {4d36e970-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Semiconduct Corp. Service: RSPCIESTOR Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Error: (01/29/2014 05:02:20 PM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-01-28 16:36:37.782 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-01-28 16:36:36.783 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 27% Total physical RAM: 7618.1 MB Available physical RAM: 5512.7 MB Total Pagefile: 15234.38 MB Available Pagefile: 12761.56 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:3.85 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: DA3504B2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Geändert von Benni12345 (29.01.2014 um 17:27 Uhr) |
30.01.2014, 15:56 | #8 |
/// the machine /// TB-Ausbilder | Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen)ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
01.02.2014, 18:28 | #9 |
| Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) checkup Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spyware Terminator 2012 Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Visual Studio Extensions for Windows Library for JavaScript Adobe Flash Player 12.0.0.43 Flash Player out of Date! Adobe Reader XI Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes' Anti-Malware mbamscheduler.exe AVAST SOFTWARE AVAST AVASTSVC.EXE AVAST SOFTWARE AVAST AVASTUI.EXE `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=a44ee8eedd3a4a4199d0869bb9cccfe5 # engine=16886 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-02-01 01:06:47 # local_time=2014-02-01 02:06:47 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 85 77 846923 1070873 0 0 # compatibility_mode=5893 16776573 100 94 66673 142846657 0 0 # compatibility_mode=7937 16777214 28 75 24360296 44240967 0 0 # scanned=262152 # found=0 # cleaned=0 # scan_time=23270 FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04 Ran by Benni (administrator) on BURN3R on 01-02-2014 18:11:30 Running from C:\Users\Benni\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (AVAST Software) C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe () C:\Users\Benni\AppData\Roaming\ACEStream\updater\ace_update.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Dropbox, Inc.) C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-02] (Crawler.com) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-19] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKU\S-1-5-21-1095869841-2353796681-3911995247-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.) HKU\S-1-5-21-1095869841-2353796681-3911995247-1000\...\Run: [AceStream] - C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2014-01-28] () Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x032A8A433C58CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default FF Homepage: hxxp://www.readmore.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.5 - C:\Users\Benni\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced Cookie Manager - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\cookiemgr@jayapal.com [2014-01-10] FF Extension: ProxTube - Unblock YouTube - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\ich@maltegoetz.de [2013-12-11] FF Extension: YouTube Unblocker - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-26] FF Extension: QuickShare Widget - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{91feafb2-c928-8ce1-6959-83a4f4a57307} [2013-09-16] FF Extension: DivX Web Player - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-11-22] FF Extension: Web Install Updater Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{3ed53ac3-002c-4242-85e7-8ff4ad43ec1a}.xpi [2014-01-17] FF Extension: {5bab8c58-503e-4275-9a4d-9c1c79c22f77} - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{5bab8c58-503e-4275-9a4d-9c1c79c22f77}.xpi [2013-11-15] FF Extension: Adblock Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF [2012-09-09] FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-09-14] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Extension: (Docs) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-07] CHR Extension: (Google Drive) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-07] CHR Extension: (YouTube) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-07] CHR Extension: (Google-Suche) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-07] CHR Extension: (Google Mail) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-07] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-19] (AVAST Software) R2 btwdins; C:\PROGRAM FILES\LENOVO\BLUETOOTH SOFTWARE\BTWDINS.EXE [945440 2012-02-01] (Broadcom Corporation.) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation) R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-09-07] (Crawler.com) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-19] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-19] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-19] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-19] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-19] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-21] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-19] () R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation) R3 SmbDrvAMDASF; C:\Windows\System32\DRIVERS\Smb_driver_AMDASF.sys [26424 2012-06-20] (Synaptics Incorporated) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-09-10] (Windows (R) Win 7 DDK provider) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-01 08:33 - 2014-02-01 08:33 - 00987425 _____ () C:\Users\Benni\Desktop\SecurityCheck.exe 2014-01-31 21:53 - 2014-02-01 08:25 - 00030208 ___SH () C:\Users\Benni\Thumbs.db 2014-01-31 19:22 - 2014-01-31 19:22 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-01-31 19:15 - 2014-01-31 19:15 - 02347384 _____ (ESET) C:\Users\Benni\Downloads\esetsmartinstaller_enu.exe 2014-01-29 17:03 - 2014-02-01 18:12 - 00018550 _____ () C:\Users\Benni\Downloads\FRST.txt 2014-01-29 17:03 - 2014-01-29 17:04 - 00038211 _____ () C:\Users\Benni\Downloads\Addition.txt 2014-01-29 17:02 - 2014-02-01 18:11 - 00000000 ____D () C:\Users\Benni\Downloads\FRST-OlderVersion 2014-01-29 16:59 - 2014-01-29 16:59 - 00000907 _____ () C:\Users\Benni\Desktop\JRT.txt 2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D () C:\Windows\ERUNT 2014-01-29 16:36 - 2014-01-29 16:36 - 01037068 _____ (Thisisu) C:\Users\Benni\Downloads\JRT.exe 2014-01-29 16:28 - 2014-01-29 16:31 - 00000000 ____D () C:\AdwCleaner 2014-01-29 16:27 - 2014-01-29 16:27 - 01166132 _____ () C:\Users\Benni\Downloads\adwcleaner.exe 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-29 15:48 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-29 15:47 - 2014-01-29 15:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benni\Downloads\malwarebytes.exe 2014-01-28 16:46 - 2014-01-28 16:46 - 00033460 _____ () C:\ComboFix.txt 2014-01-28 16:07 - 2014-01-28 16:46 - 00000000 ____D () C:\Qoobox 2014-01-28 16:07 - 2014-01-28 16:42 - 00000000 ____D () C:\Windows\erdnt 2014-01-28 16:07 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-01-28 16:07 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-01-28 16:07 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-01-28 16:07 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-01-28 16:04 - 2014-01-28 16:04 - 05175619 ____R (Swearware) C:\Users\Benni\Downloads\ComboFix.exe 2014-01-27 21:06 - 2014-02-01 18:11 - 02080256 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ () C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-02-01 18:11 - 00000000 ____D () C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ () C:\Users\Benni\defogger_reenable 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ () C:\Users\Benni\Downloads\Defogger.exe 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ () C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ () C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-21 22:59 - 2014-01-21 22:58 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-19 17:39 - 2014-01-21 22:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ () C:\Windows\Minidump\011714-14664-01.dmp 2014-01-15 09:28 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 09:28 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 09:28 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ () C:\Users\Benni\Desktop\Pwc.xps ==================== One Month Modified Files and Folders ======= 2014-02-01 18:12 - 2014-01-29 17:03 - 00018550 _____ () C:\Users\Benni\Downloads\FRST.txt 2014-02-01 18:11 - 2014-01-29 17:02 - 00000000 ____D () C:\Users\Benni\Downloads\FRST-OlderVersion 2014-02-01 18:11 - 2014-01-27 21:06 - 02080256 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-02-01 18:11 - 2014-01-27 20:34 - 00000000 ____D () C:\FRST 2014-02-01 17:56 - 2012-10-17 17:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-01 17:56 - 2012-09-09 21:16 - 00004194 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-02-01 17:56 - 2012-09-09 00:29 - 01669850 _____ () C:\Windows\WindowsUpdate.log 2014-02-01 17:56 - 2009-07-14 05:51 - 00131313 _____ () C:\Windows\setupact.log 2014-02-01 11:23 - 2013-02-06 22:57 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\Skype 2014-02-01 08:33 - 2014-02-01 08:33 - 00987425 _____ () C:\Users\Benni\Desktop\SecurityCheck.exe 2014-02-01 08:26 - 2012-09-09 00:29 - 00000000 ____D () C:\Users\Benni 2014-02-01 08:25 - 2014-01-31 21:53 - 00030208 ___SH () C:\Users\Benni\Thumbs.db 2014-02-01 01:00 - 2012-11-12 18:15 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\Dropbox 2014-01-31 23:05 - 2012-09-10 15:04 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\vlc 2014-01-31 21:52 - 2012-11-12 18:20 - 00000000 ___RD () C:\Users\Benni\Dropbox 2014-01-31 19:22 - 2014-01-31 19:22 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-01-31 19:19 - 2009-07-14 18:58 - 00806428 _____ () C:\Windows\system32\perfh007.dat 2014-01-31 19:19 - 2009-07-14 18:58 - 00184868 _____ () C:\Windows\system32\perfc007.dat 2014-01-31 19:19 - 2009-07-14 06:13 - 01889308 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-31 19:17 - 2009-07-14 05:45 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-31 19:17 - 2009-07-14 05:45 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-31 19:15 - 2014-01-31 19:15 - 02347384 _____ (ESET) C:\Users\Benni\Downloads\esetsmartinstaller_enu.exe 2014-01-31 19:08 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-01-30 17:17 - 2012-09-10 11:45 - 00000000 ____D () C:\ProgramData\Spyware Terminator 2014-01-30 14:45 - 2013-02-21 06:28 - 00000000 ____D () C:\Users\Benni\Documents\Outlook-Dateien 2014-01-29 17:04 - 2014-01-29 17:03 - 00038211 _____ () C:\Users\Benni\Downloads\Addition.txt 2014-01-29 16:59 - 2014-01-29 16:59 - 00000907 _____ () C:\Users\Benni\Desktop\JRT.txt 2014-01-29 16:38 - 2014-01-29 16:38 - 00000000 ____D () C:\Windows\ERUNT 2014-01-29 16:36 - 2014-01-29 16:36 - 01037068 _____ (Thisisu) C:\Users\Benni\Downloads\JRT.exe 2014-01-29 16:31 - 2014-01-29 16:28 - 00000000 ____D () C:\AdwCleaner 2014-01-29 16:27 - 2014-01-29 16:27 - 01166132 _____ () C:\Users\Benni\Downloads\adwcleaner.exe 2014-01-29 16:23 - 2012-09-09 10:58 - 00717688 _____ () C:\Windows\PFRO.log 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-29 15:48 - 2014-01-29 15:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-29 15:47 - 2014-01-29 15:47 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benni\Downloads\malwarebytes.exe 2014-01-28 22:30 - 2013-10-21 14:31 - 00000000 ____D () C:\Users\MSSQL$SQLEXPRESS 2014-01-28 16:46 - 2014-01-28 16:46 - 00033460 _____ () C:\ComboFix.txt 2014-01-28 16:46 - 2014-01-28 16:07 - 00000000 ____D () C:\Qoobox 2014-01-28 16:42 - 2014-01-28 16:07 - 00000000 ____D () C:\Windows\erdnt 2014-01-28 16:41 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-01-28 16:04 - 2014-01-28 16:04 - 05175619 ____R (Swearware) C:\Users\Benni\Downloads\ComboFix.exe 2014-01-28 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ () C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ () C:\Users\Benni\defogger_reenable 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ () C:\Users\Benni\Downloads\Defogger.exe 2014-01-23 16:07 - 2013-09-10 08:24 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ () C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ () C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-22 23:13 - 2012-09-09 00:29 - 00000000 ____D () C:\Users\Benni\AppData\Local\VirtualStore 2014-01-22 00:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-01-21 22:59 - 2013-10-17 09:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-21 22:58 - 2014-01-21 22:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:58 - 2013-07-20 03:54 - 00000000 ____D () C:\Program Files (x86)\Java 2014-01-21 22:57 - 2012-10-17 17:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-21 22:57 - 2012-09-16 22:28 - 00000000 ____D () C:\Users\Benni\AppData\Local\Adobe 2014-01-21 22:57 - 2012-09-09 23:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-21 22:57 - 2012-09-09 23:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:31 - 2014-01-19 17:39 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-21 21:05 - 2013-01-12 00:29 - 00000020 ____H () C:\ProgramData\PKP_DLev.DAT 2014-01-20 14:05 - 2013-10-21 14:31 - 00000000 ____D () C:\Users\Benni\Documents\SQL Server Management Studio 2014-01-20 00:40 - 2013-09-14 21:42 - 00000000 ____D () C:\_acestream_cache_ 2014-01-19 17:39 - 2013-03-06 07:46 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-01-19 17:39 - 2013-03-06 07:46 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-19 17:39 - 2012-09-09 21:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00002101 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-19 17:39 - 2012-09-09 21:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-19 17:34 - 2012-09-09 21:15 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-01-19 17:33 - 2012-09-09 21:16 - 00000000 _____ () C:\Windows\SysWOW64\config.nt 2014-01-17 10:25 - 2012-09-09 00:29 - 00000000 ___RD () C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:24 - 2012-11-12 18:17 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 09:04 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ () C:\Windows\Minidump\011714-14664-01.dmp 2014-01-17 07:34 - 2013-05-26 07:11 - 00000000 ____D () C:\Windows\Minidump 2014-01-17 07:14 - 2009-07-14 05:45 - 00439360 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-17 07:13 - 2012-09-09 21:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-16 12:00 - 2013-08-04 01:33 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 11:56 - 2012-09-09 21:39 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ () C:\Users\Benni\Desktop\Pwc.xps 2014-01-13 09:40 - 2013-10-21 16:09 - 00000000 ____D () C:\Users\Benni\Documents\Visual Studio 2012 2014-01-11 22:21 - 2013-09-14 21:42 - 00000000 ____D () C:\Users\Benni\AppData\Roaming\.ACEStream Files to move or delete: ==================== C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\Benni\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-30 09:35 ==================== End Of Log ============================ --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04 Ran by Benni at 2014-02-01 18:12:58 Running from C:\Users\Benni\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Ace Stream Media 2.1.5.5 (HKCU Version: 2.1.5.5 - Ace Stream Media) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Agent Ransack 2010 (64-bit) (Version: - ) AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 3.0.859.0 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.70418.0413 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.03.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0418.355.4954 - Ihr Firmenname) Hidden avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Broadcom 802.11 Network Adapter (Version: 5.100.82.130 - Broadcom Corporation) calibre 64bit (Version: 0.9.30 - Kovid Goyal) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.03 - Piriform) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20702.00 - Microsoft Corporation) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60 - Microsoft Corporation) ESET Online Scanner v3 (x32 Version: - ) Free Video to MP3 Converter version 5.0.32.1224 (x32 Version: 5.0.32.1224 - DVDVideoSoft Ltd.) GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) IIS 8.0 Express (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (Version: - ) IIS Express Application Compatibility Database for x86 (Version: - ) IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan) IsoBuster 3.0 (x32 Version: 3.0 - Smart Projects) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2300 - Broadcom Corporation) Lenovo Power Management Driver (Version: 1.66.00.22 - ) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Report Viewer 2012-Laufzeit (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-Bit) (Version: - ) Hidden Microsoft SQL Server 2012 (64-Bit) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 RsFx Driver (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012-Setup (Deutsch) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Shell (Isolated) - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft VSS Writer für SQL Server 2012 (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Developer Tools - Visual Studio 2012 - DEU (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Developer Tools - Visual Studio 2012 (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Platform Installer 4.0 (Version: 4.0.1622 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) Nikon Message Center 2 (x32 Version: 2.1.0 - Nikon) Nikon Movie Editor (x32 Version: 2.6.0 - Nikon) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation) PDF24 Creator 5.4.0 (x32 Version: - PDF24.org) Picture Control Utility x64 (Version: 1.4.7 - Nikon) PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011 - Realtek) Realtek PCIE Card Reader (x32 Version: 6.1.7601.82 - Realtek Semiconductor Corp.) Secure Download Manager (x32 Version: 3.1.0 - Kivuto Solutions Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.) Smart File Advisor 1.1.1 (x32 Version: 1.1.1 - Filefacts.net) SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com) Spyware Terminator 2012 (x32 Version: 3.0.0.80 - Crawler.com) SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server-Browser für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) ThinkPad UltraNav Driver (Version: 16.1.4.17 - ) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219 - Microsoft Corporation) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) ViewNX 2 (Version: 2.6.0 - Nikon) Visual Studio 2010 Prerequisites - English (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.8514.0 - Microsoft Corporation) Hidden VLC media player 2.0.2 (Version: 2.0.2 - VideoLAN) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0 - Microsoft Corporation) Windows App Certification Kit Native Components (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows App Certification Kit x64 (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2014-01-28 16:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {21EE077E-0B26-42DD-83D2-DBBF938ADA84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {B9B66B86-8F79-4ABB-8F46-DA02F3B31449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-21] (Adobe Systems Incorporated) Task: {F6A4853F-DABF-4586-980A-C0D2D2BF2D68} - System32\Tasks\avast! Emergency Update => C:\Program Files (x86)\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-19] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-27 12:00 - 2012-02-27 12:00 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2012-04-18 02:48 - 2012-04-18 02:48 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-02-01 03:12 - 2014-01-31 23:22 - 02168320 _____ () C:\Program Files (x86)\AVAST Software\Avast\defs\14013102\algo.dll 2014-02-01 17:56 - 2014-02-01 10:21 - 02168320 _____ () C:\Program Files (x86)\AVAST Software\Avast\defs\14020100\algo.dll 2013-08-27 16:22 - 2014-01-28 11:57 - 00195072 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.Core.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_socket.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_ssl.pyd 2013-03-29 10:57 - 2013-03-29 10:57 - 00018944 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pycompat.pyd 2013-08-27 16:29 - 2014-01-28 11:57 - 02601984 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\acestreamengine.CoreApp.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_hashlib.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00106496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\_ctypes.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\select.pyd 2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\M2Crypto.__m2crypto.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pyexpat.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pywintypes27.dll 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\pythoncom27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32file.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\win32pdh.pyd 2010-10-10 23:23 - 2010-10-10 23:23 - 00723968 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\apsw.pyd 2013-01-29 17:20 - 2013-01-29 17:20 - 00082944 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\cpyamf.util.pyd 2011-02-13 16:02 - 2011-02-13 16:02 - 00031232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\Crypto.Cipher.AES.pyd 2011-07-15 20:37 - 2011-07-15 20:37 - 00981504 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._core_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00746496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._gdi_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00670720 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._windows_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00966144 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._controls_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00674816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\wx._misc_.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00688128 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\unicodedata.pyd 2013-01-29 17:20 - 2013-01-29 17:20 - 00066048 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\engine\lib\cpyamf.amf0.pyd 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2014-01-19 17:39 - 2014-01-19 17:39 - 19336120 _____ () C:\Program Files (x86)\AVAST Software\Avast\libcef.dll 2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_socket.pyd 2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_ssl.pyd 2011-07-15 20:37 - 2011-07-15 20:37 - 00981504 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._core_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00746496 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._gdi_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00670720 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._windows_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00966144 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._controls_.pyd 2011-07-15 20:38 - 2011-07-15 20:38 - 00674816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\wx._misc_.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\_hashlib.pyd 2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\M2Crypto.__m2crypto.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\select.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pyexpat.pyd 2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32api.pyd 2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pywintypes27.dll 2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\pythoncom27.dll 2012-02-07 17:36 - 2012-02-07 17:36 - 00111616 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32file.pyd 2012-02-07 17:36 - 2012-02-07 17:36 - 00024064 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\win32pdh.pyd 2011-06-12 14:06 - 2011-06-12 14:06 - 00688128 _____ () C:\Users\Benni\AppData\Roaming\ACEStream\updater\lib\unicodedata.pyd 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Benni\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-20 09:51 - 2013-12-20 09:51 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2012-09-23 20:43 - 2012-09-23 20:43 - 00313992 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\sqlite.dll 2014-01-21 22:57 - 2014-01-21 22:57 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Realtek PCIE CardReader Description: Realtek PCIE CardReader Class Guid: {4d36e970-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Semiconduct Corp. Service: RSPCIESTOR Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (02/01/2014 08:27:16 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (02/01/2014 02:29:56 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (02/01/2014 02:29:49 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/31/2014 07:22:39 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/31/2014 07:22:35 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/31/2014 07:22:34 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/31/2014 07:22:20 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (02/01/2014 05:56:30 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (01/31/2014 07:09:25 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (01/31/2014 07:08:49 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 31.01.2014 um 19:05:41 unerwartet heruntergefahren. Error: (01/31/2014 07:07:14 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht. Error: (01/31/2014 07:06:44 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst btwdins erreicht. Error: (01/31/2014 07:06:14 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst btwdins erreicht. Error: (01/31/2014 08:50:33 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (01/31/2014 08:49:40 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 31.01.2014 um 07:43:36 unerwartet heruntergefahren. Error: (01/31/2014 07:30:12 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (01/31/2014 07:29:46 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 30.01.2014 um 22:46:14 unerwartet heruntergefahren. Microsoft Office Sessions: ========================= Error: (02/01/2014 08:27:16 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (02/01/2014 02:29:56 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (02/01/2014 02:29:49 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/31/2014 07:22:39 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\esetsmartinstaller_enu.exe Error: (01/31/2014 07:22:35 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\esetsmartinstaller_enu.exe Error: (01/31/2014 07:22:34 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\esetsmartinstaller_enu.exe Error: (01/31/2014 07:22:20 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\esetsmartinstaller_enu.exe CodeIntegrity Errors: =================================== Date: 2014-01-28 16:36:37.782 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-01-28 16:36:36.783 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 7618.1 MB Available physical RAM: 4496.3 MB Total Pagefile: 15234.38 MB Available Pagefile: 11583.69 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:3.61 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: DA3504B2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Vielen Dank für deine Hilfe! Er hängt sich auf jeden Fall nicht mehr auf! Das freut mich. Der Firefox ist aber ein wenig langsam und ab und zu bekomm ich den Fehler "Runtime Error...pure video function call" wenn ich z.B. Youtube-Videos anschauen möchte. Hat das noch was mit meinem Befall zu tun? Nochmals danke! |
02.02.2014, 07:15 | #10 |
/// the machine /// TB-Ausbilder | Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Ich würde Firefox mal komplett deinstallieren und neu installieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) |
.com, adblock, antivirus, bluescreen, branding, browser, converter, desktop, dvdvideosoft ltd., error, excel, flash player, google, helper, hijack, hijackthis, homepage, hängt, linkury, malware, minidump, registry, sanduhr, scan, security, smartbar, software, spyware, svchost.exe, updates, windows |