![]() |
|
Log-Analyse und Auswertung: Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) Hallo Liebe Community, Vor gut einer Woche habe ich verschiedene Updates für meinen Laptop installiert, darunter ein Java Update ((jre-7-u51-windows-i586.exe von cnet.com) und ein Flashplayer Update (install_flashplayer12x32_mssd_aaa_aih.exe von adobe.com). Ich bin mir nicht sicher, ob es mit diesen Updates zusammenhängt, aber ungefähr seitdem hängt sich mein PC nach gut einer halben Stunde einfach auf (Sanduhr statt Mauszeiger, Task-Manager nicht mehr zu öffnen). Nach Neustart beginnt alles wieder von vorne. Ich bin nun im abgesicherten Modus unterwegs und hier treten keine Probleme auf. Habt ihr eine Idee? Danke für jede Hilfe Anbei die Logfiles, die ich im Abgesicherten Modus erstellt habe: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014 01 Ran by Benni (administrator) on BURN3R on 27-01-2014 21:10:42 Running from C:\Users\Benni\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Safe Mode (with Networking) The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-02] (Crawler.com) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-20] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-04-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-19] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.) HKCU\...\Run: [AceStream] - C:\Users\Benni\AppData\Roaming\ACEStream\engine\ace_engine.exe [27904 2013-11-07] () HKCU\...\Run: [Browser Infrastructure Helper] - C:\Users\Benni\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-09-03] (Smartbar) MountPoints2: D - D:\HTC_Sync_Manager_PC.exe MountPoints2: E - E:\HTC_Sync_Manager_PC.exe MountPoints2: {189d4d15-66a1-11e3-bb20-c0143ddcc984} - E:\HTC_Sync_Manager_PC.exe MountPoints2: {f8b96e40-5684-11e3-bd37-c0143ddcc984} - D:\HTC_Sync_Manager_PC.exe AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1344800 2014-01-01] (Conduit) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1037600 2014-01-01] (Conduit) Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Benni\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://uk.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x032A8A433C58CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: PriceGong - Price Comparison - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll (PriceGong) BHO-x32: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default FF user.js: detected! => C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\user.js FF Homepage: hxxp://www.readmore.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @acestream.net/acestreamplugin,version=2.1.5.5 - C:\Users\Benni\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced Cookie Manager - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\cookiemgr@jayapal.com [2014-01-10] FF Extension: ProxTube - Unblock YouTube - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\ich@maltegoetz.de [2013-12-11] FF Extension: YouTube Unblocker - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\youtubeunblocker@unblocker.yt [2014-01-26] FF Extension: PriceGong - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} [2013-04-18] FF Extension: QuickShare Widget - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{91feafb2-c928-8ce1-6959-83a4f4a57307} [2013-09-16] FF Extension: DivX Web Player - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-11-22] FF Extension: Web Install Updater Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{3ed53ac3-002c-4242-85e7-8ff4ad43ec1a}.xpi [2014-01-17] FF Extension: {5bab8c58-503e-4275-9a4d-9c1c79c22f77} - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{5bab8c58-503e-4275-9a4d-9c1c79c22f77}.xpi [2013-11-15] FF Extension: Adblock Plus - C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\3epme9aw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-10] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files (x86)\AVAST Software\Avast\WebRep\FF [2012-09-09] FF HKCU\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org FF Extension: TS Magic Player - C:\Users\Benni\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org [2013-09-14] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.152\pdf.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File CHR Extension: (Docs) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-07] CHR Extension: (Google Drive) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-07] CHR Extension: (YouTube) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-07] CHR Extension: (Google-Suche) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-07] CHR Extension: (Google Mail) - C:\Users\Benni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-07] CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx [2013-03-04] ==================== Services (Whitelisted) ================= S2 avast! Antivirus; C:\Program Files (x86)\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-19] (AVAST Software) S2 btwdins; C:\PROGRAM FILES\LENOVO\BLUETOOTH SOFTWARE\BTWDINS.EXE [945440 2012-02-01] (Broadcom Corporation.) S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2301216 2014-01-01] (Conduit) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation) S2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-09-07] (Crawler.com) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-19] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-19] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-19] () S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-19] (AVAST Software) S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-19] (AVAST Software) S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-21] (AVAST Software) S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-19] () S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.) S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation) R3 SmbDrvAMDASF; C:\Windows\System32\DRIVERS\Smb_driver_AMDASF.sys [26424 2012-06-20] (Synaptics Incorporated) S2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-09-10] (Windows (R) Win 7 DDK provider) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) U3 ufldqpog; \??\C:\Users\Benni\AppData\Local\Temp\ufldqpog.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-27 21:06 - 2014-01-27 21:11 - 00017182 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-27 21:06 - 2014-01-27 21:06 - 02079232 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-21 22:59 - 2014-01-21 22:58 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-19 17:39 - 2014-01-21 22:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-15 22:57 - 2014-01-15 22:57 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 09:28 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 09:28 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 09:28 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 09:28 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2013-12-29 23:22 - 2014-01-15 22:57 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-29 23:22 - 2013-12-29 23:24 - 00000000 ____D C:\Users\Benni\AppData\Local\SearchProtect 2013-12-29 23:22 - 2013-12-29 23:23 - 00000000 ____D C:\Users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:23 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:22 - 00000000 _____ C:\END 2013-12-29 23:21 - 2013-12-29 23:21 - 32694648 _____ (DVDVideoSoft Ltd. ) C:\Users\Benni\Downloads\FreeVideoToMP3Converter_5-0-32-1219.exe 2013-12-28 16:12 - 2013-12-28 16:12 - 00000000 ____D C:\Users\Benni\Desktop\Radical Face ==================== One Month Modified Files and Folders ======= 2014-01-27 21:11 - 2014-01-27 21:06 - 00017182 _____ C:\Users\Benni\Downloads\FRST.txt 2014-01-27 21:06 - 2014-01-27 21:06 - 02079232 _____ (Farbar) C:\Users\Benni\Downloads\FRST64.exe 2014-01-27 20:39 - 2014-01-27 20:39 - 00380416 _____ C:\Users\Benni\Downloads\ypd287xs.exe 2014-01-27 20:34 - 2014-01-27 20:34 - 00000000 ____D C:\FRST 2014-01-27 20:31 - 2014-01-27 20:31 - 00000000 _____ C:\Users\Benni\defogger_reenable 2014-01-27 20:31 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni 2014-01-27 20:29 - 2014-01-27 20:29 - 00050477 _____ C:\Users\Benni\Downloads\Defogger.exe 2014-01-27 20:24 - 2009-07-14 18:58 - 00806178 _____ C:\Windows\system32\perfh007.dat 2014-01-27 20:24 - 2009-07-14 18:58 - 00184650 _____ C:\Windows\system32\perfc007.dat 2014-01-27 20:24 - 2009-07-14 06:13 - 01889308 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-26 23:40 - 2012-09-09 00:29 - 01247165 _____ C:\Windows\WindowsUpdate.log 2014-01-26 21:37 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-26 21:37 - 2009-07-14 05:45 - 00017120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-26 21:30 - 2012-11-12 18:20 - 00000000 ___RD C:\Users\Benni\Dropbox 2014-01-26 21:30 - 2012-11-12 18:15 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Dropbox 2014-01-26 21:29 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-26 21:29 - 2009-07-14 05:51 - 00116811 _____ C:\Windows\setupact.log 2014-01-26 00:18 - 2012-09-09 21:16 - 00004194 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-25 08:18 - 2013-10-21 14:31 - 00000000 ____D C:\Users\MSSQL$SQLEXPRESS 2014-01-24 18:49 - 2012-10-17 17:07 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-24 14:44 - 2012-09-10 11:45 - 00000000 ____D C:\ProgramData\Spyware Terminator 2014-01-23 16:07 - 2013-09-10 08:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2014-01-23 15:36 - 2013-02-06 22:57 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Skype 2014-01-22 23:20 - 2014-01-22 23:20 - 00011682 _____ C:\Users\Benni\Desktop\hijackthisneu.txt 2014-01-22 23:16 - 2014-01-22 23:16 - 00010855 _____ C:\Users\Benni\Desktop\hijackthis.log 2014-01-22 23:13 - 2014-01-22 23:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\Benni\Downloads\HiJackThis204.exe 2014-01-22 23:13 - 2012-09-09 00:29 - 00000000 ____D C:\Users\Benni\AppData\Local\VirtualStore 2014-01-22 07:01 - 2012-09-09 10:58 - 00418282 _____ C:\Windows\PFRO.log 2014-01-22 00:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2014-01-21 22:59 - 2013-10-17 09:38 - 00000000 ____D C:\ProgramData\Oracle 2014-01-21 22:58 - 2014-01-21 22:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-21 22:58 - 2014-01-21 22:58 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-21 22:58 - 2013-07-20 03:54 - 00000000 ____D C:\Program Files (x86)\Java 2014-01-21 22:57 - 2012-10-17 17:07 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-21 22:57 - 2012-09-16 22:28 - 00000000 ____D C:\Users\Benni\AppData\Local\Adobe 2014-01-21 22:57 - 2012-09-09 23:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-01-21 22:57 - 2012-09-09 23:00 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-21 22:56 - 2014-01-21 22:56 - 29141928 _____ (Oracle Corporation) C:\Users\Benni\Downloads\jre-7u51-windows-i586.exe 2014-01-21 22:31 - 2014-01-19 17:39 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-21 22:24 - 2014-01-21 22:24 - 00000000 ____D C:\Users\Benni\AppData\Roaming\AVAST Software 2014-01-21 21:05 - 2013-01-12 00:29 - 00000020 ____H C:\ProgramData\PKP_DLev.DAT 2014-01-20 14:05 - 2013-10-21 14:31 - 00000000 ____D C:\Users\Benni\Documents\SQL Server Management Studio 2014-01-20 00:40 - 2013-09-14 21:42 - 00000000 ___HD C:\_acestream_cache_ 2014-01-19 17:39 - 2013-03-06 07:46 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys 2014-01-19 17:39 - 2013-03-06 07:46 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-19 17:39 - 2012-09-09 21:16 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-19 17:39 - 2012-09-09 21:16 - 00002101 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-19 17:39 - 2012-09-09 21:15 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-19 17:34 - 2012-09-09 21:15 - 00000000 ____D C:\ProgramData\AVAST Software 2014-01-19 17:33 - 2012-09-09 21:16 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2014-01-17 10:25 - 2012-09-09 00:29 - 00000000 ___RD C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 10:24 - 2012-11-12 18:17 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-17 09:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-17 07:34 - 2014-01-17 07:34 - 00688120 _____ C:\Windows\Minidump\011714-14664-01.dmp 2014-01-17 07:34 - 2013-05-26 07:11 - 00000000 ____D C:\Windows\Minidump 2014-01-17 07:14 - 2009-07-14 05:45 - 00439360 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-17 07:13 - 2012-09-09 21:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-16 12:00 - 2013-08-04 01:33 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 11:56 - 2012-09-09 21:39 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 22:57 - 2014-01-15 22:57 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 22:57 - 2013-12-29 23:22 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-15 09:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-14 20:10 - 2014-01-14 20:10 - 00413325 _____ C:\Users\Benni\Desktop\Pwc.xps 2014-01-13 09:40 - 2013-10-21 16:09 - 00000000 ____D C:\Users\Benni\Documents\Visual Studio 2012 2014-01-11 22:21 - 2013-09-14 21:42 - 00000000 ____D C:\Users\Benni\AppData\Roaming\.ACEStream 2014-01-05 13:50 - 2012-09-10 15:04 - 00000000 ____D C:\Users\Benni\AppData\Roaming\vlc 2013-12-29 23:24 - 2013-12-29 23:22 - 00000000 ____D C:\Users\Benni\AppData\Local\SearchProtect 2013-12-29 23:23 - 2013-12-29 23:22 - 00000000 ____D C:\Users\Benni\AppData\Roaming\DVDVideoSoft 2013-12-29 23:23 - 2013-12-29 23:22 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-12-29 23:22 - 2013-12-29 23:22 - 00000000 _____ C:\END 2013-12-29 23:21 - 2013-12-29 23:21 - 32694648 _____ (DVDVideoSoft Ltd. ) C:\Users\Benni\Downloads\FreeVideoToMP3Converter_5-0-32-1219.exe 2013-12-28 16:12 - 2013-12-28 16:12 - 00000000 ____D C:\Users\Benni\Desktop\Radical Face Files to move or delete: ==================== C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\Benni\AppData\Local\Temp\1th2yvgx.dll C:\Users\Benni\AppData\Local\Temp\AskSLib.dll C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe-1.exe C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe-2.exe C:\Users\Benni\AppData\Local\Temp\firefoxjre_exe.exe C:\Users\Benni\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Benni\AppData\Local\Temp\Installer.exe C:\Users\Benni\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Benni\AppData\Local\Temp\nsg3324.exe C:\Users\Benni\AppData\Local\Temp\nsgB7FF.exe C:\Users\Benni\AppData\Local\Temp\nsl3C1A.exe C:\Users\Benni\AppData\Local\Temp\nsqAFB4.exe C:\Users\Benni\AppData\Local\Temp\SPSetup.exe C:\Users\Benni\AppData\Local\Temp\vlc-2.0.4-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-22 00:48 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014 01 Ran by Benni at 2014-01-27 21:12:45 Running from C:\Users\Benni\Downloads Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Ace Stream Media 2.1.5.5 (HKCU Version: 2.1.5.5 - Ace Stream Media) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Agent Ransack 2010 (64-bit) (Version: - ) AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 3.0.859.0 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.70418.0413 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.03.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0418.355.4954 - Ihr Firmenname) Hidden avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Broadcom 802.11 Network Adapter (Version: 5.100.82.130 - Broadcom Corporation) calibre 64bit (Version: 0.9.30 - Kovid Goyal) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0418.0354.4954 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0418.355.4954 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.03 - Piriform) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20702.00 - Microsoft Corporation) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60 - Microsoft Corporation) Free Video to MP3 Converter version 5.0.32.1224 (x32 Version: 5.0.32.1224 - DVDVideoSoft Ltd.) GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team) IIS 8.0 Express (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (Version: - ) IIS Express Application Compatibility Database for x86 (Version: - ) IrfanView (remove only) (x32 Version: 4.35 - Irfan Skiljan) IsoBuster 3.0 (x32 Version: 3.0 - Smart Projects) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2300 - Broadcom Corporation) Lenovo Power Management Driver (Version: 1.66.00.22 - ) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709 - Microsoft Corporation) Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20710.0 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929 - Microsoft Corporation) Hidden Microsoft Report Viewer 2012-Laufzeit (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-Bit) (Version: - ) Hidden Microsoft SQL Server 2012 (64-Bit) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 RsFx Driver (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012-Setup (Deutsch) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x32 Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Shell (Isolated) - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft VSS Writer für SQL Server 2012 (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Developer Tools - Visual Studio 2012 - DEU (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Developer Tools - Visual Studio 2012 (x32 Version: 1.0.30710.0 - Microsoft Corporation) Hidden Microsoft Web Platform Installer 4.0 (Version: 4.0.1622 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) Nikon Message Center 2 (x32 Version: 2.1.0 - Nikon) Nikon Movie Editor (x32 Version: 2.6.0 - Nikon) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation) PDF24 Creator 5.4.0 (x32 Version: - PDF24.org) Picture Control Utility x64 (Version: 1.4.7 - Nikon) PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PriceGong 2.6.11 (x32 Version: 2.6.11 - PriceGong) <==== ATTENTION QuickShare (x32 Version: 1.135.60.12323 - Linkury Inc.) <==== ATTENTION Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011 - Realtek) Realtek PCIE Card Reader (x32 Version: 6.1.7601.82 - Realtek Semiconductor Corp.) Search Protect (x32 Version: 2.9.40.12 - Conduit) <==== ATTENTION Secure Download Manager (x32 Version: 3.1.0 - Kivuto Solutions Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.) Smart File Advisor 1.1.1 (x32 Version: 1.1.1 - Filefacts.net) SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com) Spyware Terminator 2012 (x32 Version: 3.0.0.80 - Crawler.com) SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (Version: 11.0.2100.60 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden SQL Server-Browser für SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation) ThinkPad UltraNav Driver (Version: 16.1.4.17 - ) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219 - Microsoft Corporation) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) ViewNX 2 (Version: 2.6.0 - Nikon) Visual Studio 2010 Prerequisites - English (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio 2012 Prerequisites (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.8514.0 - Microsoft Corporation) Hidden VLC media player 2.0.2 (Version: 2.0.2 - VideoLAN) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0 - Microsoft Corporation) Windows App Certification Kit Native Components (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows App Certification Kit x64 (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {21EE077E-0B26-42DD-83D2-DBBF938ADA84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {B9B66B86-8F79-4ABB-8F46-DA02F3B31449} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-21] (Adobe Systems Incorporated) Task: {F6A4853F-DABF-4586-980A-C0D2D2BF2D68} - System32\Tasks\avast! Emergency Update => C:\Program Files (x86)\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-19] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: aswRvrt Description: aswRvrt Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswRvrt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: avast! Network Shield Support Description: avast! Network Shield Support Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswTdi Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: aswVmm Description: aswVmm Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswVmm Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/27/2014 08:45:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/24/2014 07:45:19 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Beschreibung = Configured Microsoft Office Professional 2010; Fehler = 0x8007043c). Error: (01/24/2014 07:45:13 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Beschreibung = Configured Microsoft Office Professional 2010; Fehler = 0x8007043c). Error: (01/24/2014 06:45:30 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/24/2014 06:45:28 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . Error: (01/23/2014 08:51:24 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/23/2014 08:51:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/22/2014 11:41:13 PM) (Source: Application Hang) (User: ) Description: Programm IEXPLORE.EXE, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1500 Startzeit: 01cf17c30212bcdb Endzeit: 48 Anwendungspfad: C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE Berichts-ID: Error: (01/22/2014 08:32:32 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.9.40.12, Zeitstempel: 0x52c3d33e Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x03b69178 ID des fehlerhaften Prozesses: 0xa1c Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0 Pfad der fehlerhaften Anwendung: cltmngui.exe1 Pfad des fehlerhaften Moduls: cltmngui.exe2 Berichtskennung: cltmngui.exe3 Error: (01/21/2014 10:58:00 PM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler . System errors: ============= Error: (01/27/2014 09:13:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:13:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:13:35 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:11:27 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:11:27 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:11:27 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:55 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/27/2014 09:06:43 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= Error: (01/27/2014 08:45:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Benni\Downloads\SoftonicDownloader_fuer_pixlr-o-matic.exe Error: (01/24/2014 07:45:19 PM) (Source: System Restore)(User: ) Description: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -EmbeddingConfigured Microsoft Office Professional 20100x8007043c Error: (01/24/2014 07:45:13 PM) (Source: System Restore)(User: ) Description: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -EmbeddingConfigured Microsoft Office Professional 20100x8007043c Error: (01/24/2014 06:45:30 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/24/2014 06:45:28 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler Error: (01/23/2014 08:51:24 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000500000000a5c01cf187452567495C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownbcc12d66-8467-11e3-b62c-c0143ddcc984 Error: (01/23/2014 08:51:08 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000500000000a5c01cf187452567495C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownb370b3dc-8467-11e3-b62c-c0143ddcc984 Error: (01/22/2014 11:41:13 PM) (Source: Application Hang)(User: ) Description: IEXPLORE.EXE11.0.9600.16428150001cf17c30212bcdb48C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE Error: (01/22/2014 08:32:32 PM) (Source: Application Error)(User: ) Description: cltmngui.exe2.9.40.1252c3d33eunknown0.0.0.000000000c000000503b69178a1c01cf17a88e8d28a1C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exeunknownef9a59b7-839b-11e3-9ce8-c0143ddcc984 Error: (01/21/2014 10:58:00 PM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: TraverseDir : Unable to push subdirectory. System Error: Unbekannter Fehler ==================== Memory info =========================== Percentage of memory in use: 18% Total physical RAM: 7618.1 MB Available physical RAM: 6175.4 MB Total Pagefile: 15234.38 MB Available Pagefile: 13897.65 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:119.14 GB) (Free:1.73 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: DA3504B2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19355 - hxxp://www.gmer.net Rootkit scan 2014-01-27 20:56:59 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_SSD_830_Series rev.CXM03B1Q 119,24GB Running: ypd287xs.exe; Driver: C:\Users\Benni\AppData\Local\Temp\ufldqpog.sys ---- Processes - GMER 2.1 ---- Library C:\Users\Benni\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [1112] 000007fef9e70000 Library C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FBBB8E99-E052-4EB3-BBC3-2B4F10039884}\mpengine.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [1900] (Microsoft Malware Protection Engine/Microsoft Corporation SIGNED)(2014-01-24 13:49:01) 000007fef6cc0000 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0143ddcc984 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0143ddcc984@9463d1b94634 0x25 0xE3 0x9F 0xC7 ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c0143ddcc984@980d2eecb1a5 0x2A 0x43 0x72 0xA0 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0143ddcc984 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0143ddcc984@9463d1b94634 0x25 0xE3 0x9F 0xC7 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c0143ddcc984@980d2eecb1a5 0x2A 0x43 0x72 0xA0 ... ---- EOF - GMER 2.1 ---- Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 20:31 on 27/01/2014 (Benni) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- |
Themen zu Windows 7: PC hängt sich nach ~20-30 Minuten auf (ohne Bluescreen) |
.com, adblock, antivirus, bluescreen, branding, browser, converter, desktop, dvdvideosoft ltd., error, excel, flash player, google, helper, hijack, hijackthis, homepage, hängt, linkury, malware, minidump, registry, sanduhr, scan, security, smartbar, software, spyware, svchost.exe, updates, windows |