| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC fährt ständig runterWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
29.01.2014, 14:50
| #1 |
 |  PC fährt ständig runter Hallo zusammen, ihr habt mir hier im Board schon einmal geholfen mit diesem Bundespolizei-Virus. Hab mir vor kurzem einen neuen PC zugelegt....leider fährt der sich in unregelmäßigen Abständen ohne Vorwarnung runter..zudem dektiviert sich das aktive Fenster ständig (weiss nicht wie ich es besser beschreiben soll"..ich schreibe also und mitten im Satz wird das Fenster deaktiviert (also diese latent graue Farbe) und ich muss dann erst wieder das Fenster anklicken und kann weiterschreiben..das passiert ständig und ist natürlich störend und zeitaufwendig..zudem trennt es mir oft die Internet-Verbindung..da ich eine Funkmaus benutze dachte ich schon ob da vielleicht was interferiert? System ist ein Windows7 professional... Wäre Klasse, wenn mir jemand bei der Fehlerabschaltung helfen könnte.. Lg whismerhill |
|
29.01.2014, 14:54
| #2 |
| /// the machine /// TB-Ausbilder    | PC fährt ständig runter hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
29.01.2014, 22:01
| #3 |
| | PC fährt ständig runter Hallo Schrauber,
__________________vielen Dank, dass Du dich meiner annimmst. Hier die beiden Scans FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by User (administrator) on USER-PC on 29-01-2014 14:57:04
Running from C:\Users\User\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Adobe Sytems Incorporated) C:\CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
() C:\Windows\DAODx.exe
() C:\CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613024 2010-09-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-09-27] (Atheros Commnucations)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Version Cue CS2] - C:\CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Policies\Explorer: [NoDrives] 65536
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-18] (Adobe Systems)
R2 Adobe Version Cue CS2; C:\CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)
==================== Drivers (Whitelisted) ====================
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-29 14:57 - 2014-01-29 14:57 - 00006022 _____ C:\Users\User\Desktop\FRST.txt
2014-01-29 14:56 - 2014-01-29 14:57 - 00000000 ____D C:\FRST
2014-01-29 14:56 - 2014-01-29 14:56 - 02079744 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-01-29 13:20 - 2014-01-29 13:20 - 00000165 ____H C:\Users\User\Desktop\~$portfolio.xlsx
2014-01-27 16:42 - 2014-01-26 22:17 - 04764373 _____ C:\Users\User\Documents\Interview_2R.wma
2014-01-27 16:42 - 2014-01-26 22:05 - 07323673 _____ C:\Users\User\Documents\Interview_1R.wma
2014-01-27 16:42 - 2014-01-26 22:05 - 07323673 _____ C:\Users\User\Documents\Interview_1.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00427033 _____ C:\Users\User\Documents\Echtzeit.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00278863 _____ C:\Users\User\Documents\Unbenannt (12).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00404583 _____ C:\Users\User\Documents\Unbenannt (10).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00081303 _____ C:\Users\User\Documents\Unbenannt (11).wma
2014-01-23 19:59 - 2014-01-23 19:59 - 00229473 _____ C:\Users\User\Documents\Unbenannt (9).wma
2014-01-23 18:11 - 2014-01-23 18:11 - 03992093 _____ C:\Users\User\Documents\Interview_2.wma
2014-01-23 18:04 - 2014-01-23 18:04 - 04095363 _____ C:\Users\User\Documents\Interview.wma
2014-01-23 17:58 - 2014-01-23 17:58 - 04059443 _____ C:\Users\User\Documents\Unbenannt (8).wma
2014-01-23 17:53 - 2014-01-23 17:53 - 00193553 _____ C:\Users\User\Documents\Unbenannt (7).wma
2014-01-23 17:52 - 2014-01-23 17:52 - 00593163 _____ C:\Users\User\Documents\Unbenannt (6).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00485403 _____ C:\Users\User\Documents\Unbenannt (3).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00216003 _____ C:\Users\User\Documents\Unbenannt (4).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00153143 _____ C:\Users\User\Documents\Unbenannt (5).wma
2014-01-23 17:50 - 2014-01-23 17:50 - 00624593 _____ C:\Users\User\Documents\Unbenannt (2).wma
2014-01-23 16:53 - 2014-01-23 16:53 - 00714393 _____ C:\Users\User\Documents\Zusatzseite_2.wma
2014-01-23 16:48 - 2014-01-23 16:55 - 00696433 _____ C:\Users\User\Documents\Zusatzseite_1.wma
2014-01-22 17:28 - 2014-01-22 17:28 - 00024873 _____ C:\Users\User\Desktop\portfolio.xlsx
2014-01-18 13:52 - 2014-01-18 13:55 - 00000000 ____D C:\Users\User\Documents\Neu
2014-01-16 15:15 - 2014-01-16 15:15 - 00665003 _____ C:\Users\User\Documents\MOVE Seite5_2_Hörspielvariante.wma
2014-01-16 15:12 - 2014-01-16 15:12 - 00620103 _____ C:\Users\User\Documents\MOVE Seite5_1.wma
2014-01-16 15:08 - 2014-01-16 15:08 - 00817663 _____ C:\Users\User\Documents\Intro für Dennis-Mausi-Schatzi.wma
2014-01-14 15:33 - 2014-01-29 14:42 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ____D C:\ProgramData\Skype
2014-01-14 15:32 - 2014-01-14 15:32 - 35100320 _____ (Skype Technologies S.A.) C:\Users\User\Documents\SkypeSetupFull.exe
2014-01-13 17:54 - 2014-01-13 17:54 - 02586723 _____ C:\Users\User\Documents\Valentina_Sprach_13-Jan-2014.wma
2014-01-11 17:12 - 2014-01-11 17:12 - 00001223 _____ C:\Users\User\Desktop\Sonepar-Ordner.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00001085 _____ C:\Users\User\Desktop\Jodix Free WMA to MP3 Converter.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00000000 ____D C:\Program Files (x86)\Free WMA to MP3 Converter
2014-01-11 17:04 - 2014-01-11 17:04 - 00948090 _____ (Jodix Technologies Ltd. ) C:\Users\User\Desktop\free-wma-mp3-converter.exe
2014-01-11 17:01 - 2014-01-11 17:01 - 00112733 _____ C:\Users\User\Documents\Unbenannt.wma
2014-01-01 17:00 - 2014-01-01 17:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2014-01-29 14:57 - 2014-01-29 14:57 - 00006022 _____ C:\Users\User\Desktop\FRST.txt
2014-01-29 14:57 - 2014-01-29 14:56 - 00000000 ____D C:\FRST
2014-01-29 14:56 - 2014-01-29 14:56 - 02079744 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-01-29 14:47 - 2009-07-14 05:45 - 00023776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-29 14:47 - 2009-07-14 05:45 - 00023776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-29 14:44 - 2009-07-14 18:58 - 02209862 _____ C:\Windows\system32\perfh007.dat
2014-01-29 14:44 - 2009-07-14 18:58 - 00612908 _____ C:\Windows\system32\perfc007.dat
2014-01-29 14:44 - 2009-07-14 06:13 - 00005414 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-29 14:43 - 2011-05-25 03:18 - 01785196 _____ C:\Windows\WindowsUpdate.log
2014-01-29 14:42 - 2014-01-14 15:33 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2014-01-29 14:40 - 2011-06-26 21:08 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-29 14:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-29 14:40 - 2009-07-14 05:51 - 00052903 _____ C:\Windows\setupact.log
2014-01-29 13:20 - 2014-01-29 13:20 - 00000165 ____H C:\Users\User\Desktop\~$portfolio.xlsx
2014-01-29 11:46 - 2013-09-18 11:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Adobe
2014-01-29 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-27 15:51 - 2013-09-18 22:18 - 00000000 ____D C:\Users\User\AppData\Roaming\FileZilla
2014-01-26 22:17 - 2014-01-27 16:42 - 04764373 _____ C:\Users\User\Documents\Interview_2R.wma
2014-01-26 22:05 - 2014-01-27 16:42 - 07323673 _____ C:\Users\User\Documents\Interview_1R.wma
2014-01-26 22:05 - 2014-01-27 16:42 - 07323673 _____ C:\Users\User\Documents\Interview_1.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00427033 _____ C:\Users\User\Documents\Echtzeit.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00278863 _____ C:\Users\User\Documents\Unbenannt (12).wma
2014-01-23 20:01 - 2013-09-26 19:58 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2014-01-23 20:00 - 2014-01-23 20:00 - 00404583 _____ C:\Users\User\Documents\Unbenannt (10).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00081303 _____ C:\Users\User\Documents\Unbenannt (11).wma
2014-01-23 19:59 - 2014-01-23 19:59 - 00229473 _____ C:\Users\User\Documents\Unbenannt (9).wma
2014-01-23 18:11 - 2014-01-23 18:11 - 03992093 _____ C:\Users\User\Documents\Interview_2.wma
2014-01-23 18:04 - 2014-01-23 18:04 - 04095363 _____ C:\Users\User\Documents\Interview.wma
2014-01-23 17:58 - 2014-01-23 17:58 - 04059443 _____ C:\Users\User\Documents\Unbenannt (8).wma
2014-01-23 17:53 - 2014-01-23 17:53 - 00193553 _____ C:\Users\User\Documents\Unbenannt (7).wma
2014-01-23 17:52 - 2014-01-23 17:52 - 00593163 _____ C:\Users\User\Documents\Unbenannt (6).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00485403 _____ C:\Users\User\Documents\Unbenannt (3).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00216003 _____ C:\Users\User\Documents\Unbenannt (4).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00153143 _____ C:\Users\User\Documents\Unbenannt (5).wma
2014-01-23 17:50 - 2014-01-23 17:50 - 00624593 _____ C:\Users\User\Documents\Unbenannt (2).wma
2014-01-23 16:55 - 2014-01-23 16:48 - 00696433 _____ C:\Users\User\Documents\Zusatzseite_1.wma
2014-01-23 16:53 - 2014-01-23 16:53 - 00714393 _____ C:\Users\User\Documents\Zusatzseite_2.wma
2014-01-22 17:28 - 2014-01-22 17:28 - 00024873 _____ C:\Users\User\Desktop\portfolio.xlsx
2014-01-18 13:55 - 2014-01-18 13:52 - 00000000 ____D C:\Users\User\Documents\Neu
2014-01-16 15:15 - 2014-01-16 15:15 - 00665003 _____ C:\Users\User\Documents\MOVE Seite5_2_Hörspielvariante.wma
2014-01-16 15:12 - 2014-01-16 15:12 - 00620103 _____ C:\Users\User\Documents\MOVE Seite5_1.wma
2014-01-16 15:08 - 2014-01-16 15:08 - 00817663 _____ C:\Users\User\Documents\Intro für Dennis-Mausi-Schatzi.wma
2014-01-15 23:58 - 2013-10-07 09:51 - 00000000 ____D C:\Users\User\Desktop\Korrekturen
2014-01-14 15:33 - 2014-01-14 15:33 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ____D C:\ProgramData\Skype
2014-01-14 15:32 - 2014-01-14 15:32 - 35100320 _____ (Skype Technologies S.A.) C:\Users\User\Documents\SkypeSetupFull.exe
2014-01-13 17:54 - 2014-01-13 17:54 - 02586723 _____ C:\Users\User\Documents\Valentina_Sprach_13-Jan-2014.wma
2014-01-11 17:12 - 2014-01-11 17:12 - 00001223 _____ C:\Users\User\Desktop\Sonepar-Ordner.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00001085 _____ C:\Users\User\Desktop\Jodix Free WMA to MP3 Converter.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00000000 ____D C:\Program Files (x86)\Free WMA to MP3 Converter
2014-01-11 17:04 - 2014-01-11 17:04 - 00948090 _____ (Jodix Technologies Ltd. ) C:\Users\User\Desktop\free-wma-mp3-converter.exe
2014-01-11 17:01 - 2014-01-11 17:01 - 00112733 _____ C:\Users\User\Documents\Unbenannt.wma
2014-01-09 14:45 - 2013-09-18 14:17 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2014-01-05 20:54 - 2012-04-22 03:16 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-01 21:51 - 2013-09-26 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-01 17:00 - 2014-01-01 17:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
Files to move or delete:
====================
C:\Users\User\vlc-2.1.0-win32.exe
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\User\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\User\AppData\Local\Temp\sqlite3.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-25 17:26
==================== End Of Log ============================
--- --- --- --- --- --- und hier Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014 01
Ran by User at 2014-01-29 14:58:43
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Anchor Service CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Bridge CS4 (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Creative Suite 2 (x32 Version: - )
Adobe CSI CS4 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Fonts All (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Illustrator CS2 (x32 Version: 12.000.000 - Adobe Systems Inc.) Hidden
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 (x32 Version: 6.0 - Adobe Systems Incorporated)
Adobe InDesign CS4 (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Application Feature Set Files (Roman) (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Common Base Files (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler (x32 Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (x32 Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop 6.0 (x32 Version: 6.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Search for Help (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe SGM CS4 (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe SING CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe SVG Viewer (x32 Version: 1.0 - Adobe Systems, Inc.)
Adobe Type Support CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (x32 Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe Version Cue CS2 (x32 Version: 2.0 - Adobe Systems, Inc.) Hidden
Adobe WinSoft Linguistics Plugin (x32 Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetRGB (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Bluetooth Win7 Suite (64) (Version: 7.2.0.34 - Atheros Communications)
CDBurnerXP (Version: 4.3.8.2568 - CDBurnerXP)
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Free WMA to MP3 Converter 1.16 (x32 Version: - Jodix Technologies Ltd.)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2219 - Intel Corporation)
ITE Infrared Transceiver (x32 Version: 1.00.0000 - ITE)
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Suite Specific (x32 Version: 2.0.0 - Adobe Systems, Incorporated) Hidden
TL-WN721N/TL-WN722N Driver (x32 Version: 1.0.0 - TP-LINK)
TP-LINK Wireless Configuration Utility (x32 Version: 1.0.0 - TP-LINK)
Update for 2007 Microsoft Office System (KB967642) (x32 Version: - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition (x32 Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version: - Microsoft)
VLC media player 2.0.7 (Version: 2.0.7 - VideoLAN)
==================== Restore Points =========================
28-01-2014 18:23:22 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {21B1F005-8405-484C-A734-BAFA294ED322} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-30] ()
Task: {9D759583-D093-4D62-8787-AA5A33B65F8F} - \ASUS\i-Setup042718 No Task File
==================== Loaded Modules (whitelisted) =============
2005-04-06 15:52 - 2005-04-06 15:52 - 00028791 _____ () C:\CS2\Adobe Version Cue CS2\jre\bin\hpi.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 00057453 _____ () C:\CS2\Adobe Version Cue CS2\jre\bin\verify.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 00102515 _____ () C:\CS2\Adobe Version Cue CS2\jre\bin\java.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 00053364 _____ () C:\CS2\Adobe Version Cue CS2\jre\bin\zip.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 00057455 _____ () C:\CS2\Adobe Version Cue CS2\jre\bin\net.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 00032880 _____ () C:\CS2\Adobe Version Cue CS2\jre\bin\nio.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 00434255 _____ () C:\CS2\Adobe Version Cue CS2\bin\ps-rw-vc-v8_58.dll
2005-04-06 15:53 - 2005-04-06 15:53 - 01019904 _____ () C:\CS2\Adobe Version Cue CS2\bin\ps-vc-v8_58.dll
2013-09-08 16:59 - 2011-08-25 13:02 - 01425920 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2013-09-08 16:59 - 2011-03-31 14:36 - 00167424 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2013-09-08 16:59 - 2011-03-31 14:36 - 00128000 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2013-09-08 16:59 - 2011-03-31 14:36 - 00111616 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2014-01-01 17:00 - 2014-01-01 17:00 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/29/2014 02:44:21 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (01/29/2014 02:44:21 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/29/2014 02:44:21 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/29/2014 00:11:40 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (01/29/2014 00:11:40 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/29/2014 00:11:40 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/29/2014 10:51:14 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (01/29/2014 10:51:14 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/29/2014 10:51:14 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/28/2014 06:40:37 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
System errors:
=============
Error: (01/29/2014 02:40:07 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (01/29/2014 02:40:04 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 29.01.2014 um 14:38:16 unerwartet heruntergefahren.
Error: (01/29/2014 02:36:27 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (01/29/2014 02:36:25 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 29.01.2014 um 14:34:29 unerwartet heruntergefahren.
Error: (01/29/2014 10:45:10 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (01/28/2014 08:38:05 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (01/28/2014 06:34:41 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (01/28/2014 06:33:37 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (01/28/2014 06:17:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (01/28/2014 06:15:55 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 20%
Total physical RAM: 7935.3 MB
Available physical RAM: 6332.51 MB
Total Pagefile: 15868.79 MB
Available Pagefile: 14115.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Windows7) (Fixed) (Total:465.66 GB) (Free:410.96 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: DE2F4CF7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Nachtrag: das Problem das ich habe scheint "andere Programme verlieren den Focus" zu heissen..hab mal word und parallel dazu den Task-Manager aufgemacht..dann gewartet bis der Focus beim aktiven word-Fenster flöten gegangen ist und beobachtet was bei Task passiert ist..war nichts weltbewegendes aber ich glaube, dass das mit der TWCU.exe zusammenhängt..da ging der CPU-Wert immer auf 2 und fiel dann wieder ab..ich mach aber nichts sondern halte mich streng an deine Vorgaben..dachte nur ich schildere dir meine Beobachtung Lg whis Focusproblem scheint geklärt, folgendes nach weiterer Suche zu TWCU.exe gefunden Code:
ATTFilter Hallo,
ich hatte das selbe Problem und weis auch woher dieses kommen könnte.
1. Ist an deinem Rechner zufällig ein Gerät von ,,TP-Link" (W-lan Stick, etc.) angeschlossen?
2. Ist in deinen Prozessen ein Programm welches den Namen ,,TWCU.exe" trägt?
Wenn ja dann einfach mal den Prozess ,,TWCU.exe" beenden und ein Programm oder Spiel Starten.
Und wenn du eh schon bei den Prozessen bist, beende auch gleich Updater von Programmen wie DivX etc.!
Bei dem Programm ,,TWCU.exe" Handelt es sich um etwas welches nicht sehr angesehen ist, da es deine Schritte aufzeichnet und versendet.
Ich weis leider noch nicht wie diese/s Datei/Programm komplett zu entfernen ist, aber werde es hier Posten sobald ich mehr darüber weis.
Lg whis |
|
30.01.2014, 16:40
| #4 | |
| /// the machine /// TB-Ausbilder | PC fährt ständig runter Aber das Problem mit dem Runter fahren ist noch da? Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.01.2014, 19:49
| #5 |
| | PC fährt ständig runter Hi Schrauber, habe heute gleich nach PC-hochfahren im Task Manager die TWCU.exe abgewürgt..seitdem kein Focus-Verlust mehr und er ist auch nicht mehr runtergefahren..weiss aber nicht ob das wirklich ursächlich für runterfahren war...wollen wir das System einfach mal säubern und "sicher" machen? soll ich combo starten? Lg whis Nachtrag: Nachdem PC den ganzen Tag einwandfrei lief, fährt er sich seit 18 Uhr wieder ständig runter..insofern ist Problem nach wie vor da..versuche gerade zum 4. Mal ComboFix komplett durchlaufen zu lassen..leider fährt PC ständig runter..beim 2. Mal war Combo bereits beim löschen, aber vor Ende wieder runtergefahren..falls es nicht klappt (ich versuchs weiter) soll ich dann in einen anderen (abgesicherten Modus oder so) Modus gehen..oder gibt es Alternativen? Lg whis Guten Abend Schrauber, 5. Anlauf hat geklappt Code:
ATTFilter ComboFix 14-01-29.01 - User 30.01.2014 19:30:50.4.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.7935.6708 [GMT 1:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Windows7
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atimpc64.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atimuixx.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atio6axx.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiodcli.ex_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiode.ex_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiogl.xml
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atioglxx.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atipdl64.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atipdlxx.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atitmm64.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiumd64.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiumd6a.ca_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiumd6a.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiumdag.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiumdva.ca_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\atiumdva.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\B_83386\oemdspif.dl_
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\C7_83675.cat
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\C7_83675.inf
c:\windows\Windows7\Driver\Packages\Drivers\Display\W76A_INF\C7_83675.msi
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB-SB\LH\atipcie.cat
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB-SB\LH\ATiPCIE.inf
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB-SB\LH\AtiPcie.sys
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB-SB\LH64A\atipcie.cat
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB-SB\LH64A\ATiPCIE.inf
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB-SB\LH64A\AtiPcie.sys
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W7\atipcie.cat
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W7\ATiPCIE.inf
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W7\ATiPCIE.msi
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W7\AtiPcie.sys
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W764A\atipcie.cat
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W764A\ATiPCIE.inf
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W764A\ATiPCIE.msi
c:\windows\Windows7\Driver\Packages\Drivers\SBDrv\Filter\NB\W764A\AtiPcie.sys
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W7\atihdaud.cat
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W7\AtiHDAud.inf
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W7\AtiHDAud.msi
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W7\AtiHdmi.SY_
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W764a\atihdaud.cat
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W764a\AtiHDAud.inf
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W764a\AtiHDAud.msi
c:\windows\Windows7\Driver\Packages\Drivers\WDM\HDMI\W764a\AtiHdmi.SY_
c:\windows\Windows7\Driver\SChinese.ini
c:\windows\Windows7\Driver\Setup.exe
c:\windows\Windows7\Driver\Setup.exe.manifest
c:\windows\Windows7\Driver\TChinese.ini
c:\windows\Windows7\wait\AsusSetup.exe
c:\windows\Windows7\wait\AsusSetup.ini
c:\windows\Windows7\wait\sleep.exe
c:\windows\Windows7\wait\wait.bat
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-12-28 bis 2014-01-30 ))))))))))))))))))))))))))))))
.
.
2014-01-30 18:41 . 2014-01-30 18:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-29 13:56 . 2014-01-29 13:59 -------- d-----w- C:\FRST
2014-01-29 10:46 . 2014-01-30 18:36 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BE7A6A26-7034-47CF-A614-7214320B49B6}\offreg.dll
2014-01-14 14:33 . 2014-01-29 18:34 -------- d-----w- c:\users\User\AppData\Roaming\Skype
2014-01-14 14:33 . 2014-01-14 14:33 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-01-14 14:33 . 2014-01-14 14:33 -------- d-----r- c:\program files (x86)\Skype
2014-01-14 14:33 . 2014-01-14 14:33 -------- d-----w- c:\programdata\Skype
2014-01-11 16:05 . 2014-01-11 16:05 -------- d-----w- c:\program files (x86)\Free WMA to MP3 Converter
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-27 11:45 . 2013-09-25 15:41 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-27 11:45 . 2013-09-25 15:41 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-11-18 00:28 . 2013-11-20 22:48 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BE7A6A26-7034-47CF-A614-7214320B49B6}\mpengine.dll
2013-11-07 15:00 . 2013-07-14 15:33 82896128 ----a-w- c:\windows\system32\MRT.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe Version Cue CS2"="c:\cs2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-04-06 856064]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
TP-LINK Wireless Configuration Utility.lnk - c:\program files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe -nogui [2013-9-8 788992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
R3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys;c:\windows\SYSNATIVE\Drivers\AthDfu.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-09-27 613024]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-09-27 379040]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-10-07 166936]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-10-07 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-10-07 416792]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.startfenster.de
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
AddRemove-Adobe Photoshop 6.0 - c:\windows\ISUN0407.EXE
AddRemove-Adobe SVG Viewer - c:\windows\IsUn0407.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-01-30 19:47:22
ComboFix-quarantined-files.txt 2014-01-30 18:47
.
Vor Suchlauf: 11 Verzeichnis(se), 442.518.933.504 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 442.006.237.184 Bytes frei
.
- - End Of File - - D32D96B50FFDD4796562CF46C46380D6
A36C5E4F47E84449FF07ED3517B43A31
Geändert von whismerhill (30.01.2014 um 16:46 Uhr) Grund: TWCU nicht TXCU |
|
31.01.2014, 12:34
| #6 |
| /// the machine /// TB-Ausbilder | PC fährt ständig runter Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> PC fährt ständig runter |
|
31.01.2014, 22:10
| #7 |
| | PC fährt ständig runter Hi Schrauber, und los geht's Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.31.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 8.0.7601.17514 User :: USER-PC [Administrator] 31.01.2014 15:33:42 mbam-log-2014-01-31 (15-33-42).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 211466 Laufzeit: 6 Minute(n), 38 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 31/01/2014 um 16:21:05
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\Desktop\AdwCleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Datei Gelöscht : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
***** [ Browser ] *****
-\\ Internet Explorer v8.0.7601.17514
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [1324 octets] - [31/01/2014 16:15:14]
AdwCleaner[S0].txt - [1227 octets] - [31/01/2014 16:21:05]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1287 octets] ##########
Junkware JTR hat nicht funktioniert, da mir der PC ständig dabei abschmiert (hab's 5 mal versucht)..meistens schafft es das Programm nur bis zu "Checking Registry"..einmal kurz drüber hinaus bis zu "Checking IE" dann auch gleich wieder runtergefahren... hier trotzdem der FRST FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by User (administrator) on USER-PC on 31-01-2014 17:39:05
Running from C:\Users\User\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Windows\DAODx.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Adobe Sytems Incorporated) C:\CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
() C:\CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613024 2010-09-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-09-27] (Atheros Commnucations)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Version Cue CS2] - C:\CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-18] (Adobe Systems)
R2 Adobe Version Cue CS2; C:\CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)
==================== Drivers (Whitelisted) ====================
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-31 16:28 - 2014-01-31 16:28 - 01037068 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-01-31 16:28 - 2014-01-31 16:28 - 00000000 ____D C:\Windows\ERUNT
2014-01-31 16:13 - 2014-01-31 16:21 - 00000000 ____D C:\AdwCleaner
2014-01-31 16:13 - 2014-01-31 16:13 - 01166132 _____ C:\Users\User\Desktop\AdwCleaner.exe
2014-01-31 15:31 - 2014-01-31 15:31 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 15:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-31 15:30 - 2014-01-31 15:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\User\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-30 19:47 - 2014-01-30 19:47 - 00011342 _____ C:\ComboFix.txt
2014-01-30 18:52 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-30 18:52 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-30 18:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-30 18:51 - 2014-01-30 19:47 - 00000000 ____D C:\Qoobox
2014-01-30 18:51 - 2014-01-30 19:43 - 00000000 ____D C:\Windows\erdnt
2014-01-30 18:50 - 2014-01-30 18:50 - 05177551 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-01-29 16:27 - 2014-01-29 16:27 - 00007217 _____ C:\Users\User\Desktop\Fehlerdiagnose.txt
2014-01-29 14:58 - 2014-01-29 14:59 - 00019224 _____ C:\Users\User\Desktop\Addition.txt
2014-01-29 14:57 - 2014-01-31 17:39 - 00005857 _____ C:\Users\User\Desktop\FRST.txt
2014-01-29 14:56 - 2014-01-31 17:39 - 00000000 ____D C:\FRST
2014-01-29 14:56 - 2014-01-29 14:56 - 02079744 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-01-29 13:20 - 2014-01-29 13:20 - 00000165 ____H C:\Users\User\Desktop\~$portfolio.xlsx
2014-01-27 16:42 - 2014-01-26 22:17 - 04764373 _____ C:\Users\User\Documents\Interview_2R.wma
2014-01-27 16:42 - 2014-01-26 22:05 - 07323673 _____ C:\Users\User\Documents\Interview_1R.wma
2014-01-27 16:42 - 2014-01-26 22:05 - 07323673 _____ C:\Users\User\Documents\Interview_1.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00427033 _____ C:\Users\User\Documents\Echtzeit.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00278863 _____ C:\Users\User\Documents\Unbenannt (12).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00404583 _____ C:\Users\User\Documents\Unbenannt (10).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00081303 _____ C:\Users\User\Documents\Unbenannt (11).wma
2014-01-23 19:59 - 2014-01-23 19:59 - 00229473 _____ C:\Users\User\Documents\Unbenannt (9).wma
2014-01-23 18:11 - 2014-01-23 18:11 - 03992093 _____ C:\Users\User\Documents\Interview_2.wma
2014-01-23 18:04 - 2014-01-23 18:04 - 04095363 _____ C:\Users\User\Documents\Interview.wma
2014-01-23 17:58 - 2014-01-23 17:58 - 04059443 _____ C:\Users\User\Documents\Unbenannt (8).wma
2014-01-23 17:53 - 2014-01-23 17:53 - 00193553 _____ C:\Users\User\Documents\Unbenannt (7).wma
2014-01-23 17:52 - 2014-01-23 17:52 - 00593163 _____ C:\Users\User\Documents\Unbenannt (6).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00485403 _____ C:\Users\User\Documents\Unbenannt (3).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00216003 _____ C:\Users\User\Documents\Unbenannt (4).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00153143 _____ C:\Users\User\Documents\Unbenannt (5).wma
2014-01-23 17:50 - 2014-01-23 17:50 - 00624593 _____ C:\Users\User\Documents\Unbenannt (2).wma
2014-01-23 16:53 - 2014-01-23 16:53 - 00714393 _____ C:\Users\User\Documents\Zusatzseite_2.wma
2014-01-23 16:48 - 2014-01-23 16:55 - 00696433 _____ C:\Users\User\Documents\Zusatzseite_1.wma
2014-01-22 17:28 - 2014-01-22 17:28 - 00024873 _____ C:\Users\User\Desktop\portfolio.xlsx
2014-01-18 13:52 - 2014-01-18 13:55 - 00000000 ____D C:\Users\User\Documents\Neu
2014-01-16 15:15 - 2014-01-16 15:15 - 00665003 _____ C:\Users\User\Documents\MOVE Seite5_2_Hörspielvariante.wma
2014-01-16 15:12 - 2014-01-16 15:12 - 00620103 _____ C:\Users\User\Documents\MOVE Seite5_1.wma
2014-01-16 15:08 - 2014-01-16 15:08 - 00817663 _____ C:\Users\User\Documents\Intro für Dennis-Mausi-Schatzi.wma
2014-01-14 15:33 - 2014-01-29 19:34 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ____D C:\ProgramData\Skype
2014-01-14 15:32 - 2014-01-14 15:32 - 35100320 _____ (Skype Technologies S.A.) C:\Users\User\Documents\SkypeSetupFull.exe
2014-01-13 17:54 - 2014-01-13 17:54 - 02586723 _____ C:\Users\User\Documents\Valentina_Sprach_13-Jan-2014.wma
2014-01-11 17:12 - 2014-01-11 17:12 - 00001223 _____ C:\Users\User\Desktop\Sonepar-Ordner.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00001085 _____ C:\Users\User\Desktop\Jodix Free WMA to MP3 Converter.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00000000 ____D C:\Program Files (x86)\Free WMA to MP3 Converter
2014-01-11 17:04 - 2014-01-11 17:04 - 00948090 _____ (Jodix Technologies Ltd. ) C:\Users\User\Desktop\free-wma-mp3-converter.exe
2014-01-11 17:01 - 2014-01-11 17:01 - 00112733 _____ C:\Users\User\Documents\Unbenannt.wma
2014-01-01 17:00 - 2014-01-01 17:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2014-01-31 17:39 - 2014-01-29 14:57 - 00005857 _____ C:\Users\User\Desktop\FRST.txt
2014-01-31 17:39 - 2014-01-29 14:56 - 00000000 ____D C:\FRST
2014-01-31 17:37 - 2011-06-26 21:08 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-01-31 17:37 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-31 17:37 - 2009-07-14 05:51 - 00054023 _____ C:\Windows\setupact.log
2014-01-31 17:29 - 2009-07-14 05:45 - 00023776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-31 17:29 - 2009-07-14 05:45 - 00023776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-31 17:26 - 2009-07-14 18:58 - 02431540 _____ C:\Windows\system32\perfh007.dat
2014-01-31 17:26 - 2009-07-14 18:58 - 00681726 _____ C:\Windows\system32\perfc007.dat
2014-01-31 17:26 - 2009-07-14 06:13 - 00005602 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-31 17:25 - 2011-05-25 03:18 - 01832407 _____ C:\Windows\WindowsUpdate.log
2014-01-31 16:28 - 2014-01-31 16:28 - 01037068 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-01-31 16:28 - 2014-01-31 16:28 - 00000000 ____D C:\Windows\ERUNT
2014-01-31 16:21 - 2014-01-31 16:13 - 00000000 ____D C:\AdwCleaner
2014-01-31 16:13 - 2014-01-31 16:13 - 01166132 _____ C:\Users\User\Desktop\AdwCleaner.exe
2014-01-31 15:31 - 2014-01-31 15:31 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 15:30 - 2014-01-31 15:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\User\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-31 11:18 - 2013-07-15 11:52 - 00015106 _____ C:\Windows\PFRO.log
2014-01-30 22:05 - 2013-04-02 09:12 - 00005604 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-30 19:47 - 2014-01-30 19:47 - 00011342 _____ C:\ComboFix.txt
2014-01-30 19:47 - 2014-01-30 18:51 - 00000000 ____D C:\Qoobox
2014-01-30 19:47 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-30 19:43 - 2014-01-30 18:51 - 00000000 ____D C:\Windows\erdnt
2014-01-30 19:41 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-30 18:50 - 2014-01-30 18:50 - 05177551 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-01-29 19:34 - 2014-01-14 15:33 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2014-01-29 19:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-29 16:27 - 2014-01-29 16:27 - 00007217 _____ C:\Users\User\Desktop\Fehlerdiagnose.txt
2014-01-29 14:59 - 2014-01-29 14:58 - 00019224 _____ C:\Users\User\Desktop\Addition.txt
2014-01-29 14:56 - 2014-01-29 14:56 - 02079744 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-01-29 13:20 - 2014-01-29 13:20 - 00000165 ____H C:\Users\User\Desktop\~$portfolio.xlsx
2014-01-29 11:46 - 2013-09-18 11:52 - 00000000 ____D C:\Users\User\AppData\Roaming\Adobe
2014-01-27 15:51 - 2013-09-18 22:18 - 00000000 ____D C:\Users\User\AppData\Roaming\FileZilla
2014-01-26 22:17 - 2014-01-27 16:42 - 04764373 _____ C:\Users\User\Documents\Interview_2R.wma
2014-01-26 22:05 - 2014-01-27 16:42 - 07323673 _____ C:\Users\User\Documents\Interview_1R.wma
2014-01-26 22:05 - 2014-01-27 16:42 - 07323673 _____ C:\Users\User\Documents\Interview_1.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00427033 _____ C:\Users\User\Documents\Echtzeit.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00278863 _____ C:\Users\User\Documents\Unbenannt (12).wma
2014-01-23 20:01 - 2013-09-26 19:58 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2014-01-23 20:00 - 2014-01-23 20:00 - 00404583 _____ C:\Users\User\Documents\Unbenannt (10).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00081303 _____ C:\Users\User\Documents\Unbenannt (11).wma
2014-01-23 19:59 - 2014-01-23 19:59 - 00229473 _____ C:\Users\User\Documents\Unbenannt (9).wma
2014-01-23 18:11 - 2014-01-23 18:11 - 03992093 _____ C:\Users\User\Documents\Interview_2.wma
2014-01-23 18:04 - 2014-01-23 18:04 - 04095363 _____ C:\Users\User\Documents\Interview.wma
2014-01-23 17:58 - 2014-01-23 17:58 - 04059443 _____ C:\Users\User\Documents\Unbenannt (8).wma
2014-01-23 17:53 - 2014-01-23 17:53 - 00193553 _____ C:\Users\User\Documents\Unbenannt (7).wma
2014-01-23 17:52 - 2014-01-23 17:52 - 00593163 _____ C:\Users\User\Documents\Unbenannt (6).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00485403 _____ C:\Users\User\Documents\Unbenannt (3).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00216003 _____ C:\Users\User\Documents\Unbenannt (4).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00153143 _____ C:\Users\User\Documents\Unbenannt (5).wma
2014-01-23 17:50 - 2014-01-23 17:50 - 00624593 _____ C:\Users\User\Documents\Unbenannt (2).wma
2014-01-23 16:55 - 2014-01-23 16:48 - 00696433 _____ C:\Users\User\Documents\Zusatzseite_1.wma
2014-01-23 16:53 - 2014-01-23 16:53 - 00714393 _____ C:\Users\User\Documents\Zusatzseite_2.wma
2014-01-22 17:28 - 2014-01-22 17:28 - 00024873 _____ C:\Users\User\Desktop\portfolio.xlsx
2014-01-18 13:55 - 2014-01-18 13:52 - 00000000 ____D C:\Users\User\Documents\Neu
2014-01-16 15:15 - 2014-01-16 15:15 - 00665003 _____ C:\Users\User\Documents\MOVE Seite5_2_Hörspielvariante.wma
2014-01-16 15:12 - 2014-01-16 15:12 - 00620103 _____ C:\Users\User\Documents\MOVE Seite5_1.wma
2014-01-16 15:08 - 2014-01-16 15:08 - 00817663 _____ C:\Users\User\Documents\Intro für Dennis-Mausi-Schatzi.wma
2014-01-15 23:58 - 2013-10-07 09:51 - 00000000 ____D C:\Users\User\Desktop\Korrekturen
2014-01-14 15:33 - 2014-01-14 15:33 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ____D C:\ProgramData\Skype
2014-01-14 15:32 - 2014-01-14 15:32 - 35100320 _____ (Skype Technologies S.A.) C:\Users\User\Documents\SkypeSetupFull.exe
2014-01-13 17:54 - 2014-01-13 17:54 - 02586723 _____ C:\Users\User\Documents\Valentina_Sprach_13-Jan-2014.wma
2014-01-11 17:12 - 2014-01-11 17:12 - 00001223 _____ C:\Users\User\Desktop\Sonepar-Ordner.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00001085 _____ C:\Users\User\Desktop\Jodix Free WMA to MP3 Converter.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00000000 ____D C:\Program Files (x86)\Free WMA to MP3 Converter
2014-01-11 17:04 - 2014-01-11 17:04 - 00948090 _____ (Jodix Technologies Ltd. ) C:\Users\User\Desktop\free-wma-mp3-converter.exe
2014-01-11 17:01 - 2014-01-11 17:01 - 00112733 _____ C:\Users\User\Documents\Unbenannt.wma
2014-01-09 14:45 - 2013-09-18 14:17 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2014-01-05 20:54 - 2012-04-22 03:16 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-01 21:51 - 2013-09-26 19:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-01 17:00 - 2014-01-01 17:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-30 20:21
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- vielleicht ist das ja mal ne nette Herausforderung und nicht das Gewöhnliche?  Lg whis nach weiteren 15-20 Versuchen das JRT endlich durchlaufen zu lassen (PC stürzte immer gegen Ende ab), hab ich das ganze mal im abgesicherten modus versucht (  hoffe das war ok?)..hat zumindest geklappt, weiss aber nicht ob das zusätzliche Infos bringt.. Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Professional x64
Ran by User on 31.01.2014 at 21:54:15,71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\h1meakga.default\minidumps [16 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 31.01.2014 at 22:01:06,99
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 ansonsten Schrauber, natürlich nur streng nach Anweisung Lg whis Geändert von whismerhill (31.01.2014 um 17:45 Uhr) Grund: geklärt |
|
01.02.2014, 17:30
| #8 |
| /// the machine /// TB-Ausbilder | PC fährt ständig runter JRT schent irgend ein Problem zu haben. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
01.02.2014, 22:43
| #9 |
| | PC fährt ständig runter Hi Schrauber, hab heute vormittag noch -zig Male JTR laufen lassen und irgendwann ist er endlich mal bis zum Ende durchgelaufen.. Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Professional x64
Ran by User on 01.02.2014 at 13:32:15,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\h1meakga.default\minidumps [1 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.02.2014 at 13:47:23,51
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(interessantes Ding..zeigt nach 40 Minuten 99% progress an un das letzte % dauert dann sage und schreibe ne komplette Stunde  )Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f37721bbd6e061479c2e0c3c2de55bca
# engine=16904
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-01 09:38:38
# local_time=2014-02-01 10:38:38 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 81511 142920568 0 0
# scanned=139251
# found=0
# cleaned=0
# scan_time=6057
Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED!
hier noch FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by User (administrator) on USER-PC on 01-02-2014 22:49:13
Running from C:\Users\User\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
() C:\Windows\DAODx.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Adobe Sytems Incorporated) C:\CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
() C:\CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613024 2010-09-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-09-27] (Atheros Commnucations)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Version Cue CS2] - C:\CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {7425665A-7B05-4C25-8ECA-EAA4ED4E1CE8} URL = hxxp://www.sm.de/?q={searchTerms}
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\h1meakga.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-18] (Adobe Systems)
R2 Adobe Version Cue CS2; C:\CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)
==================== Drivers (Whitelisted) ====================
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
S1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-01 22:49 - 2014-02-01 22:49 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-02-01 22:46 - 2014-02-01 22:46 - 00987425 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-02-01 20:54 - 2014-02-01 20:54 - 02347384 _____ (ESET) C:\Users\User\Desktop\esetsmartinstaller_enu.exe
2014-02-01 13:47 - 2014-02-01 13:47 - 00000754 _____ () C:\Users\User\Desktop\JRT.txt
2014-02-01 00:44 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-01 00:44 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-01 00:44 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-02-01 00:44 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-02-01 00:32 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-01 00:32 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-01 00:32 - 2013-11-02 03:26 - 09073152 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 00:32 - 2013-11-02 03:25 - 12295168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 00:32 - 2013-11-02 03:25 - 02458112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 00:32 - 2013-11-02 03:04 - 06039552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 00:32 - 2013-11-02 03:03 - 02078208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 00:32 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-01 00:32 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-02-01 00:31 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-01 00:31 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-01 00:31 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-01 00:31 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-01 00:31 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-02-01 00:31 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-02-01 00:31 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-01 00:31 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-01 00:31 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-02-01 00:31 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-01 00:31 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-01 00:31 - 2013-11-02 03:28 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 00:31 - 2013-11-02 03:28 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 00:31 - 2013-11-02 03:28 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-01 00:31 - 2013-11-02 03:26 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 00:31 - 2013-11-02 03:26 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-01 00:31 - 2013-11-02 03:25 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-01 00:31 - 2013-11-02 03:25 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 00:31 - 2013-11-02 03:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 00:31 - 2013-11-02 03:07 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 00:31 - 2013-11-02 03:07 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-01 00:31 - 2013-11-02 03:04 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 00:31 - 2013-11-02 03:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-01 00:31 - 2013-11-02 03:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 00:31 - 2013-11-02 03:03 - 11020800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 00:31 - 2013-11-02 03:03 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-01 00:31 - 2013-11-02 02:30 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 00:31 - 2013-11-02 02:13 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 00:31 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-01 00:31 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-01 00:31 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-01 00:31 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-01 00:30 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-01 00:30 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-01 00:30 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-02-01 00:30 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-02-01 00:30 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-01 00:30 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-01 00:30 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-02-01 00:30 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-31 16:28 - 2014-01-31 16:28 - 01037068 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-01-31 16:28 - 2014-01-31 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-01-31 16:13 - 2014-01-31 16:21 - 00000000 ____D () C:\AdwCleaner
2014-01-31 16:13 - 2014-01-31 16:13 - 01166132 _____ () C:\Users\User\Desktop\AdwCleaner.exe
2014-01-31 15:31 - 2014-01-31 15:31 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 15:31 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-31 15:30 - 2014-01-31 15:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\User\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-30 19:47 - 2014-01-30 19:47 - 00011342 _____ () C:\ComboFix.txt
2014-01-30 18:52 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-01-30 18:52 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-01-30 18:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-01-30 18:52 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-01-30 18:51 - 2014-01-30 19:47 - 00000000 ____D () C:\Qoobox
2014-01-30 18:51 - 2014-01-30 19:43 - 00000000 ____D () C:\Windows\erdnt
2014-01-30 18:50 - 2014-01-30 18:50 - 05177551 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-01-29 16:27 - 2014-01-29 16:27 - 00007217 _____ () C:\Users\User\Desktop\Fehlerdiagnose.txt
2014-01-29 14:58 - 2014-01-29 14:59 - 00019224 _____ () C:\Users\User\Desktop\Addition.txt
2014-01-29 14:57 - 2014-02-01 22:49 - 00005882 _____ () C:\Users\User\Desktop\FRST.txt
2014-01-29 14:56 - 2014-02-01 22:49 - 02080256 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-01-29 14:56 - 2014-02-01 22:49 - 00000000 ____D () C:\FRST
2014-01-29 13:20 - 2014-01-29 13:20 - 00000165 ____H () C:\Users\User\Desktop\~$portfolio.xlsx
2014-01-27 16:42 - 2014-01-26 22:17 - 04764373 _____ () C:\Users\User\Documents\Interview_2R.wma
2014-01-27 16:42 - 2014-01-26 22:05 - 07323673 _____ () C:\Users\User\Documents\Interview_1R.wma
2014-01-27 16:42 - 2014-01-26 22:05 - 07323673 _____ () C:\Users\User\Documents\Interview_1.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00427033 _____ () C:\Users\User\Documents\Echtzeit.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00278863 _____ () C:\Users\User\Documents\Unbenannt (12).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00404583 _____ () C:\Users\User\Documents\Unbenannt (10).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00081303 _____ () C:\Users\User\Documents\Unbenannt (11).wma
2014-01-23 19:59 - 2014-01-23 19:59 - 00229473 _____ () C:\Users\User\Documents\Unbenannt (9).wma
2014-01-23 18:11 - 2014-01-23 18:11 - 03992093 _____ () C:\Users\User\Documents\Interview_2.wma
2014-01-23 18:04 - 2014-01-23 18:04 - 04095363 _____ () C:\Users\User\Documents\Interview.wma
2014-01-23 17:58 - 2014-01-23 17:58 - 04059443 _____ () C:\Users\User\Documents\Unbenannt (8).wma
2014-01-23 17:53 - 2014-01-23 17:53 - 00193553 _____ () C:\Users\User\Documents\Unbenannt (7).wma
2014-01-23 17:52 - 2014-01-23 17:52 - 00593163 _____ () C:\Users\User\Documents\Unbenannt (6).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00485403 _____ () C:\Users\User\Documents\Unbenannt (3).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00216003 _____ () C:\Users\User\Documents\Unbenannt (4).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00153143 _____ () C:\Users\User\Documents\Unbenannt (5).wma
2014-01-23 17:50 - 2014-01-23 17:50 - 00624593 _____ () C:\Users\User\Documents\Unbenannt (2).wma
2014-01-23 16:53 - 2014-01-23 16:53 - 00714393 _____ () C:\Users\User\Documents\Zusatzseite_2.wma
2014-01-23 16:48 - 2014-01-23 16:55 - 00696433 _____ () C:\Users\User\Documents\Zusatzseite_1.wma
2014-01-22 17:28 - 2014-01-22 17:28 - 00024873 _____ () C:\Users\User\Desktop\portfolio.xlsx
2014-01-18 13:52 - 2014-01-18 13:55 - 00000000 ____D () C:\Users\User\Documents\Neu
2014-01-16 15:15 - 2014-01-16 15:15 - 00665003 _____ () C:\Users\User\Documents\MOVE Seite5_2_Hörspielvariante.wma
2014-01-16 15:12 - 2014-01-16 15:12 - 00620103 _____ () C:\Users\User\Documents\MOVE Seite5_1.wma
2014-01-16 15:08 - 2014-01-16 15:08 - 00817663 _____ () C:\Users\User\Documents\Intro für Dennis-Mausi-Schatzi.wma
2014-01-14 15:33 - 2014-01-29 19:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ____D () C:\ProgramData\Skype
2014-01-14 15:32 - 2014-01-14 15:32 - 35100320 _____ (Skype Technologies S.A.) C:\Users\User\Documents\SkypeSetupFull.exe
2014-01-13 17:54 - 2014-01-13 17:54 - 02586723 _____ () C:\Users\User\Documents\Valentina_Sprach_13-Jan-2014.wma
2014-01-11 17:12 - 2014-01-11 17:12 - 00001223 _____ () C:\Users\User\Desktop\Sonepar-Ordner.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00001085 _____ () C:\Users\User\Desktop\Jodix Free WMA to MP3 Converter.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00000000 ____D () C:\Program Files (x86)\Free WMA to MP3 Converter
2014-01-11 17:04 - 2014-01-11 17:04 - 00948090 _____ (Jodix Technologies Ltd. ) C:\Users\User\Desktop\free-wma-mp3-converter.exe
2014-01-11 17:01 - 2014-01-11 17:01 - 00112733 _____ () C:\Users\User\Documents\Unbenannt.wma
==================== One Month Modified Files and Folders =======
2014-02-01 22:49 - 2014-02-01 22:49 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-02-01 22:49 - 2014-01-29 14:57 - 00005882 _____ () C:\Users\User\Desktop\FRST.txt
2014-02-01 22:49 - 2014-01-29 14:56 - 02080256 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-02-01 22:49 - 2014-01-29 14:56 - 00000000 ____D () C:\FRST
2014-02-01 22:46 - 2014-02-01 22:46 - 00987425 _____ () C:\Users\User\Desktop\SecurityCheck.exe
2014-02-01 22:17 - 2011-06-26 21:08 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2014-02-01 22:17 - 2009-07-14 05:51 - 00055031 _____ () C:\Windows\setupact.log
2014-02-01 20:54 - 2014-02-01 20:54 - 02347384 _____ (ESET) C:\Users\User\Desktop\esetsmartinstaller_enu.exe
2014-02-01 20:52 - 2013-09-18 22:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\FileZilla
2014-02-01 20:52 - 2011-05-25 03:18 - 02048429 _____ () C:\Windows\WindowsUpdate.log
2014-02-01 18:34 - 2013-10-07 09:51 - 00000000 ____D () C:\Users\User\Desktop\Korrekturen
2014-02-01 14:47 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-01 13:47 - 2014-02-01 13:47 - 00000754 _____ () C:\Users\User\Desktop\JRT.txt
2014-02-01 13:38 - 2009-07-14 05:45 - 00023776 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-01 13:38 - 2009-07-14 05:45 - 00023776 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-01 13:35 - 2009-07-14 18:58 - 02664212 _____ () C:\Windows\system32\perfh007.dat
2014-02-01 13:35 - 2009-07-14 18:58 - 00754014 _____ () C:\Windows\system32\perfc007.dat
2014-02-01 13:35 - 2009-07-14 06:13 - 00005602 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-01 13:31 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-01 00:50 - 2009-07-14 05:45 - 03519408 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-01 00:44 - 2013-09-08 16:46 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-01 00:33 - 2013-07-15 12:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-31 16:28 - 2014-01-31 16:28 - 01037068 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-01-31 16:28 - 2014-01-31 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-01-31 16:21 - 2014-01-31 16:13 - 00000000 ____D () C:\AdwCleaner
2014-01-31 16:13 - 2014-01-31 16:13 - 01166132 _____ () C:\Users\User\Desktop\AdwCleaner.exe
2014-01-31 15:31 - 2014-01-31 15:31 - 00001121 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-31 15:31 - 2014-01-31 15:31 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-31 15:30 - 2014-01-31 15:30 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\User\Desktop\mbam-setup-1.75.0.1300.exe
2014-01-31 11:18 - 2013-07-15 11:52 - 00015106 _____ () C:\Windows\PFRO.log
2014-01-30 22:05 - 2013-04-02 09:12 - 00005604 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-30 19:47 - 2014-01-30 19:47 - 00011342 _____ () C:\ComboFix.txt
2014-01-30 19:47 - 2014-01-30 18:51 - 00000000 ____D () C:\Qoobox
2014-01-30 19:47 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-01-30 19:43 - 2014-01-30 18:51 - 00000000 ____D () C:\Windows\erdnt
2014-01-30 19:41 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-01-30 18:50 - 2014-01-30 18:50 - 05177551 ____R (Swearware) C:\Users\User\Desktop\ComboFix.exe
2014-01-29 19:34 - 2014-01-14 15:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-01-29 19:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-29 16:27 - 2014-01-29 16:27 - 00007217 _____ () C:\Users\User\Desktop\Fehlerdiagnose.txt
2014-01-29 14:59 - 2014-01-29 14:58 - 00019224 _____ () C:\Users\User\Desktop\Addition.txt
2014-01-29 13:20 - 2014-01-29 13:20 - 00000165 ____H () C:\Users\User\Desktop\~$portfolio.xlsx
2014-01-29 11:46 - 2013-09-18 11:52 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2014-01-26 22:17 - 2014-01-27 16:42 - 04764373 _____ () C:\Users\User\Documents\Interview_2R.wma
2014-01-26 22:05 - 2014-01-27 16:42 - 07323673 _____ () C:\Users\User\Documents\Interview_1R.wma
2014-01-26 22:05 - 2014-01-27 16:42 - 07323673 _____ () C:\Users\User\Documents\Interview_1.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00427033 _____ () C:\Users\User\Documents\Echtzeit.wma
2014-01-23 20:02 - 2014-01-23 20:02 - 00278863 _____ () C:\Users\User\Documents\Unbenannt (12).wma
2014-01-23 20:01 - 2013-09-26 19:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-01-23 20:00 - 2014-01-23 20:00 - 00404583 _____ () C:\Users\User\Documents\Unbenannt (10).wma
2014-01-23 20:00 - 2014-01-23 20:00 - 00081303 _____ () C:\Users\User\Documents\Unbenannt (11).wma
2014-01-23 19:59 - 2014-01-23 19:59 - 00229473 _____ () C:\Users\User\Documents\Unbenannt (9).wma
2014-01-23 18:11 - 2014-01-23 18:11 - 03992093 _____ () C:\Users\User\Documents\Interview_2.wma
2014-01-23 18:04 - 2014-01-23 18:04 - 04095363 _____ () C:\Users\User\Documents\Interview.wma
2014-01-23 17:58 - 2014-01-23 17:58 - 04059443 _____ () C:\Users\User\Documents\Unbenannt (8).wma
2014-01-23 17:53 - 2014-01-23 17:53 - 00193553 _____ () C:\Users\User\Documents\Unbenannt (7).wma
2014-01-23 17:52 - 2014-01-23 17:52 - 00593163 _____ () C:\Users\User\Documents\Unbenannt (6).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00485403 _____ () C:\Users\User\Documents\Unbenannt (3).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00216003 _____ () C:\Users\User\Documents\Unbenannt (4).wma
2014-01-23 17:51 - 2014-01-23 17:51 - 00153143 _____ () C:\Users\User\Documents\Unbenannt (5).wma
2014-01-23 17:50 - 2014-01-23 17:50 - 00624593 _____ () C:\Users\User\Documents\Unbenannt (2).wma
2014-01-23 16:55 - 2014-01-23 16:48 - 00696433 _____ () C:\Users\User\Documents\Zusatzseite_1.wma
2014-01-23 16:53 - 2014-01-23 16:53 - 00714393 _____ () C:\Users\User\Documents\Zusatzseite_2.wma
2014-01-22 17:28 - 2014-01-22 17:28 - 00024873 _____ () C:\Users\User\Desktop\portfolio.xlsx
2014-01-18 13:55 - 2014-01-18 13:52 - 00000000 ____D () C:\Users\User\Documents\Neu
2014-01-16 15:15 - 2014-01-16 15:15 - 00665003 _____ () C:\Users\User\Documents\MOVE Seite5_2_Hörspielvariante.wma
2014-01-16 15:12 - 2014-01-16 15:12 - 00620103 _____ () C:\Users\User\Documents\MOVE Seite5_1.wma
2014-01-16 15:08 - 2014-01-16 15:08 - 00817663 _____ () C:\Users\User\Documents\Intro für Dennis-Mausi-Schatzi.wma
2014-01-16 09:59 - 2013-09-08 17:08 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-14 15:33 - 2014-01-14 15:33 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-14 15:33 - 2014-01-14 15:33 - 00000000 ____D () C:\ProgramData\Skype
2014-01-14 15:32 - 2014-01-14 15:32 - 35100320 _____ (Skype Technologies S.A.) C:\Users\User\Documents\SkypeSetupFull.exe
2014-01-13 17:54 - 2014-01-13 17:54 - 02586723 _____ () C:\Users\User\Documents\Valentina_Sprach_13-Jan-2014.wma
2014-01-11 17:12 - 2014-01-11 17:12 - 00001223 _____ () C:\Users\User\Desktop\Sonepar-Ordner.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00001085 _____ () C:\Users\User\Desktop\Jodix Free WMA to MP3 Converter.lnk
2014-01-11 17:05 - 2014-01-11 17:05 - 00000000 ____D () C:\Program Files (x86)\Free WMA to MP3 Converter
2014-01-11 17:04 - 2014-01-11 17:04 - 00948090 _____ (Jodix Technologies Ltd. ) C:\Users\User\Desktop\free-wma-mp3-converter.exe
2014-01-11 17:01 - 2014-01-11 17:01 - 00112733 _____ () C:\Users\User\Documents\Unbenannt.wma
2014-01-09 14:45 - 2013-09-18 14:17 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-01-06 16:20 - 2013-07-14 16:33 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-05 20:54 - 2012-04-22 03:16 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-30 20:21
==================== End Of Log ============================
--- --- --- Problem war heute noch da..mehrmals runtergefahren, kann aber nat. auch an JRT liegen (hab sonst heute kaum was anderes gemacht :-) Lg whis Geändert von whismerhill (01.02.2014 um 22:57 Uhr) Grund: Ergänzung |
|
02.02.2014, 07:38
| #10 |
| /// the machine /// TB-Ausbilder | PC fährt ständig runter Sieht gut aus, teste mal weiter
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.02.2014, 14:16
| #11 |
| | PC fährt ständig runter Schönen Sonntag Schrauber, werd ich wohl erst nach ein paar Tagen wissen, ob System stabil oder wieder abstürzt..da Du allerdings nichts gefunden hast und soweit alles OK zu sein scheint, dürfte es dann wohl an was anderes liegen..insofern sollten wir vielleicht aufräumen und "versiegeln", was meinst?.. Liebe Grüße whis |
|
03.02.2014, 13:18
| #12 |
| /// the machine /// TB-Ausbilder | PC fährt ständig runter Können wir machen. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.02.2014, 15:40
| #13 |
| | PC fährt ständig runter Lieber Schrauber, vielen, vielen Dank für deine ganzen Anleitungen und bis dato ist System auch nicht mehr abgeschmiert..toi,toi,toi..Du kannst diesen thread gerne aus dem Abo nehmen, wobei ich dich noch bitten würde mir mit meinem 2. PC nochmal zu helfen...den hatte ich vor einem Jahr schon mal in der Mangel (mit markusg)..bin dann aber an einen Punkt gekommen, wo es nicht weiter ging..(ich sollte mir alle Windows Updates runterladen..aber er streikt nach wie vor sich das ServicePack1 runterzuladen (hab das bescheuerte VISTA da drauf..dann wollte ich bei Gelegenheit mal platt machen, aber würde lieber versuchen den noch hinzubekommen..seit ein paar Monaten geht Internet nur schleppend und die Anzeige hat es mir irgendwie zerschossen..wirkt alles gequetsch und flimmert...kannst du ihn dir mal ansehen..soll ich einen neuen thread aufmachen?...das hier war das Ding damals http://www.trojaner-board.de/136358-...drohungen.html liebe Grüße whis |
|
06.02.2014, 10:28
| #14 |
| /// the machine /// TB-Ausbilder | PC fährt ständig runter Poste einfach FRST Logs von dem Gerät hier in diesen Thread
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.02.2014, 20:52
| #15 |
| | PC fährt ständig runter Vielen Dank Schrauber, Klasse! hier die logs FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-02-2014
Ran by Marc (administrator) on MARC-PC on 06-02-2014 20:48:17
Running from C:\Users\Marc\Downloads
Microsoft® Windows Vista™ Home Premium (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WLanNetService.exe
(Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files\1&1 Surf-Stick\AssistantServices.exe
(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe
(OsdMaestro) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
() C:\Program Files\1&1 Surf-Stick\UIExec.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WLanGUI.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Skype Technologies) C:\Program Files\Skype\Plugin Manager\skypePM.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Hewlett-Packard Company) C:\hp\KBD\kbd.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)
HKLM\...\Run: [KBD] - C:\HP\KBD\KbdStub.EXE [65536 2006-12-08] ()
HKLM\...\Run: [OsdMaestro] - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [118784 2007-02-15] (OsdMaestro)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178968 2007-06-14] (Intel Corporation)
HKLM\...\Run: [StartCCC] - c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [CCUTRAYICON] - FactoryMode
HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [71176 2007-05-24] (Hewlett-Packard)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [UIExec] - C:\Program Files\1&1 Surf-Stick\UIExec.exe [139088 2010-09-30] ()
HKLM\...\Run: [AVMWlanClient] - C:\Program Files\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM\...\Run: [SunJavaUpdateReg] - C:\Windows\system32\jureg.exe [54936 2007-04-07] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()
HKLM\...\RunOnce: [Launcher] - %WINDIR%\SMINST\launcher.exe [44168 2007-04-03] (soft thinks)
HKU\S-1-5-21-3822891451-4067332824-1385818742-1001\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [15026056 2011-01-26] (Skype Technologies S.A.)
Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Supermama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=74&bd=Pavilion&pf=desktop
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {2495F679-868B-4542-845F-2BADFDAADCA8} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKLM - {B5719E69-3067-4694-B05B-13687A8B9D40} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie7chrome
SearchScopes: HKCU - {2495F679-868B-4542-845F-2BADFDAADCA8} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKCU - {42C5AAAE-C0EA-4047-857B-0EAAFAE8B84F} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {B5719E69-3067-4694-B05B-13687A8B9D40} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie7chrome
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [227328] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.)
Tcpip\..\Interfaces\{652F5BCA-6159-4E8A-A1E7-EE95D0B5CD28}: [NameServer]192.168.178.1,217.237.151.115
FireFox:
========
FF ProfilePath: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\tfe7389y.default
FF user.js: detected! => C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\tfe7389y.default\user.js
FF Homepage: www.ixquick.de
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npdeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Foxtab Speed Dial - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\tfe7389y.default\Extensions\{5ebdca98-43b3-45bb-87e0-716029fb42ab} [2014-01-23]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\tfe7389y.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-09-02]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\tfe7389y.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-01-30]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
========================== Services (Whitelisted) =================
S3 AlertService; C:\Program Files\Intel\IntelDH\CCU\AlertService.exe [188416 2006-09-11] (Intel(R) Corporation)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin)
R2 DQLWinService; C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe [208896 2006-09-03] ()
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [61440 2007-05-24] (Hewlett-Packard)
S2 IntelDHSvcConf; C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe [29696 2006-05-10] (Intel(R) Corporation)
S3 ISSM; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe [75264 2006-09-11] (Intel(R) Corporation)
S3 M1 Server; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe [26624 2006-08-31] ()
S3 MCLServiceATL; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe [167936 2006-09-11] (Intel(R) Corporation)
S3 Remote UI Service; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe [544256 2006-09-11] (Intel(R) Corporation)
R2 UI Assistant Service; C:\Program Files\1&1 Surf-Stick\AssistantServices.exe [253264 2010-09-30] ()
S2 mgisvr; %systemroot%\system32\AR5523.dll [X]
S4 NMIndexingService; "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe" [X]
S2 veteboot; %systemroot%\system32\diskeeper.dll [X]
==================== Drivers (Whitelisted) ====================
R2 ACEDRV07; C:\Windows\system32\drivers\ACEDRV07.sys [101376 2009-01-08] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277736 2008-07-30] (Protect Software GmbH)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2009-10-09] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2009-10-09] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [22016 2006-11-02] (Microsoft Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
NETSVC: mgisvr -> C:\Windows\system32\AR5523.dll ==> No File.
NETSVC: veteboot -> C:\Windows\system32\diskeeper.dll ==> No File.
==================== One Month Created Files and Folders ========
2014-02-06 20:48 - 2014-02-06 20:48 - 00013897 _____ () C:\Users\Marc\Downloads\FRST.txt
2014-02-06 20:48 - 2014-02-06 20:48 - 00000000 ____D () C:\FRST
2014-02-06 20:47 - 2014-02-06 20:47 - 01136640 _____ (Farbar) C:\Users\Marc\Downloads\FRST.exe
2014-02-01 01:45 - 2014-02-01 02:03 - 00196608 _____ () C:\Windows\SPInstall.etl
2014-02-01 01:45 - 2014-02-01 01:45 - 00000000 ____D () C:\ffefc8bf9a0c4c76d826da815550ff76
2014-02-01 01:44 - 2014-02-01 02:42 - 00000000 ____D () C:\bcc267867ba709c6bf7f1ea357
2014-02-01 01:20 - 2014-02-01 01:34 - 455611504 _____ (Microsoft Corporation) C:\Users\Marc\Downloads\Windows6.0-KB936330-X86-wave0.exe
2014-01-31 23:22 - 2014-02-01 01:04 - 00000000 ____D () C:\8de10754d4fd5dcb8a1c806fef28
2014-01-30 19:51 - 2014-01-30 19:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-01-27 17:03 - 2014-01-27 21:49 - 00022832 _____ () C:\Users\Marc\Interview_GESAMT.aup
2014-01-27 17:03 - 2014-01-27 17:03 - 00000000 ____D () C:\Users\Marc\Interview_GESAMT_data
2014-01-23 21:41 - 2014-01-23 21:41 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\DivX
2014-01-23 21:40 - 2014-01-23 21:41 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared
2014-01-23 21:39 - 2014-01-27 18:38 - 00000005 _____ () C:\Users\Marc\AppData\Roaming\WBPU-TTL.DAT
2014-01-23 21:39 - 2014-01-23 21:39 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\0D0S1L2Z1P1B
2014-01-23 21:38 - 2014-02-05 15:38 - 00000288 _____ () C:\Windows\Tasks\Digital Sites.job
2014-01-23 21:38 - 2014-01-23 21:42 - 00000000 ____D () C:\ProgramData\DivX
2014-01-23 21:38 - 2014-01-23 21:42 - 00000000 ____D () C:\Program Files\DivX
2014-01-23 21:38 - 2014-01-23 21:38 - 00715038 _____ () C:\Windows\unins000.exe
2014-01-23 21:38 - 2014-01-23 21:38 - 00001782 _____ () C:\Windows\unins000.dat
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\LavFilters
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\DigitalSites
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\CDXReader
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\Xvid
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\OpenSource Flash Video Splitter
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\Lame For Audacity
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\Haali
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\ffdshow
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\DSP-worx
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\DirectVobSub
2014-01-23 21:38 - 2012-02-26 16:47 - 00079360 _____ () C:\Windows\system32\ff_vfw.dll
2014-01-23 21:38 - 2012-01-09 20:45 - 00178688 _____ () C:\Windows\system32\unrar.dll
2014-01-23 21:38 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\system32\lagarith.dll
2014-01-23 21:38 - 2011-05-30 14:42 - 00240640 _____ () C:\Windows\system32\xvidvfw.dll
2014-01-23 21:38 - 2011-05-23 10:52 - 00153088 _____ () C:\Windows\system32\xvid.ax
2014-01-23 21:38 - 2011-05-23 08:46 - 00645632 _____ () C:\Windows\system32\xvidcore.dll
2014-01-23 21:37 - 2014-02-05 15:37 - 00000284 _____ () C:\Windows\Tasks\FoxTab.job
2014-01-23 21:37 - 2014-01-27 18:38 - 00000147 _____ () C:\Users\Marc\AppData\Roaming\WB.CFG
2014-01-23 21:37 - 2014-01-23 21:37 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\FoxTab
2014-01-23 21:37 - 2014-01-23 21:37 - 00000000 ____D () C:\Program Files\Foxtab
2014-01-23 21:36 - 2014-01-23 21:36 - 00686024 _____ () C:\Users\Marc\Downloads\CodecPackage.exe
2014-01-23 21:05 - 2014-01-23 21:28 - 00062758 _____ () C:\Users\Marc\Interview.aup
2014-01-23 21:05 - 2014-01-23 21:05 - 00000000 ____D () C:\Users\Marc\Interview_data
2014-01-11 16:43 - 2014-01-11 16:43 - 01477844 _____ () C:\Users\Marc\test 1.wav
2014-01-11 16:36 - 2014-01-27 22:13 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\Audacity
2014-01-11 16:34 - 2014-01-11 16:34 - 00000766 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-01-11 16:34 - 2014-01-11 16:34 - 00000000 ____D () C:\Program Files\Audacity
2014-01-11 16:29 - 2014-01-11 16:34 - 22308174 _____ (Audacity Team ) C:\Users\Marc\Desktop\audacity-win-2-0-4.exe
==================== One Month Modified Files and Folders =======
2014-02-06 20:48 - 2014-02-06 20:48 - 00013897 _____ () C:\Users\Marc\Downloads\FRST.txt
2014-02-06 20:48 - 2014-02-06 20:48 - 00000000 ____D () C:\FRST
2014-02-06 20:47 - 2014-02-06 20:47 - 01136640 _____ (Farbar) C:\Users\Marc\Downloads\FRST.exe
2014-02-06 20:47 - 2011-12-18 23:00 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-06 20:47 - 2007-09-19 03:08 - 01902904 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 20:45 - 2013-06-12 09:10 - 00000000 ____D () C:\Users\Marc\Desktop\Alles
2014-02-06 20:45 - 2011-02-07 22:40 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\skypePM
2014-02-06 20:45 - 2011-02-07 22:37 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\Skype
2014-02-06 20:45 - 2011-01-26 16:46 - 00000426 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{8FF0CDE9-A183-482B-A8CB-7957D06F595F}.job
2014-02-06 20:44 - 2011-07-08 12:23 - 00000000 ____D () C:\Users\Marc\Desktop\Sprachdemo
2014-02-06 20:43 - 2011-12-18 23:00 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-06 20:43 - 2007-09-10 11:31 - 00000000 ____D () C:\Windows\SMINST
2014-02-06 20:43 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 20:43 - 2006-11-02 13:47 - 00003456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 20:43 - 2006-11-02 13:47 - 00003456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 00:17 - 2006-11-02 14:01 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-05 15:38 - 2014-01-23 21:38 - 00000288 _____ () C:\Windows\Tasks\Digital Sites.job
2014-02-05 15:37 - 2014-01-23 21:37 - 00000284 _____ () C:\Windows\Tasks\FoxTab.job
2014-02-01 02:44 - 2011-01-23 15:57 - 00000000 ____D () C:\Users\Supermama
2014-02-01 02:44 - 2008-01-07 23:01 - 00000000 ____D () C:\Users\Lucky Luke
2014-02-01 02:44 - 2007-12-05 23:24 - 00000000 ____D () C:\Users\Marc
2014-02-01 02:44 - 2007-09-10 11:04 - 00000000 ___HD () C:\Users\IUSR_NMPR
2014-02-01 02:44 - 2006-11-02 11:22 - 42467328 _____ () C:\Windows\system32\config\software_previous
2014-02-01 02:44 - 2006-11-02 11:22 - 21757952 _____ () C:\Windows\system32\config\system_previous
2014-02-01 02:43 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\MSN
2014-02-01 02:42 - 2014-02-01 01:44 - 00000000 ____D () C:\bcc267867ba709c6bf7f1ea357
2014-02-01 02:42 - 2010-12-27 12:15 - 00000000 ____D () C:\Program Files\1&1 Surf-Stick
2014-02-01 02:42 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\spool
2014-02-01 02:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-01 02:40 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Photo Gallery
2014-02-01 02:40 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-01 02:40 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\registration
2014-02-01 02:40 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\IME
2014-02-01 02:40 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-01 02:31 - 2006-11-02 11:22 - 41418752 _____ () C:\Windows\system32\config\components_previous
2014-02-01 02:31 - 2006-11-02 11:22 - 00524288 _____ () C:\Windows\system32\config\default_previous
2014-02-01 02:31 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-02-01 02:31 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-02-01 02:26 - 2006-11-02 13:52 - 00127811 _____ () C:\Windows\setupact.log
2014-02-01 02:03 - 2014-02-01 01:45 - 00196608 _____ () C:\Windows\SPInstall.etl
2014-02-01 01:45 - 2014-02-01 01:45 - 00000000 ____D () C:\ffefc8bf9a0c4c76d826da815550ff76
2014-02-01 01:34 - 2014-02-01 01:20 - 455611504 _____ (Microsoft Corporation) C:\Users\Marc\Downloads\Windows6.0-KB936330-X86-wave0.exe
2014-02-01 01:04 - 2014-01-31 23:22 - 00000000 ____D () C:\8de10754d4fd5dcb8a1c806fef28
2014-01-31 18:50 - 2012-08-31 18:55 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-01-31 18:45 - 2006-11-02 11:33 - 01461736 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-30 19:51 - 2014-01-30 19:51 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-01-27 22:13 - 2014-01-11 16:36 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\Audacity
2014-01-27 22:04 - 2008-01-18 00:53 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\vlc
2014-01-27 21:49 - 2014-01-27 17:03 - 00022832 _____ () C:\Users\Marc\Interview_GESAMT.aup
2014-01-27 18:38 - 2014-01-23 21:39 - 00000005 _____ () C:\Users\Marc\AppData\Roaming\WBPU-TTL.DAT
2014-01-27 18:38 - 2014-01-23 21:37 - 00000147 _____ () C:\Users\Marc\AppData\Roaming\WB.CFG
2014-01-27 17:03 - 2014-01-27 17:03 - 00000000 ____D () C:\Users\Marc\Interview_GESAMT_data
2014-01-27 16:44 - 2013-08-21 17:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-27 16:41 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-23 21:42 - 2014-01-23 21:38 - 00000000 ____D () C:\ProgramData\DivX
2014-01-23 21:42 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\DivX
2014-01-23 21:41 - 2014-01-23 21:41 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\DivX
2014-01-23 21:41 - 2014-01-23 21:40 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared
2014-01-23 21:39 - 2014-01-23 21:39 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\0D0S1L2Z1P1B
2014-01-23 21:38 - 2014-01-23 21:38 - 00715038 _____ () C:\Windows\unins000.exe
2014-01-23 21:38 - 2014-01-23 21:38 - 00001782 _____ () C:\Windows\unins000.dat
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\LavFilters
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\DigitalSites
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\CDXReader
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\Xvid
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\OpenSource Flash Video Splitter
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\Lame For Audacity
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\Haali
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\ffdshow
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\DSP-worx
2014-01-23 21:38 - 2014-01-23 21:38 - 00000000 ____D () C:\Program Files\DirectVobSub
2014-01-23 21:37 - 2014-01-23 21:37 - 00000000 ____D () C:\Users\Marc\AppData\Roaming\FoxTab
2014-01-23 21:37 - 2014-01-23 21:37 - 00000000 ____D () C:\Program Files\Foxtab
2014-01-23 21:36 - 2014-01-23 21:36 - 00686024 _____ () C:\Users\Marc\Downloads\CodecPackage.exe
2014-01-23 21:28 - 2014-01-23 21:05 - 00062758 _____ () C:\Users\Marc\Interview.aup
2014-01-23 21:05 - 2014-01-23 21:05 - 00000000 ____D () C:\Users\Marc\Interview_data
2014-01-23 15:56 - 2007-09-10 11:33 - 00154368 _____ () C:\Windows\PFRO.log
2014-01-11 16:43 - 2014-01-11 16:43 - 01477844 _____ () C:\Users\Marc\test 1.wav
2014-01-11 16:34 - 2014-01-11 16:34 - 00000766 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-01-11 16:34 - 2014-01-11 16:34 - 00000000 ____D () C:\Program Files\Audacity
2014-01-11 16:34 - 2014-01-11 16:29 - 22308174 _____ (Audacity Team ) C:\Users\Marc\Desktop\audacity-win-2-0-4.exe
2014-01-11 16:29 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public
ZeroAccess:
C:\Users\Marc\AppData\Local\e4f44f4f
C:\Users\Marc\AppData\Local\e4f44f4f\@
C:\Users\Marc\AppData\Local\e4f44f4f\loader.tlb
Some content of TEMP:
====================
C:\Users\Marc\AppData\Local\temp\bi_cleaner.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys
[2006-11-02 09:52] - [2006-11-02 10:51] - 0208488 ____A (Microsoft Corporation) 11EF6C1CAEF76B685233450A126125D6
LastRegBack: 2014-02-06 20:49
==================== End Of Log ============================
und Add Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-02-2014 Ran by Marc at 2014-02-06 20:48:43 Running from C:\Users\Marc\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== ==================== Installed Programs ====================== 1&1 Surf-Stick (Version: 1.0.0.2 - ) <==== ATTENTION 32 Bit HP CIO Components Installer (Version: 1.0.0 - Hewlett-Packard) Hidden <==== ATTENTION 7-Zip 9.20 (Version: - ) <==== ATTENTION Adobe Anchor Service CS3 (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Asset Services CS3 (Version: 3 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Bridge CS3 (Version: 2 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Bridge Start Meeting (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Camera Raw 4.0 (Version: 4.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe CMaps (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Color Common Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Color EU Extra Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Color JA Extra Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Color NA Recommended Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Default Language CS3 (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe ExtendScript Toolkit 2 (Version: 2.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated) <==== ATTENTION Adobe Flash Player 11 Plugin (Version: 11.9.900.117 - Adobe Systems Incorporated) <==== ATTENTION Adobe Fonts All (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Help Viewer CS3 (Version: 1 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe InDesign CS3 (Version: 5.0 - Adobe Systems Incorporated) <==== ATTENTION Adobe InDesign CS3 (Version: 5.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe InDesign CS3 Icon Handler (Version: 5.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Linguistics CS3 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe PDF Library Files (Version: 8.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4 - Adobe Systems Incorporated) <==== ATTENTION Adobe Setup (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe SING CS3 (Version: 0.1 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Stock Photos CS3 (Version: 1.5 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Type Support (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Update Manager CS3 (Version: 5.1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe Version Cue CS3 Client (Version: 3 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe WinSoft Linguistics Plugin (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Adobe XMP Panels CS3 (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION AGEIA PhysX v6.12.02 (Version: 6.12.02 - AGEIA Technologies, Inc.) <==== ATTENTION AIO_CDA_ProductContext (Version: 82.0.233.000 - Hewlett-Packard) Hidden <==== ATTENTION AIO_CDA_Software (Version: 82.0.233.000 - Hewlett-Packard) Hidden <==== ATTENTION AIO_Scan (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION Ashampoo Burning Studio 6 FREE v.6.83 (Version: 6.8.3 - Ashampoo GmbH & Co. KG) <==== ATTENTION ATI Catalyst Install Manager (Version: 3.0.641.0 - ATI Technologies, Inc.) <==== ATTENTION Audacity 2.0.4 (Version: 2.0.4 - Audacity Team) <==== ATTENTION AVM FRITZ!WLAN (Version: - AVM Berlin) <==== ATTENTION Bewerbungsfoto-/Passbild-Generator v3.5b (Version: - ) <==== ATTENTION BufferChm (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION C5100 (Version: 82.0.233.000 - Hewlett-Packard) Hidden <==== ATTENTION c5100_Help (Version: 82.0.233.000 - Hewlett-Packard) Hidden <==== ATTENTION Catalyst Control Center Core Implementation (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Graphics Full Existing (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Graphics Full New (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Graphics Light (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Graphics Previews Common (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Graphics Previews Vista (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Chinese Standard (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Chinese Traditional (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Czech (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Danish (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Dutch (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Finnish (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization French (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization German (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Greek (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Hungarian (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Italian (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Japanese (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Korean (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Norwegian (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Polish (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Portuguese (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Russian (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Spanish (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Swedish (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Thai (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Catalyst Control Center Localization Turkish (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION CCC Help Chinese Standard (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Chinese Traditional (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Czech (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Danish (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Dutch (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help English (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Finnish (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help French (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help German (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Greek (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Hungarian (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Italian (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Japanese (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Korean (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Norwegian (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Polish (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Portuguese (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Russian (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Spanish (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Swedish (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Thai (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION CCC Help Turkish (Version: 2007.0709.2352.40813 - ATI) Hidden <==== ATTENTION ccc-Branding (Version: 1.00.0000 - ATI) <==== ATTENTION ccc-core-static (Version: 2007.0709.2353.40813 - Ihr Firmenname) Hidden <==== ATTENTION ccc-utility (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION CCleaner (Version: 4.02 - Piriform) <==== ATTENTION Codec Package Packages (HKCU Version: - ) <==== ATTENTION Copy (Version: 82.0.188.000 - Hewlett-Packard) Hidden <==== ATTENTION CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden <==== ATTENTION DC-Bass Source 1.3.0 (Version: - ) <==== ATTENTION Destinations (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden <==== ATTENTION DirectVobSub 2.40.4209 (Version: 2.40.4209 - MPC-HC Team) <==== ATTENTION DivX-Setup (Version: 2.6.1.8 - DivX, LLC) <==== ATTENTION DocProc (Version: 8.1.0.0 - Hewlett-Packard) Hidden <==== ATTENTION DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden <==== ATTENTION ElsterFormular (Version: 14.1.20130301 - Landesfinanzdirektion Thüringen) <==== ATTENTION eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden <==== ATTENTION Fax (Version: 82.0.188.000 - Hewlett-Packard) Hidden <==== ATTENTION ffdshow v1.1.4399 [2012-03-22] (Version: 1.1.4399.0 - ) <==== ATTENTION FileZilla Client 3.5.3 (HKCU Version: 3.5.3 - FileZilla Project) <==== ATTENTION Foxtab (Version: - FoxTab) <==== ATTENTION Free YouTube Download version 3.1.40.1031 (Version: 3.1.40.1031 - DVDVideoSoft Ltd.) <==== ATTENTION Free YouTube to MP3 Converter version 3.11.35.1031 (Version: 3.11.35.1031 - DVDVideoSoft Ltd.) <==== ATTENTION Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden <==== ATTENTION Haali Media Splitter (Version: - ) <==== ATTENTION Hardware Diagnose Tools (Version: 5.00.4558.05 - PC-Doctor, Inc.) <==== ATTENTION Hewlett-Packard Active Check (Version: 1.1.7.0 - Hewlett-Packard) Hidden <==== ATTENTION Hewlett-Packard Asset Agent for Health Check (Version: 2.0.59.5 - HP) Hidden <==== ATTENTION HP Active Support Library (Version: 2.0.12.1 - Hewlett-Packard) Hidden <==== ATTENTION HP Active Support Library 32 bit components (Version: 2.1.0 - Hewlett-Packard) Hidden <==== ATTENTION HP Customer Feedback (Version: 1.0.0 - Hewlett-Packard) Hidden <==== ATTENTION HP Customer Participation Program 8.0 (Version: 8.0 - HP) <==== ATTENTION HP Easy Setup - Frontend (Version: 5.2.0.2304 - Hewlett-Packard) <==== ATTENTION HP Imaging Device Functions 8.0 (Version: 8.0 - HP) <==== ATTENTION HP OCR Software 8.0 (Version: 8.0 - HP) <==== ATTENTION HP On-Screen Cap/Num/Scroll Lock Indicator (Version: - Hewlett-Packard) <==== ATTENTION HP Photosmart Essential 2.01 (Version: 2.01 - HP) <==== ATTENTION HP Photosmart Essential2.01 (Version: 1.01.0000 - Hewlett-Packard) Hidden <==== ATTENTION HP Photosmart.All-In-One Driver Software 8.0 .A (Version: 8.0 - HP) <==== ATTENTION HP Picasso Media Center Add-In (Version: 1.0.0 - HP) Hidden <==== ATTENTION HP Solution Center 8.0 (Version: 8.0 - HP) <==== ATTENTION HP Update (Version: 4.000.005.007 - Hewlett-Packard) <==== ATTENTION HPProductAssistant (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION HPSSupply (Version: 2.1.3.0000 - Ihr Firmenname) <==== ATTENTION Hsp-Verwaltung 2.0 (Version: 1.0.0.0 - ) <==== ATTENTION Intel(R) Matrix Storage Manager (Version: - ) <==== ATTENTION Intel® Viiv™ Software (Version: 1.6.361.6 - Intel Corporation) <==== ATTENTION Intel® Viiv™ Software (Version: 1.6.361.6 - Intel Corporation) Hidden <==== ATTENTION Java 7 Update 21 (Version: 7.0.210 - Oracle) <==== ATTENTION Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden <==== ATTENTION Lagarith Lossless Codec (1.3.27) (Version: - ) <==== ATTENTION LAME v3.99.3 (for Windows) (Version: - ) <==== ATTENTION LightScribe 1.8.13.1 (Version: 1.8.13.1 - Ihr Firmenname) Hidden <==== ATTENTION Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation) <==== ATTENTION MarketResearch (Version: 82.0.174.000 - Hewlett-Packard) Hidden <==== ATTENTION Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version: - Microsoft Corporation) <==== ATTENTION Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden <==== ATTENTION Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation) <==== ATTENTION Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden <==== ATTENTION Microsoft Office XP Professional mit FrontPage (Version: 10.0.2701.01 - Microsoft Corporation) <==== ATTENTION Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42 - Microsoft Corporation) <==== ATTENTION Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation) <==== ATTENTION Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation) <==== ATTENTION Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) <==== ATTENTION Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) <==== ATTENTION Microsoft Works (Version: 08.05.0822 - Microsoft Corporation) <==== ATTENTION Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla) <==== ATTENTION Mozilla Maintenance Service (Version: 26.0 - Mozilla) <==== ATTENTION MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation) <==== ATTENTION MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation) <==== ATTENTION muvee autoProducer 6.0 (Version: 6.00.050 - muvee Technologies) <==== ATTENTION MySQL Connector/ODBC 3.51 (Version: 3.51.28 - Oracle Corporation) <==== ATTENTION NVIDIA GAME System Software 2.8.1 (Version: 2.8.1 - NVIDIA Corporation) <==== ATTENTION OpenOffice.org 3.3 (Version: 3.3.9567 - OpenOffice.org) <==== ATTENTION OpenSource Flash Video Splitter 1.0.0.5 (Version: 1.0.0.5 - ) <==== ATTENTION Optimierte Multimedia-Tastatur-Lösung (Version: - Hewlett-Packard) <==== ATTENTION PDF Settings (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION Prison Island (Version: - ) <==== ATTENTION ProtectDisc Driver, Version 11 (Version: 11.0.0.11 - ProtectDisc Software GmbH) <==== ATTENTION PSSWCORE (Version: 2.01.0000 - Hewlett-Packard) Hidden <==== ATTENTION Python 2.5 (Version: 2.5.150 - Martin v. Löwis) <==== ATTENTION QuickTime (Version: - ) <==== ATTENTION Roxio Activation Module (Version: 1.0 - Roxio) Hidden <==== ATTENTION Roxio Creator Copy (Version: 3.4.0 - Roxio) <==== ATTENTION Roxio Creator Data (Version: 3.4.0 - Roxio) <==== ATTENTION Roxio Creator EasyArchive (Version: 3.4.0 - Roxio) <==== ATTENTION Roxio Creator Tools (Version: 3.4.0 - Roxio) <==== ATTENTION Roxio Express Labeler 3 (Version: 3.2.1 - Roxio) <==== ATTENTION Roxio MyDVD Basic v9 (Version: 9.0.572 - Roxio) <==== ATTENTION Scan (Version: 8.1.0.0 - Hewlett-Packard) Hidden <==== ATTENTION Skins (Version: 2007.0709.2353.40813 - ATI) Hidden <==== ATTENTION Skype™ 5.1 (Version: 5.1.112 - Skype Technologies S.A.) <==== ATTENTION SolutionCenter (Version: 82.0.188.000 - Hewlett-Packard) Hidden <==== ATTENTION Status (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION Toolbox (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION TrayApp (Version: 82.0.188.000 - Hewlett-Packard) Hidden <==== ATTENTION UnloadSupport (Version: 1.00.0000 - Hewlett-Packard) Hidden <==== ATTENTION Update for Codec Package (HKCU Version: - Update for Codec Package) <==== ATTENTION Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation) <==== ATTENTION VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden <==== ATTENTION VideoToolkit01 (Version: 90.0.146.000 - Hewlett-Packard) Hidden <==== ATTENTION VLC media player 2.0.5 (Version: 2.0.5 - VideoLAN) <==== ATTENTION WebReg (Version: 82.0.173.000 - Hewlett-Packard) Hidden <==== ATTENTION Xvid Video Codec (Version: 1.3.2 - Xvid Team) <==== ATTENTION ==================== Restore Points ========================= 31-01-2014 23:15:32 Windows Vista Service Pack 1 01-02-2014 00:44:58 Windows Update 01-02-2014 14:43:09 Geplanter Prüfpunkt 05-02-2014 15:39:11 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2006-11-02 11:23 - 2012-03-27 14:41 - 00000761 _RASH C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {1DBC24D5-AD82-476E-BDB5-32E623092C1F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd) Task: {2808ADE6-741E-4735-B2A0-3B79914C6FE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-12-18] (Google Inc.) Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {3DA96252-E56F-447B-AB21-B87FB5B7199E} - System32\Tasks\{B2952187-6966-4DE6-848C-54E15DA2901E} => C:\Program Files\Skype\\Phone\Skype.exe [2011-01-26] (Skype Technologies S.A.) Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2006-11-02] (Microsoft Corporation) Task: {459F76B3-E7EA-4303-81D6-0762F9DF0634} - System32\Tasks\JavaUpdateAdministrator => C:\Windows\system32\jusched.exe Task: {52BC6E7C-5971-46F2-97B0-D0EB2EE61A05} - System32\Tasks\Digital Sites => C:\Users\Marc\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe [2013-04-12] () Task: {605F16DB-F0BD-4D0E-B375-57E157FE4311} - System32\Tasks\JavaUpdateLucky Luke => C:\Windows\system32\jusched.exe Task: {75CF8816-6C1E-4306-8ED6-71365F9A5C36} - System32\Tasks\JavaUpdateSupermama => C:\Windows\system32\jusched.exe Task: {9EB44560-63F6-4CA3-8294-048D3F7D340B} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {C354A065-778E-48EF-B956-A763E40E1028} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-05-17] () Task: {C96F031F-5BCD-49AD-87A9-CFC98E871AD6} - System32\Tasks\FoxTab => C:\Users\Marc\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION Task: {D83AEABF-6F42-43C0-966B-AD0985D01FFB} - System32\Tasks\JavaUpdateMarc => C:\Windows\system32\jusched.exe Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2006-11-02] () Task: {EDFBE9E6-E62F-4404-A724-D9369C890BD0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-12-18] (Google Inc.) Task: {FC36B49E-3A70-4F49-941A-336515B16C18} - System32\Tasks\task4073544 => C:\Windows\Temp\_ex-68.exe Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Marc\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Marc\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\User_Feed_Synchronization-{8FF0CDE9-A183-482B-A8CB-7957D06F595F}.job => C:\Windows\system32\msfeedssync.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-23 21:38 - 2012-03-22 18:46 - 03471360 _____ () C:\Program Files\ffdshow\ffdshow.ax 2014-01-23 21:38 - 2012-03-29 14:21 - 00207872 _____ () C:\Users\Marc\AppData\Roaming\LavFilters\avutil-lav-51.dll 2014-01-23 21:38 - 2012-03-29 14:21 - 06582226 _____ () C:\Users\Marc\AppData\Roaming\LavFilters\avcodec-lav-54.dll 2014-01-23 21:38 - 2012-03-29 14:21 - 00374152 _____ () C:\Users\Marc\AppData\Roaming\LavFilters\swscale-lav-2.dll 2014-01-23 21:38 - 2012-03-29 14:21 - 00144523 _____ () C:\Users\Marc\AppData\Roaming\LavFilters\avfilter-lav-2.dll 2012-01-08 14:41 - 2012-01-08 14:41 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll 2007-09-10 11:00 - 2007-07-10 01:24 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll 2013-11-15 01:49 - 2013-11-15 01:49 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll 2011-01-17 15:19 - 2011-09-14 23:19 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll 2006-12-10 21:51 - 2006-12-10 21:51 - 00065536 ____R () C:\Program Files\HP\Digital Imaging\bin\crm\xmlparse.dll 2006-12-10 21:51 - 2006-12-10 21:51 - 00077824 ____R () C:\Program Files\HP\Digital Imaging\bin\crm\xmltok.dll 2014-01-30 19:51 - 2014-01-30 19:51 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/06/2014 08:48:30 PM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/06/2014 00:16:21 AM) (Source: EventSystem) (User: ) Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (02/05/2014 04:38:53 PM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/01/2014 08:52:27 PM) (Source: EventSystem) (User: ) Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (02/01/2014 02:32:01 PM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/01/2014 02:55:44 AM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/01/2014 02:29:46 AM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/01/2014 02:05:05 AM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/01/2014 01:07:51 AM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. Error: (02/01/2014 00:43:59 AM) (Source: WerSvc) (User: ) Description: Die Zieldatei für die Windows-Feedbackplattform (eine DLL-Datei, die eine Liste der auf diesem Computer aufgetretenen Probleme enthält, für deren Diagnose das Sammeln zusätzlicher Daten erforderlich ist) konnte nicht analysiert werden. Fehlercode 8014FFF9. System errors: ============= Error: (02/06/2014 08:45:00 PM) (Source: Service Control Manager) (User: ) Description: TryAndDecideService%%126 Error: (02/06/2014 08:45:00 PM) (Source: Service Control Manager) (User: ) Description: Winproxy%%126 Error: (02/06/2014 08:45:00 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (02/01/2014 01:33:14 PM) (Source: Service Control Manager) (User: ) Description: TryAndDecideService%%126 Error: (02/01/2014 01:33:14 PM) (Source: Service Control Manager) (User: ) Description: Winproxy%%126 Error: (02/01/2014 01:33:14 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (02/01/2014 02:56:28 AM) (Source: Service Control Manager) (User: ) Description: TryAndDecideService%%126 Error: (02/01/2014 02:56:28 AM) (Source: Service Control Manager) (User: ) Description: Winproxy%%126 Error: (02/01/2014 02:56:28 AM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (02/01/2014 02:21:25 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80004005 Microsoft Office Sessions: ========================= Error: (02/06/2014 08:48:30 PM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/06/2014 00:16:21 AM) (Source: EventSystem)(User: ) Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (02/05/2014 04:38:53 PM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/01/2014 08:52:27 PM) (Source: EventSystem)(User: ) Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (02/01/2014 02:32:01 PM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/01/2014 02:55:44 AM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/01/2014 02:29:46 AM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/01/2014 02:05:05 AM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/01/2014 01:07:51 AM) (Source: WerSvc)(User: ) Description: 8014FFF9 Error: (02/01/2014 00:43:59 AM) (Source: WerSvc)(User: ) Description: 8014FFF9 CodeIntegrity Errors: =================================== Date: 2013-11-25 16:40:55.936 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\msiltcfg.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.964 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.901 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.854 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.808 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.761 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.714 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.589 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.542 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-11 20:18:05.496 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 50% Total physical RAM: 2045.87 MB Available physical RAM: 1010.58 MB Total Pagefile: 4325.04 MB Available Pagefile: 3228.59 MB Total Virtual: 2047.88 MB Available Virtual: 1933.24 MB ==================== Drives ================================ Drive c: (HP) (Fixed) (Total:327.83 GB) (Free:133.81 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (FACTORY_IMAGE) (Fixed) (Total:7.52 GB) (Free:1 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 335 GB) (Disk ID: 1549F232) Partition 1: (Active) - (Size=328 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=8 GB) - (Type=07 NTFS) ==================== End Of Log ============================ whis |
|
| Themen zu PC fährt ständig runter |
| aktive, anklicken, beschreiben, besser, board, deaktiviert, farbe, fenster, graue, hallo zusammen, inter, interne, klasse, klicke, klicken, kurzem, natürlich, neue, neuen, runter, trennt, unregelmäßige, vorwarnung, windows, zusammen |
Linear-Darstellung
