| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Was ist 'Internet Updater' von Parallel Lines und wie werde ich das wieder los?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
10.02.2014, 09:20
| #1 |
 |  Was ist 'Internet Updater' von Parallel Lines und wie werde ich das wieder los? Hallo, ich habe eine Software namens 'Internet Updater' von 'Parallel Lines Development, LLC' auf meinem Rechner (Windows 7), das ich nicht wissentlich heruntergeladen habe. Was steckt dahinter? Wie kann ich es loswerden? Anbei einige Logs, soweit ich sie erstellen konnte. Danke für eure Hilfe. Gruß Michael Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 03 Ran by Michael (administrator) on MICHAEL-PC on 10-02-2014 09:10:55 Running from C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TUXETQKT Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe () C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe () C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Systweak Inc., (www.systweak.com)) C:\Program Files (x86)\Disk Speedup\DSUDefragSrv64.exe (Parallel Lines Development, LLC) C:\ProgramData\InternetUpdater\InternetUpdaterService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Windows\system32\mfevtps.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe () C:\Program Files (x86)\Printer Pro Desktop\PrinterProDesktop.exe (Updater) C:\ProgramData\Updater\updater.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe () C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (AVM Berlin) C:\Users\Michael\AppData\Local\Apps\2.0\B43D7H3X.6DA\74XVBVPG.9GO\frit..tion_1acae14e4778b8d2_0002.0003_6dcb4a48ddb2ee39\fritzbox-usb-fernanschluss.exe (Acronis) C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe (WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (WatchDog) C:\ProgramData\RHelpers\FireFoxHelper\FireFoxHelper.exe (WatchDog) C:\ProgramData\RHelpers\IEHelper\IeHelper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Windows\system32\PrintIsolationHost.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2247976 2010-07-15] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6486120 2010-09-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2120808 2010-09-03] (Realtek Semiconductor) HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation) HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [3206816 2010-08-04] (Dell Inc.) HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [391240 2010-11-23] (Acronis) HKLM-x32\...\Run: [NUSB3MON] - c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation) HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-12-15] () HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2092032 2014-02-03] (Dominik Reichl) HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [491650 2010-12-23] (Creative Technology Ltd) HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM-x32\...\Run: [SAOB Monitor] - C:\Program Files (x86)\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe [2571032 2011-09-22] (Acronis) HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [892928 2012-01-31] (Sony Corporation) HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1316248 2010-12-02] (CANON INC.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.) HKLM-x32\...\Run: [Updater] - C:\ProgramData\Updater\Updater.exe [486264 2013-12-18] (Updater) HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [559616 2011-10-11] (Dell) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\.DEFAULT\...\RunOnce: [{90140000-003D-0000-0000-0000000FF1CE}] - C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\.DEFAULT\...\RunOnce: [{90140000-0018-0407-0000-0000000FF1CE}] - C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H HKU\S-1-5-21-1276903431-3008960512-4196570183-1001\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-11-24] (Google Inc.) HKU\S-1-5-21-1276903431-3008960512-4196570183-1001\...\Run: [AVMUSBFernanschluss] - C:\Users\Michael\AppData\Local\Apps\2.0\B43D7H3X.6DA\74XVBVPG.9GO\frit..tion_1acae14e4778b8d2_0002.0003_6dcb4a48ddb2ee39\AVMAutoStart.exe [139264 2013-12-30] (AVM Berlin) HKU\S-1-5-21-1276903431-3008960512-4196570183-1001\...\Run: [PrinterProDesktop] - C:\Program Files (x86)\Printer Pro Desktop\PrinterProDesktop.exe [2132992 2012-02-02] () HKU\S-1-5-21-1276903431-3008960512-4196570183-1001\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [486264 2013-12-18] (Updater) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you) Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {73AB6F08-2CA9-473B-AA88-78352F174A50} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A011DE105&p={SearchTerms} SearchScopes: HKCU - {833D0F75-8ACF-4AD3-B775-0EADB294BE21} URL = BHO: No Name - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No File BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: No Name - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No File BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKCU - No Name - {4A1C6093-14F9-44D7-860E-5D265CFCA9D9} - No File DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{7ECAA944-D299-44F8-958F-ED5D49B623C3}: [NameServer]192.168.50.11 FireFox: ======== FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\xga181i5.default FF SearchEngineOrder.1: Sichere Suche FF Homepage: www.google.de FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE105&p= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @mcafee.com/MVT - C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll (McAfee, Inc.) FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-12-18] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-12-18] FF HKCU\...\Firefox\Extensions: [{57319509-7821-41B0-9FDF-3B58F146AE33}] - c:\program files (x86)\copernic desktop search - home\firefoxconnector FF Extension: Copernic Desktop Search - Search Firefox content - c:\program files (x86)\copernic desktop search - home\firefoxconnector [2013-03-10] Chrome: ======= CHR Extension: (Google Wallet) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-11] CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-09-11] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-01-10] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-04-09] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] () R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 DSUDiskOptimizer; C:\Program Files (x86)\Disk Speedup\DSUDefragSrv64.exe [692008 2013-02-06] (Systweak Inc., (www.systweak.com)) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 InternetUpdater; C:\ProgramData\InternetUpdater\InternetUpdaterService.exe [45568 2014-01-15] (Parallel Lines Development, LLC) R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-11-28] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025232 2013-11-26] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] () S2 WajamUpdaterV3; "C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe" [X] ==================== Drivers (Whitelisted) ==================== R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2010-11-26] (AVM Berlin) R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [116480 2012-12-26] (AVM Berlin) S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.) S2 CVPNDRVA; C:\Windows\SysWOW64\Drivers\CVPNDRVA.sys [303740 2006-04-20] (Cisco Systems, Inc.) R3 DNE; C:\Windows\SysWOW64\DRIVERS\dne64x.sys [131584 2005-08-18] (Deterministic Networks, Inc.) R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.) R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.) R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc.) R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-10 09:10 - 2014-02-10 09:10 - 00000248 _____ () C:\Users\Michael\Desktop\defogger_enable.log 2014-02-10 09:10 - 2014-02-10 09:10 - 00000000 ____D () C:\FRST 2014-02-10 09:09 - 2014-02-10 09:09 - 00000476 _____ () C:\Users\Michael\Desktop\defogger_disable.log 2014-02-09 19:11 - 2014-02-09 19:12 - 00000000 ____D () C:\ProgramData\InternetUpdater 2014-02-09 18:44 - 2014-02-10 08:48 - 00001040 _____ () C:\DelFix.txt 2014-02-09 12:36 - 2014-02-09 12:36 - 00000000 ____D () C:\ProgramData\Websteroids 2014-02-09 12:05 - 2014-02-09 18:44 - 00000000 ____D () C:\Windows\ERUNT 2014-02-09 11:54 - 2014-02-09 11:54 - 00000000 ____D () C:\ProgramData\Updater 2014-02-09 11:54 - 2014-02-09 11:54 - 00000000 ____D () C:\ProgramData\RHelpers 2014-02-05 09:47 - 2014-02-05 09:47 - 00000000 ____D () C:\Users\Michael\Download 2014-02-01 16:29 - 2014-02-01 16:30 - 01362704 _____ () C:\Windows\Minidump\020114-35677-01.dmp 2014-01-28 09:11 - 2014-01-28 09:11 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-01-19 13:13 - 2014-01-19 13:13 - 00005402 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-01-19 13:13 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-19 13:13 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-19 13:13 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-19 13:13 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-16 18:03 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-16 18:03 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-16 18:03 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-16 18:03 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-16 18:03 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-16 18:03 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-16 18:03 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-16 18:03 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-16 18:03 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== One Month Modified Files and Folders ======= 2014-02-10 09:10 - 2014-02-10 09:10 - 00000248 _____ () C:\Users\Michael\Desktop\defogger_enable.log 2014-02-10 09:10 - 2014-02-10 09:10 - 00000000 ____D () C:\FRST 2014-02-10 09:10 - 2010-11-24 18:23 - 00000000 ____D () C:\Users\Michael 2014-02-10 09:09 - 2014-02-10 09:09 - 00000476 _____ () C:\Users\Michael\Desktop\defogger_disable.log 2014-02-10 09:00 - 2012-04-27 13:05 - 00000000 ____D () C:\Program Files (x86)\Panda Security 2014-02-10 08:59 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\Ahnenblatt 2014-02-10 08:58 - 2009-07-14 05:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-10 08:58 - 2009-07-14 05:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-10 08:57 - 2010-12-05 17:43 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\KeePass 2014-02-10 08:57 - 2010-12-05 16:52 - 00000000 ____D () C:\Users\Michael\Keepass 2014-02-10 08:55 - 2010-11-24 20:59 - 00000000 ____D () C:\Users\Michael\Documents\Outlook-Dateien 2014-02-10 08:54 - 2009-07-14 06:10 - 01381995 _____ () C:\Windows\WindowsUpdate.log 2014-02-10 08:51 - 2010-11-16 11:11 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks 2014-02-10 08:51 - 2010-11-16 11:11 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks 2014-02-10 08:51 - 2010-11-16 10:45 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup 2014-02-10 08:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing 2014-02-10 08:50 - 2013-04-16 16:49 - 00027297 _____ () C:\Windows\setupact.log 2014-02-10 08:50 - 2011-12-04 15:24 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-02-10 08:50 - 2010-11-24 20:52 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-10 08:50 - 2010-11-16 03:25 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-10 08:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-10 08:48 - 2014-02-09 18:44 - 00001040 _____ () C:\DelFix.txt 2014-02-10 08:47 - 2010-11-24 20:52 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-10 08:41 - 2012-10-09 20:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-09 19:12 - 2014-02-09 19:11 - 00000000 ____D () C:\ProgramData\InternetUpdater 2014-02-09 18:44 - 2014-02-09 12:05 - 00000000 ____D () C:\Windows\ERUNT 2014-02-09 18:08 - 2011-07-01 17:28 - 00007619 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg 2014-02-09 14:56 - 2010-11-26 14:52 - 00000000 ____D () C:\Users\Michael\Word 2014-02-09 13:55 - 2010-11-24 20:06 - 00000000 ____D () C:\Users\Michael\Tools 2014-02-09 12:36 - 2014-02-09 12:36 - 00000000 ____D () C:\ProgramData\Websteroids 2014-02-09 12:33 - 2013-04-16 16:49 - 00293256 _____ () C:\Windows\PFRO.log 2014-02-09 12:13 - 2013-05-23 17:52 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2014-02-09 11:57 - 2012-12-23 16:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-09 11:54 - 2014-02-09 11:54 - 00000000 ____D () C:\ProgramData\Updater 2014-02-09 11:54 - 2014-02-09 11:54 - 00000000 ____D () C:\ProgramData\RHelpers 2014-02-09 11:46 - 2012-04-12 19:19 - 00000000 ____D () C:\Program Files (x86)\PC Beschleunigen 2014-02-09 11:23 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-02-09 10:52 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\Airplus 2014-02-07 16:54 - 2010-11-26 14:52 - 00000000 ____D () C:\Users\Michael\PDF 2014-02-06 08:05 - 2011-08-14 11:35 - 00000000 ____D () C:\Program Files (x86)\FreeTime 2014-02-05 14:13 - 2010-11-26 15:12 - 00000000 ____D () C:\Users\Ria\Norderstedter_Bank 2014-02-05 14:12 - 2010-11-26 14:53 - 00000000 ____D () C:\Users\Michael\Norderstedter_Bank 2014-02-05 11:48 - 2010-11-26 16:13 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Ahnenblatt 2014-02-05 11:41 - 2012-10-09 20:01 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-05 11:41 - 2012-04-01 18:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-05 11:41 - 2011-05-19 17:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-05 09:47 - 2014-02-05 09:47 - 00000000 ____D () C:\Users\Michael\Download 2014-02-05 09:47 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\eBay_Artikel 2014-02-04 14:36 - 2009-07-14 05:45 - 00420984 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-04 09:35 - 2010-12-05 16:50 - 00000000 ____D () C:\Program Files (x86)\KeePass Password Safe 2 2014-02-04 09:26 - 2011-12-15 14:28 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\TeamViewer 2014-02-04 08:25 - 2010-11-24 18:23 - 00110736 _____ () C:\Users\Michael\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-04 08:09 - 2012-08-30 15:30 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-02-03 17:53 - 2010-11-26 14:52 - 00000000 ____D () C:\Users\Michael\Vodafone 2014-02-03 17:45 - 2009-07-14 18:58 - 00703230 _____ () C:\Windows\system32\perfh007.dat 2014-02-03 17:45 - 2009-07-14 18:58 - 00150838 _____ () C:\Windows\system32\perfc007.dat 2014-02-03 17:45 - 2009-07-14 06:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-01 16:30 - 2014-02-01 16:29 - 01362704 _____ () C:\Windows\Minidump\020114-35677-01.dmp 2014-02-01 16:29 - 2013-04-21 11:19 - 706911602 _____ () C:\Windows\MEMORY.DMP 2014-02-01 16:29 - 2011-10-13 20:13 - 00000000 ____D () C:\Windows\Minidump 2014-02-01 11:05 - 2010-11-26 14:53 - 00000000 ____D () C:\Users\Michael\Excel 2014-01-28 09:12 - 2013-10-09 16:53 - 00000000 ____D () C:\Program Files\iTunes 2014-01-28 09:12 - 2013-09-23 19:28 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-28 09:12 - 2013-09-23 19:28 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-28 09:11 - 2014-01-28 09:11 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-01-28 09:11 - 2013-10-09 16:53 - 00000000 ____D () C:\Program Files\iPod 2014-01-28 09:11 - 2011-06-24 10:54 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-01-28 09:10 - 2011-10-17 17:34 - 00000000 ____D () C:\Program Files\Bonjour 2014-01-28 09:10 - 2011-10-17 17:34 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-01-28 09:09 - 2010-11-25 19:54 - 00000000 ____D () C:\ProgramData\Apple 2014-01-28 08:17 - 2010-11-24 18:41 - 00000000 ____D () C:\Users\Michael\AppData\Local\Deployment 2014-01-27 09:15 - 2013-07-27 16:39 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Dropbox 2014-01-27 08:43 - 2013-07-27 16:42 - 00000000 ___RD () C:\Users\Michael\Dropbox 2014-01-27 08:43 - 2013-07-27 16:40 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-26 17:36 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\Briefmarken 2014-01-22 08:47 - 2013-12-18 18:24 - 00000000 ____D () C:\Program Files (x86)\McAfee 2014-01-20 10:28 - 2010-11-26 16:15 - 00000000 ____D () C:\Program Files (x86)\Ages 2014-01-20 10:13 - 2010-11-24 22:29 - 00000000 ____D () C:\Users\Michael\AppData\Local\Adobe 2014-01-19 13:36 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\Degussa 2014-01-19 13:32 - 2010-11-26 15:12 - 00000000 ____D () C:\Users\Ria\1822direkt 2014-01-19 13:31 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\1822Direkt 2014-01-19 13:29 - 2010-11-26 15:12 - 00000000 ____D () C:\Users\Ria\BMW_Bank 2014-01-19 13:27 - 2010-11-26 15:11 - 00000000 ____D () C:\Users\Michael\BMW_Bank 2014-01-19 13:14 - 2013-12-12 13:36 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-19 13:13 - 2014-01-19 13:13 - 00005402 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log 2014-01-19 13:13 - 2010-11-16 10:35 - 00000000 ____D () C:\Program Files (x86)\Java 2014-01-16 18:22 - 2010-11-16 03:24 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-01-16 18:21 - 2010-11-16 03:24 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-01-16 18:16 - 2013-07-25 19:15 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 18:13 - 2010-11-24 21:53 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 18:03 - 2010-11-26 14:52 - 00000000 ____D () C:\Users\Michael\wilhelm-tel Files to move or delete: ==================== C:\Users\Catarina\pd_unin201.exe C:\Users\Catarina\w9x_622.exe Some content of TEMP: ==================== C:\Users\Michael\AppData\Local\Temp\aqbarqcr.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-03 15:40 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-02-2014 03 Ran by Michael at 2014-02-10 09:12:02 Running from C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TUXETQKT Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892} AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH) AccelerometerP11 (x32 Version: 2.00.11.15 - STMicroelectronics) Acer eBook Manager (x32 Version: 1.00.3008 - Acer Incorporated) Acronis*True*Image*Home 2011 (x32 Version: 14.0.6942 - Acronis) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden Adobe Digital Editions (x32 Version: - ) Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Advanced Audio FX Engine (x32 Version: 1.12.05 - Creative Technology Ltd) Ages! 2.0.4 (x32 Version: 2.0.4 - Jörn Daub e.K.) Ahnenblatt 2.74 (x32 Version: 2.74.0.1 - Dirk Boettcher) Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC) Amazon Music Importer (x32 Version: 2.1.0 - Amazon Services LLC) Hidden Apple Application Support (x32 Version: 3.0 - Apple Inc.) Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) ArcSoft Panorama Maker 5 (x32 Version: 5.0.1.25 - ArcSoft) Audible Download Manager (x32 Version: 6.6.0.15 - Audible, Inc.) Bonjour (Version: 3.0.0.10 - Apple Inc.) Canon MP Navigator EX 4.0 (x32 Version: - ) Canon Solution Menu EX (x32 Version: - ) CanoScan LiDE 110 Scanner Driver (Version: - ) CCleaner (Version: 4.00 - Piriform) CDBurnerXP (x32 Version: 4.5.0.3717 - CDBurnerXP) Cisco Systems VPN Client 4.8.01.0300 (x32 Version: 4.8.1 - Cisco Systems, Inc.) Copernic Desktop Search - Home (x32 Version: - Copernic Inc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.60 - Dell) Dell DataSafe Local Backup (x32 Version: 9.4.60 - Dell) Dell DataSafe Online (x32 Version: 1.2.0011 - Dell, Inc.) Dell Dock (Version: 2.0 - Stardock Corporation) Hidden Dell Dock (x32 Version: 2.0 - Stardock Corporation) Dell Driver Download Manager (HKCU Version: 2.1.0.0 - Dell Inc.) Dell Edoc Viewer (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (x32 Version: 1.00.0000 - Dell Inc.) Dell Webcam Central (x32 Version: 2.00.39 - Creative Technology Ltd) Disk Speedup (x32 Version: - Systweak INC.) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) Feedback Tool (x32 Version: 1.2.0 - Microsoft Corporation) Free Studio version 2013 (x32 Version: 6.2.2.1128 - DVDVideoSoft Ltd.) FRITZ!Box USB-Fernanschluss (HKCU Version: 2.3.2.0 - AVM Berlin) Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.) Google Earth (x32 Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Google+ Auto Backup (x32 Version: 1.0.21.81 - Google) Hardcopy (x32 Version: 2013.11.01 - www.hardcopy.de) iCloud (Version: 3.1.0.40 - Apple Inc.) Intel PROSet Wireless (Version: - ) Hidden Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation) Intel(R) PROSet/Wireless WiFi-Software (Version: 13.02.1000 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014 - Intel Corporation) Internet Updater (x32 Version: 2.6.57 - Parallel Lines Development, LLC) <==== ATTENTION Internet-TV für Windows Media Center (x32 Version: 4.2.2.0 - Microsoft Corporation) IrfanView (remove only) (x32 Version: 4.28 - Irfan Skiljan) iTunes (Version: 11.1.4.62 - Apple Inc.) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JMicron Flash Media Controller Driver (x32 Version: 1.0.41.2 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KeePass Password Safe 2.25 (x32 Version: 2.25 - Dominik Reichl) McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.) McAfee SecurityCenter (x32 Version: 12.8.903 - McAfee, Inc.) McAfee Virtual Technician (x32 Version: 7.1.0.2483 - McAfee, Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Business 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (x32 Version: 14.0.5120.5000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Sync Framework Runtime v1.0 (x64) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services v1.0 (x64) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable - KB2467175 (x32 Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.58299 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) My Dell (Version: 3.4.6422.14 - PC-Doctor, Inc.) Nikon File Uploader 2 (x32 Version: 2.00.0001 - Nikon) Nikon Message Center 2 (x32 Version: 2.0.1 - Nikon) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Display Control Panel (Version: 6.14.12.5939 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden PC Beschleunigen - Vollständige Deinstallation (Version: 2.3.18 - Speedchecker Limited) PC Connectivity Solution (x32 Version: 8.15.0.0 - Nokia) PCSpeedUp (HKCU Version: - www.pcspeedup.com) PDF-XChange Viewer (Version: 2.5.200.0 - Tracker Software Products Ltd.) Picasa 3 (x32 Version: 3.9 - Google, Inc.) Picture Control Utility (x32 Version: 1.2.0 - Nikon) Printer Pro Desktop (x32 Version: - Readdle) Quickset64 (Version: 10.8.5 - Dell Inc.) QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Reader for PC (x32 Version: 1.1.05.13310 - Sony Corporation) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6194 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden Roxio Burn (x32 Version: 1.01 - Roxio) Hidden Samsung Mobile phone USB driver Drive Software (Version: - ) Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.) SamsungConnectivityCableDriver (x32 Version: 6.83.6.2.1 - Samsung) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Shared C Run-time for x64 (Version: 10.0.0 - McAfee) Skype Click to Call (x32 Version: 5.11.9874 - Skype Technologies S.A.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) Steuer-Spar-Erklärung 2011 (x32 Version: 16.14 - Akademische Arbeitsgemeinschaft Verlag) Steuer-Spar-Erklärung 2012 (x32 Version: 17.11 - Wolters Kluwer Deutschland GmbH) Steuer-Spar-Erklärung 2013 (x32 Version: 18.09 - Wolters Kluwer Deutschland GmbH) SteuerSparErklärung 2014 (x32 Version: 19.04.49 - Akademische Arbeitsgemeinschaft) Synaptics Pointing Device Driver (Version: 15.1.4.0 - Synaptics Incorporated) TeamViewer 9 (x32 Version: 9.0.25790 - TeamViewer) Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6 - Intel) UltraEdit 14.20 (x32 Version: 14.2.50 - IDM Computer Solutions, Inc.) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) Updater (x32 Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION ViewNX 2 (x32 Version: 2.0.1 - Nikon) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0 - Microsoft Corporation) Windows-Treiberpaket - Nokia pccsmcfd (10/12/2007 6.85.4.0) (Version: 10/12/2007 6.85.4.0 - Nokia) ==================== Restore Points ========================= 10-02-2014 07:47:55 Ende der Bereinigung ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {054C1C56-2627-46DD-8617-61C1F09CA293} - System32\Tasks\{B9B999B7-5D83-4D5A-91EA-AF0290CEAB5D} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.1.0.112&LastError=12002 Task: {077ABAB7-2215-4AB3-9336-4819ADD41006} - System32\Tasks\{A2AD49EE-E525-4D04-B714-3CA5003BDF5C} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-15] (Skype Technologies S.A.) Task: {1CDC7965-62EE-4152-AA1B-F22CAAE86458} - System32\Tasks\{C066D1BB-1BC8-45A8-A4B7-01F94849B9AD} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.5.0.112&LastError=12002 Task: {26F94FE1-8614-4B06-BD1B-38EF043E2029} - System32\Tasks\{5BB0D480-A7F9-4FF7-B086-4E19F4F8BC5B} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.0.0.152&LastError=12002 Task: {2A08B42A-8889-48C3-8394-B9435FDF132D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.) Task: {3977027E-B16D-4DD5-90A0-F75813CA9327} - System32\Tasks\{D5AA0401-CE8B-401F-AFEC-003327B90349} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=6.9.0.106&LastError=12002 Task: {3CED727D-D43E-4C5A-B5DF-0E4C399A4274} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {5492398D-0D8C-4736-8A3A-8E6FFC67D188} - System32\Tasks\{C9C1AF87-453A-4B85-984E-C9E38C411EEF} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=6.3.0.107&LastError=12002 Task: {5D4CC650-B1B8-4DB5-A481-11B422A33023} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [2012-11-08] () Task: {643CC7D2-F0D6-4F50-9BDA-F16CFABB102F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd) Task: {69FB651D-655D-4067-8813-BFFF3A3C0671} - System32\Tasks\{03EFA4D9-BD26-4244-8A7D-E34BA1170615} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-15] (Skype Technologies S.A.) Task: {6C258D2D-A43F-464E-8F05-4974C935914A} - System32\Tasks\{F74D1EBC-5DC5-407D-B62F-3519C806C3A1} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-15] (Skype Technologies S.A.) Task: {780DF6AB-1211-4D2A-BFC2-C89699FCF3E8} - System32\Tasks\{23B4518B-DF30-4568-B240-09F8465FBCE0} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.5.0.115&LastError=12002 Task: {7860F228-EA5F-4060-B602-3FC655DB736F} - System32\Tasks\{6383676A-2ADD-442C-BC5C-BC12B873198B} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.6.59.105&LastError=12002 Task: {8D0FE8D1-47B6-4A36-9942-9C8B70CBA4EF} - System32\Tasks\{4EC49072-415A-4419-A29D-B49E4EAA038F} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.6.59.110&LastError=12002 Task: {8D3A8149-9BAC-4ECA-814C-7C704438117B} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.) Task: {939BA8FB-1A13-4929-AFBD-B16FC1B5A4B8} - System32\Tasks\{78BB73AF-0EDF-4349-9A9E-B7EB9E925162} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.116&LastError=12002 Task: {97A0C260-F063-4E94-A048-4C78D090D988} - System32\Tasks\{3558E2F3-5F88-400A-978B-6599466197B9} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.3.0.108&LastError=12002 Task: {A01CF946-89F7-45B5-B1D4-B654FABD28E3} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe Task: {AAACAC1A-DFF0-4B75-9FA1-CAF9B3B1270C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-24] (Google Inc.) Task: {AC51D023-2311-4D1B-91A6-1BE328DC1642} - System32\Tasks\{7D9AA378-7D9F-40D5-A428-E218BEFEB32B} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.0.0.156&LastError=12002 Task: {B1A2382B-0997-4A3D-8B60-C32B47E2D1CD} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {C8B54B5C-F0E3-4CE1-A10A-FC69911EE1A6} - System32\Tasks\{CC6921C7-FEA9-4DD5-B487-5069432A7C55} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.5.0.117&LastError=12002 Task: {CC567B46-DDD1-464F-B3D2-79681B149C0F} - System32\Tasks\{00B36940-BDF9-4486-ACE7-0C1CAC9D48FD} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.1.0.104&LastError=12002 Task: {D83DB3A0-F4ED-4D51-8872-4426957A2D00} - System32\Tasks\{22ED4B29-EB5B-470D-8C4E-CB5592DBD8D1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.3.0.120/de/go/help.faq.installer?source=lightinstaller&LastError=1618 Task: {E5A16078-CB12-4D47-A930-F1DD0DF6CA90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated) Task: {E72B8ACC-C525-42DB-9533-E4968EC62BB8} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [2013-07-17] () Task: {FCE1675E-A991-4362-B74A-50B783142370} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-12-07] (PC-Doctor, Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-11-12 16:48 - 2013-10-30 10:49 - 00126968 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_43_x64.dll 2013-11-12 16:48 - 2012-11-08 07:38 - 00044608 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe 2013-11-12 16:48 - 2013-07-17 16:03 - 00037880 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe 2010-11-16 10:45 - 2011-08-18 16:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE 2010-03-05 16:21 - 2010-03-05 16:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll 2012-02-02 17:22 - 2012-02-02 17:22 - 02132992 _____ () C:\Program Files (x86)\Printer Pro Desktop\PrinterProDesktop.exe 2013-08-15 17:13 - 2013-08-15 17:13 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\6adce3800cbb5d24db126fa82691c75c\VistaBridgeLibrary.ni.dll 2009-12-15 21:14 - 2009-12-15 21:14 - 00498160 _____ () C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe 2008-10-24 16:35 - 2008-10-24 16:35 - 00128296 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe 2013-11-12 16:48 - 2013-10-30 10:49 - 00117752 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_43_Win32.dll 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-11-12 16:48 - 2012-07-05 14:56 - 00052800 _____ () C:\Program Files (x86)\Hardcopy\hardcopy_05.dll 2013-11-12 16:48 - 2013-09-14 08:20 - 02922488 _____ () C:\Program Files (x86)\Hardcopy\HcDllS.dll 2013-12-12 12:36 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-08-15 17:09 - 2013-08-15 17:09 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\44bfa824a3b8a6f789fda79a2e01a8db\IsdiInterop.ni.dll 2010-11-16 10:41 - 2010-03-04 03:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf 2013-02-14 14:46 - 2013-02-14 14:46 - 01044048 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== Faulty Device Manager Devices ============= Name: McAfee Inc. mfeapfk Description: McAfee Inc. mfeapfk Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: mfeapfk Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Error: (02/10/2014 08:51:01 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Cisco Systems Inc. IPSec Driver" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (02/10/2014 08:51:01 AM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\SysWOW64\Drivers\CVPNDRVA.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (02/10/2014 08:50:49 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WajamUpdaterV3" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (02/10/2014 08:50:48 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet: %%1243 Error: (02/10/2014 08:50:48 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Cisco Systems Inc. IPSec Driver" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (02/10/2014 08:50:48 AM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\SysWOW64\Drivers\CVPNDRVA.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (02/10/2014 08:46:35 AM) (Source: Service Control Manager) (User: ) Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-02-10 08:51:01.440 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:51:01.128 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:50:48.773 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:50:48.601 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:15:48.689 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:15:48.470 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:15:18.815 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:15:18.612 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:02:42.843 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-10 08:02:42.593 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\SysWOW64\drivers\CVPNDRVA.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. defogger_disable by jpshortstuff (23.02.10.1) Log created at 09:09 on 10/02/2014 (Michael) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- |
| Themen zu Was ist 'Internet Updater' von Parallel Lines und wie werde ich das wieder los? |
| adobe, canon, chromium, defender, device driver, dvdvideosoft ltd., flash player, homepage, internet updater, loswerden, minidump, pup.optional.dynconie.a, pup.optional.internetupdater.a, pup.optional.searchagent, pup.optional.searchdonkey.a, pup.optional.wajam.a, pup.optional.websteroids.a, realtek, security, services.exe, siteadvisor, software, speedchecker, system, tracker, trojan.agent, usb |
Baum-Darstellung