|
Log-Analyse und Auswertung: dll Fehlermeldung beim start des rechner`sWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
15.02.2014, 11:39 | #1 |
| dll Fehlermeldung beim start des rechner`s Hallo, ich habe seit mitte januar beim hochfahren jedesmal die meldung background conduit dll kann nicht geladen werden. Ich habe die anderen treads dazu gelesen und nach Anleitung abgearbeitet. Fehlermeldung immernoch da.? |
15.02.2014, 11:43 | #2 |
Ruhe in Frieden † 2019 | dll Fehlermeldung beim start des rechner`sMein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist. Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst. Ich bedanke mich für deine Geduld Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke. Dazu:
Ich schau mir das einmal an, dazu: Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
15.02.2014, 13:31 | #3 |
| dll Fehlermeldung beim start des rechner`s www.malwarebytes.org
__________________Datenbank Version: v2014.02.15.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16518 Vince :: VINCE-PC [Administrator] Schutz: Aktiviert 15.02.2014 11:53:27 MBAM-log-2014-02-15 (12-55-26).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 410117 Laufzeit: 1 Stunde(n), 1 Minute(n), 33 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 6 C:\Users\Vince\AppData\Local\Temp\ct3317893 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\xpi (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\xpi\defaults (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 21 C:\Users\Vince\AppData\Local\Temp\ct3317893\statisticsStub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\stub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\{D4F729E4-6349-46CB-A420-2B6B0F140B12}\Addons\extIE_setup.exe (PUP.Optional.MultiPlug.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\{D4F729E4-6349-46CB-A420-2B6B0F140B12}\Addons\ext_setup.exe (PUP.Optional.MultiPlug.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\{D4F729E4-6349-46CB-A420-2B6B0F140B12}\Addons\ytab_setup.exe (PUP.Optional.MultiPlug.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\{D4F729E4-6349-46CB-A420-2B6B0F140B12}\Addons\ytbmk_setup.exe (PUP.Optional.MultiPlug.A) -> Keine Aktion durchgeführt. C:\Users\Vince\Downloads\CCleaner - CHIP-Downloader.exe (PUP.Optional.DownloadSponsor) -> Keine Aktion durchgeführt. C:\Users\Vince\Downloads\SoftonicDownloader_fuer_youtube-downloader-hd-portable.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt. C:\Users\Vince\Downloads\YTD471Setup.exe (PUP.Optional.Spigot.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\chromeid.txt (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\conduit.xml (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\CT3317893.txt (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\CT3317893.xpi (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\initdata.json (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\manifest.json (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\setup.ini.txt (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\version.txt (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\xpi\install.rdf (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Local\Temp\ct3317893\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt. C:\Users\Vince\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Keine Aktion durchgeführt. (Ende) AdwCleaner v3.018 - Bericht erstellt am 15/02/2014 um 13:01:10 # Updated 28/01/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Vince - VINCE-PC # Gestartet von : C:\Users\Vince\Desktop\adwcleaner.exe # Option : Suchen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16518 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default\prefs.js ] -\\ Google Chrome v32.0.1700.107 [ Datei : C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [8661 octets] - [14/02/2014 18:07:29] AdwCleaner[R1].txt - [1044 octets] - [14/02/2014 19:03:18] AdwCleaner[R2].txt - [906 octets] - [15/02/2014 13:01:10] AdwCleaner[S0].txt - [8336 octets] - [14/02/2014 18:11:27] AdwCleaner[S1].txt - [1106 octets] - [14/02/2014 19:04:44] ########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1085 octets] ########## Junkware Removal Tool (JRT) by Thisisu Version: 6.1.1 (02.04.2014:1) OS: Windows 7 Home Premium x64 Ran by Vince on 15.02.2014 at 13:08:39,25 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 15.02.2014 at 13:24:12,55 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: [CODE]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01 Ran by Vince (administrator) on VINCE-PC on 15-02-2014 13:26:53 Running from C:\Users\Vince\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Validity Sensors, Inc.) C:\Windows\system32\vfsFPService.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe () C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe () C:\Windows\PLFSetI.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (CyberLink) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2009-11-20] () HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.) HKLM-x32\...\Run: [VitaKeyPdtWzd] - C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3622912 2009-09-05] (Egis Technology Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [152872 2009-09-07] (CyberLink Corp.) HKLM-x32\...\Run: [PlayMovie] - C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [173288 2009-05-21] (Acer Corp.) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [206120 2009-09-07] (CyberLink) HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-12-13] (Nullsoft, Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-30] (Microsoft Corporation) HKU\S-1-5-21-1022589037-847089704-111290477-1000\...\MountPoints2: {0019d801-5e8d-11e3-88df-00a0d1adc36c} - G:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1022589037-847089704-111290477-1000\...\MountPoints2: {309e6b91-5f58-11e3-942d-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1000\...\MountPoints2: {dc77c984-5fe8-11e3-aaca-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {0019d801-5e8d-11e3-88df-00a0d1adc36c} - G:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {309e6b91-5f58-11e3-942d-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {dc77c984-5fe8-11e3-aaca-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {f71d6154-5923-11e3-841f-806e6f6e6963} - F:\.\AutorunX\AutorunX.exe Lsa: [Notification Packages] C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64 ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2E3129BA2DEDCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default FF Homepage: https://www.facebook.com/stefan.kaiser.148553?ref=tn_tnmn FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: YoutubeAdblocker - C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default\Extensions\au1_wtp@oaeaieeixjy.com [2014-01-06] FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-12-21] Chrome: ======= CHR HomePage: hxxp://www.google.de/ig?hl=de CHR Extension: (Google Docs) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-12] CHR Extension: (Google Drive) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-12] CHR Extension: (No Name) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbfneohdaagofcefhdccickgambklhid [2014-01-03] CHR Extension: (YouTube) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-12] CHR Extension: (Google-Suche) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-12] CHR Extension: (Search by Image (by Google)) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2013-12-12] CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-12-12] CHR Extension: (SoundGecko) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpdaiiodhbjjcfmmflmidbhgibekagi [2014-02-14] CHR Extension: (Click&Clean) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2014-02-14] CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-12-12] CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-12-12] CHR Extension: (Virtuelle Tastatur) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-12-12] CHR Extension: (Google Maps) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2013-12-12] CHR Extension: (Eingestellt: Virtuelle Tastatur (von Google)) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig [2014-02-14] FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01 Ran by Vince at 2014-02-15 13:27:23 Running from C:\Users\Vince\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== A310 DeviceStage 1.0.0.1 (x32 Version: 1.0.0.1 - AVerMedia TECHNOLOGIES, Inc.) Acer Arcade Deluxe (x32 Version: 2.1.5529 - CyberLink Corp.) Acer Arcade Deluxe (x32 Version: 2.1.5529 - CyberLink Corp.) Hidden Acer Bio Protection (x32 Version: 6.2.56 - Egis Technology Inc.) Acer Crystal Eye Webcam (x32 Version: 5.2.10.2 - Suyin Optronics Corp) Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.6.147 - Adobe Systems, Inc.) Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.30 - Atheros Communications Inc.) AVerMedia A310 (MiniCard, DVB-T) 1.1.64.30 (x32 Version: 1.1.64.30 - AVerMedia TECHNOLOGIES, Inc.) bob internet (x32 Version: 1.16.1.0 - A1 Telekom Austria AG) bob internet (x32 Version: 1.16.1.0 - A1 Telekom Austria AG) Hidden CDBurnerXP (x32 Version: 4.5.2.4478 - CDBurnerXP) CrystalDiskInfo 6.0.1 (x32 Version: 6.0.1 - Crystal Dew World) Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (Version: - Microsoft) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Fingerprint Solution (x32 Version: 6.1.56.0 - Egis Technology Inc.) Hidden Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HTC Driver Installer (x32 Version: 4.10.0.001 - HTC Corporation) HTC Sync Manager (x32 Version: 2.4.11.0 - HTC) Intel(R) PRO/Wireless Driver (Version: 16.01.1000.0494 - Intel Corporation) Hidden Intel® Matrix Storage Manager (Version: - Intel Corporation) Intel® PROSet/Wireless Software (x32 Version: 16.1.1 - Intel Corporation) Intel® PROSet/Wireless WiFi Software (Version: 16.01.1000.0235 - Intel Corporation) Hidden IPTInstaller (x32 Version: 4.0.8 - HTC) ITECIR (x32 Version: 1.00.0000 - ITE) JMicron JMB38X Flash Media Controller (x32 Version: 1.00.12.07 - JMicron Technology Corp.) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden Launch Manager (x32 Version: 3.0.02 - Acer Inc.) Logitech SetPoint 6.61 (Version: 6.61.15 - Logitech) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA Grafiktreiber 327.02 (Version: 327.02 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden NVIDIA Update 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden partypoker (x32 Version: - PartyGaming) PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation) PokerStars (x32 Version: - PokerStars) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5983 - Realtek Semiconductor Corp.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamViewer 9 (x32 Version: 9.0.24951 - TeamViewer) Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (Version: - Microsoft) Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2826004) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837626) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837637) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837638) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837655) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2850066) 64-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2850063) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2850061) 64-Bit Edition (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2767850) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SkyDrive Pro (KB2817495) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Word 2013 (KB2837647) 64-Bit Edition (Version: - Microsoft) Validity Sensors software (Version: 2.8.120 - Validity Sensors, Inc.) VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN) Winamp (x32 Version: 5.666 - Nullsoft, Inc) WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH) ==================== Restore Points ========================= 31-01-2014 23:56:13 Windows Update 04-02-2014 07:24:58 Windows Update 07-02-2014 08:43:36 Windows Update 08-02-2014 23:43:04 Windows Update 10-02-2014 06:52:57 Windows Update 13-02-2014 02:00:18 Windows Update 14-02-2014 12:52:26 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0079E2BE-2001-4E78-824E-C07C6748983E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {2FEE6CB9-E8C5-4247-9C60-479BB37E0168} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {48FAE8D2-BCE9-4875-BBFC-6E9C5767027D} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Vince\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun Task: {62860DC5-A84F-41DE-898E-5444ECCFADAC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-12] (Google Inc.) Task: {85EE75FB-2464-4F17-931A-1E300AE98754} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-12] (Google Inc.) Task: {BDA254E0-CC40-4883-A310-B15574BE1E90} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {CC1DD946-4558-4AB6-A032-B6DE89EAD8C8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-12-07 12:10 - 2009-11-20 15:34 - 00200704 _____ () C:\Windows\PLFSetI.exe 2013-11-14 21:32 - 2013-11-14 21:32 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2014-01-06 21:13 - 2009-04-16 16:56 - 00075048 ____N () C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe 2013-11-14 21:30 - 2013-11-14 21:30 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll 2013-11-14 21:33 - 2013-11-14 21:33 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll 2013-11-14 21:34 - 2013-11-14 21:34 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll 2012-12-07 18:27 - 2012-12-07 18:27 - 00167424 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 2009-09-07 19:50 - 2009-09-07 19:50 - 00873768 ____N () C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMediaLibrary.dll 2009-09-07 19:50 - 2009-09-07 19:50 - 00013096 ____N () C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvcPS.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-02-15 12:18:05.481 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:18:05.479 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:18:05.477 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:03:22.212 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:03:22.209 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:03:22.207 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 02:49:31.420 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 02:49:31.420 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 02:49:31.420 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 02:49:31.404 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 4093.96 MB Available physical RAM: 2552.73 MB Total Pagefile: 8186.11 MB Available Pagefile: 6215.02 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:239.04 GB) (Free:185.6 GB) NTFS Drive d: () (Fixed) (Total:222.9 GB) (Free:12.01 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4EBF5754) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=239 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=3 GB) - (Type=06) ==================== End Of Log ============================ --- --- --- |
16.02.2014, 11:35 | #4 |
Ruhe in Frieden † 2019 | dll Fehlermeldung beim start des rechner`s Hallo vinc36, das erste FRST-log ist unvollständig, achte bitte bei Schritt 2 darauf, dass du mir alles postet, danke und lösche mal die Funde von MBAM. Ist die Meldung nach untenstehendem Fix weg? Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter FF Extension: YoutubeAdblocker - C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default\Extensions\au1_wtp@oaeaieeixjy.com [2014-01-06] Task: {48FAE8D2-BCE9-4875-BBFC-6E9C5767027D} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Vince\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Starte noch einmal FRST.
|
17.02.2014, 17:03 | #5 |
| dll Fehlermeldung beim start des rechner`s Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-02-2014 Ran by Vince at 2014-02-17 16:37:53 Run:1 Running from C:\Users\Vince\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** FF Extension: YoutubeAdblocker - C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default\Extensions\au1_wtp@oaeaieeixjy.com [2014-01-06] Task: {48FAE8D2-BCE9-4875-BBFC-6E9C5767027D} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Vince\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun ***************** C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default\Extensions\au1_wtp@oaeaieeixjy.com => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{48FAE8D2-BCE9-4875-BBFC-6E9C5767027D} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48FAE8D2-BCE9-4875-BBFC-6E9C5767027D} => Key deleted successfully. C:\Windows\System32\Tasks\BackgroundContainer Startup Task => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BackgroundContainer Startup Task => Key deleted successfully. ==== End of Fixlog ==== FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-02-2014 Ran by Vince at 2014-02-17 16:41:49 Running from C:\Users\Vince\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== A310 DeviceStage 1.0.0.1 (x32 Version: 1.0.0.1 - AVerMedia TECHNOLOGIES, Inc.) Acer Arcade Deluxe (x32 Version: 2.1.5529 - CyberLink Corp.) Acer Arcade Deluxe (x32 Version: 2.1.5529 - CyberLink Corp.) Hidden Acer Bio Protection (x32 Version: 6.2.56 - Egis Technology Inc.) Acer Crystal Eye Webcam (x32 Version: 5.2.10.2 - Suyin Optronics Corp) Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.6.147 - Adobe Systems, Inc.) Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.30 - Atheros Communications Inc.) AVerMedia A310 (MiniCard, DVB-T) 1.1.64.30 (x32 Version: 1.1.64.30 - AVerMedia TECHNOLOGIES, Inc.) bob internet (x32 Version: 1.16.1.0 - A1 Telekom Austria AG) bob internet (x32 Version: 1.16.1.0 - A1 Telekom Austria AG) Hidden CDBurnerXP (x32 Version: 4.5.2.4478 - CDBurnerXP) CrystalDiskInfo 6.0.1 (x32 Version: 6.0.1 - Crystal Dew World) Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (Version: - Microsoft) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Fingerprint Solution (x32 Version: 6.1.56.0 - Egis Technology Inc.) Hidden Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HTC Driver Installer (x32 Version: 4.10.0.001 - HTC Corporation) HTC Sync Manager (x32 Version: 2.4.11.0 - HTC) Intel(R) PRO/Wireless Driver (Version: 16.01.1000.0494 - Intel Corporation) Hidden Intel® Matrix Storage Manager (Version: - Intel Corporation) Intel® PROSet/Wireless Software (x32 Version: 16.1.1 - Intel Corporation) Intel® PROSet/Wireless WiFi Software (Version: 16.01.1000.0235 - Intel Corporation) Hidden IPTInstaller (x32 Version: 4.0.8 - HTC) ITECIR (x32 Version: 1.00.0000 - ITE) JMicron JMB38X Flash Media Controller (x32 Version: 1.00.12.07 - JMicron Technology Corp.) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden Launch Manager (x32 Version: 3.0.02 - Acer Inc.) Logitech SetPoint 6.61 (Version: 6.61.15 - Logitech) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA Grafiktreiber 327.02 (Version: 327.02 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden NVIDIA Update 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden partypoker (x32 Version: - PartyGaming) PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation) PokerStars (x32 Version: - PokerStars) Realtek High Definition Audio Driver (x32 Version: 6.0.1.5983 - Realtek Semiconductor Corp.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamViewer 9 (x32 Version: 9.0.24951 - TeamViewer) Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (Version: - Microsoft) Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2826004) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837626) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837637) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837638) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837655) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2013 (KB2850066) 64-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2850063) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2850061) 64-Bit Edition (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2767850) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SkyDrive Pro (KB2817495) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Word 2013 (KB2837647) 64-Bit Edition (Version: - Microsoft) Validity Sensors software (Version: 2.8.120 - Validity Sensors, Inc.) VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN) Winamp (x32 Version: 5.666 - Nullsoft, Inc) WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH) ==================== Restore Points ========================= 31-01-2014 23:56:13 Windows Update 04-02-2014 07:24:58 Windows Update 07-02-2014 08:43:36 Windows Update 08-02-2014 23:43:04 Windows Update 10-02-2014 06:52:57 Windows Update 13-02-2014 02:00:18 Windows Update 14-02-2014 12:52:26 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0079E2BE-2001-4E78-824E-C07C6748983E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {2FEE6CB9-E8C5-4247-9C60-479BB37E0168} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {62860DC5-A84F-41DE-898E-5444ECCFADAC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-12] (Google Inc.) Task: {85EE75FB-2464-4F17-931A-1E300AE98754} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-12] (Google Inc.) Task: {BDA254E0-CC40-4883-A310-B15574BE1E90} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {CC1DD946-4558-4AB6-A032-B6DE89EAD8C8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-12-07 12:10 - 2009-11-20 15:34 - 00200704 _____ () C:\Windows\PLFSetI.exe 2013-11-14 21:32 - 2013-11-14 21:32 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2014-01-06 21:13 - 2009-04-16 16:56 - 00075048 ____N () C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe 2013-11-14 21:30 - 2013-11-14 21:30 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll 2013-11-14 21:31 - 2013-11-14 21:31 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll 2013-11-14 21:33 - 2013-11-14 21:33 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll 2013-11-14 21:34 - 2013-11-14 21:34 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll 2012-12-07 18:27 - 2012-12-07 18:27 - 00167424 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 2009-09-07 19:50 - 2009-09-07 19:50 - 00873768 ____N () C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMediaLibrary.dll 2009-09-07 19:50 - 2009-09-07 19:50 - 00013096 ____N () C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvcPS.dll 2014-02-04 08:44 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll 2014-02-04 08:44 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll 2014-02-04 08:44 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll 2014-02-04 08:44 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll 2014-02-04 08:44 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/15/2014 07:21:11 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: pprekop.exe, Version: 4.2.0.172, Zeitstempel: 0xole32.dll Name des fehlerhaften Moduls: 5.1.2600.2182, Version: 10017bed, Zeitstempel: 0x%6 Ausnahmecode: 0x%7 Fehleroffset: 0x%8 ID des fehlerhaften Prozesses: 0x%9 Startzeit der fehlerhaften Anwendung: 0xpprekop.exe0 Pfad der fehlerhaften Anwendung: pprekop.exe1 Pfad des fehlerhaften Moduls: pprekop.exe2 Berichtskennung: pprekop.exe3 System errors: ============= Error: (02/17/2014 08:49:38 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (02/16/2014 08:49:15 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Microsoft Office Sessions: ========================= Error: (02/15/2014 07:21:11 PM) (Source: Application Error)(User: ) Description: pprekop.exe4.2.0.172ole32.dll5.1.2600.218210017bed CodeIntegrity Errors: =================================== Date: 2014-02-16 02:39:01.278 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-16 02:39:01.278 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-16 02:39:01.278 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-16 02:39:01.263 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-16 02:39:01.247 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-16 02:39:01.247 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:18:05.481 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:18:05.479 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:18:05.477 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-02-15 12:03:22.212 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 50% Total physical RAM: 4093.96 MB Available physical RAM: 2045.04 MB Total Pagefile: 8186.11 MB Available Pagefile: 5047.72 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:239.04 GB) (Free:184.04 GB) NTFS Drive d: () (Fixed) (Total:222.9 GB) (Free:12.01 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4EBF5754) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=239 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=223 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=3 GB) - (Type=06) ==================== End Of Log ============================ FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-02-2014 Ran by Vince (administrator) on VINCE-PC on 17-02-2014 16:40:59 Running from C:\Users\Vince\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Validity Sensors, Inc.) C:\Windows\system32\vfsFPService.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe () C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe () C:\Windows\PLFSetI.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PwdBank.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (CyberLink) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation) C:\Windows\ehome\mcGlidHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-17] (Realtek Semiconductor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2009-11-20] () HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3091224 2013-07-31] (Logitech, Inc.) HKLM-x32\...\Run: [VitaKeyPdtWzd] - C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3622912 2009-09-05] (Egis Technology Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1115728 2009-12-15] (Dritek System Inc.) HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [ArcadeDeluxeAgent] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [152872 2009-09-07] (CyberLink Corp.) HKLM-x32\...\Run: [PlayMovie] - C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [173288 2009-05-21] (Acer Corp.) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [206120 2009-09-07] (CyberLink) HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-12-13] (Nullsoft, Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-30] (Microsoft Corporation) HKU\S-1-5-21-1022589037-847089704-111290477-1000\...\MountPoints2: {0019d801-5e8d-11e3-88df-00a0d1adc36c} - G:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1022589037-847089704-111290477-1000\...\MountPoints2: {309e6b91-5f58-11e3-942d-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1000\...\MountPoints2: {dc77c984-5fe8-11e3-aaca-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {0019d801-5e8d-11e3-88df-00a0d1adc36c} - G:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {309e6b91-5f58-11e3-942d-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {dc77c984-5fe8-11e3-aaca-00a0d1adc36c} - G:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1022589037-847089704-111290477-1003\...\MountPoints2: {f71d6154-5923-11e3-841f-806e6f6e6963} - F:\.\AutorunX\AutorunX.exe Lsa: [Notification Packages] C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64 ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2E3129BA2DEDCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Vince\AppData\Roaming\Mozilla\Firefox\Profiles\06k1esun.default FF Homepage: https://www.facebook.com/stefan.kaiser.148553?ref=tn_tnmn FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-11-29] FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-12-21] Chrome: ======= CHR HomePage: hxxp://www.google.de/ig?hl=de CHR Extension: (Google Docs) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-12] CHR Extension: (Google Drive) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-12] CHR Extension: (No Name) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbfneohdaagofcefhdccickgambklhid [2014-01-03] CHR Extension: (YouTube) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-12] CHR Extension: (Google-Suche) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-12] CHR Extension: (Search by Image (by Google)) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2013-12-12] CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-12-12] CHR Extension: (SoundGecko) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpdaiiodhbjjcfmmflmidbhgibekagi [2014-02-14] CHR Extension: (Click&Clean) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2014-02-14] CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2013-12-12] CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-12-12] CHR Extension: (Virtuelle Tastatur) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-12-12] CHR Extension: (Google Maps) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2013-12-12] CHR Extension: (Eingestellt: Virtuelle Tastatur (von Google)) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpphfcjpaldmedbbomcdhgonmhjngfig [2014-02-14] CHR Extension: (Google Wallet) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-12] CHR Extension: (Google Quick Scroll) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2013-12-12] CHR Extension: (Click&Clean App) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2014-02-14] CHR Extension: (Google Mail) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-12] CHR Extension: (Anti-Banner) - C:\Users\Vince\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-12-12] CHR HKCU\...\Chrome\Extension: [jbaaieplnliapedmcbfgfijinolepige] - C:\Users\Vince\AppData\Local\CRE\jbaaieplnliapedmcbfgfijinolepige.crx [2013-12-12] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-08-14] CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-08-14] CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-08-14] CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-08-14] CHR HKLM-x32\...\Chrome\Extension: [jbaaieplnliapedmcbfgfijinolepige] - C:\Users\Vince\AppData\Local\CRE\jbaaieplnliapedmcbfgfijinolepige.crx [2013-08-14] CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-08-14] ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-11-29] (Kaspersky Lab ZAO) R2 CLHNService; C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [75048 2009-04-16] () R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-10] (Nero AG) R2 IGBASVC; C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3452928 2009-09-05] (Egis Technology Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-07-17] () R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () R2 vfsFPService; C:\Windows\system32\vfsFPService.exe [721712 2009-06-03] (Validity Sensors, Inc.) R2 vfsFPService; C:\Windows\SysWOW64\vfsFPService.exe [599344 2009-06-03] (Validity Sensors, Inc.) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3377904 2013-07-17] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R3 A310; C:\Windows\System32\DRIVERS\AVerA310USB.sys [32256 2009-05-06] (AVerMedia TECHNOLOGIES, Inc.) R3 BDASwCap; C:\Windows\System32\drivers\AVerA310Cap.sys [55296 2009-05-06] (AVerMedia TECHNOLOGIES, Inc.) S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) R2 int15; C:\Windows\SysWOW64\drivers\int15_64.sys [15656 2008-09-09] () R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-29] (Kaspersky Lab ZAO) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620640 2013-12-19] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-11-29] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-29] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-29] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-19] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\000.fcl [146928 2009-09-11] (CyberLink Corp.) U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-17 16:37 - 2014-02-17 16:37 - 00000000 ____D () C:\Users\Vince\Desktop\FRST-OlderVersion 2014-02-15 13:24 - 2014-02-17 16:41 - 00023233 _____ () C:\Users\Vince\Desktop\FRST.txt 2014-02-14 19:47 - 2014-02-17 16:40 - 00000000 ____D () C:\FRST 2014-02-14 19:45 - 2014-02-17 16:37 - 02152448 _____ (Farbar) C:\Users\Vince\Desktop\FRST64.exe 2014-02-14 18:14 - 2014-02-14 18:14 - 00000000 ____D () C:\Windows\ERUNT 2014-02-14 18:07 - 2014-02-15 13:04 - 00000000 ____D () C:\AdwCleaner 2014-02-14 14:53 - 2014-02-14 14:53 - 01037530 _____ (Thisisu) C:\Users\Vince\Desktop\JRT.exe 2014-02-14 14:52 - 2014-02-14 14:53 - 01166132 _____ () C:\Users\Vince\Desktop\adwcleaner.exe 2014-02-14 14:30 - 2014-02-14 14:30 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-14 14:30 - 2014-02-14 14:30 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\Malwarebytes 2014-02-14 14:30 - 2014-02-14 14:30 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-14 14:30 - 2014-02-14 14:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-14 14:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-14 14:27 - 2014-02-14 14:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Vince\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-14 14:07 - 2014-02-14 14:07 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Vince\Downloads\ParetoLogic PC Health Advisor_de.exe 2014-02-14 07:51 - 2014-02-14 14:10 - 00000000 ____D () C:\Users\Vince\Desktop\Kaiser 2014-02-13 19:35 - 2014-02-13 19:35 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-02-13 19:35 - 2014-02-13 19:35 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-13 19:34 - 2014-02-13 19:38 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-13 19:34 - 2014-02-13 19:34 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-13 18:43 - 2014-02-13 18:43 - 00000000 ____D () C:\Users\Vince\Desktop\Vera F. Birkenbihl - Spanisch Für Einsteiger 1und 2 2014-02-13 03:01 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-13 03:01 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-13 03:00 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-13 03:00 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-13 03:00 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-13 03:00 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-13 03:00 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-13 03:00 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-13 03:00 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-13 03:00 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-13 03:00 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-13 03:00 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-13 03:00 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-13 03:00 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-13 03:00 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-13 03:00 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-13 03:00 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-13 03:00 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-13 03:00 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-13 03:00 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-13 03:00 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-13 03:00 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-13 03:00 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-13 03:00 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-13 03:00 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-13 03:00 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-13 03:00 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-13 03:00 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-13 03:00 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-13 03:00 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-13 03:00 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-13 03:00 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-13 03:00 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-13 03:00 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-13 03:00 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-13 03:00 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-13 03:00 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-13 03:00 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-13 03:00 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-13 03:00 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-13 03:00 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-12 15:11 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-12 15:11 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-12 15:11 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-12 15:11 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-12 15:11 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 15:11 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-12 15:11 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-12 15:11 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-12 15:11 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-12 15:11 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-12 15:11 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-12 15:11 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-12 15:11 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-12 15:11 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-12 15:11 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-12 15:11 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-12 15:11 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-12 15:11 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-12 15:11 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-12 15:11 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-12 15:11 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-12 15:11 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-12 15:11 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-12 15:11 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-12 15:11 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-12 15:11 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-12 15:11 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-12 15:11 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-09 00:43 - 2014-02-11 01:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-02-09 00:43 - 2014-02-11 01:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-02-08 09:46 - 2014-02-08 09:46 - 00016418 _____ () C:\Users\Vince\Downloads\Reisespesenabrechnung.xlsx ==================== One Month Modified Files and Folders ======= 2014-02-17 16:41 - 2014-02-15 13:24 - 00023233 _____ () C:\Users\Vince\Desktop\FRST.txt 2014-02-17 16:40 - 2014-02-14 19:47 - 00000000 ____D () C:\FRST 2014-02-17 16:40 - 2013-11-29 18:06 - 01341170 _____ () C:\Windows\WindowsUpdate.log 2014-02-17 16:37 - 2014-02-17 16:37 - 00000000 ____D () C:\Users\Vince\Desktop\FRST-OlderVersion 2014-02-17 16:37 - 2014-02-14 19:45 - 02152448 _____ (Farbar) C:\Users\Vince\Desktop\FRST64.exe 2014-02-17 16:36 - 2013-12-12 19:19 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-17 16:34 - 2013-11-29 20:34 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-17 15:09 - 2013-11-29 18:25 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-02-17 09:13 - 2013-12-14 18:39 - 00000000 ____D () C:\Users\Vince\AppData\Local\PokerStars.EU 2014-02-16 22:36 - 2013-12-12 19:19 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-16 01:00 - 2009-07-14 05:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-16 01:00 - 2009-07-14 05:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-15 13:12 - 2009-07-14 18:58 - 00699342 _____ () C:\Windows\system32\perfh007.dat 2014-02-15 13:12 - 2009-07-14 18:58 - 00149450 _____ () C:\Windows\system32\perfc007.dat 2014-02-15 13:12 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-15 13:07 - 2013-12-06 21:15 - 00000000 ____D () C:\Users\Vince\AppData\Local\HTC MediaHub 2014-02-15 13:05 - 2013-12-09 18:58 - 00011696 _____ () C:\Windows\setupact.log 2014-02-15 13:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-15 13:04 - 2014-02-14 18:07 - 00000000 ____D () C:\AdwCleaner 2014-02-15 12:58 - 2013-12-13 20:55 - 00017448 _____ () C:\Windows\PFRO.log 2014-02-15 02:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-14 20:31 - 2014-01-07 11:44 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\Winamp 2014-02-14 18:14 - 2014-02-14 18:14 - 00000000 ____D () C:\Windows\ERUNT 2014-02-14 15:00 - 2014-01-03 08:26 - 00000000 ____D () C:\Users\Vince\AppData\Local\genienext 2014-02-14 14:53 - 2014-02-14 14:53 - 01037530 _____ (Thisisu) C:\Users\Vince\Desktop\JRT.exe 2014-02-14 14:53 - 2014-02-14 14:52 - 01166132 _____ () C:\Users\Vince\Desktop\adwcleaner.exe 2014-02-14 14:30 - 2014-02-14 14:30 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-14 14:30 - 2014-02-14 14:30 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\Malwarebytes 2014-02-14 14:30 - 2014-02-14 14:30 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-14 14:30 - 2014-02-14 14:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-14 14:27 - 2014-02-14 14:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Vince\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-14 14:10 - 2014-02-14 07:51 - 00000000 ____D () C:\Users\Vince\Desktop\Kaiser 2014-02-14 14:07 - 2014-02-14 14:07 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Vince\Downloads\ParetoLogic PC Health Advisor_de.exe 2014-02-14 13:55 - 2013-11-29 20:30 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-14 13:53 - 2013-11-29 20:30 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-14 13:46 - 2013-11-29 18:34 - 00112424 _____ () C:\Users\Vince\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-13 19:38 - 2014-02-13 19:34 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-13 19:37 - 2013-11-29 20:36 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\Adobe 2014-02-13 19:37 - 2013-11-29 20:33 - 00000000 ____D () C:\Users\Vince\AppData\Local\Adobe 2014-02-13 19:35 - 2014-02-13 19:35 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-02-13 19:35 - 2014-02-13 19:35 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-13 19:34 - 2014-02-13 19:34 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-13 18:43 - 2014-02-13 18:43 - 00000000 ____D () C:\Users\Vince\Desktop\Vera F. Birkenbihl - Spanisch Für Einsteiger 1und 2 2014-02-13 03:03 - 2013-12-01 00:24 - 01593564 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-12 11:09 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-11 22:31 - 2013-12-12 19:19 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-02-11 22:31 - 2013-12-12 19:19 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-02-11 01:52 - 2014-02-09 00:43 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-02-11 01:52 - 2014-02-09 00:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-02-10 07:52 - 2013-11-30 19:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games 2014-02-09 23:14 - 2009-07-14 05:45 - 00446288 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-09 23:12 - 2014-01-13 13:43 - 00000000 ____D () C:\Program Files (x86)\WatchTVPro Ex 2014-02-09 23:11 - 2014-01-13 13:43 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\WatchTVProEx 2014-02-08 18:31 - 2013-12-01 16:22 - 00001531 _____ () C:\Users\Vince\Desktop\partypoker.lnk 2014-02-08 09:46 - 2014-02-08 09:46 - 00016418 _____ () C:\Users\Vince\Downloads\Reisespesenabrechnung.xlsx 2014-02-07 23:02 - 2013-11-30 19:27 - 00000000 ____D () C:\Users\Vince\AppData\Local\Microsoft Games 2014-02-07 10:22 - 2013-11-30 16:25 - 00000000 ____D () C:\Users\Vince\AppData\Local\Microsoft Help 2014-02-06 13:16 - 2014-02-13 03:00 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-13 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-13 03:00 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-13 03:00 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-13 03:00 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-13 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-13 03:00 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-13 03:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-13 03:00 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-13 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-13 03:00 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-13 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-13 03:00 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-13 03:00 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-13 03:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-13 03:00 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-13 03:00 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-13 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-13 03:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-13 03:00 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-13 03:00 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-13 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-13 03:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-13 03:00 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-13 03:00 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-13 03:00 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-13 03:00 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-13 03:00 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-13 03:00 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-13 03:00 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-13 03:00 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-13 03:00 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-13 03:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-13 03:00 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-13 03:00 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-13 03:00 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-13 03:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-13 03:00 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-13 03:00 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-05 12:29 - 2013-12-14 18:38 - 00000000 ____D () C:\Program Files (x86)\PokerStars 2014-02-05 10:34 - 2013-11-29 20:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-05 10:34 - 2013-11-29 20:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-05 10:34 - 2013-11-29 20:34 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-04 08:44 - 2013-12-12 19:20 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-01-28 10:30 - 2013-12-26 16:11 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\TeamViewer 2014-01-18 16:00 - 2014-01-07 10:57 - 00000000 ____D () C:\Users\Vince\AppData\Roaming\Skype Some content of TEMP: ==================== C:\Users\Vince\AppData\Local\Temp\192A.exe C:\Users\Vince\AppData\Local\Temp\C71.exe C:\Users\Vince\AppData\Local\Temp\LMkRstPt.exe C:\Users\Vince\AppData\Local\Temp\Quarantine.exe C:\Users\Vince\AppData\Local\Temp\TsuEC58EFB0.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-10 01:58 ==================== End Of Log ============================ --- --- --- --- --- --- Hallo Sandra, vielen Dank für dein Bemühen!!! Dei Fehlermeldung ist jetzt weg, aber beim runterfahren sagt`s Hintergrundproramme müssen geschlossen werden... zeigt`s aber nicht um was es geht.? VG Stefan |
20.02.2014, 13:28 | #6 | ||
Ruhe in Frieden † 2019 | dll Fehlermeldung beim start des rechner`s Hallo Stefan, Zitat:
Zitat:
Und schau mal in deine Ereignisanzeige, ob dort etwas steht: Schritt 1
Schritt 2 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Vince\AppData\Local\genienext C:\Users\Vince\AppData\Local\Temp\*.exe C:\Users\Vince\AppData\Local\Temp\*.dll Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 3 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 4 Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern ESET Online Scanner
Schritt 5 Starte noch einmal FRST.
__________________ --> dll Fehlermeldung beim start des rechner`s |
Themen zu dll Fehlermeldung beim start des rechner`s |
andere, anleitung, conduit, fehlermeldung, geladen, immernoch, januar, leitung, meldung, mobogenie, mobogenie entfernen, pup.optional.conduit.a, pup.optional.downloadsponsor, pup.optional.multiplug.a, pup.optional.nextlive.a, pup.optional.softonic.a, pup.optional.spigot.a, rechner, start |