| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
21.02.2014, 18:33
| #1 |
| |  Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet) Hallo und danke für die Hilfe in Vorhaus Ich habe eine Computer mit Win 7 Pro (Java ist nicht installiert), Thunderbird, Standard Browser ist Firefox auf dem auch NoScript Läuft. Nun zu meinen vielleicht Problem ich habe ausversehen beim löschen der Spam Mails in eine Mail Geklickt  in der ein Bild angezeigt wurde der mich auf eine Webseite weitergeleitet hatt (Normalerweise zeigt er mir keine Bilder an keine Ahnung warum da) wo In der oberen Ecke ein kleines Feld erscheinen ist. Was darin stand kann ich nicht sagen habe das Fenster eigentlich sofort geschlossen.Daten der Mail Betreff: Verkauf von Drogen in der Apotheke Von: Apotheke <apde76003556@cooleri.com.ua> An: stelz@e-weitemeyer.de (nicht meine Emailadresse) Meine Frage ist nun ob Sich da ein Programm schon durchgeschlichen haben kann. FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-02-2014
Ran by Hupit (ATTENTION: The logged in user is not administrator) on HUPIT-PC on 21-02-2014 19:16:57
Running from C:\Users\Hupit\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Electronic Arts) D:\Program Files (x86)\Origin\Origin.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6827664 2012-08-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-06] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-24] (Logitech Inc.)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-08-07] (Microsoft Corporation)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [Steam] - D:\Program Files (x86)\Steam\Steam.exe [1822400 2014-02-20] (Valve Corporation)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [EADM] - D:\Program Files (x86)\Origin\Origin.exe [3598680 2014-02-15] (Electronic Arts)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [Epson Stylus Office BX320FW(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGIE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [HP Officejet 6700 (NET)] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\MountPoints2: {5028c97e-feb8-11e2-9e6a-806e6f6e6963} - E:\AUTORUN.EXE
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\MountPoints2: {97b15c19-fe1a-11e2-8d17-806e6f6e6963} - F:\.\Bin\ASSETUP.exe
Startup: C:\Users\Hupit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8AA59245C892CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797
FF Homepage: Google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube Unblocker - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\youtubeunblocker@unblocker.yt [2014-01-24]
FF Extension: Video DivX Helper Light - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\{33e12104-b9a7-4f69-8966-f18fd276054a}.xpi [2013-11-05]
FF Extension: NoScript - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-10-08]
FF Extension: {c0904d71-7eb3-4105-abbf-71a2d256221a} - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\{c0904d71-7eb3-4105-abbf-71a2d256221a}.xpi [2013-11-04]
==================== Services (Whitelisted) =================
R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
U2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.15\AsusFanControlService.exe [1457664 2012-06-19] (ASUSTeK Computer Inc.)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-02-16] (BitRaider, LLC)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-11-21] ()
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [5087584 2013-10-01] (TeamViewer GmbH)
==================== Drivers (Whitelisted) ====================
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-09-14] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 ASUSstpt; C:\Windows\System32\DRIVERS\ASUSstpt.sys [24648 2011-09-15] (MCCI Corporation)
R3 ASUSumsc; C:\Windows\System32\DRIVERS\ASUSumsc.sys [141896 2011-09-15] (MCCI Corporation)
R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-12-09] (Avira GmbH)
R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-12-09] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15168 2012-03-10] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-21 19:14 - 2014-02-21 19:14 - 00019021 _____ () C:\Users\Hupit\Downloads\Addition.txt
2014-02-21 19:13 - 2014-02-21 19:17 - 00013363 _____ () C:\Users\Hupit\Downloads\FRST.txt
2014-02-21 19:13 - 2014-02-21 19:16 - 00000000 ____D () C:\FRST
2014-02-21 19:12 - 2014-02-21 19:12 - 02153984 _____ (Farbar) C:\Users\Hupit\Downloads\FRST64.exe
2014-02-20 16:18 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-20 16:18 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-19 21:07 - 2014-02-19 21:08 - 17954672 _____ (EaseUS ) C:\Users\Hupit\Downloads\partition_recovery_5.6.1.exe
2014-02-19 17:38 - 2014-02-19 17:38 - 04978424 _____ (EaseUS ) C:\Users\Hupit\Downloads\drw_trial.exe
2014-02-19 17:36 - 2014-02-19 17:36 - 00000957 _____ () C:\Users\Admin\Desktop\Smart Data Recovery.lnk
2014-02-19 17:36 - 2014-02-19 17:36 - 00000954 _____ () C:\Users\Admin\Desktop\Klicken Sie hier, um PC-Fehler zu finden und zu reparieren.lnk
2014-02-19 17:35 - 2014-02-19 17:35 - 02761752 _____ (Smart PC Solutions ) C:\Users\Hupit\Downloads\recoverysetup43.exe
2014-02-18 18:39 - 2014-02-21 16:21 - 00001951 _____ () C:\Windows\setupact.log
2014-02-18 18:39 - 2014-02-18 18:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-16 18:00 - 2014-02-16 18:00 - 00000000 ____D () C:\ProgramData\BitRaider
2014-02-15 16:04 - 2014-02-15 16:05 - 01416079 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de(1).zip
2014-02-15 16:04 - 2014-02-15 16:04 - 01158652 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de.zip
2014-02-15 06:57 - 2014-02-15 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 17:05 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 17:05 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 17:05 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 17:05 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 17:05 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 17:05 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 17:05 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 17:05 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 17:05 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 17:05 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 17:05 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 17:05 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 17:05 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 17:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 17:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 17:05 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 17:05 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 17:05 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 17:05 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 17:05 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 17:04 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 17:04 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 17:04 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 17:04 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 17:04 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 17:04 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 17:03 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 17:03 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 17:03 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 17:03 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 17:03 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 17:03 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 17:03 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 17:03 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 17:03 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 17:03 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 17:03 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 17:03 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 17:03 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 17:03 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 17:03 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 17:03 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 17:03 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 17:03 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 17:03 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 17:03 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 17:03 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 17:03 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 17:03 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 17:03 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 17:03 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 17:03 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 17:03 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 17:03 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 17:03 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 17:03 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 17:03 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 17:03 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 17:03 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 17:03 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 17:03 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 17:03 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 17:03 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 17:03 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 17:03 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-10 17:55 - 2014-02-10 17:55 - 00001202 _____ () C:\Users\Admin\Desktop\Format Factory.lnk
2014-02-10 17:55 - 2014-02-10 17:55 - 00000000 ____D () C:\Program Files (x86)\FreeTime
2014-02-10 17:53 - 2014-02-10 17:54 - 58014512 _____ (Free Time) C:\Users\Hupit\Downloads\FFSetup3.3.1.0.exe
2014-02-08 21:28 - 2013-02-23 18:24 - 00002089 _____ () C:\Users\Hupit\Documents\configuration.php
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\Visan
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-03 19:34 - 2014-02-16 14:07 - 00000600 _____ () C:\Users\Hupit\AppData\Roaming\winscp.rnd
2014-02-03 16:16 - 2014-02-03 16:32 - 701560614 _____ () C:\Users\Hupit\Downloads\2013-09-25-wheezy-raspbian-lcd4.7z
2014-02-02 18:10 - 2014-02-16 16:08 - 00002184 ____H () C:\Users\Hupit\Documents\Default.rdp
2014-02-02 17:29 - 2014-02-04 16:28 - 00000806 _____ () C:\Users\Hupit\Desktop\Raspberry - Verknüpfung.lnk
2014-02-02 17:28 - 2014-02-02 17:28 - 00000600 _____ () C:\Users\Admin\AppData\Roaming\winscp.rnd
2014-02-02 17:27 - 2014-02-02 17:27 - 00002141 _____ () C:\Users\Admin\Desktop\root@Hupitpi.lnk
2014-02-02 17:23 - 2014-02-02 17:23 - 00002129 _____ () C:\Users\Admin\Desktop\pi@Hupitpi.lnk
2014-02-02 17:22 - 2014-02-02 17:22 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-02-02 17:17 - 2014-02-17 20:09 - 00000600 _____ () C:\Users\Hupit\AppData\Local\PUTTY.RND
2014-02-01 19:26 - 2014-02-01 19:26 - 00000425 _____ () C:\Users\Hupit\Downloads\listen-dsl.pls
2014-01-28 19:28 - 2014-01-28 19:28 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\ProgramData\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-28 19:11 - 2013-12-09 11:37 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-28 19:01 - 2014-02-21 18:45 - 00817029 _____ () C:\Windows\WindowsUpdate.log
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird
2014-01-28 18:19 - 2014-01-28 18:30 - 144752616 _____ () C:\Users\Admin\Desktop\avira_internet_security_de.exe
2014-01-28 18:18 - 2014-01-28 18:18 - 00227096 _____ () C:\Users\Admin\Desktop\avira_registry_cleaner_de.exe
2014-01-28 18:15 - 2014-01-28 18:16 - 01300824 _____ () C:\Users\Hupit\Downloads\avira_support_collector_de.exe
2014-01-27 21:07 - 2014-02-11 16:24 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\HpUpdate
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-24 19:07 - 2014-01-24 19:07 - 00000000 ____D () C:\Users\Hupit\Documents\OneNote-Notizbücher
2014-01-24 18:59 - 2014-01-25 03:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-01-24 18:59 - 2014-01-24 18:59 - 00000000 ____D () C:\Windows\PCHEALTH
2014-01-24 18:58 - 2014-01-25 18:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-24 18:57 - 2014-01-25 18:28 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-24 18:57 - 2014-01-24 18:57 - 00000000 __RHD () C:\MSOCache
2014-01-24 16:22 - 2014-01-24 16:23 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-01-24 16:07 - 2014-01-24 16:07 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\AVAST Software
2014-01-22 23:07 - 2014-01-22 23:07 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1390428484
2014-01-22 21:20 - 2014-01-23 05:26 - 00007669 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg
2014-01-22 19:26 - 2014-01-22 19:27 - 00000000 _____ () C:\Users\Hupit\pathping
==================== One Month Modified Files and Folders =======
2014-02-21 19:17 - 2014-02-21 19:13 - 00013363 _____ () C:\Users\Hupit\Downloads\FRST.txt
2014-02-21 19:16 - 2014-02-21 19:13 - 00000000 ____D () C:\FRST
2014-02-21 19:14 - 2014-02-21 19:14 - 00019021 _____ () C:\Users\Hupit\Downloads\Addition.txt
2014-02-21 19:12 - 2014-02-21 19:12 - 02153984 _____ (Farbar) C:\Users\Hupit\Downloads\FRST64.exe
2014-02-21 19:01 - 2013-08-06 20:09 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-21 18:55 - 2013-08-13 20:29 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-21 18:45 - 2014-01-28 19:01 - 00817029 _____ () C:\Windows\WindowsUpdate.log
2014-02-21 16:21 - 2014-02-18 18:39 - 00001951 _____ () C:\Windows\setupact.log
2014-02-21 16:20 - 2009-07-14 05:45 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-21 16:20 - 2009-07-14 05:45 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-21 16:15 - 2013-08-06 20:45 - 00000000 ____D () C:\ProgramData\Origin
2014-02-21 16:14 - 2013-08-13 20:29 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-21 16:10 - 2013-08-06 19:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-21 16:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-20 16:18 - 2013-08-06 19:48 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-19 21:08 - 2014-02-19 21:07 - 17954672 _____ (EaseUS ) C:\Users\Hupit\Downloads\partition_recovery_5.6.1.exe
2014-02-19 17:50 - 2013-08-31 02:03 - 00000000 ____D () C:\Users\Hupit\Desktop\Programme
2014-02-19 17:38 - 2014-02-19 17:38 - 04978424 _____ (EaseUS ) C:\Users\Hupit\Downloads\drw_trial.exe
2014-02-19 17:36 - 2014-02-19 17:36 - 00000957 _____ () C:\Users\Admin\Desktop\Smart Data Recovery.lnk
2014-02-19 17:36 - 2014-02-19 17:36 - 00000954 _____ () C:\Users\Admin\Desktop\Klicken Sie hier, um PC-Fehler zu finden und zu reparieren.lnk
2014-02-19 17:35 - 2014-02-19 17:35 - 02761752 _____ (Smart PC Solutions ) C:\Users\Hupit\Downloads\recoverysetup43.exe
2014-02-18 19:15 - 2013-08-16 12:27 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\TS3Client
2014-02-18 18:46 - 2013-08-13 20:55 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\EVEMon
2014-02-18 18:39 - 2014-02-18 18:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-17 20:09 - 2014-02-02 17:17 - 00000600 _____ () C:\Users\Hupit\AppData\Local\PUTTY.RND
2014-02-17 16:34 - 2013-09-01 07:43 - 00000000 ____D () C:\Windows\Minidump
2014-02-17 16:31 - 2013-08-06 21:30 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-16 18:00 - 2014-02-16 18:00 - 00000000 ____D () C:\ProgramData\BitRaider
2014-02-16 16:08 - 2014-02-02 18:10 - 00002184 ____H () C:\Users\Hupit\Documents\Default.rdp
2014-02-16 14:07 - 2014-02-03 19:34 - 00000600 _____ () C:\Users\Hupit\AppData\Roaming\winscp.rnd
2014-02-15 16:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 16:05 - 2014-02-15 16:04 - 01416079 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de(1).zip
2014-02-15 16:04 - 2014-02-15 16:04 - 01158652 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de.zip
2014-02-15 15:08 - 2013-08-06 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 06:57 - 2014-02-15 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 17:05 - 2013-08-06 17:49 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-13 17:05 - 2009-07-14 18:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-02-13 17:05 - 2009-07-14 18:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-02-13 17:05 - 2009-07-14 06:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-13 16:53 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-11 23:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-11 16:24 - 2014-01-27 21:07 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\HpUpdate
2014-02-10 18:00 - 2013-08-13 16:21 - 00000000 ____D () C:\Users\Hupit\AppData\Local\Paint.NET
2014-02-10 17:55 - 2014-02-10 17:55 - 00001202 _____ () C:\Users\Admin\Desktop\Format Factory.lnk
2014-02-10 17:55 - 2014-02-10 17:55 - 00000000 ____D () C:\Program Files (x86)\FreeTime
2014-02-10 17:54 - 2014-02-10 17:53 - 58014512 _____ (Free Time) C:\Users\Hupit\Downloads\FFSetup3.3.1.0.exe
2014-02-06 13:16 - 2014-02-13 17:03 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 17:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 17:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 17:03 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 17:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 17:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 17:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 17:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 17:03 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 17:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 17:03 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 17:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 17:03 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 17:03 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 17:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 17:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 17:03 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 17:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 17:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 17:03 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 17:03 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 17:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 17:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 17:03 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 17:03 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 17:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 17:03 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 17:03 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 17:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 17:03 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 17:03 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 17:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 17:03 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 17:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 17:03 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 17:03 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 17:03 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 17:03 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 17:03 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 21:01 - 2013-08-06 20:09 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 21:01 - 2013-08-06 20:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 16:28 - 2014-02-02 17:29 - 00000806 _____ () C:\Users\Hupit\Desktop\Raspberry - Verknüpfung.lnk
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\Visan
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-03 16:32 - 2014-02-03 16:16 - 701560614 _____ () C:\Users\Hupit\Downloads\2013-09-25-wheezy-raspbian-lcd4.7z
2014-02-02 19:21 - 2013-08-06 17:08 - 00000000 ____D () C:\Users\Hupit
2014-02-02 17:28 - 2014-02-02 17:28 - 00000600 _____ () C:\Users\Admin\AppData\Roaming\winscp.rnd
2014-02-02 17:27 - 2014-02-02 17:27 - 00002141 _____ () C:\Users\Admin\Desktop\root@Hupitpi.lnk
2014-02-02 17:23 - 2014-02-02 17:23 - 00002129 _____ () C:\Users\Admin\Desktop\pi@Hupitpi.lnk
2014-02-02 17:22 - 2014-02-02 17:22 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-02-01 19:26 - 2014-02-01 19:26 - 00000425 _____ () C:\Users\Hupit\Downloads\listen-dsl.pls
2014-01-28 23:03 - 2013-08-13 15:57 - 00000000 ____D () C:\ProgramData\CCP
2014-01-28 19:28 - 2014-01-28 19:28 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\Avira
2014-01-28 19:17 - 2013-09-16 15:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Overwolf
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\ProgramData\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-28 19:00 - 2013-09-01 17:57 - 00072512 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird
2014-01-28 18:30 - 2014-01-28 18:19 - 144752616 _____ () C:\Users\Admin\Desktop\avira_internet_security_de.exe
2014-01-28 18:18 - 2014-01-28 18:18 - 00227096 _____ () C:\Users\Admin\Desktop\avira_registry_cleaner_de.exe
2014-01-28 18:16 - 2014-01-28 18:15 - 01300824 _____ () C:\Users\Hupit\Downloads\avira_support_collector_de.exe
2014-01-25 22:58 - 2013-09-16 15:26 - 00000000 ____D () C:\Users\Hupit\AppData\Local\Overwolf
2014-01-25 18:57 - 2013-08-06 20:05 - 00072512 _____ () C:\Users\Hupit\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 18:40 - 2014-01-24 18:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-25 18:39 - 2013-09-01 17:54 - 00000000 ____D () C:\Users\Admin
2014-01-25 18:28 - 2014-01-24 18:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-25 03:20 - 2009-07-14 05:45 - 00324632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-25 03:02 - 2014-01-24 18:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-01-25 03:01 - 2013-08-19 16:41 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-24 19:07 - 2014-01-24 19:07 - 00000000 ____D () C:\Users\Hupit\Documents\OneNote-Notizbücher
2014-01-24 19:07 - 2013-08-06 17:08 - 00000000 ___RD () C:\Users\Hupit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 18:59 - 2014-01-24 18:59 - 00000000 ____D () C:\Windows\PCHEALTH
2014-01-24 18:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-24 18:58 - 2009-07-14 19:18 - 00000000 ____D () C:\Windows\ShellNew
2014-01-24 18:57 - 2014-01-24 18:57 - 00000000 __RHD () C:\MSOCache
2014-01-24 16:23 - 2014-01-24 16:22 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-01-24 16:07 - 2014-01-24 16:07 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\AVAST Software
2014-01-23 05:26 - 2014-01-22 21:20 - 00007669 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg
2014-01-22 23:07 - 2014-01-22 23:07 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1390428484
2014-01-22 20:50 - 2013-12-04 22:20 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA Corporation
2014-01-22 19:27 - 2014-01-22 19:26 - 00000000 _____ () C:\Users\Hupit\pathping
Some content of TEMP:
====================
C:\Users\Hupit\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-02-2014
Ran by Hupit at 2014-02-21 19:17:13
Running from C:\Users\Hupit\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
3DMark 11 (x32 Version: 1.0.5 - Futuremark Corporation)
3DMark06 (x32 Version: 1.2.1 - Futuremark Corporation)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AI Suite II (x32 Version: 2.01.01 - ASUSTeK Computer Inc.)
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.3.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.4.000 - Asmedia Technology)
Assassin's Creed IV Black Flag (x32 Version: - Ubisoft)
Assassin's Creed(R) III v1.03 (x32 Version: 1.03 - Ubisoft)
ASUS GPU Tweak (x32 Version: 2.2.8.1 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.2.8.1 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (x32 Version: 1.0.018 - ASUSTek Computer Inc.)
Avira Internet Security (x32 Version: 14.0.2.286 - Avira)
Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts)
Battlefield 3™ (x32 Version: 1.0.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.0 - EA Digital Illusions CE AB)
BitRaider Web Client (x32 Version: 1.1.9.9 - BitRaider, LLC)
Call of Duty: Ghosts - Multiplayer (x32 Version: - )
Call of Duty: Ghosts (x32 Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 - Multiplayer (x32 Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (x32 Version: - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (x32 Version: - Infinity Ward)
Call of Duty: Modern Warfare 3 (x32 Version: - Infinity Ward)
CCleaner (Version: 4.10 - Piriform)
Counter-Strike: Source (x32 Version: 1.0.0.0 - Valve)
Dota 2 (x32 Version: - Valve)
Druckerdeinstallation für EPSON BX320FW Series (Version: - SEIKO EPSON Corporation)
EaseUS Data Recovery Wizard 7.0 (x32 Version: - EaseUS)
EpsonNet Print (x32 Version: 2.6.0 - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (x32 Version: 3.3b - SEIKO EPSON CORPORATION)
EVEMon (x32 Version: 1.8.5.4162 - battleclinic.com)
FormatFactory 3.3.1.0 (x32 Version: 3.3.1.0 - Format Factory)
Futuremark SystemInfo (x32 Version: 4.17.0 - Futuremark Corporation)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.6 (Version: 2.8.6 - The GIMP Team)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Half-Life 2: Deathmatch (x32 Version: - Valve)
Heaven Benchmark version 4.0 (x32 Version: 4.0 - Unigine Corp.)
HP Officejet 6700 - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photo Creations (x32 Version: 1.0.0.9572 - HP)
HP Update (x32 Version: 5.003.003.001 - Hewlett-Packard)
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
Intel(R) Network Connections 17.3.63.0 (Version: 17.3.63.0 - Intel)
Intel(R) Network Connections 17.3.63.0 (Version: 17.3.63.0 - Intel) Hidden
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.46 (Version: 8.46.27 - Logitech Inc.)
Media Go (x32 Version: 2.5.290 - Sony)
Media Go Video Playback Engine 1.120.108.05010 (x32 Version: 1.120.108.05010 - Sony)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2 (Version: 1.8.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (Version: 1.2.20 - NVIDIA Corporation)
OpenAL (x32 Version: - )
Origin (x32 Version: 9.2.1.4399 - Electronic Arts, Inc.)
Overwolf (x32 Version: 0.47.284 - Overwolf)
Paint.NET v3.5.10 (Version: 3.60.0 - dotPDN LLC)
PlayStation(R)Store (x32 Version: 4.16.2.15545 - Sony Computer Entertainment Inc.)
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6699 - Realtek Semiconductor Corp.)
SDFormatter (x32 Version: 4.0.0 - SD Association)
SHIELD Streaming (Version: 1.7.306 - NVIDIA Corporation) Hidden
Smart Data Recovery v4.3 (x32 Version: 4.3 - Smart PC Solutions)
Sniper: Ghost Warrior (x32 Version: - City Interactive)
SpeedFan (remove only) (x32 Version: - )
Star Wars The Old Republic (x32 Version: 7.0.0.21 - Bioware/EA)
Star Wars: The Old Republic (x32 Version: 1.00 - Electronic Arts, Inc.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (Version: 3.0.11 - TeamSpeak Systems GmbH)
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
TextMaker Viewer (x32 Version: - SoftMaker Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version: - Microsoft)
Uplay (x32 Version: 4.0 - Ubisoft)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WinSCP 5.5.1 (x32 Version: 5.5.1 - Martin Prikryl)
World of Warcraft (x32 Version: - Blizzard Entertainment)
==================== Restore Points =========================
Could not list Restore Points. Check "winmgmt" service or repair WMI.
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
==================== Loaded Modules (whitelisted) =============
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/21/2014 04:15:25 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/21/2014 04:14:50 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/21/2014 04:11:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: wiaservc.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7ca0f
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000047a6b
ID des fehlerhaften Prozesses: 0x9c0
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3
Error: (02/20/2014 06:08:06 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: AUSNAHMEFEHLER beim Aufruf der Funktion IThread(ProtocolSrvConThread)::run() für die Datei
unknown
[ACCESS_VIOLATION Exception!! EIP = 0x727e1237]
Bitte Avira informieren und die obige Datei übersenden!
Error: (02/20/2014 04:17:42 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/20/2014 04:12:10 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/20/2014 04:09:03 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/20/2014 04:08:35 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/19/2014 11:44:12 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/19/2014 11:43:39 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
System errors:
=============
Error: (02/21/2014 04:12:52 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (02/21/2014 04:12:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AsusFanControlService" wurde nicht richtig gestartet.
Error: (02/21/2014 04:12:12 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (02/21/2014 04:10:49 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 21.02.2014 um 05:37:01 unerwartet heruntergefahren.
Error: (02/20/2014 04:17:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (02/20/2014 04:17:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (02/20/2014 04:05:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AsusFanControlService" wurde nicht richtig gestartet.
Error: (02/20/2014 04:05:03 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (02/19/2014 11:42:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AsusFanControlService" wurde nicht richtig gestartet.
Error: (02/19/2014 11:41:41 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-02-21 16:43:22.032
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-21 16:32:53.436
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-21 16:22:02.394
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-20 16:25:32.406
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-20 16:04:10.199
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-20 05:41:43.105
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 23:41:06.050
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 23:31:08.584
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 18:00:28.277
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 17:24:55.840
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 19%
Total physical RAM: 16282.99 MB
Available physical RAM: 13033.08 MB
Total Pagefile: 32564.16 MB
Available Pagefile: 29030.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:146.39 GB) (Free:56.72 GB) NTFS
Drive d: () (Fixed) (Total:785.03 GB) (Free:527.35 GB) NTFS
Drive i: (My Book) (Fixed) (Total:1862.98 GB) (Free:1624.39 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
Geändert von Hupit (21.02.2014 um 19:19 Uhr) |
| Themen zu Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet) |
| ahnung, angezeigt, association, bild, bilder, browser, computer, emailadresse, erscheine, fenster, firefox, installiert, java, kleines, launch, löschen, mail, mails, nicht installiert, officejet, problem, sofort, spam, standard, thunderbird, verkauf, warum, webseite, weitergeleitet, win |
Baum-Darstellung