|
Plagegeister aller Art und deren Bekämpfung: VAF Player lässt sich nicht deinstallierenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.02.2014, 22:34 | #1 |
| VAF Player lässt sich nicht deinstallieren Hallo Da in lezter Zeit leider öfter Pop-Ups wie (Casinoseiten/ Werbung usw.) beim surfen auftauchen, habe ich mal im PC rumgestöbert. Zwar sagt mir Avira das ich frei von allem Übel bin, aber dem Braten traue ich nicht, zumal bei ab und an durchgeführten suchlaufen mit Malwarebytes Anti-Malware immer mal wieder was gefunden wird. Ich bin auf das Programm VAF Player gestoßen und habe versucht es zu deinstallieren. Das erste was mich stutzig macht ist das aufeinmal Spanisch im Fensterchen erscheint. (Espere mientras Windows configura VAFPlayer) danach bricht der forgang ab und es erfolgt die Meldung: Error 1001. Beim Initialisieren der Installation ist eine Ausnahme /aufgetreten: Sytem.IO.FileNotFoundException: Die Datei oder Assembl "file://C:\Program Files\TuguuSL\VAFPlaer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebebe Datei nicht finden. (Aceptar) Beim googeln bin ich auf das Forum hier gestoßen in dem das selbe problem in einem anderen Tread angesprochen wurde. Was könnte ich nun tun? Danke Lilly Geändert von Lillly (26.02.2014 um 23:04 Uhr) |
27.02.2014, 07:53 | #2 |
/// the machine /// TB-Ausbilder | VAF Player lässt sich nicht deinstallieren hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
27.02.2014, 11:36 | #3 |
| VAF Player lässt sich nicht deinstallieren Hallo und vielen Dank für die schnelle Antwort und Hilfe.
__________________ich hoffe das ist so richtig FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02 Ran by Anwender (administrator) on ANWENDER-PC on 27-02-2014 11:42:10 Running from C:\Users\Anwender\Downloads Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (BitDefender SRL) C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe (Egis Technology Inc.) c:\Program Files\Acer Bio Protection\CompPtcVUI.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe () C:\Program Files\Acer\Empowering Technology\Service\ETService.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Egis Technology Inc.) c:\Program Files\Acer Bio Protection\BASVC.exe (NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (O2Micro International) C:\Windows\system32\DRIVERS\o2flash.exe (Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft) C:\Program Files\Yontoo\Y2Desktop.Updater.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe () C:\Windows\PLFSetI.exe (Egis Technology Inc.) C:\Program Files\Acer Bio Protection\PdtWzd.exe (Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Akamai Technologies, Inc.) C:\Users\Anwender\AppData\Local\Akamai\netsession_win.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Akamai Technologies, Inc.) C:\Users\Anwender\AppData\Local\Akamai\netsession_win.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe (Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe () C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Farbar) C:\Users\Anwender\Downloads\FRST(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-07-29] () HKLM\...\Run: [VitaKeyPdtWzd] - c:\Program Files\Acer Bio Protection\PdtWzd.exe [3575808 2009-08-06] (Egis Technology Inc.) HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1130504 2009-08-28] (Dritek System Inc.) HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1797008 2010-07-21] (Microsoft Corporation) HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation) HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [421888 2009-07-20] (Acer Inc.) HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [69632 2009-02-23] (BitDefender) HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [843144 2011-07-12] (BitDefender S.R.L.) HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [217088 2009-05-22] (Alps Electric Co., Ltd.) HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated) Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.) HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\Run: [Akamai NetSession Interface] - C:\Users\Anwender\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\Run: [Yontoo Desktop] - C:\Users\Anwender\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-03-23] (Yontoo LLC) HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-09-16] (Google Inc.) HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {654723f7-d569-11e0-a0bb-00262d63c4ed} - E:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {65472402-d569-11e0-a0bb-00262d63c4ed} - E:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {ad69cfb4-81c5-11e3-8db4-00262d63c4ed} - E:\.\Setup.exe AUTORUN=1 HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {ad69cfc9-81c5-11e3-8db4-00262d63c4ed} - E:\.\Setup.exe AUTORUN=1 HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {b4f99ca1-8a00-11e1-8d68-f73eaa368bda} - F:\Autorun.exe HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {bc7eccb3-c81a-11e0-985a-00262d63c4ed} - "E:\WD SmartWare.exe" autoplay=true HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {eea5c2e1-8469-11e3-8cd9-001e101f82a7} - E:\.\Setup.exe AUTORUN=1 Lsa: [Notification Packages] c:\Program Files\Acer Bio Protection\PwdFilter Startup: C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=120519&tt=190313_wo3&babsrc=HP_ss_bad2g&mntrId=88D20026C61F5E32 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_5730&r=27050110c216l03h8z225x4851j275 HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=120519&tt=190313_wo3&babsrc=SP_ss_bad2g&mntrId=88D20026C61F5E32 SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE361DE361 SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms} BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO: No Name - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - No File BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Web Check - {E155F23C-9931-47c6-A619-20E6FCA86D75} - C:\Program Files\Web Check\WebCheck.dll (Web Check) BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Toolbar: HKLM - No Name - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - No File Toolbar: HKLM - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll (Bitdefender) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - No File Winsock: Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default FF NetworkProxy: "autoconfig_url", "proxy.cenesco.de" FF NetworkProxy: "ftp", "proxy.cenesco.de" FF NetworkProxy: "ftp_port", 8080 FF NetworkProxy: "gopher", "proxy.cenesco.de" FF NetworkProxy: "gopher_port", 8080 FF NetworkProxy: "http", "proxy.cenesco.de" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "no_proxies_on", "localhost,127.0.0.1" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxy.cenesco.de" FF NetworkProxy: "socks_port", 8080 FF NetworkProxy: "ssl", "proxy.cenesco.de" FF NetworkProxy: "ssl_port", 8080 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.) FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\BrowserProtect.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\conduit.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-1.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-10.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-11.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-12.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-13.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-14.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-15.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-16.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-17.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-18.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-19.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-2.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-3.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-4.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-5.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-6.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-7.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-8.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-9.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\iminent.xml FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\sweetim.xml FF Extension: Plus-HD-3.8 - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com [2014-01-30] FF Extension: vis - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2013-11-22] FF Extension: Delta Toolbar - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\ffxtlbr@delta.com [2013-03-29] FF Extension: ProxTube - Unblock YouTube - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\ich@maltegoetz.de [2013-12-17] FF Extension: Yontoo - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\plugin@yontoo.com [2013-03-29] FF Extension: Google Toolbar for Firefox - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011-06-08] FF Extension: ICQ Toolbar - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-27] FF Extension: DVDVideoSoft Toolbar - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} [2010-06-15] FF Extension: Adblock Plus Pop-up Addon - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-02-26] FF Extension: NoScript - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-02-26] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21] FF Extension: Adblock Plus - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-14] FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2011-07-11] FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2014-02-15] FF HKLM\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - c:\Program Files\Trend Micro\TrendSecure\TISProToolbar\FirefoxExtension FF HKLM\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-04-09] FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2009\FFToolbar\ FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2009\FFToolbar\ [] FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-07-04] FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ [] FF HKLM\...\Firefox\Extensions: [{52b0f3db-f988-4788-b9dc-861d016f4487}] - C:\Program Files\Web Check\WebCheck.xpi FF Extension: Web Check - C:\Program Files\Web Check\WebCheck.xpi [2013-08-12] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2009\tbextension\ FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2009\tbextension\ [] Chrome: ======= CHR HomePage: CHR RestoreOnStartup: "tabs" : { "use_compact_navigation_bar" : false, "use_vertical_tabs" CHR DefaultSearchKeyword: babylon.com CHR DefaultSearchProvider: Babylon CHR DefaultSearchURL: hxxp://search.babylon.com/?q={searchTerms}&affID=120519&tt=190313_wo3&babsrc=SP_ss_bad2g&mntrId=88D20026C61F5E32 CHR Extension: (Yontoo) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc [2013-11-22] CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2013-05-06] CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-07-04] CHR HKLM\...\Chrome\Extension: [dacechnliklhcacondhhkkfobapdopee] - C:\Program Files\Web Check\WebCheck.crx [2013-08-12] CHR HKLM\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files\Yontoo\YontooLayers.crx [2013-06-25] CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-05-23] CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-02-24] ========================== Services (Whitelisted) ================= R2 Akamai; c:\program files\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG) R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.) S3 Arrakis3; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [172032 2009-01-20] () R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2009-08-12] () R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) R2 IGBASVC; c:\Program Files\Acer Bio Protection\BASVC.exe [3453440 2009-08-06] (Egis Technology Inc.) R2 LIVESRV; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [413696 2011-07-12] (BitDefender SRL) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) S3 npggsvc; C:\Windows\system32\GameMon.des [3717904 2010-08-18] (INCA Internet Co., Ltd.) R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2009-06-18] (NewTech Infosystems, Inc.) R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [65536 2007-02-13] (O2Micro International) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) S3 scan; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll [323584 2011-07-12] (S.C. BitDefender S.R.L) R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) S2 VSSERV; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [1638240 2011-07-12] (BitDefender S. R. L.) R2 Yontoo Desktop Updater; C:\Users\Anwender\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-03-23] (Yontoo LLC) S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [X] S2 SfCtlCom; "c:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe" [X] S3 TMBMServer; "c:\Program Files\Trend Micro\BM\TMBMSRV.exe" /service [X] S3 TmPfw; "c:\Program Files\Trend Micro\Internet Security\TmPfw.exe" [X] S3 TmProxy; "c:\Program Files\Trend Micro\Internet Security\TmProxy.exe" [X] S3 WPFFontCache_v0400; C:\Windows\Microsoft.NET\Framework\v4.0.30128\WPF\WPFFontCache_v0400.exe [X] ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-28] (Avira Operations GmbH & Co. KG) S3 bdfm; C:\Windows\System32\drivers\bdfm.sys [111112 2008-09-18] (BitDefender S.R.L. Bucharest, ROMANIA) R3 Bdfndisf; C:\Windows\System32\DRIVERS\bdfndisf.sys [104456 2011-07-12] (BitDefender LLC) S3 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [242184 2008-12-10] (BitDefender S.R.L. Bucharest, ROMANIA) S1 bdftdif; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [137224 2011-07-12] (BitDefender LLC) S3 BDSelfPr; C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys [8832 2009-01-12] (BitDefender S.R.L.) R2 BDVEDISK; C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys [82696 2008-10-06] (BitDefender S.R.L.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-04-22] (DT Soft Ltd) S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [102912 2009-06-29] (Huawei Technologies Co., Ltd.) S3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-13] (Atheros Communications, Inc.) S3 Profos; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys [13056 2008-09-02] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) R2 tmpreflt; C:\Windows\System32\DRIVERS\tmpreflt.sys [36368 2010-01-05] (Trend Micro Inc.) R2 tmxpflt; C:\Windows\System32\DRIVERS\tmxpflt.sys [225808 2010-01-05] (Trend Micro Inc.) R2 vsapint; C:\Windows\System32\DRIVERS\vsapint.sys [1223832 2010-01-05] (Trend Micro Inc.) S3 cpuz132; \??\C:\Users\Anwender\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X] S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S1 ntiomin; No ImagePath S3 tmactmon; system32\DRIVERS\tmactmon.sys [X] S2 tmcomm; system32\DRIVERS\tmcomm.sys [X] S3 tmevtmgr; system32\DRIVERS\tmevtmgr.sys [X] S1 tmlwf; system32\DRIVERS\tmlwf.sys [X] S1 tmtdi; system32\DRIVERS\tmtdi.sys [X] S2 tmwfp; system32\DRIVERS\tmwfp.sys [X] S3 XDva359; \??\C:\Windows\system32\XDva359.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-27 11:29 - 2014-02-27 11:30 - 01143808 _____ (Farbar) C:\Users\Anwender\Desktop\FRST(1).exe 2014-02-27 03:01 - 2014-02-27 03:01 - 00000000 ____D () C:\12f13b8b55346718d96f86 2014-02-27 03:00 - 2014-02-27 11:25 - 00009325 _____ () C:\Windows\IE11_main.log 2014-02-27 00:45 - 2014-02-27 00:45 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{6CD44A0E-A6BB-4804-9866-16C31771AC13} 2014-02-27 00:10 - 2014-02-27 00:10 - 00000000 ____D () C:\Users\Anwender\Desktop\Neuer Ordner (2) 2014-02-26 23:43 - 2014-02-26 23:44 - 00039272 _____ () C:\Users\Anwender\Downloads\Addition.txt 2014-02-26 23:42 - 2014-02-26 23:42 - 00380416 _____ () C:\Users\Anwender\Downloads\Gmer-19357.exe 2014-02-26 23:41 - 2014-02-27 11:42 - 00029424 _____ () C:\Users\Anwender\Downloads\FRST.txt 2014-02-26 23:41 - 2014-02-27 11:42 - 00000000 ____D () C:\FRST 2014-02-26 23:40 - 2014-02-26 23:40 - 01143808 _____ (Farbar) C:\Users\Anwender\Downloads\FRST.exe 2014-02-26 23:39 - 2014-02-26 23:39 - 00000478 _____ () C:\Users\Anwender\Downloads\defogger_disable.log 2014-02-26 23:39 - 2014-02-26 23:39 - 00000156 _____ () C:\Users\Anwender\defogger_reenable 2014-02-26 23:37 - 2014-02-26 23:38 - 00050477 _____ () C:\Users\Anwender\Downloads\Defogger.exe 2014-02-26 22:30 - 2014-02-26 22:30 - 01241834 _____ () C:\Users\Anwender\Downloads\adwcleaner.exe 2014-02-26 21:44 - 2014-02-27 11:18 - 00000224 _____ () C:\Windows\setupact.log 2014-02-26 21:44 - 2014-02-26 21:44 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-26 21:43 - 2014-02-26 22:47 - 00072244 _____ () C:\Windows\PFRO.log 2014-02-26 21:38 - 2014-02-26 21:38 - 00282840 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1(1).exe 2014-02-26 21:34 - 2014-02-26 21:34 - 00283256 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1.exe 2014-02-26 21:29 - 2014-02-26 21:30 - 00000000 ____D () C:\Program Files\Advanced File Optimizer 2014-02-26 21:29 - 2014-02-26 21:29 - 00002259 _____ () C:\Users\Public\Desktop\Advanced File Optimizer.lnk 2014-02-26 21:29 - 2014-02-26 21:29 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Systweak 2014-02-26 21:28 - 2014-02-26 21:28 - 06083952 _____ (Systweak Software ) C:\Users\Anwender\Downloads\advancedfileoptimizersetup_RDF.exe 2014-02-26 21:27 - 2014-02-26 21:27 - 00907018 _____ () C:\Users\Anwender\Downloads\adblockplus-2.5.1.zip 2014-02-26 21:25 - 2014-02-26 21:25 - 00105412 _____ () C:\Users\Anwender\Downloads\adblock_plus_pop_up_addon-0.9.1-fx.zip 2014-02-26 21:01 - 2014-02-26 21:51 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\systweak 2014-02-26 20:43 - 2014-02-26 20:43 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\QuickScan 2014-02-26 20:40 - 2014-02-26 20:40 - 05483968 _____ (Speedchecker Limited ) C:\Users\Anwender\Downloads\pcbeschleunigen_779379ffd9a2421b92a05ba6ddd3e89e_.exe 2014-02-26 20:10 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-26 19:48 - 2014-02-26 21:52 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-26 19:38 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-02-26 19:38 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-02-26 19:27 - 2014-02-01 08:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-26 19:27 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-26 19:27 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-26 19:27 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-26 19:27 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-26 19:26 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-26 19:26 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-26 19:26 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-26 19:26 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-26 19:26 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-26 19:11 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-02-26 19:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-02-26 19:11 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-02-26 19:11 - 2013-07-09 05:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-02-26 19:11 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-02-26 19:11 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-02-26 19:11 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-02-26 19:11 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-02-26 19:10 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-26 19:10 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-26 19:10 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-26 19:10 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-02-26 19:10 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-02-26 19:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-02-26 19:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-02-26 19:10 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-02-26 19:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-02-26 19:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-02-26 19:10 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-02-26 19:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-02-26 19:10 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-02-26 19:10 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-02-26 19:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-02-26 19:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-02-26 19:10 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-02-26 19:10 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-02-26 19:10 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-02-26 19:10 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-02-26 19:10 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-02-26 19:10 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-02-26 19:10 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-02-26 19:10 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-02-26 19:10 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-02-26 19:10 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-02-26 19:10 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-02-26 19:10 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-02-26 19:10 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-02-26 19:10 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-02-26 19:10 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-02-26 19:10 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-02-26 19:10 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-26 19:10 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2014-02-26 19:10 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-02-26 19:10 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-02-26 19:10 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-02-26 19:10 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-02-26 19:10 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-02-26 19:10 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-02-26 19:10 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-02-26 19:10 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-02-26 19:10 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-02-26 19:10 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-02-26 19:10 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-02-26 19:10 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-02-26 19:10 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-02-26 19:10 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-02-26 19:10 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-02-26 19:10 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-02-26 19:10 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-02-26 19:10 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-02-26 19:10 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-02-26 19:10 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-02-26 19:10 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-02-26 19:10 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-02-26 19:09 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-26 19:09 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-26 19:09 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-26 19:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-26 19:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-26 19:09 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-26 19:09 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-26 19:09 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-26 19:09 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-26 19:09 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-26 19:09 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-02-26 19:09 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-02-26 19:09 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-02-26 19:09 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-02-26 19:09 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-02-26 19:09 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-02-26 19:09 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-02-26 19:09 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-26 19:09 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-02-26 19:09 - 2013-08-02 02:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-02-26 19:09 - 2013-08-02 02:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-02-26 19:09 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-02-26 19:09 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-02-26 19:09 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-02-26 19:09 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-02-26 19:09 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-02-26 19:09 - 2013-06-15 04:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-02-26 18:43 - 2014-02-26 18:43 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf331a52a5f946.job 2014-02-22 03:24 - 2014-02-22 03:24 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{57D3F87B-6007-42BA-B92C-854D7EDF6804} 2014-02-18 00:38 - 2014-02-18 00:38 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{4FEFA1FF-8430-46A1-95AF-EAD9C9C57842} 2014-02-15 15:39 - 2014-02-26 21:43 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{30CA8995-2192-4A4E-A83F-F11A2BF0AB9E} ==================== One Month Modified Files and Folders ======= 2014-02-27 11:42 - 2014-02-26 23:41 - 00029424 _____ () C:\Users\Anwender\Downloads\FRST.txt 2014-02-27 11:42 - 2014-02-26 23:41 - 00000000 ____D () C:\FRST 2014-02-27 11:30 - 2014-02-27 11:29 - 01143808 _____ (Farbar) C:\Users\Anwender\Desktop\FRST(1).exe 2014-02-27 11:27 - 2010-07-26 19:02 - 01401431 _____ () C:\Windows\WindowsUpdate.log 2014-02-27 11:26 - 2009-07-14 05:34 - 00017408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-27 11:26 - 2009-07-14 05:34 - 00017408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-27 11:25 - 2014-02-27 03:00 - 00009325 _____ () C:\Windows\IE11_main.log 2014-02-27 11:22 - 2009-07-28 04:34 - 01782480 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-27 11:18 - 2014-02-26 21:44 - 00000224 _____ () C:\Windows\setupact.log 2014-02-27 11:18 - 2010-03-03 16:07 - 00000000 ____D () C:\Program Files\Common Files\Akamai 2014-02-27 03:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-27 03:01 - 2014-02-27 03:01 - 00000000 ____D () C:\12f13b8b55346718d96f86 2014-02-27 00:45 - 2014-02-27 00:45 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{6CD44A0E-A6BB-4804-9866-16C31771AC13} 2014-02-27 00:45 - 2012-07-23 16:08 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Windows Live 2014-02-27 00:31 - 2010-03-04 12:56 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Adobe 2014-02-27 00:30 - 2012-06-06 13:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-02-27 00:30 - 2012-06-06 13:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-27 00:30 - 2011-07-04 09:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-02-27 00:10 - 2014-02-27 00:10 - 00000000 ____D () C:\Users\Anwender\Desktop\Neuer Ordner (2) 2014-02-27 00:08 - 2012-05-12 03:45 - 00000159 _____ () C:\Users\Anwender\Desktop\Screen Cap.ini 2014-02-26 23:44 - 2014-02-26 23:43 - 00039272 _____ () C:\Users\Anwender\Downloads\Addition.txt 2014-02-26 23:42 - 2014-02-26 23:42 - 00380416 _____ () C:\Users\Anwender\Downloads\Gmer-19357.exe 2014-02-26 23:40 - 2014-02-26 23:40 - 01143808 _____ (Farbar) C:\Users\Anwender\Downloads\FRST.exe 2014-02-26 23:39 - 2014-02-26 23:39 - 00000478 _____ () C:\Users\Anwender\Downloads\defogger_disable.log 2014-02-26 23:39 - 2014-02-26 23:39 - 00000156 _____ () C:\Users\Anwender\defogger_reenable 2014-02-26 23:39 - 2010-01-05 18:40 - 00000000 ____D () C:\Users\Anwender 2014-02-26 23:38 - 2014-02-26 23:37 - 00050477 _____ () C:\Users\Anwender\Downloads\Defogger.exe 2014-02-26 22:49 - 2013-03-29 01:39 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Yontoo 2014-02-26 22:47 - 2014-02-26 21:43 - 00072244 _____ () C:\Windows\PFRO.log 2014-02-26 22:47 - 2009-09-16 09:03 - 00000000 ____D () C:\Windows\ShellNew 2014-02-26 22:30 - 2014-02-26 22:30 - 01241834 _____ () C:\Users\Anwender\Downloads\adwcleaner.exe 2014-02-26 21:52 - 2014-02-26 19:48 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-26 21:51 - 2014-02-26 21:01 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\systweak 2014-02-26 21:44 - 2014-02-26 21:44 - 00000000 _____ () C:\Windows\setuperr.log 2014-02-26 21:43 - 2014-02-15 15:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-26 21:43 - 2012-05-05 19:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-02-26 21:39 - 2010-06-22 19:57 - 00001113 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-26 21:38 - 2014-02-26 21:38 - 00282840 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1(1).exe 2014-02-26 21:34 - 2014-02-26 21:34 - 00283256 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1.exe 2014-02-26 21:30 - 2014-02-26 21:29 - 00000000 ____D () C:\Program Files\Advanced File Optimizer 2014-02-26 21:29 - 2014-02-26 21:29 - 00002259 _____ () C:\Users\Public\Desktop\Advanced File Optimizer.lnk 2014-02-26 21:29 - 2014-02-26 21:29 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Systweak 2014-02-26 21:28 - 2014-02-26 21:28 - 06083952 _____ (Systweak Software ) C:\Users\Anwender\Downloads\advancedfileoptimizersetup_RDF.exe 2014-02-26 21:27 - 2014-02-26 21:27 - 00907018 _____ () C:\Users\Anwender\Downloads\adblockplus-2.5.1.zip 2014-02-26 21:25 - 2014-02-26 21:25 - 00105412 _____ () C:\Users\Anwender\Downloads\adblock_plus_pop_up_addon-0.9.1-fx.zip 2014-02-26 21:19 - 2011-07-01 07:37 - 00000000 ____D () C:\Windows\pss 2014-02-26 20:56 - 2009-09-16 08:11 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-02-26 20:54 - 2011-11-04 04:45 - 00000000 ____D () C:\Fraps 2014-02-26 20:50 - 2012-05-08 12:50 - 00000000 ____D () C:\Windows\Minidump 2014-02-26 20:43 - 2014-02-26 20:43 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\QuickScan 2014-02-26 20:40 - 2014-02-26 20:40 - 05483968 _____ (Speedchecker Limited ) C:\Users\Anwender\Downloads\pcbeschleunigen_779379ffd9a2421b92a05ba6ddd3e89e_.exe 2014-02-26 20:33 - 2012-06-26 23:08 - 00001033 _____ () C:\Users\Anwender\Desktop\Dropbox.lnk 2014-02-26 20:33 - 2012-06-26 23:08 - 00000000 ___RD () C:\Users\Anwender\Dropbox 2014-02-26 20:33 - 2012-06-26 23:05 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-02-26 20:33 - 2012-06-26 23:04 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Dropbox 2014-02-26 20:33 - 2010-06-21 13:31 - 00001271 _____ () C:\Windows\WinInit.Ini 2014-02-26 20:26 - 2009-09-19 01:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-02-26 20:26 - 2009-07-14 05:33 - 00415056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-26 20:23 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-02-26 20:17 - 2009-09-19 01:05 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-02-26 18:46 - 2010-06-22 20:16 - 00002125 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-26 18:43 - 2014-02-26 18:43 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf331a52a5f946.job 2014-02-22 03:24 - 2014-02-22 03:24 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{57D3F87B-6007-42BA-B92C-854D7EDF6804} 2014-02-20 22:25 - 2010-01-07 21:19 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\TS3Client 2014-02-20 22:23 - 2013-01-08 02:45 - 00000020 _____ () C:\Users\Anwender\Documents\aionmemo_1b4d24c4.dat 2014-02-18 00:38 - 2014-02-18 00:38 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{4FEFA1FF-8430-46A1-95AF-EAD9C9C57842} 2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{30CA8995-2192-4A4E-A83F-F11A2BF0AB9E} 2014-02-05 10:27 - 2012-10-30 01:40 - 00004608 _____ () C:\Users\Anwender\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-02-04 19:09 - 2010-01-05 13:27 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-01 08:58 - 2014-02-26 19:27 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-01 08:58 - 2014-02-26 19:26 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-01 08:58 - 2014-02-26 19:26 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-01 08:57 - 2014-02-26 19:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-01 08:57 - 2014-02-26 19:26 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-01 08:57 - 2014-02-26 19:26 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-01 08:57 - 2014-02-26 19:26 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-01 08:34 - 2014-02-26 19:27 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-01 07:38 - 2014-02-26 19:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe Some content of TEMP: ==================== C:\Users\Anwender\AppData\Local\Temp\avgnt.exe C:\Users\Anwender\AppData\Local\Temp\install_flashplayer12x32_ltr5x32d_awc_aih.exe C:\Users\Anwender\AppData\Local\Temp\install_flashplayer12x32_ltr5x32d_awc_aih_1.exe C:\Users\Anwender\AppData\Local\Temp\install_flashplayer12x32_ltr5x32d_awc_aih_2.exe C:\Users\Anwender\AppData\Local\Temp\mfc80.dll C:\Users\Anwender\AppData\Local\Temp\mfc80u.dll C:\Users\Anwender\AppData\Local\Temp\mfcm80.dll C:\Users\Anwender\AppData\Local\Temp\mfcm80u.dll C:\Users\Anwender\AppData\Local\Temp\msvcm80.dll C:\Users\Anwender\AppData\Local\Temp\msvcp80.dll C:\Users\Anwender\AppData\Local\Temp\msvcr80.dll C:\Users\Anwender\AppData\Local\Temp\OSU.exe C:\Users\Anwender\AppData\Local\Temp\Uninstaller.exe C:\Users\Anwender\AppData\Local\Temp\WtgDriverInstallX.dll C:\Users\Anwender\AppData\Local\Temp\WTGXMLUtil.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-08 20:08 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- Additional Scan Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 26-02-2014 02 Ran by Anwender at 2014-02-26 23:43:30 Running from C:\Users\Anwender\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) µTorrent (HKLM\...\uTorrent) (Version: 1.8.5 - ) Acer Bio Protection (HKLM\...\InstallShield_{E09664BB-BB08-45FA-87D1-33EAB0E017F5}) (Version: 6.2.48 - Egis Technology Inc.) Acer Crystal Eye Webcam (HKLM\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.7.1 - Suyin Optronics Corp) Acer Empowering Technology (HKLM\...\{8F1B6239-FEA0-450A-A950-B05276CE177C}) (Version: 3.0.3016 - Acer Incorporated) Acer ePower Management (HKLM\...\{58E5844B-7CE2-413D-83D1-99294BF6C74F}) (Version: 3.0.3019 - Acer Incorporated) Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3003 - Acer Incorporated) Acer GridVista (HKLM\...\GridVista) (Version: 3.01.0730 - Acer Inc.) Acer Registration (HKLM\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated) Acer ScreenSaver (HKLM\...\Acer Screensaver) (Version: 1.1.0812 - Acer Incorporated) Acer Updater (HKLM\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3014 - Acer Incorporated) Acer VCM (HKLM\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3000 - Acer Incorporated) Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated) Advanced File Optimizer (HKLM\...\Advanced File Optimizer_is1) (Version: 2.1.1000.10518 - Systweak Software) Aion (HKCU\...\NCsoft-Aion) (Version: - NCsoft) Aion (HKCU\...\NCsoft-AionEU) (Version: - NCsoft) AION Free-To-Play (HKLM\...\InstallShield_{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}) (Version: 2.70.0000 - Gameforge) AION Free-To-Play (Version: 2.70.0000 - Gameforge) Hidden AION Free-To-Play PTS (Version: 3.00.0000 - Gameforge) Hidden AION Free-to-Play PTS Client Version 1.0 (HKLM\...\{E9C6FF3B-126F-47F3-8E70-9FFF1340CD37}_is1) (Version: 1.0 - Gameforge) Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc) Akamai NetSession Interface Service (HKLM\...\Akamai) (Version: - ) ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.5.2015.1103 - Alps Electric) AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.60524.2309 - ATI Technologies Inc.) Hidden Apple Application Support (HKLM\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}) (Version: 2.6.0.32 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI AVIVO Codecs (Version: 10.7.0.40702 - ATI Technologies Inc.) Hidden ATI Catalyst Install Manager (HKLM\...\{278ABC06-C7AF-F987-FC4A-789582993D2D}) (Version: 3.0.829.0 - ATI Technologies, Inc.) Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira) BitDefender Internet Security 2009 (HKLM\...\{27148014-3B0A-402B-8130-6B056357D12D}) (Version: 12.0.12.1 - BitDefender) Bonjour (HKLM\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.) Broadcom Gigabit Integrated Controller (HKLM\...\{49F3D04B-B849-4C89-AB31-2366A004EA28}) (Version: 12.24.02 - Broadcom Corporation) CanoScan Toolbox Ver4.1 (HKLM\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version: - ) Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Graphics Previews Common (Version: 2011.0524.2352.41027 - ATI) Hidden Catalyst Control Center InstallProxy (Version: 2009.0702.1239.20840 - ATI Technologies, Inc.) Hidden Catalyst Control Center InstallProxy (Version: 2011.0524.2352.41027 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (Version: 2011.0524.2352.41027 - ATI) Hidden Catalyst Pro Control Center (Version: 2011.0524.2352.41027 - Ihr Firmenname) Hidden CCC Help English (Version: 2011.0524.2351.41027 - ATI) Hidden ccc-utility (Version: 2011.0524.2352.41027 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 2.33 - Piriform) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd) Die Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.19.44 - Electronic Arts) DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.0.34 - DivX, LLC) Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.) DVDVideoSoftTB Toolbar (HKLM\...\DVDVideoSoftTB Toolbar) (Version: - ) eSobi v2 (HKLM\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.) eSobi v2 (Version: 2.0.4.000274 - esobi Inc.) Hidden Fingerprint Solution (Version: 6.1.48.0 - Egis Technology Inc.) Hidden Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.) Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.4.55 - Conexant Systems) ICQ7.2 (HKLM\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ) Identity Card (HKLM\...\Identity Card) (Version: 1.00.3001 - Acer Incorporated) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) InterVideo WinDVD 8 (HKLM\...\InstallShield_{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}) (Version: 8.5.10.39 - InterVideo Inc.) InterVideo WinDVD 8 (Version: 8.5.10.39 - InterVideo Inc.) Hidden IrfanView (remove only) (HKLM\...\IrfanView) (Version: - ) iTunes (HKLM\...\{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}) (Version: 9.0.3.15 - Apple Inc.) JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Launch Manager (HKLM\...\LManager) (Version: 3.0.04 - Acer Inc.) Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.0.318.3 - McAfee, Inc.) Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft IntelliPoint 8.0 (HKLM\...\{00F93853-D9D3-4795-A89E-84CCBA0205C9}) (Version: 8.0.225.0 - Microsoft) Microsoft Office 2003 Web Components (HKLM\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Language Pack 2007 - German/Deutsch (HKLM\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office O MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office SharePoint Designer MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Small Business Connectivity Components (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation) Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office X MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{7FB12670-0F93-4E1E-B2F5-4F339199A03A}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{849A32C3-E75A-4791-9B11-E568BA3525A4}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 27.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 27.0.1 (x86 en-US)) (Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NC Launcher (GameForge) (HKLM\...\NCLauncher_GameForge) (Version: - NCsoft) NCsoft Launcher (HKLM\...\{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}) (Version: 1.5.19002 - NCsoft) NTI Backup Now 5 (HKLM\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.627 - NewTech Infosystems) NTI Backup Now Standard (Version: 5.1.2.627 - NewTech Infosystems) Hidden NTI Media Maker 8 (HKLM\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6619 - NewTech Infosystems) NTI Media Maker 8 (Version: 8.0.12.6619 - NewTech Infosystems) Hidden NTI Shadow (HKLM\...\InstallShield_{6F7EA6CA-79F4-44A0-A370-8E82BB16534A}) (Version: 3.7.6.56 - NewTech Infosystems) NTI Shadow (Version: 3.7.6.56 - NewTech Infosystems) Hidden NVIDIA PhysX (HKLM\...\{B83FC356-B7C0-441F-8A4D-D71E088E7974}) (Version: 9.09.0428 - NVIDIA Corporation) O2Micro Flash Memory Card Reader Driver (HKLM\...\{C631FB9D-81D2-4E4E-A688-901AC748322D}) (Version: 3.31.02 - O2Micro) QuickTime (HKLM\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5643 - Realtek Semiconductor Corp.) Skype™ 5.10 (HKLM\...\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}) (Version: 5.10.116 - Skype Technologies S.A.) SPBA 5.8 (HKLM\...\{ECCD28B2-8798-4D16-8126-625D728294A1}) (Version: 5.8.2.5652 - UPEK Inc.) SweetIM for Messenger 3.3 (HKLM\...\{795288DC-2652-44A5-99FD-2ECDF3C633BF}) (Version: 3.3.0006 - SweetIM Technologies Ltd.) <==== ATTENTION SweetIM Toolbar for Internet Explorer 3.9 (HKLM\...\{F93D2591-8201-4692-BD8D-67A0BFAC9C14}) (Version: 3.9.0009 - SweetIM Technologies Ltd.) <==== ATTENTION TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11.1 - TeamSpeak Systems GmbH) Trend Micro Internet Security Pro (Version: 17.50 - Trend Micro Inc.) Hidden Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.4035.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VAFPlayer (HKLM\...\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}) (Version: 1.6.8 - Tuguu SL) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden VIS (HKLM\...\VIS) (Version: - ) <==== ATTENTION VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN) Web Check (HKLM\...\Web Check) (Version: - ) Welcome Center (HKLM\...\Acer Welcome Center) (Version: 1.00.3005 - Acer Incorporated) WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9700 - Broadcom Corporation) Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live OneCare safety scanner (HKLM\...\Windows Live OneCare safety scanner) (Version: - Microsoft Corporation) Windows Live OneCare safety scanner (Version: 1.0.0.0 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation) Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinRAR (HKLM\...\WinRAR archiver) (Version: - ) WinZip 14.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BB}) (Version: 14.0.8708 - WinZip Computing, S.L. ) Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team) ==================== Restore Points ========================= Could not list Restore Points. Check "winmgmt" service or repair WMI. ==================== Hosts content: ========================== 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {531542BA-F604-4BE5-AB8C-24F682666B06} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-07-09] (Acer) Task: {65D261F3-18E2-4CCA-99AD-A6F81C3BC27E} - System32\Tasks\{0B89C370-0B2C-4F15-B975-DF8FFB7A4FBE} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.) Task: {6FBF1C44-0059-4401-884A-B839F62AD6E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06] (Google Inc.) Task: {767C88FA-F349-4DBA-9B9F-89822DB4BCBF} - System32\Tasks\{3D7D099C-3E63-4763-BF11-7C20B09F6D9D} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.217&LastError=407 Task: {8A56E523-4406-4402-9C69-EF5F6B98377B} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\system32\FlashPlayerUpdateService.exe Task: {A22E3E75-F072-4D29-A9B4-739D9D0A801C} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION Task: {A35D9F46-4D38-4739-B7F5-7273A920124D} - System32\Tasks\EPUpdater => C:\Users\Anwender\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe <==== ATTENTION Task: {A560FA6E-E98D-4666-87BA-A9E3A315179D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation) Task: {BFCCECEB-9F2E-4B58-9CDE-BC0A19F9FCE4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {C66B5E97-8190-4A8A-8202-9455D01A118A} - System32\Tasks\{67A04714-5F19-4077-98F1-4E1BBFE6D752} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.217&LastError=407 Task: {D0C4629D-510C-4B90-9BD4-DD1C9131A3E3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06] (Google Inc.) Task: {DB623519-C776-45DA-8D30-A05DB7A17506} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-26] (Adobe Systems Incorporated) Task: {DEA93315-68C8-4818-96E3-0EEACD20E4A8} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\system32\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf331a52a5f946.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2008-10-09 15:31 - 2008-10-09 15:31 - 00192512 _____ () C:\Program Files\Common Files\BitDefender\BitDefender Update Service\txmlutil.dll 2013-08-14 10:33 - 2013-07-18 07:02 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll 2009-09-19 01:09 - 2009-08-12 00:29 - 00024576 _____ () C:\Program Files\Acer\Empowering Technology\Service\ETService.exe 2009-09-19 01:09 - 2009-09-19 01:09 - 00032768 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.Controller\3.0.3016.0__14bcaafdb44b5951\Framework.Model.Controller.dll 2009-09-19 01:09 - 2009-09-19 01:09 - 00020480 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3016.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll 2009-09-19 01:09 - 2009-09-19 01:09 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3016.0__3036420f80dd6947\Framework.Library.dll 2009-09-19 01:09 - 2009-09-19 01:09 - 00028672 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Host\3.0.3016.0__672b450de5a7e94a\Framework.Host.dll 2009-09-19 01:09 - 2009-09-19 01:09 - 00016384 _____ () C:\Windows\assembly\GAC_MSIL\Framework.PluginInterface\3.0.3016.0__9ecdf03bb2054f94\Framework.PluginInterface.dll 2008-10-09 15:31 - 2008-10-09 15:31 - 00192512 _____ () C:\Windows\system32\txmlutil.dll 2009-03-27 13:07 - 2009-03-27 13:07 - 00009728 _____ () C:\Program Files\BitDefender\BitDefender 2009\DEU\bdshelxt.ui 2010-04-09 14:24 - 2010-03-15 10:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll 2009-11-07 07:05 - 2008-07-29 19:29 - 00200704 _____ () C:\Windows\PLFSetI.exe 2009-09-19 01:09 - 2009-09-19 01:09 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3016.0__4df5dcab8860d239\Framework.Utility.dll 2013-04-26 15:35 - 2014-02-26 22:49 - 00013600 _____ () C:\Users\Anwender\AppData\Roaming\Yontoo\dat\Desktop.OS.Plugin.dll 2011-07-12 12:09 - 2011-07-12 12:09 - 00442368 _____ () C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe 2011-07-12 12:09 - 2011-07-12 12:09 - 00241664 _____ () C:\Program Files\BitDefender\BitDefender 2009\DEU\seccenter.ui 2009-02-23 10:30 - 2009-02-23 10:30 - 00126976 _____ () C:\Program Files\BitDefender\BitDefender 2009\hmcore.dll 2009-02-23 09:44 - 2009-02-23 09:44 - 00045056 _____ () C:\Program Files\BitDefender\BitDefender 2009\actxcont.dll 2011-03-14 13:21 - 2011-03-14 13:21 - 00016384 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll 2011-05-24 22:50 - 2011-05-24 22:50 - 00243712 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-02-15 15:39 - 2014-02-13 01:36 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acer VCM.lnk => C:\Windows\pss\Acer VCM.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Anwender^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: ICQ => ~"C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: MobileConnect => %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent MSCONFIG\startupreg: msnmsgr => ~"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background MSCONFIG\startupreg: NCsoft Launcher => C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RtHDVCpl => RtHDVCpl.exe MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" MSCONFIG\startupreg: uTorrent => "C:\Program Files\uTorrent\uTorrent.exe" ==================== Faulty Device Manager Devices ============= Could not list Devices. Check "winmgmt" service or repair WMI. ==================== Event log errors: ========================= Application errors: ================== Error: (02/26/2014 11:13:52 PM) (Source: MsiInstaller) (User: Anwender-PC) Description: Producto: VAFPlayer -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten: System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files\Tuguu SL\VAFPlayer\VAFPlayer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (02/26/2014 11:01:41 PM) (Source: MsiInstaller) (User: Anwender-PC) Description: Producto: VAFPlayer -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten: System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files\Tuguu SL\VAFPlayer\VAFPlayer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (02/26/2014 10:17:04 PM) (Source: MsiInstaller) (User: Anwender-PC) Description: Producto: VAFPlayer -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten: System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files\Tuguu SL\VAFPlayer\VAFPlayer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (02/26/2014 10:06:43 PM) (Source: MsiInstaller) (User: Anwender-PC) Description: Producto: VAFPlayer -- Error 1706. No se encuentra ningún paquete de instalación para el producto VAFPlayer. Vuelva a intentar la instalación usando una copia válida del paquete de instalación 'Installer.msi'. Error: (02/26/2014 10:06:35 PM) (Source: MsiInstaller) (User: Anwender-PC) Description: Producto: VAFPlayer -- Error 1706. No se encuentra ningún paquete de instalación para el producto VAFPlayer. Vuelva a intentar la instalación usando una copia válida del paquete de instalación 'Installer.msi'. Error: (02/26/2014 09:44:28 PM) (Source: VMCService) (User: ) Description: conflictManagerTypeValue Error: (02/26/2014 08:44:19 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: PCSUQuickScan.exe, Version: 0.0.0.0, Zeitstempel: 0x529f1e2b Name des fehlerhaften Moduls: PCSUQuickScan.exe, Version: 0.0.0.0, Zeitstempel: 0x529f1e2b Ausnahmecode: 0xc0000005 Fehleroffset: 0x000067a0 ID des fehlerhaften Prozesses: 0x14c4 Startzeit der fehlerhaften Anwendung: 0xPCSUQuickScan.exe0 Pfad der fehlerhaften Anwendung: PCSUQuickScan.exe1 Pfad des fehlerhaften Moduls: PCSUQuickScan.exe2 Berichtskennung: PCSUQuickScan.exe3 Error: (02/26/2014 08:32:05 PM) (Source: VMCService) (User: ) Description: conflictManagerTypeValue Error: (02/26/2014 08:29:04 PM) (Source: VMCService) (User: ) Description: conflictManagerTypeValue Error: (02/26/2014 08:27:30 PM) (Source: VMCService) (User: ) Description: conflictManagerTypeValue System errors: ============= Error: (02/26/2014 10:48:37 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: bdftdif ntiomin tmlwf tmtdi Error: (02/26/2014 10:48:37 PM) (Source: Service Control Manager) (User: ) Description: Dienst "SQL Server VSS Writer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (02/26/2014 10:48:00 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Trend Micro WFP Callout Driver" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (02/26/2014 10:47:59 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Trend Micro Central Control Component" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (02/26/2014 10:47:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BrowserProtect" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (02/26/2014 10:47:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "tmcomm" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (02/26/2014 10:47:29 PM) (Source: Application Popup) (User: ) Description: Treiber bdftdif.sys konnte nicht geladen werden. Error: (02/26/2014 10:46:39 PM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (02/26/2014 09:45:02 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: bdftdif ntiomin tcpipBM tmlwf tmtdi Error: (02/26/2014 09:45:02 PM) (Source: Service Control Manager) (User: ) Description: Dienst "SQL Server VSS Writer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office Sessions: ========================= Error: (07/23/2012 04:43:35 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 49% Total physical RAM: 3066.95 MB Available physical RAM: 1533.5 MB Total Pagefile: 6132.2 MB Available Pagefile: 4096.75 MB Total Virtual: 2047.88 MB Available Virtual: 1901.16 MB ==================== Drives ================================ Drive c: (ACER) (Fixed) (Total:453.94 GB) (Free:177.99 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Vodafone EasyBox 803) (CDROM) (Total:0.02 GB) (Free:0 GB) UDF Drive f: (Sims3) (CDROM) (Total:5.56 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 53735373) Partition 1: (Not Active) - (Size=12 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=454 GB) - (Type=07 NTFS) ==================== End Of Log ============================ hxxp://nurpaste.de/static_icmapp_com_entfernen Ich weiss nicht ob das mit dem VAFPlayer zusammenhängt oder n ganz anderes Problem ist. (denke nicht, da die pop-ups recht neu auftreten und der Player schon länger da zu sein scheint) Ich dachte ich poste es trotzdem mal...vielleicht könnt ihr zusammenhänge erkennen. (ich werde natürlich ohne eine Aufforderung von euch, diese Anleitung nicht durchführen) Danke Lilly Geändert von Lillly (27.02.2014 um 12:02 Uhr) |
28.02.2014, 08:54 | #4 |
/// the machine /// TB-Ausbilder | VAF Player lässt sich nicht deinstallieren Bitte keinen anderen Anleitungen folgen Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu VAF Player lässt sich nicht deinstallieren |
deinstallation, pop-ups, problem, programm, vaf player, werbung |