|
Plagegeister aller Art und deren Bekämpfung: internet funktioniert nicht mehr ... aufgrund von trojaner?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.03.2014, 09:16 | #1 |
| internet funktioniert nicht mehr ... aufgrund von trojaner? Hallo ihr lieben. Bin Auf das Form gestoßen und hoffe mir kann jemand helfen. Ich habe seit einigen Tagen das Problem, dass ich mitimeinen rechner nicht mehr ins internet komme. Da vor ein paar tagen mein internet anbieter u.a. das netz ausgebaut hat, dachte ich es kam deshalb zur störung. Hab gestern mit der störungshotline telefoniert. Daran liegts definitiv nicht. Das wlan funktioniert zudem auf allen anderen geräten. Netzwerkkabel, etc. Ist auch in ordnung. Ich hatte vor kurzem einen trojaner und frage mich, ob es nun daran liegen könnte. Meint ihr, das könnte das Problem sein? Habe leider nur antivir in der gratis Version auf dem rechner. Lg nikita |
01.03.2014, 09:32 | #2 |
/// the machine /// TB-Ausbilder | internet funktioniert nicht mehr ... aufgrund von trojaner? hi,
__________________von einem anderen Rechner laden und per USB transferieren. Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
01.03.2014, 11:27 | #3 |
| internet funktioniert nicht mehr ... aufgrund von trojaner? FRST Logfile:
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02 Ran by Marina (administrator) on MARINA-PC on 01-03-2014 11:18:01 Running from F:\ Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (RealNetworks, Inc.) C:\Program Files\Common Files\Real\Update_OB\realsched.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (APN LLC.) C:\Users\Marina\AppData\Local\VNT\vntldr.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Samsung Electronics) C:\Program Files\Samsung\Kies\KiesAirMessage.exe (Samsung) C:\Program Files\Samsung\Kies\Kies.exe (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Dropbox, Inc.) C:\Users\Marina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Windows\system32\srvany.exe (Nero AG) C:\Program Files\Nero\Update\NASvc.exe () C:\Windows\KMService.exe () C:\Windows\system32\PSIService.exe (Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [104936 2008-07-18] (CyberLink) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-20] (Realtek Semiconductor) HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13797920 2009-07-23] (NVIDIA Corporation) HKLM\...\Run: [TkBellExe] - C:\Program Files\Common Files\Real\Update_OB\realsched.exe [198160 2010-01-05] (RealNetworks, Inc.) HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [652624 2007-10-25] (CANON INC.) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1603152 2007-09-13] (CANON INC.) HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [47392 2010-04-13] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.) HKLM\...\Run: [AnyConnect SMC] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [518392 2011-01-11] (Cisco Systems, Inc.) HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [421160 2011-06-07] (Apple Inc.) HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM\...\Run: [B2C_AGENT] - C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe [404568 2012-03-28] (LG Electronics) HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [309688 2012-11-12] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1758160 2014-02-13] (APN) HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [195536 2014-02-13] (APN LLC.) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [NVIDIA driver monitor] - C:\Users\Public\nvsvc32.exe HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung) HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [KiesAirMessage] - C:\Program Files\Samsung\Kies\KiesAirMessage.exe [577536 2012-11-01] (Samsung Electronics) HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [968120 2012-11-12] (Samsung) HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung) HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [CDHWfjqz] - C:\ProgramData\CDHWfjqz.exe Startup: C:\Users\Marina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Marina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.facebook.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File URLSearchHook: HKLM - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.) URLSearchHook: HKCU - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.) SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 SearchScopes: HKCU - {03AEA0EE-96AC-45D0-8E39-0252D162D351} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_US&apn_ptnrs=U3&apn_dtid=YYYYYYYYAT&apn_uid=64EDC0E9-B775-46EE-A460-A6A743FDE8B8&apn_sauid=D8F952E9-DC39-4126-95C3-B8A3D60B99E2 SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer) BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) Toolbar: HKCU - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - softonic-de3 Toolbar - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.) Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 195.3.96.67 213.33.98.136 Tcpip\..\Interfaces\{38398E64-48A9-4A63-A3B9-90A1B6C2B874}: [NameServer]93.171.202.99 Tcpip\..\Interfaces\{3a539854-6a70-11db-887c-806e6f6e6963}: [NameServer]93.171.202.99 Tcpip\..\Interfaces\{7606793A-BB19-49AE-B3F3-41B45FED3179}: [NameServer]93.171.202.99 Tcpip\..\Interfaces\{AD6970A1-223B-4541-B052-D18312C0D6A6}: [NameServer]93.171.202.99 FireFox: ======== FF ProfilePath: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default FF DefaultSearchEngine: Ask Search FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask Search FF Homepage: hxxp://avira.search.ask.com/?tpid=AVIRA-V7C&o=APN11394&pf=V7&trgb=ALL&p2=%5EBB1%5EYYYYYY%5EYY%5EAT&gct=hp&apn_ptnrs=%5EBB1&apn_dtid=%5EYYYYYY%5EYY%5EAT&apn_dbr=ff_26.0&apn_uid=5B96D163-B8F6-4C3D-94E4-D67A3F7FE915&itbv=12.10.0.2951&doi=2014-01-02&psv= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @canon.com/MycameraPlugin - C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.) FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\3.0.40723.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/OfficeLive,version=1.4 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=1.0.3.448 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\ask-search.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\conduit.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-1.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-10.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-11.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-12.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-13.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-14.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-15.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-16.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-17.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-18.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-19.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-2.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-20.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-21.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-22.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-3.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-4.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-5.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-6.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-7.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-8.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-9.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin.xml FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Conduit Engine - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\engine@conduit.com [2011-04-02] FF Extension: No Name - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\nostmp [2011-04-02] FF Extension: Microsoft .NET Framework Assistant - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-08-25] FF Extension: ICQ Toolbar - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-10-17] FF Extension: DVDVideoSoft Toolbar - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} [2010-03-12] FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20] FF Extension: Greasemonkey - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2011-07-29] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Program Files\Real\RealPlayer\browserrecord\firefox\ext FF Extension: RealPlayer Browser Record Plugin - C:\Program Files\Real\RealPlayer\browserrecord\firefox\ext [2010-01-05] FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-02-03] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR Extension: (Google Wallet) - C:\Users\Marina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-14] CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Marina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm [2014-02-14] CHR HKLM\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx [2014-02-20] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.) S2 gupdate1ca8df863179960; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2010-01-05] (Google Inc.) S3 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] () R2 KMService; C:\Windows\system32\srvany.exe [8192 2011-09-16] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.) R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [490280 2010-03-25] (Nero AG) R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] () R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [431864 2011-01-11] (Cisco Systems, Inc.) ==================== Drivers (Whitelisted) ==================== S3 acsint; C:\Windows\System32\DRIVERS\acsint.sys [36624 2011-01-11] (Cisco Systems, Inc.) S3 acsmux; C:\Windows\System32\DRIVERS\acsmux.sys [46480 2011-01-11] (Cisco Systems, Inc.) S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.) S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.) S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.) S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG) R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [554496 2007-09-21] (Ralink Technology Corp.) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH) S3 usbbus; C:\Windows\System32\DRIVERS\lgusbbus.sys [13056 2012-03-02] (LG Electronics Inc.) S3 UsbDiag; C:\Windows\System32\DRIVERS\lgusbdiag.sys [20864 2012-03-02] (LG Electronics Inc.) S3 USBModem; C:\Windows\System32\DRIVERS\lgusbmodem.sys [25216 2012-03-02] (LG Electronics Inc.) S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-01 11:17 - 2014-03-01 11:18 - 00000000 ____D () C:\FRST 2014-02-27 16:55 - 2014-03-01 08:03 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-02-21 09:48 - 2014-02-21 09:48 - 00000801 _____ () C:\Users\Public\Desktop\Opera 19.lnk 2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Opera Software 2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Local\Opera Software 2014-02-21 09:40 - 2014-02-21 09:42 - 35623952 _____ (Opera Software ASA) C:\Users\Marina\Downloads\Opera_19.0.1326.63_Setup.exe 2014-02-14 14:48 - 2014-02-15 16:34 - 00024576 ____H () C:\Users\Marina\Desktop\photothumb.db 2014-02-14 10:53 - 2014-02-26 07:02 - 00000000 ___RD () C:\Users\Marina\Dropbox 2014-02-14 10:53 - 2014-02-14 10:53 - 00000946 _____ () C:\Users\Marina\Desktop\Dropbox.lnk 2014-02-14 10:50 - 2014-02-14 10:53 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\DropboxMaster 2014-02-14 10:45 - 2014-02-14 10:47 - 37660568 _____ (Dropbox, Inc.) C:\Users\Marina\Downloads\Dropbox 2.6.2.exe 2014-02-14 10:44 - 2014-02-24 16:28 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-14 10:39 - 2014-02-14 10:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-14 10:06 - 2014-02-14 10:06 - 02072128 _____ (Fastviewer.com) C:\Users\Marina\Downloads\fastviewer.exe 2014-02-13 19:22 - 2014-02-05 09:58 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-13 19:22 - 2014-02-05 09:56 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-13 19:22 - 2014-02-05 09:53 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-13 19:22 - 2014-02-05 09:51 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-13 19:22 - 2014-02-05 09:50 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-13 19:22 - 2014-02-05 09:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-13 19:22 - 2014-02-05 09:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-13 19:22 - 2014-02-05 09:48 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-13 19:22 - 2014-02-05 09:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-13 19:22 - 2014-02-05 09:48 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-13 19:22 - 2014-02-05 09:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-13 19:22 - 2014-02-05 09:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-13 19:22 - 2014-02-05 09:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-13 19:22 - 2014-02-05 09:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-13 19:22 - 2014-02-05 09:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-13 19:22 - 2014-02-05 09:46 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-13 18:11 - 2013-12-05 03:12 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 20:13 - 2014-02-12 20:13 - 00001499 _____ () C:\Users\Marina\AppData\Local\recently-used.xbel 2014-02-12 20:12 - 2014-02-12 20:12 - 22401973 _____ () C:\Users\Marina\Desktop\DSCN0013.xcf 2014-02-12 20:02 - 2014-02-12 20:12 - 00000000 ____D () C:\Users\Marina\AppData\Local\gtk-2.0 2014-02-12 20:01 - 2014-02-12 20:01 - 00000000 ____D () C:\Users\Marina\.thumbnails 2014-02-12 19:59 - 2014-02-12 20:13 - 00000000 ____D () C:\Users\Marina\.gimp-2.8 2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Users\Marina\AppData\Local\gegl-0.2 2014-02-12 19:57 - 2014-02-12 19:57 - 00000886 _____ () C:\Users\Marina\Desktop\GIMP 2.lnk 2014-02-12 19:55 - 2014-02-12 19:56 - 00000000 ____D () C:\Program Files\GIMP 2 2014-02-12 19:50 - 2014-02-12 19:54 - 90396104 _____ (The GIMP Team ) C:\Users\Marina\Downloads\gimp-2.8.10-setup.exe ==================== One Month Modified Files and Folders ======= 2014-03-01 11:18 - 2014-03-01 11:17 - 00000000 ____D () C:\FRST 2014-03-01 11:16 - 2006-11-02 11:33 - 01445546 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-01 10:30 - 2012-11-11 16:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-01 10:23 - 2010-01-05 12:23 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-01 10:08 - 2009-12-07 15:45 - 01181968 _____ () C:\Windows\WindowsUpdate.log 2014-03-01 10:00 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-01 10:00 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-01 08:03 - 2014-02-27 16:55 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-03-01 08:03 - 2013-12-23 17:48 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Dropbox 2014-03-01 08:00 - 2010-01-05 12:23 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-01 08:00 - 2009-08-11 10:47 - 00086050 _____ () C:\ProgramData\nvModes.dat 2014-03-01 08:00 - 2009-08-11 10:47 - 00086050 _____ () C:\ProgramData\nvModes.001 2014-03-01 08:00 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-28 21:57 - 2006-11-02 14:01 - 00032530 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-28 18:44 - 2013-03-22 14:29 - 00000000 ____D () C:\Users\Marina\Desktop\fotos 2014-02-27 12:26 - 2013-10-02 11:37 - 00000000 ____D () C:\Users\Marina\Desktop\L6 2014-02-27 12:24 - 2013-03-16 15:41 - 00000000 ____D () C:\Users\Marina\Desktop\Studium 2014-02-26 07:02 - 2014-02-14 10:53 - 00000000 ___RD () C:\Users\Marina\Dropbox 2014-02-24 16:28 - 2014-02-14 10:44 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-21 10:31 - 2012-11-11 16:25 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-02-21 10:31 - 2011-08-20 09:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-02-21 09:48 - 2014-02-21 09:48 - 00000801 _____ () C:\Users\Public\Desktop\Opera 19.lnk 2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Opera Software 2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Local\Opera Software 2014-02-21 09:48 - 2009-12-07 15:54 - 00000000 ____D () C:\Program Files\Opera 2014-02-21 09:42 - 2014-02-21 09:40 - 35623952 _____ (Opera Software ASA) C:\Users\Marina\Downloads\Opera_19.0.1326.63_Setup.exe 2014-02-21 09:12 - 2014-01-02 17:48 - 00000000 ____D () C:\Users\Marina\AppData\Local\VNT 2014-02-21 09:12 - 2014-01-02 17:48 - 00000000 ____D () C:\Program Files\VNT 2014-02-20 16:18 - 2013-10-02 11:44 - 00000000 ____D () C:\Users\Marina\Desktop\W2 2014-02-20 15:41 - 2011-09-16 17:10 - 00002617 _____ () C:\Users\Marina\Desktop\Microsoft Word 2010.lnk 2014-02-16 17:18 - 2010-03-09 14:55 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-02-15 16:34 - 2014-02-14 14:48 - 00024576 ____H () C:\Users\Marina\Desktop\photothumb.db 2014-02-14 18:06 - 2012-10-17 20:02 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-02-14 12:58 - 2008-01-21 03:47 - 00756688 _____ () C:\Windows\PFRO.log 2014-02-14 12:12 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-14 10:53 - 2014-02-14 10:53 - 00000946 _____ () C:\Users\Marina\Desktop\Dropbox.lnk 2014-02-14 10:53 - 2014-02-14 10:50 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\DropboxMaster 2014-02-14 10:53 - 2009-12-07 15:50 - 00000000 ____D () C:\Users\Marina 2014-02-14 10:50 - 2013-12-23 17:49 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-02-14 10:47 - 2014-02-14 10:45 - 37660568 _____ (Dropbox, Inc.) C:\Users\Marina\Downloads\Dropbox 2.6.2.exe 2014-02-14 10:39 - 2014-02-14 10:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-14 10:31 - 2010-03-28 11:56 - 00000000 ___RD () C:\Users\Marina\Desktop\Eigene Bilder 2014-02-14 10:06 - 2014-02-14 10:06 - 02072128 _____ (Fastviewer.com) C:\Users\Marina\Downloads\fastviewer.exe 2014-02-13 19:31 - 2013-08-14 20:09 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-13 19:29 - 2006-11-02 11:24 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-02-12 20:13 - 2014-02-12 20:13 - 00001499 _____ () C:\Users\Marina\AppData\Local\recently-used.xbel 2014-02-12 20:13 - 2014-02-12 19:59 - 00000000 ____D () C:\Users\Marina\.gimp-2.8 2014-02-12 20:12 - 2014-02-12 20:12 - 22401973 _____ () C:\Users\Marina\Desktop\DSCN0013.xcf 2014-02-12 20:12 - 2014-02-12 20:02 - 00000000 ____D () C:\Users\Marina\AppData\Local\gtk-2.0 2014-02-12 20:01 - 2014-02-12 20:01 - 00000000 ____D () C:\Users\Marina\.thumbnails 2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Users\Marina\AppData\Local\gegl-0.2 2014-02-12 19:57 - 2014-02-12 19:57 - 00000886 _____ () C:\Users\Marina\Desktop\GIMP 2.lnk 2014-02-12 19:56 - 2014-02-12 19:55 - 00000000 ____D () C:\Program Files\GIMP 2 2014-02-12 19:54 - 2014-02-12 19:50 - 90396104 _____ (The GIMP Team ) C:\Users\Marina\Downloads\gimp-2.8.10-setup.exe 2014-02-06 17:57 - 2013-09-22 16:22 - 00000000 ____D () C:\Users\Marina\Desktop\L1 neu 2014-02-05 09:58 - 2014-02-13 19:22 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-05 09:56 - 2014-02-13 19:22 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-05 09:53 - 2014-02-13 19:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-05 09:51 - 2014-02-13 19:22 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-05 09:50 - 2014-02-13 19:22 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-05 09:49 - 2014-02-13 19:22 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-05 09:49 - 2014-02-13 19:22 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-02-05 09:48 - 2014-02-13 19:22 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-05 09:48 - 2014-02-13 19:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-05 09:48 - 2014-02-13 19:22 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-05 09:48 - 2014-02-13 19:22 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-05 09:48 - 2014-02-13 19:22 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-05 09:47 - 2014-02-13 19:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-05 09:47 - 2014-02-13 19:22 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-05 09:47 - 2014-02-13 19:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-02-05 09:46 - 2014-02-13 19:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll Some content of TEMP: ==================== C:\Users\Marina\AppData\Local\Temp\AllSharePCSW.exe C:\Users\Marina\AppData\Local\Temp\APNStub.exe C:\Users\Marina\AppData\Local\Temp\AskSLib.dll C:\Users\Marina\AppData\Local\Temp\avgnt.exe C:\Users\Marina\AppData\Local\Temp\CWPCUNLR.dll C:\Users\Marina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdds2nj.dll C:\Users\Marina\AppData\Local\Temp\DRPCUNLR.dll C:\Users\Marina\AppData\Local\Temp\FlashPlayerUpdate.exe C:\Users\Marina\AppData\Local\Temp\FlashPlayerUpdate01.exe C:\Users\Marina\AppData\Local\Temp\GLF15C8.tmp.tbsoft.dll C:\Users\Marina\AppData\Local\Temp\IcqUpdater.exe C:\Users\Marina\AppData\Local\Temp\jniverify.dll C:\Users\Marina\AppData\Local\Temp\MSETUP4.EXE C:\Users\Marina\AppData\Local\Temp\NEW2F7A.tmp.exe C:\Users\Marina\AppData\Local\Temp\NEWF1CD.tmp.exe C:\Users\Marina\AppData\Local\Temp\Offercast_AVIRAV7_.exe C:\Users\Marina\AppData\Local\Temp\pdf24-creator-update.exe C:\Users\Marina\AppData\Local\Temp\setup.exe C:\Users\Marina\AppData\Local\Temp\softonic-de3.exe C:\Users\Marina\AppData\Local\Temp\TubeBox_Setup.exe C:\Users\Marina\AppData\Local\Temp\Uninst.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-01 08:08 ==================== End Of Log ============================ --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-02-2014 02 Ran by Marina at 2014-03-01 11:18:38 Running from F:\ Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden Adobe Connect Add-in (HKCU\...\Adobe Connect Add-in) (Version: - ) Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.1.601 - Adobe Systems, Inc.) Anki (HKLM\...\Anki) (Version: - ) Apple Application Support (HKLM\...\{B3575D00-27EF-49C2-B9E0-14B3D954E992}) (Version: 1.5.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{C23CD6DA-1958-43A5-ADD0-59396572E02E}) (Version: 3.4.1.2 - Apple Inc.) Apple Software Update (HKLM\...\{C6579A65-9CAE-4B31-8B6B-3306E0630A66}) (Version: 2.1.3.127 - Apple Inc.) Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira) Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-4300-A758B70C0A03}) (Version: 12.10.3.4488 - APN, LLC) Bonjour (HKLM\...\{C2E4B5BD-32DB-4817-A060-341AB17C3F90}) (Version: 2.0.5.0 - Apple Inc.) CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM\...\CANON iMAGE GATEWAY Task) (Version: 1.7.2.11 - Canon Inc.) Canon Internet Library for ZoomBrowser EX (HKLM\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.6.3.9 - Canon Inc.) Canon MOV Decoder (HKLM\...\Canon MOV Decoder) (Version: 1.5.0.7 - Canon Inc.) Canon MOV Encoder (HKLM\...\Canon MOV Encoder) (Version: 1.3.0.3 - Canon Inc.) Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 3.4.0.8 - Canon Inc.) Canon MP Navigator EX 1.2 (HKLM\...\MP Navigator EX 1.2) (Version: - ) Canon MP190 series Benutzerregistrierung (HKLM\...\Canon MP190 series Benutzerregistrierung) (Version: - ) Canon MP190 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series) (Version: - ) Canon My Printer (HKLM\...\CanonMyPrinter) (Version: - ) Canon Utilities CameraWindow (HKLM\...\CameraWindowLauncher) (Version: 7.4.0.7 - Canon Inc.) Canon Utilities CameraWindow DC 8 (HKLM\...\CameraWindowDC8) (Version: 8.1.0.11 - Canon Inc.) Canon Utilities Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version: - ) Canon Utilities Movie Uploader for YouTube (HKLM\...\MovieUploaderForYouTube) (Version: 1.0.0.11 - Canon Inc.) Canon Utilities MyCamera (HKLM\...\MyCamera) (Version: 7.3.0.5 - Canon Inc.) Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.) Canon Utilities Solution Menu (HKLM\...\CanonSolutionMenu) (Version: - ) Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 6.5.0.14 - Canon Inc.) Canon ZoomBrowser EX Memory Card Utility (HKLM\...\ZoomBrowser EX Memory Card Utility) (Version: 1.3.0.4 - Canon Inc.) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.0.2838 - CDBurnerXP) Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden Cisco AnyConnect Secure Mobility Client (HKLM\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.0.0629 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.0.0629 - Cisco Systems, Inc.) Hidden Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.3.0.0 - Swiss Academic Software) Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation) CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.2806 - CyberLink Corp.) CyberLink Power2Go (Version: 6.1.2806 - CyberLink Corp.) Hidden Dropbox (HKCU\...\Dropbox) (Version: 2.6.2 - Dropbox, Inc.) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.) Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden Inkjet Printer/Scanner Extended Survey Program (HKLM\...\CANONIJPLM100) (Version: - ) iTunes (HKLM\...\{7E6066E6-8B5B-4100-B0FA-1D9E9B663CBA}) (Version: 10.3.1.55 - Apple Inc.) Java 7 Update 7 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.70 - Oracle) Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 16 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.) Junk Mail filter update (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.130.10 - McAfee, Inc.) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.4 (HKLM\...\{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}) (Version: 2.0.3008.0 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Search Enhancement Pack (Version: 1.3.59.0 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40723.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation) MobileMe Control Panel (HKLM\...\{BA165460-FCF7-4D6C-A7A2-F2321700720F}) (Version: 3.0.1.1 - Apple Inc.) Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - ) MyMicroBalance (HKLM\...\{F4DB90F7-3DAE-4797-8A1F-091A98285F3E}) (Version: 2.5.0 - Trusted Bytes Softwareentwicklung e.U.) Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG) Nero Burning ROM 10 (HKLM\...\{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}) (Version: 10.0.10800 - Nero AG) Nero BurningROM 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG) Nero BurnRights 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden Nero Control Center 10 (Version: 10.0.12000.1.4 - Nero AG) Hidden Nero ControlCenter 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden Nero Core Components 10 (Version: 2.0.13700.0.1 - Nero AG) Hidden Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation) NVIDIA PhysX (HKLM\...\{B83FC356-B7C0-441F-8A4D-D71E088E7974}) (Version: 9.09.0428 - NVIDIA Corporation) Opera 12.12 (HKLM\...\Opera 12.12.1707) (Version: 12.12.1707 - Opera Software ASA) Opera Stable 19.0.1326.63 (HKLM\...\Opera 19.0.1326.63) (Version: 19.0.1326.63 - Opera Software ASA) phase-6 2.1.2.4b (HKLM\...\phase-6) (Version: 2.1.2.4b - phase-6) PhotoScape (HKLM\...\PhotoScape) (Version: - ) QuickTime (HKLM\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.) RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5898 - Realtek Semiconductor Corp.) Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.) Hidden softonic-de3 Toolbar (HKLM\...\softonic-de3 Toolbar) (Version: - ) <==== ATTENTION Sound Organizer (HKLM\...\{010813A5-CE68-4C86-96F4-11CAEA3E6292}) (Version: 1.1.1.12161 - Sony Corporation) Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - ) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939v3) (Version: 3 - Microsoft Corporation) Windows Live Call (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Communications Platform (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation) Windows Live Essentials (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Fotogalerie (Version: 14.0.8051.1204 - Microsoft Corporation) Hidden Windows Live ID-Anmelde-Assistent (HKLM\...\{10A44844-4465-456E-8C97-80BDD4F68845}) (Version: 6.500.3146.0 - Microsoft Corporation) Windows Live Mail (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Messenger (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live Sync (HKLM\...\{8C1E2925-14F8-45AA-B999-1E2A74BF5607}) (Version: 14.0.8050.1202 - Microsoft Corporation) Windows Live Toolbar (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden Windows Live Writer (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinRAR (HKLM\...\WinRAR archiver) (Version: - ) XMind (HKLM\...\XMind) (Version: 3.2.1 - XMind Ltd.) XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.) ==================== Restore Points ========================= 14-12-2013 10:45:51 Geplanter Prüfpunkt 17-12-2013 15:04:52 Windows Update 19-12-2013 07:33:03 Geplanter Prüfpunkt 21-12-2013 10:14:18 Geplanter Prüfpunkt 22-12-2013 10:37:50 Geplanter Prüfpunkt 23-12-2013 10:54:25 Geplanter Prüfpunkt 23-12-2013 17:55:55 Windows Update 24-12-2013 13:03:10 Windows Update 28-12-2013 17:39:30 Windows Update 01-01-2014 16:34:07 avast! antivirus system restore point 02-01-2014 16:15:42 avast! antivirus system restore point 02-01-2014 16:19:05 Windows Update 04-01-2014 17:21:28 Geplanter Prüfpunkt 07-01-2014 17:59:51 Geplanter Prüfpunkt 08-01-2014 16:44:08 Geplanter Prüfpunkt 09-01-2014 14:26:53 Geplanter Prüfpunkt 11-01-2014 08:15:07 Geplanter Prüfpunkt 15-01-2014 19:36:38 Windows Update 16-01-2014 17:15:37 Geplanter Prüfpunkt 17-01-2014 13:50:25 Geplanter Prüfpunkt 22-01-2014 16:50:17 Geplanter Prüfpunkt 23-01-2014 13:17:00 Geplanter Prüfpunkt 28-01-2014 11:49:34 Geplanter Prüfpunkt 07-02-2014 12:11:43 Geplanter Prüfpunkt 08-02-2014 09:18:15 Geplanter Prüfpunkt 13-02-2014 18:21:41 Windows Update 18-02-2014 15:01:11 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {02022553-66C8-4013-A0AE-9847C63F7829} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {6D7FDB36-7257-49ED-9EA8-4EB576F6B6D0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-05] (Google Inc.) Task: {7F90F4D9-FCF8-44ED-8A9E-43500C59EBBE} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {A0F41418-73DE-4EDF-9F8C-525A501FD861} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-05] (Google Inc.) Task: {DB07BF75-0EA4-4D11-A86F-680A17FCF679} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-02 17:47 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll 2010-01-30 01:41 - 2010-01-30 01:41 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2008-08-27 15:32 - 2008-08-27 15:32 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll 2008-06-09 08:55 - 2008-06-09 08:55 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll 2009-11-03 15:51 - 2009-11-03 15:51 - 00067872 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-14 09:34 - 2014-02-14 09:34 - 01874944 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\9037a4483150bdcdd191b9ce9e437c91\Kies.UI.ni.dll 2014-02-14 09:34 - 2014-02-14 09:34 - 00078848 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\1cc25bba9e22ce40c3d8037b67838dcc\Kies.MVVM.ni.dll 2014-02-14 09:34 - 2014-02-14 09:34 - 00184832 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\d22206c34d2ed6afcd06ca5792e776e2\Kies.Common.DeviceServiceLib.Interface.ni.dll 2014-02-14 09:35 - 2014-02-14 09:35 - 01493504 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PodcastService\69a3c501d3b0cc85efd8dbd469386c51\PodcastService.ni.dll 2014-02-14 09:35 - 2014-02-14 09:35 - 00371712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePhoto\58ca26e468bdb6e7eb43c2485887dede\DevicePhoto.ni.dll 2014-02-14 09:35 - 2014-02-14 09:35 - 00293888 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceVideo\c512aa27514a06f367a57b0d22501820\DeviceVideo.ni.dll 2014-02-14 09:35 - 2014-02-14 09:35 - 00609792 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePodcast\36b10606de1fb3a3d70f9cf679464e85\DevicePodcast.ni.dll 2014-02-14 09:35 - 2014-02-14 09:35 - 12621824 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\58e3a1718554221a9abd1c1990139584\Kies.Theme.ni.dll 2014-02-14 09:34 - 2014-02-14 09:34 - 00570368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\6c84d4f32c49e5149e1e03d526cfb5a0\Kies.Common.DeviceServiceLib.FileService.ni.dll 2014-02-14 09:34 - 2014-02-14 09:34 - 00036864 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\d17be53947f0c4ec081c0b20748ca0b6\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll 2014-02-14 09:34 - 2014-02-14 09:34 - 00232960 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\9f734e967ec35a662f6f75d390619731\ASF_cSharpAPI.ni.dll 2014-03-01 08:03 - 2014-03-01 08:03 - 00041984 _____ () c:\users\marina\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdds2nj.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Marina\AppData\Roaming\Dropbox\bin\libcef.dll 2011-09-16 17:14 - 2011-09-16 17:13 - 00008192 _____ () C:\Windows\system32\srvany.exe 2011-09-16 17:14 - 2011-09-16 17:13 - 00151552 _____ () C:\Windows\KMService.exe 2007-06-05 12:20 - 2007-06-05 12:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows Description: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 07:32:00 PM) (Source: Application Hang) (User: ) Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: ac0 Anfangszeit: 01cf34b3162ba651 Zeitpunkt der Beendigung: 0 Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:55:02 PM) (Source: Application Hang) (User: ) Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: aa0 Anfangszeit: 01cf34ade52359ac Zeitpunkt der Beendigung: 0 Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 09:35:35 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/27/2014 06:17:56 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/27/2014 05:58:24 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (03/01/2014 10:59:06 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 10:26:59 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 09:02:55 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 08:28:06 AM) (Source: ipnathlp) (User: ) Description: Ein DHCP-Server mit der IP-Adresse 192.168.1.1 wurde von der DHCP-Zuweisung im selben Netzwerk gefunden, wie die Schnittstelle mit der IP-Adresse 192.168.0.1. Die Zuweisung wurde auf der Schnittstelle automatisch deaktiviert, um DHCP-Clientkonflikte zu vermeiden. Error: (03/01/2014 08:15:13 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 08:01:59 AM) (Source: Service Control Manager) (User: ) Description: 30000vpnagent Error: (02/28/2014 09:50:07 PM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (02/28/2014 09:10:53 PM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (02/28/2014 08:32:22 PM) (Source: ipnathlp) (User: ) Description: 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner Fehler ist im Speicher-Manager aufgetreten. Error: (02/28/2014 07:54:12 PM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Microsoft Office Sessions: ========================= Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 07:32:00 PM) (Source: Application Hang)(User: ) Description: KiesAirMessage.exe1.0.0.0ac001cf34b3162ba6510 Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:55:02 PM) (Source: Application Hang)(User: ) Description: KiesAirMessage.exe1.0.0.0aa001cf34ade52359ac0 Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 09:35:35 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/27/2014 06:17:56 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/27/2014 05:58:24 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Percentage of memory in use: 51% Total physical RAM: 3070.39 MB Available physical RAM: 1474.61 MB Total Pagefile: 6358.98 MB Available Pagefile: 4874.86 MB Total Virtual: 2047.88 MB Available Virtual: 1900.96 MB ==================== Drives ================================ Drive c: (BOOT) (Fixed) (Total:581.17 GB) (Free:387.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (RECOVER) (Fixed) (Total:14.99 GB) (Free:2.94 GB) FAT32 Drive f: () (Removable) (Total:7.52 GB) (Free:7.5 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: F98D6E74) Partition: GPT Partition Type. ======================================================== Disk: 4 (Size: 8 GB) (Disk ID: 6E652072) No partition Table on disk 4. ==================== End Of Log ============================ |
02.03.2014, 07:54 | #4 |
/// the machine /// TB-Ausbilder | internet funktioniert nicht mehr ... aufgrund von trojaner? Downloade dir bitte Farbar Service Scanner
Poste bitte den Inhalt hier. Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool Setze einen Haken bei folgenden Einträgen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.03.2014, 15:48 | #5 |
| internet funktioniert nicht mehr ... aufgrund von trojaner?Code:
ATTFilter Farbar Service Scanner Version: 25-02-2014 Ran by Marina (administrator) on 02-03-2014 at 10:24:59 Running from "F:\" Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Attempt to access Google IP returned error. Google IP is unreachable Attempt to access Google.com returned error: Other errors Attempt to access Yahoo.com returned error: Other errors Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Security Center: ============ wscsvc Service is not running. Checking service configuration: The start type of wscsvc service is OK. The ImagePath of wscsvc service is OK. The ServiceDll of wscsvc service is OK. Checking LEGACY_wscsvc: ATTENTION!=====> Unable to open LEGACY_wscsvc\0000 registry key. The key does not exist. Windows Update: ============ wuauserv Service is not running. Checking service configuration: The start type of wuauserv service is OK. The ImagePath of wuauserv service is OK. The ServiceDll of wuauserv service is OK. Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== WinDefend Service is not running. Checking service configuration: The start type of WinDefend service is OK. The ImagePath of WinDefend service is OK. The ServiceDll of WinDefend service is OK. Windows Defender Disabled Policy: ========================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware"=DWORD:1 Other Services: ============== File Check: ======== C:\Windows\system32\nsisvc.dll => MD5 is legit C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit C:\Windows\system32\dhcpcsvc.dll => MD5 is legit C:\Windows\system32\Drivers\afd.sys => MD5 is legit C:\Windows\system32\Drivers\tdx.sys => MD5 is legit C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit C:\Windows\system32\dnsrslvr.dll => MD5 is legit C:\Windows\system32\mpssvc.dll => MD5 is legit C:\Windows\system32\bfe.dll => MD5 is legit C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit C:\Windows\system32\SDRSVC.dll => MD5 is legit C:\Windows\system32\vssvc.exe => MD5 is legit C:\Windows\system32\wscsvc.dll => MD5 is legit C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\system32\wuaueng.dll => MD5 is legit C:\Windows\system32\qmgr.dll => MD5 is legit C:\Windows\system32\es.dll => MD5 is legit C:\Windows\system32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\system32\ipnathlp.dll => MD5 is legit C:\Windows\system32\iphlpsvc.dll => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit **** End of log **** Code:
ATTFilter MiniToolBox by Farbar Version: 23-01-2014 Ran by Marina (administrator) on 02-03-2014 at 10:26:19 Running from "F:\" Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Boot Mode: Normal *************************************************************************** ========================= Flush DNS: =================================== Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. ========================= IE Proxy Settings: ============================== Proxy is not enabled. No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= FF Proxy Settings: ============================== "Reset FF Proxy Settings": Firefox Proxy settings were reset. ========================= Hosts content: ================================= ::1 localhost 127.0.0.1 localhost ========================= IP Configuration: ================================ Cisco AnyConnect VPN Virtual Miniport Adapter for Windows = Cisco AnyConnect Secure Mobility Client Connection (Disconnected) NVIDIA nForce 10/100/1000 Mbps Ethernet = LAN-Verbindung (Connected) 802.11 n/g/b Wireless LAN USB Adapter = Drahtlosnetzwerkverbindung (Connected) # ---------------------------------- # IPv4-Konfiguration # ---------------------------------- pushd interface ipv4 reset set global icmpredirects=enabled set interface interface="LAN-Verbindung 2" forwarding=enabled advertise=enabled metric=1 nud=enabled add address name="LAN-Verbindung" address=192.168.0.1 add address name="LAN-Verbindung 2" address=0.0.0.0 popd # Ende der IPv4-Konfiguration Windows-IP-Konfiguration Hostname . . . . . . . . . . . . : Marina-PC Prim„res DNS-Suffix . . . . . . . : Knotentyp . . . . . . . . . . . . : Hybrid IP-Routing aktiviert . . . . . . : Nein WINS-Proxy aktiviert . . . . . . : Nein Ethernet-Adapter LAN-Verbindung: Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : NVIDIA nForce 10/100/1000 Mbps Ethernet Physikalische Adresse . . . . . . : 40-61-86-01-B5-5B DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Verbindungslokale IPv6-Adresse . : fe80::2845:87f9:2504:cb96%12(Bevorzugt) IPv4-Adresse . . . . . . . . . . : 192.168.0.1(Bevorzugt) Subnetzmaske . . . . . . . . . . : 255.255.255.0 Standardgateway . . . . . . . . . : DHCPv6-IAID . . . . . . . . . . . : 390095238 DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-12-AE-CC-31-40-61-86-01-B5-5B DNS-Server . . . . . . . . . . . : 93.171.202.99 NetBIOS ber TCP/IP . . . . . . . : Aktiviert Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung: Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : 802.11 n/g/b Wireless LAN USB Adapter Physikalische Adresse . . . . . . : 00-25-D3-4A-26-8E DHCP aktiviert. . . . . . . . . . : Ja Autokonfiguration aktiviert . . . : Ja Verbindungslokale IPv6-Adresse . : fe80::102b:8046:9866:10e8%11(Bevorzugt) IPv4-Adresse (Auto. Konfiguration): 169.254.16.232(Bevorzugt) Subnetzmaske . . . . . . . . . . : 255.255.0.0 Standardgateway . . . . . . . . . : fe80::2845:87f9:2504:cb96%11 DHCPv6-IAID . . . . . . . . . . . : 352331219 DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-12-AE-CC-31-40-61-86-01-B5-5B DNS-Server . . . . . . . . . . . : 93.171.202.99 NetBIOS ber TCP/IP . . . . . . . : Aktiviert Tunneladapter LAN-Verbindung*: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : isatap.{7606793A-BB19-49AE-B3F3-41B45FED3179} Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Tunneladapter LAN-Verbindung* 2: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physikalische Adresse . . . . . . : 02-00-54-55-4E-01 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Tunneladapter LAN-Verbindung* 11: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : isatap.{38398E64-48A9-4A63-A3B9-90A1B6C2B874} Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Tunneladapter LAN-Verbindung* 12: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : 6TO4 Adapter Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Server: UnKnown Address: 93.171.202.99 Ping-Anforderung konnte Host "google.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut. Server: UnKnown Address: 93.171.202.99 Ping-Anforderung konnte Host "yahoo.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut. Ping wird ausgefhrt fr 127.0.0.1 mit 32 Bytes Daten: Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128 Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128 Ping-Statistik fr 127.0.0.1: Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0 (0% Verlust), Ca. Zeitangaben in Millisek.: Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms =========================================================================== Schnittstellenliste 12 ...40 61 86 01 b5 5b ...... NVIDIA nForce 10/100/1000 Mbps Ethernet 11 ...00 25 d3 4a 26 8e ...... 802.11 n/g/b Wireless LAN USB Adapter 1 ........................... Software Loopback Interface 1 17 ...00 00 00 00 00 00 00 e0 isatap.{7606793A-BB19-49AE-B3F3-41B45FED3179} 13 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface 15 ...00 00 00 00 00 00 00 e0 isatap.{38398E64-48A9-4A63-A3B9-90A1B6C2B874} 16 ...00 00 00 00 00 00 00 e0 6TO4 Adapter =========================================================================== IPv4-Routentabelle =========================================================================== Aktive Routen: Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik 127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 306 127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 306 127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 169.254.0.0 255.255.0.0 Auf Verbindung 169.254.16.232 286 169.254.16.232 255.255.255.255 Auf Verbindung 169.254.16.232 286 169.254.255.255 255.255.255.255 Auf Verbindung 169.254.16.232 286 192.168.0.0 255.255.255.0 Auf Verbindung 192.168.0.1 276 192.168.0.1 255.255.255.255 Auf Verbindung 192.168.0.1 276 192.168.0.255 255.255.255.255 Auf Verbindung 192.168.0.1 276 224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 306 224.0.0.0 240.0.0.0 Auf Verbindung 192.168.0.1 276 224.0.0.0 240.0.0.0 Auf Verbindung 169.254.16.232 286 255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 255.255.255.255 255.255.255.255 Auf Verbindung 192.168.0.1 276 255.255.255.255 255.255.255.255 Auf Verbindung 169.254.16.232 286 =========================================================================== St„ndige Routen: Keine IPv6-Routentabelle =========================================================================== Aktive Routen: If Metrik Netzwerkziel Gateway 11 286 ::/0 fe80::2845:87f9:2504:cb96 1 306 ::1/128 Auf Verbindung 12 276 fe80::/64 Auf Verbindung 11 286 fe80::/64 Auf Verbindung 11 286 fe80::102b:8046:9866:10e8/128 Auf Verbindung 12 276 fe80::2845:87f9:2504:cb96/128 Auf Verbindung 1 306 ff00::/8 Auf Verbindung 12 276 ff00::/8 Auf Verbindung 11 286 ff00::/8 Auf Verbindung =========================================================================== St„ndige Routen: Keine ========================= Winsock entries ===================================== Catalog5 01 C:\Windows\system32\NLAapi.dll [48128] (Microsoft Corporation) Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Microsoft Corporation) Catalog5 03 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation) Catalog5 04 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation) Catalog5 05 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog5 06 C:\Windows\system32\winrnr.dll [19968] (Microsoft Corporation) Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.) Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 09 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 10 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 11 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 12 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 13 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 14 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 15 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 16 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 17 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 18 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG) Catalog9 20 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 21 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 22 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 23 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 24 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 25 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 26 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 27 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 28 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 29 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 30 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 31 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 32 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 33 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 34 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 35 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 36 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 37 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 38 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) Catalog9 39 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors: ================== Error: (03/02/2014 10:24:25 AM) (Source: Application Hang) (User: ) Description: Programm sidebar.exe, Version 6.0.6002.18005 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: af0 Anfangszeit: 01cf35f8de374dd1 Zeitpunkt der Beendigung: 16 Error: (03/02/2014 10:23:28 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/01/2014 03:30:03 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 07:32:00 PM) (Source: Application Hang) (User: ) Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: ac0 Anfangszeit: 01cf34b3162ba651 Zeitpunkt der Beendigung: 0 Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:55:02 PM) (Source: Application Hang) (User: ) Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: aa0 Anfangszeit: 01cf34ade52359ac Zeitpunkt der Beendigung: 0 Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (03/02/2014 10:24:26 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/02/2014 10:23:29 AM) (Source: Service Control Manager) (User: ) Description: 30000vpnagent Error: (03/01/2014 03:40:56 PM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 03:30:03 PM) (Source: Service Control Manager) (User: ) Description: 30000vpnagent Error: (03/01/2014 11:48:40 AM) (Source: ipnathlp) (User: ) Description: 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner Fehler ist im Speicher-Manager aufgetreten. Error: (03/01/2014 10:59:06 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 10:26:59 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 09:02:55 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Error: (03/01/2014 08:28:06 AM) (Source: ipnathlp) (User: ) Description: Ein DHCP-Server mit der IP-Adresse 192.168.1.1 wurde von der DHCP-Zuweisung im selben Netzwerk gefunden, wie die Schnittstelle mit der IP-Adresse 192.168.0.1. Die Zuweisung wurde auf der Schnittstelle automatisch deaktiviert, um DHCP-Clientkonflikte zu vermeiden. Error: (03/01/2014 08:15:13 AM) (Source: ipnathlp) (User: ) Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren. Microsoft Office Sessions: ========================= Error: (03/02/2014 10:24:25 AM) (Source: Application Hang)(User: ) Description: sidebar.exe6.0.6002.18005af001cf35f8de374dd116 Error: (03/02/2014 10:23:28 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/01/2014 03:30:03 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 07:32:00 PM) (Source: Application Hang)(User: ) Description: KiesAirMessage.exe1.0.0.0ac001cf34b3162ba6510 Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:55:02 PM) (Source: Application Hang)(User: ) Description: KiesAirMessage.exe1.0.0.0aa001cf34ade52359ac0 Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 =========================== Installed Programs ============================ Activation Assistant for the 2007 Microsoft Office suites Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0) Adobe Connect Add-in Adobe Flash Player 10 ActiveX (Version: 10.0.32.18) Adobe Flash Player 12 Plugin (Version: 12.0.0.70) Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9) Adobe Shockwave Player 11.5 (Version: 11.5.1.601) Anki Apple Application Support (Version: 1.5.2) Apple Mobile Device Support (Version: 3.4.1.2) Apple Software Update (Version: 2.1.3.127) Avira Free Antivirus (Version: 14.0.3.338) Avira SearchFree Toolbar (Version: 12.10.3.4488) Bonjour (Version: 2.0.5.0) CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.7.2.11) Canon Internet Library for ZoomBrowser EX (Version: 1.6.3.9) Canon MOV Decoder (Version: 1.5.0.7) Canon MOV Encoder (Version: 1.3.0.3) Canon MovieEdit Task for ZoomBrowser EX (Version: 3.4.0.8) Canon MP Navigator EX 1.2 Canon MP190 series Benutzerregistrierung Canon MP190 series MP Drivers Canon My Printer Canon Utilities CameraWindow (Version: 7.4.0.7) Canon Utilities CameraWindow DC 8 (Version: 8.1.0.11) Canon Utilities Easy-PhotoPrint EX Canon Utilities Movie Uploader for YouTube (Version: 1.0.0.11) Canon Utilities MyCamera (Version: 7.3.0.5) Canon Utilities PhotoStitch (Version: 3.1.22.46) Canon Utilities Solution Menu Canon Utilities ZoomBrowser EX (Version: 6.5.0.14) Canon ZoomBrowser EX Memory Card Utility (Version: 1.3.0.4) CDBurnerXP (Version: 4.4.0.2838) Choice Guard (Version: 1.2.87.0) Cisco AnyConnect Secure Mobility Client (Version: 3.0.0629) Cisco AnyConnect Secure Mobility Client (Version: 3.0.0629) Citavi (Version: 3.3.0.0) Compatibility Pack für 2007 Office System (Version: 12.0.6425.1000) CyberLink Power2Go (Version: 6.1.2806) Dropbox (Version: 2.6.2) GIMP 2.8.10 (Version: 2.8.10) Google Chrome (Version: 33.0.1750.117) Google Update Helper (Version: 1.3.22.5) Inkjet Printer/Scanner Extended Survey Program iTunes (Version: 10.3.1.55) Java 7 Update 7 (Version: 7.0.70) Java Auto Updater (Version: 2.1.9.0) Java(TM) 6 Update 16 (Version: 6.0.160) Junk Mail filter update (Version: 14.0.8050.1202) LG United Mobile Driver (Version: 3.8.1) McAfee Security Scan Plus (Version: 3.8.130.10) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Office Access MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Groove MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Live Add-in 1.4 (Version: 2.0.3008.0) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6425.1000) Microsoft Office Professional Plus 2010 (Version: 14.0.4763.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.4763.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.4763.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.4763.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.4763.1000) Microsoft Search Enhancement Pack (Version: 1.3.59.0) Microsoft Silverlight (Version: 3.0.40723.0) Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0) Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Works (Version: 9.7.0621) MobileMe Control Panel (Version: 3.0.1.1) Mozilla Firefox 27.0.1 (x86 de) (Version: 27.0.1) Mozilla Maintenance Service (Version: 27.0.1) MSVCRT (Version: 14.0.1468.721) MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MyFreeCodec MyMicroBalance (Version: 2.5.0) Nero Burning ROM 10 (Version: 10.0.10800) Nero Burning ROM 10 (Version: 10.0.11100.10.100) Nero BurningROM 10 Help (CHM) (Version: 1.0.10700) Nero BurnRights 10 (Version: 4.0.11000.12.100) Nero BurnRights 10 Help (CHM) (Version: 1.0.10600) Nero Control Center 10 (Version: 10.0.12000.1.4) Nero ControlCenter 10 Help (CHM) (Version: 1.0.10700) Nero Core Components 10 (Version: 2.0.13700.0.1) Nero Update (Version: 1.0.0017) NVIDIA Drivers (Version: 1.4) NVIDIA PhysX (Version: 9.09.0428) Opera 12.12 (Version: 12.12.1707) Opera Stable 19.0.1326.63 (Version: 19.0.1326.63) phase-6 2.1.2.4b (Version: 2.1.2.4b) PhotoScape QuickTime (Version: 7.69.80.9) RealPlayer Realtek High Definition Audio Driver (Version: 6.0.1.5898) Samsung Kies (Version: 2.2.0.12014_18) softonic-de3 Toolbar (Version: ) Sound Organizer (Version: 1.1.1.12161) Uninstall 1.0.0.1 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3) Windows Live Call (Version: 14.0.8050.1202) Windows Live Communications Platform (Version: 14.0.8050.1202) Windows Live Essentials (Version: 14.0.8050.1202) Windows Live Fotogalerie (Version: 14.0.8051.1204) Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0) Windows Live Mail (Version: 14.0.8050.1202) Windows Live Messenger (Version: 14.0.8050.1202) Windows Live Sync (Version: 14.0.8050.1202) Windows Live Toolbar (Version: 14.0.8052.1208) Windows Live Writer (Version: 14.0.8050.1202) Windows Live-Uploadtool (Version: 14.0.8014.1029) Windows Media Player Firefox Plugin (Version: 1.0.0.8) WinRAR XMind (Version: 3.2.1) XMind 2013 (v3.4.1) (Version: 3.4.1.201401221918) ========================= Memory info: =================================== Percentage of memory in use: 37% Total physical RAM: 3070.39 MB Available physical RAM: 1926.71 MB Total Pagefile: 6343 MB Available Pagefile: 5167.99 MB Total Virtual: 2047.88 MB Available Virtual: 1947.53 MB ========================= Partitions: ===================================== 1 Drive c: (BOOT) (Fixed) (Total:581.17 GB) (Free:387.77 GB) NTFS 2 Drive d: (RECOVER) (Fixed) (Total:14.99 GB) (Free:2.94 GB) FAT32 4 Drive f: () (Removable) (Total:7.52 GB) (Free:7.5 GB) FAT32 ========================= Users: ======================================== Benutzerkonten fr \\MARINA-PC Administrator Gast Marina Der Befehl wurde erfolgreich ausgefhrt. ========================= Minidump Files ================================== C:\Windows\Minidump\Mini050710-01.dmp **** End of log **** |
04.03.2014, 11:47 | #6 |
/// the machine /// TB-Ausbilder | internet funktioniert nicht mehr ... aufgrund von trojaner? Windows-taste + R drücken, schreibe ipconfig /flushdns und drücke Enter. Besser?
__________________ --> internet funktioniert nicht mehr ... aufgrund von trojaner? |
04.03.2014, 15:06 | #7 |
| internet funktioniert nicht mehr ... aufgrund von trojaner? danke, werde ich gleich probieren, wenn ich zuhause bin. Ipconfig/flushdns konnte nicht gefunden werden. Stellen sie sicher, dass sie den namen richtig eingegeben haben und wiederholen sie den vorgang. |
05.03.2014, 13:47 | #8 |
/// the machine /// TB-Ausbilder | internet funktioniert nicht mehr ... aufgrund von trojaner? du hast das Leerzeichen vor dem /flushdns vergessen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.03.2014, 14:41 | #9 |
| internet funktioniert nicht mehr ... aufgrund von trojaner? Danke! Richtig lesen müsste man können. Hat aber leider auch nichts geholfen. Hättest du noch irgendeinen tipp? Lg nikita |
06.03.2014, 10:43 | #10 |
/// the machine /// TB-Ausbilder | internet funktioniert nicht mehr ... aufgrund von trojaner?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.03.2014, 17:27 | #11 |
| internet funktioniert nicht mehr ... aufgrund von trojaner? schrauber du bist echt ein wunderheiler! tausend dank! endlich funktioniert wieder alles und ich muss nicht mehr zwischen laptop, pc und handy rumfuhrwerken. werd mich in den nächsten tagen mit einer kleinen spende erkenntlich zeigen! lg und vielen vielen dank, nikita |
07.03.2014, 14:24 | #12 |
/// the machine /// TB-Ausbilder | internet funktioniert nicht mehr ... aufgrund von trojaner? supi, jetzt müssen wir aber noch die URsache dafür finden Bitte den Google DNS wieder rausnehmen, auf automatisch umstellen. Jetzt mal den Router 30 min vom Strom nehmen. Geht wieder?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu internet funktioniert nicht mehr ... aufgrund von trojaner? |
anbieter, andere, anderen, antivir, bieter, frage, funktioniert, funktioniert nicht, funktioniert nicht mehr, geräte, gestern, gratis, hoffe, interne, internet, kurzem, liebe, nicht mehr, problem, rechner, tagen, troja, trojaner, trojaner?, version, wlan |