|
Mülltonne: 2x Windows 7 - Kaspersky fand Trojaner - Programme laufen nicht richtigWindows 7 Beiträge, die gegen unsere Regeln verstoßen haben, solche, die die Welt nicht braucht oder sonstiger Müll landet hier in der Mülltonne... |
17.03.2014, 12:58 | #1 |
| 2x Windows 7 - Kaspersky fand Trojaner - Programme laufen nicht richtig Sollte mir FRST runterladen - hier die Logfiles: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01 Ran by Paar Johanna (administrator) on JOHANNA on 17-03-2014 09:53:55 Running from C:\Users\Paar Johanna\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7WAONE9K Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Microsoft Corporation) C:\Windows\system32\CISVC.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe (Microsoft Corporation) C:\Windows\System32\snmp.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (mquadr.at software engineering and consulting GmbH, web: mquadr.at :: Self-Service Connectivity Software for Internet Access Providers, mail: office@mquadr.at) C:\Program Files\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-03-04] (Kaspersky Lab ZAO) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor) HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" HKLM\...\Run: [A1Diagnose] - C:\Program Files\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe [21004392 2014-01-16] (mquadr.at software engineering and consulting GmbH, web: mquadr.at :: Self-Service Connectivity Software for Internet Access Providers, mail: office@mquadr.at) HKU\S-1-5-21-1360048915-4139430745-1786109950-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-04-10] (Google Inc.) HKU\S-1-5-21-1360048915-4139430745-1786109950-1000\...\Run: [msnmsgr] - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background HKU\S-1-5-21-1360048915-4139430745-1786109950-1000\...\Run: [Driver Updater] - C:\Program Files\Carambis\Driver Updater\dupdater.exe [4813920 2011-04-27] (MEDIA FOG LTD) AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL File Not Found Startup: C:\Users\Paar Johanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = news.ORF.at HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=114508&tt=4512_1&babsrc=SP_clro&mntrId=a06ed3ee000000000000485d60196a45 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=114508&tt=4512_1&babsrc=SP_clro&mntrId=a06ed3ee000000000000485d60196a45 SearchScopes: HKCU - {1891848C-0A4C-4AA6-9621-A044A22484BB} URL = hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11406&pf=V7&p2=%5EBBE%5EOSJ000%5EYY%5EAT&gct=&itbv=12.10.3.34&apn_uid=514FE6F8-1C5C-4D20-9012-3DF3F1E4BD37&apn_ptnrs=BBE&apn_dtid=%5EOSJ000%5EYY%5EAT&apn_dbr=ie_11.0.9600.16518&doi=2014-03-06&trgb=IE&q={searchTerms}&psv= BHO: Claro LTD Helper Object - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - C:\Program Files\Claro LTD\claro\1.8.3.10\bh\claro.dll No File BHO: No Name - {26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} - No File BHO: CescrtHlpr Object - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll No File BHO: Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll (APN LLC.) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: SaveSense - {71e129ff-6c2a-4984-818c-7e2c998b8d99} - C:\Users\Paar Johanna\AppData\Local\SaveSense\SaveSenseIE.dll No File BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll No File Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - Claro LTD Toolbar - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files\Claro LTD\claro\1.8.3.10\claroTlbr.dll No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM - Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll (APN LLC.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 FireFox: ======== FF ProfilePath: C:\Users\Paar Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\3dc4f2hq.default FF user.js: detected! => C:\Users\Paar Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\3dc4f2hq.default\user.js FF NewTab: hxxp://www.claro-search.com/?affID=114508&tt=4512_1&babsrc=NT_clro&mntrId=a06ed3ee000000000000485d60196a45 FF DefaultSearchEngine: Amazon FF Homepage: hxxp://orf.at/ FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.updaterss.com/SaveSenseLive Update;version=3 - C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense) FF Plugin: @tools.updaterss.com/SaveSenseLive Update;version=9 - C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense) FF SearchPlugin: C:\Users\Paar Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\3dc4f2hq.default\searchplugins\babylon.xml FF Extension: Site Finder - C:\Users\Paar Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\3dc4f2hq.default\Extensions\sitefinder@sitefinder.com [2014-02-21] FF Extension: A1 Servicecenter - C:\Program Files\Mozilla Firefox\extensions\{B0BBFC8E-6697-4D2B-8FC4-B5AD9B3B1F11} [2014-02-24] FF HKLM\...\Firefox\Extensions: - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2014-03-04] FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2014-03-04] FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2014-03-04] FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2014-03-04] FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2014-03-04] Chrome: ======= CHR HomePage: hxxp://www.claro-search.com/?affID=114508&tt=4512_1&babsrc=HP_clro&mntrId=a06ed3ee000000000000485d60196a45 CHR DefaultSearchKeyword: claro-search.com CHR DefaultSearchProvider: Amazon CHR DefaultSearchURL: hxxp://www.claro-search.com/?q={searchTerms}&affID=114508&tt=4512_8&babsrc=SP_clro&mntrId=a06ed3ee000000000000485d60196a45 CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.146\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Babylon Chrome Plugin) - C:\Users\Paar Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Java Deployment Toolkit 6.0.210.6) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Oracle) CHR Plugin: (Java(TM) Platform SE 6 U21) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File CHR Plugin: (Default Plug-in) - default_plugin No File CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Paar Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-03-10] CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Paar Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-03-10] CHR Extension: (Virtuelle Tastatur) - C:\Users\Paar Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-03-10] CHR Extension: (Google Wallet) - C:\Users\Paar Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30] CHR Extension: (Anti-Banner) - C:\Users\Paar Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-03-10] CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-08-18] CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx [2012-08-18] CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx [2012-08-18] CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx [2012-08-18] CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx [2012-08-18] CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-08-18] ========================== Services (Whitelisted) ================= R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-25] (APN LLC.) R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2014-03-04] (Kaspersky Lab ZAO) S4 savesenselive; C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-02-21] (SaveSense) S4 savesenselivem; C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-02-21] (SaveSense) ==================== Drivers (Whitelisted) ==================== R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2014-03-04] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [595552 2014-03-04] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2014-03-04] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2014-03-04] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2014-03-04] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2014-03-04] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145040 2014-03-04] (Kaspersky Lab ZAO) R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation) R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2014-03-04] (Kaspersky Lab ZAO) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-17 09:52 - 2014-03-17 09:52 - 00000000 ____D () C:\FRST 2014-03-17 09:45 - 2014-03-17 09:45 - 00405504 _____ () C:\Users\Paar Johanna\Downloads\intel_srldetect_4.5.13.0 (1).msi 2014-03-12 19:43 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-12 19:43 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-12 19:43 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-12 19:43 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-12 19:43 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-12 19:43 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-12 19:43 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-12 19:43 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-12 19:43 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-12 19:43 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-12 19:43 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-12 19:43 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-12 19:43 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-12 19:43 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-12 19:43 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-12 19:43 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-12 19:43 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-12 19:43 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-12 19:43 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-12 19:43 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-12 19:43 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-12 19:43 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-12 19:43 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-12 19:43 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-12 19:43 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-12 19:43 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-12 19:43 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-10 16:41 - 2014-03-10 16:41 - 00000000 ____D () C:\Program Files\phenomedia 2014-03-07 10:57 - 2012-09-12 15:58 - 00101888 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Desktop\wlmail.exe 2014-03-07 10:51 - 2012-09-12 15:58 - 00101888 _____ (Microsoft Corporation) C:\Program Files\wlmail.exe 2014-03-06 16:52 - 2014-03-06 16:52 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork 2014-03-06 16:52 - 2014-03-06 16:52 - 00000000 ____D () C:\ProgramData\APN 2014-03-06 16:52 - 2014-03-06 16:52 - 00000000 ____D () C:\Program Files\AskPartnerNetwork 2014-03-06 16:50 - 2014-03-06 16:50 - 00000000 ____D () C:\ProgramData\Oracle 2014-03-06 16:50 - 2014-03-06 16:49 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-03-06 16:49 - 2014-03-06 16:49 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-03-06 16:47 - 2014-03-06 16:48 - 00921512 _____ (Oracle Corporation) C:\Users\Paar Johanna\Downloads\JavaSetup7u51.com 2014-03-06 16:46 - 2014-03-06 16:46 - 00405504 _____ () C:\Users\Paar Johanna\Downloads\intel_srldetect_4.5.13.0.msi 2014-03-06 16:46 - 2014-03-06 16:46 - 00000000 ____D () C:\Program Files\SystemRequirementsLab 2014-03-05 18:51 - 2014-03-05 18:51 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-03-05 18:50 - 2014-03-05 18:50 - 00000000 __RHD () C:\MSOCache 2014-03-05 10:49 - 2014-03-05 11:05 - 00000000 ____D () C:\Program Files\Windows Live 2014-03-05 10:44 - 2014-03-05 10:46 - 142608624 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-all_de_16.4.3505.0912 (1).exe 2014-03-05 10:34 - 2014-03-05 10:34 - 02156544 _____ (Farbar) C:\Users\Paar Johanna\Downloads\FRST64 (1).exe 2014-03-05 10:33 - 2014-03-05 10:33 - 02156544 _____ (Farbar) C:\Users\Paar Johanna\Downloads\FRST64.exe 2014-03-05 10:07 - 2014-03-05 10:07 - 00002335 _____ () C:\Users\Administrator\Desktop\Sicherer Zahlungsverkehr.lnk 2014-03-04 10:19 - 2014-03-04 10:33 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\Nico Mak Computing 2014-03-04 09:21 - 2014-03-04 09:21 - 00002339 _____ () C:\Users\Paar Johanna\Desktop\Sicherer Zahlungsverkehr.lnk 2014-03-04 09:20 - 2014-03-04 09:20 - 00001165 _____ () C:\Program Files\Kaspersky Internet Security 2013.lnk 2014-03-04 09:19 - 2014-03-17 09:43 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-03-04 09:19 - 2014-03-04 09:30 - 00595552 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2014-03-04 09:19 - 2014-03-04 09:30 - 00074848 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2014-03-04 09:19 - 2014-03-04 09:19 - 00000000 ____D () C:\Windows\ELAMBKUP 2014-03-04 09:19 - 2014-03-04 09:19 - 00000000 ____D () C:\Program Files\Kaspersky Lab 2014-03-04 09:04 - 2014-03-05 09:27 - 00000000 ____D () C:\Program Files\Amazon 2014-03-04 09:04 - 2014-03-04 09:04 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\amazon 2014-03-02 14:56 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-03-01 20:24 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-03-01 20:24 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-03-01 20:24 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-03-01 20:24 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-03-01 20:24 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-03-01 20:24 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-03-01 20:24 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-03-01 20:24 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-03-01 20:24 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-03-01 20:24 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-03-01 20:24 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-03-01 20:20 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Windows\system32\XPSViewer 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Windows\system32\BestPractices 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Program Files\MSBuild 2014-03-01 19:16 - 2014-03-01 19:16 - 02959376 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\dotnetfx35setup(2).exe 2014-03-01 19:11 - 2014-03-01 19:15 - 142170800 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-all.exe 2014-03-01 17:44 - 2014-03-01 17:44 - 00000020 _____ () C:\Windows\È÷7 2014-03-01 17:27 - 2014-03-01 17:27 - 01245376 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-web (2).exe 2014-02-24 10:57 - 2014-02-24 11:38 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\mquadr.at 2014-02-24 10:57 - 2014-02-24 11:17 - 00000000 ____D () C:\ProgramData\mquadr.at 2014-02-24 10:57 - 2014-02-24 10:57 - 00000000 __HDC () C:\ProgramData\{F361AD8C-CA1F-418A-8E74-472ADA2B7803} 2014-02-24 10:56 - 2014-02-24 10:57 - 00000000 ____D () C:\Program Files\A1 Servicecenter 2014-02-24 10:56 - 2014-02-24 10:56 - 00001334 _____ () C:\Users\Paar Johanna\AppData\Roaming\Microsoft\Windows\Start Menu\A1 Servicecenter.lnk 2014-02-24 10:56 - 2014-02-24 10:56 - 00001310 _____ () C:\Users\Public\Desktop\A1 Servicecenter.lnk 2014-02-21 17:40 - 2014-02-21 17:42 - 00000000 ____D () C:\Users\Paar Johanna\Documents\mails 2014-02-21 17:38 - 2014-02-21 17:38 - 00000000 ___RD () C:\Users\Paar Johanna\OneDrive 2014-02-21 17:38 - 2014-02-21 17:38 - 00000000 ____D () C:\Program Files\Microsoft OneDrive 2014-02-21 17:33 - 2014-02-21 17:33 - 01292648 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-web (1).exe 2014-02-21 17:33 - 2014-02-21 17:33 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\{11B7E78F-290A-4F2F-BFD4-DE0094D20D6A} 2014-02-21 17:16 - 2014-03-17 09:43 - 00000928 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job 2014-02-21 17:16 - 2014-03-14 08:21 - 00000932 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job 2014-02-21 17:16 - 2014-03-04 09:08 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense 2014-02-21 17:16 - 2014-03-02 15:16 - 00000312 _____ () C:\Windows\Tasks\SaveSense.job 2014-02-21 17:16 - 2014-02-24 10:16 - 00000079 _____ () C:\Users\Paar Johanna\AppData\Roaming\WB.CFG 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\SimilarSites 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\SaveSense 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\SaveSenseLive 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\ProgramData\SaveSenseLive 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Program Files\SimilarSites 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Program Files\SaveSenseLive 2014-02-21 17:15 - 2014-02-21 17:15 - 02176336 _____ (WiseCleaner.com ) C:\Users\Paar Johanna\Downloads\WRCFree.exe 2014-02-21 16:59 - 2014-02-21 16:59 - 00283256 _____ (Mozilla) C:\Users\Paar Johanna\Downloads\Firefox Setup Stub 27.0.1.exe 2014-02-21 14:29 - 2014-02-21 14:29 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla 2014-02-21 14:29 - 2014-02-21 14:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla 2014-02-21 14:23 - 2014-02-21 14:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-02-21 14:19 - 2014-02-21 14:19 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Windows Live Writer 2014-02-21 14:19 - 2014-02-21 14:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Windows Live Writer 2014-02-21 14:14 - 2014-03-05 10:06 - 00086872 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-21 14:14 - 2014-02-21 14:14 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\mquadr.at 2014-02-21 14:14 - 2014-02-21 14:14 - 00000000 ____D () C:\Users\Administrator\AppData\Local\mquadr.at 2014-02-21 14:14 - 2014-02-21 14:14 - 00000000 ____D () C:\Users\Administrator\AppData\Local\a1ta 2014-02-21 14:13 - 2014-02-21 14:13 - 00001470 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-21 14:13 - 2014-02-21 14:13 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Startmenü 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 ____D () C:\Users\Administrator 2014-02-21 14:13 - 2012-11-09 14:05 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TuneUp Software 2014-02-21 14:13 - 2011-09-13 12:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help 2014-02-21 14:13 - 2010-08-30 11:11 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Macromedia 2014-02-21 14:13 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-21 14:13 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-17 13:01 - 2014-03-05 09:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-17 09:53 - 2011-12-29 08:53 - 00026624 _____ () C:\Users\Paar Johanna\Downloads\bootwiz (1).bin 2014-02-17 08:13 - 2011-12-29 08:53 - 00026624 _____ () C:\Users\Paar Johanna\Downloads\bootwiz.bin ==================== One Month Modified Files and Folders ======= 2014-03-17 09:52 - 2014-03-17 09:52 - 00000000 ____D () C:\FRST 2014-03-17 09:50 - 2009-07-14 05:34 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-17 09:50 - 2009-07-14 05:34 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-17 09:46 - 2011-04-11 02:06 - 01338945 _____ () C:\Windows\WindowsUpdate.log 2014-03-17 09:45 - 2014-03-17 09:45 - 00405504 _____ () C:\Users\Paar Johanna\Downloads\intel_srldetect_4.5.13.0 (1).msi 2014-03-17 09:43 - 2014-03-04 09:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-03-17 09:43 - 2014-02-21 17:16 - 00000928 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job 2014-03-17 09:43 - 2011-04-10 18:21 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-17 09:42 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-17 09:42 - 2009-07-14 05:39 - 00048354 _____ () C:\Windows\setupact.log 2014-03-17 09:27 - 2012-09-03 14:08 - 00000000 ____D () C:\Windows\pss 2014-03-15 16:04 - 2011-04-10 18:21 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-14 08:21 - 2014-02-21 17:16 - 00000932 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job 2014-03-13 18:27 - 2009-07-14 05:33 - 00347248 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-13 18:26 - 2010-08-30 17:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-12 19:56 - 2011-06-02 16:03 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-10 16:41 - 2014-03-10 16:41 - 00000000 ____D () C:\Program Files\phenomedia 2014-03-06 21:23 - 2010-08-28 01:49 - 01829862 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-06 21:23 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-03-06 20:15 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-03-06 16:52 - 2014-03-06 16:52 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork 2014-03-06 16:52 - 2014-03-06 16:52 - 00000000 ____D () C:\ProgramData\APN 2014-03-06 16:52 - 2014-03-06 16:52 - 00000000 ____D () C:\Program Files\AskPartnerNetwork 2014-03-06 16:50 - 2014-03-06 16:50 - 00000000 ____D () C:\ProgramData\Oracle 2014-03-06 16:49 - 2014-03-06 16:50 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-03-06 16:49 - 2014-03-06 16:49 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-03-06 16:49 - 2010-08-30 11:05 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-03-06 16:49 - 2010-08-30 11:05 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-03-06 16:49 - 2010-08-30 11:05 - 00000000 ____D () C:\Program Files\Java 2014-03-06 16:48 - 2014-03-06 16:47 - 00921512 _____ (Oracle Corporation) C:\Users\Paar Johanna\Downloads\JavaSetup7u51.com 2014-03-06 16:46 - 2014-03-06 16:46 - 00405504 _____ () C:\Users\Paar Johanna\Downloads\intel_srldetect_4.5.13.0.msi 2014-03-06 16:46 - 2014-03-06 16:46 - 00000000 ____D () C:\Program Files\SystemRequirementsLab 2014-03-05 19:27 - 2010-08-30 10:48 - 03997818 _____ () C:\Windows\PFRO.log 2014-03-05 18:59 - 2011-04-10 18:24 - 00088496 _____ () C:\Users\Paar Johanna\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-05 18:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-03-05 18:52 - 2011-04-12 11:04 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-03-05 18:52 - 2010-08-30 17:59 - 00000000 ____D () C:\Program Files\Microsoft.NET 2014-03-05 18:52 - 2010-08-30 11:18 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-03-05 18:51 - 2014-03-05 18:51 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2014-03-05 18:51 - 2009-07-14 08:48 - 00000000 ____D () C:\Windows\ShellNew 2014-03-05 18:50 - 2014-03-05 18:50 - 00000000 __RHD () C:\MSOCache 2014-03-05 11:05 - 2014-03-05 10:49 - 00000000 ____D () C:\Program Files\Windows Live 2014-03-05 10:47 - 2012-07-16 17:34 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\Windows Live 2014-03-05 10:46 - 2014-03-05 10:44 - 142608624 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-all_de_16.4.3505.0912 (1).exe 2014-03-05 10:34 - 2014-03-05 10:34 - 02156544 _____ (Farbar) C:\Users\Paar Johanna\Downloads\FRST64 (1).exe 2014-03-05 10:33 - 2014-03-05 10:33 - 02156544 _____ (Farbar) C:\Users\Paar Johanna\Downloads\FRST64.exe 2014-03-05 10:07 - 2014-03-05 10:07 - 00002335 _____ () C:\Users\Administrator\Desktop\Sicherer Zahlungsverkehr.lnk 2014-03-05 10:06 - 2014-02-21 14:14 - 00086872 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-05 09:50 - 2011-07-13 19:26 - 00000952 ___SH () C:\ProgramData\KGyGaAvL.sys 2014-03-05 09:44 - 2014-02-17 13:01 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-03-05 09:27 - 2014-03-04 09:04 - 00000000 ____D () C:\Program Files\Amazon 2014-03-05 08:54 - 2009-07-14 05:53 - 00032548 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-04 11:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache 2014-03-04 11:05 - 2011-06-10 09:17 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\Systweak 2014-03-04 10:33 - 2014-03-04 10:19 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\Nico Mak Computing 2014-03-04 09:30 - 2014-03-04 09:19 - 00595552 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2014-03-04 09:30 - 2014-03-04 09:19 - 00074848 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2014-03-04 09:30 - 2012-08-13 16:49 - 00145040 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2014-03-04 09:30 - 2012-08-02 15:09 - 00025696 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys 2014-03-04 09:30 - 2012-07-25 14:53 - 00025696 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys 2014-03-04 09:30 - 2012-06-19 17:28 - 00135776 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys 2014-03-04 09:30 - 2012-06-08 11:38 - 00044000 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys 2014-03-04 09:30 - 2012-05-25 19:38 - 00025696 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys 2014-03-04 09:21 - 2014-03-04 09:21 - 00002339 _____ () C:\Users\Paar Johanna\Desktop\Sicherer Zahlungsverkehr.lnk 2014-03-04 09:20 - 2014-03-04 09:20 - 00001165 _____ () C:\Program Files\Kaspersky Internet Security 2013.lnk 2014-03-04 09:19 - 2014-03-04 09:19 - 00000000 ____D () C:\Windows\ELAMBKUP 2014-03-04 09:19 - 2014-03-04 09:19 - 00000000 ____D () C:\Program Files\Kaspersky Lab 2014-03-04 09:16 - 2010-08-30 10:59 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-03-04 09:16 - 2010-08-30 10:59 - 00000000 ____D () C:\Program Files\Adobe 2014-03-04 09:08 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense 2014-03-04 09:05 - 2011-04-10 18:21 - 00002170 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-04 09:04 - 2014-03-04 09:04 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\amazon 2014-03-04 09:03 - 2011-06-10 09:17 - 00000000 ____D () C:\Program Files\RegClean Pro 2014-03-04 09:02 - 2012-11-10 09:18 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-03-02 15:16 - 2014-02-21 17:16 - 00000312 _____ () C:\Windows\Tasks\SaveSense.job 2014-03-01 20:27 - 2010-05-12 14:13 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-03-01 19:24 - 2013-12-11 17:39 - 00196608 _____ () C:\Windows\ocsetup_install_NetFx3.etl 2014-03-01 19:24 - 2013-12-11 17:39 - 00084882 _____ () C:\Windows\ocsetup_cbs_install_NetFx3.txt 2014-03-01 19:21 - 2012-11-05 18:38 - 00122384 _____ () C:\Windows\iis7.log 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Windows\system32\XPSViewer 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Windows\system32\BestPractices 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-03-01 19:20 - 2014-03-01 19:20 - 00000000 ____D () C:\Program Files\MSBuild 2014-03-01 19:20 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\inetsrv 2014-03-01 19:16 - 2014-03-01 19:16 - 02959376 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\dotnetfx35setup(2).exe 2014-03-01 19:15 - 2014-03-01 19:11 - 142170800 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-all.exe 2014-03-01 18:57 - 2011-04-11 09:51 - 00000000 ____D () C:\Users\Paar Johanna\Tracing 2014-03-01 17:44 - 2014-03-01 17:44 - 00000020 _____ () C:\Windows\È÷7 2014-03-01 17:27 - 2014-03-01 17:27 - 01245376 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-web (2).exe 2014-03-01 05:30 - 2014-03-12 19:43 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-01 05:11 - 2014-03-12 19:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-01 05:10 - 2014-03-12 19:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-01 04:52 - 2014-03-12 19:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-01 04:51 - 2014-03-12 19:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-01 04:47 - 2014-03-12 19:43 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-01 04:43 - 2014-03-12 19:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-01 04:43 - 2014-03-12 19:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-01 04:40 - 2014-03-12 19:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-01 04:38 - 2014-03-12 19:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-01 04:38 - 2014-03-12 19:43 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-01 04:37 - 2014-03-12 19:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-01 04:31 - 2014-03-12 19:43 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-01 04:25 - 2014-03-12 19:43 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-01 04:16 - 2014-03-12 19:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-01 04:14 - 2014-03-12 19:43 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-01 04:03 - 2014-03-12 19:43 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-01 04:00 - 2014-03-12 19:43 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-01 03:57 - 2014-03-12 19:43 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-01 03:32 - 2014-03-12 19:43 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-01 03:27 - 2014-03-12 19:43 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-01 03:25 - 2014-03-12 19:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-24 11:38 - 2014-02-24 10:57 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\mquadr.at 2014-02-24 11:17 - 2014-02-24 10:57 - 00000000 ____D () C:\ProgramData\mquadr.at 2014-02-24 10:57 - 2014-02-24 10:57 - 00000000 __HDC () C:\ProgramData\{F361AD8C-CA1F-418A-8E74-472ADA2B7803} 2014-02-24 10:57 - 2014-02-24 10:56 - 00000000 ____D () C:\Program Files\A1 Servicecenter 2014-02-24 10:56 - 2014-02-24 10:56 - 00001334 _____ () C:\Users\Paar Johanna\AppData\Roaming\Microsoft\Windows\Start Menu\A1 Servicecenter.lnk 2014-02-24 10:56 - 2014-02-24 10:56 - 00001310 _____ () C:\Users\Public\Desktop\A1 Servicecenter.lnk 2014-02-24 10:56 - 2013-08-03 10:30 - 00000000 __HDC () C:\ProgramData\{7421FE87-82BC-4E38-B371-D129BE9C26C5} 2014-02-24 10:16 - 2014-02-21 17:16 - 00000079 _____ () C:\Users\Paar Johanna\AppData\Roaming\WB.CFG 2014-02-24 10:14 - 2012-10-15 20:10 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\A1TA 2014-02-21 17:42 - 2014-02-21 17:40 - 00000000 ____D () C:\Users\Paar Johanna\Documents\mails 2014-02-21 17:38 - 2014-02-21 17:38 - 00000000 ___RD () C:\Users\Paar Johanna\OneDrive 2014-02-21 17:38 - 2014-02-21 17:38 - 00000000 ____D () C:\Program Files\Microsoft OneDrive 2014-02-21 17:38 - 2011-04-10 18:23 - 00000000 ____D () C:\Users\Paar Johanna 2014-02-21 17:33 - 2014-02-21 17:33 - 01292648 _____ (Microsoft Corporation) C:\Users\Paar Johanna\Downloads\wlsetup-web (1).exe 2014-02-21 17:33 - 2014-02-21 17:33 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\{11B7E78F-290A-4F2F-BFD4-DE0094D20D6A} 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\SimilarSites 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Roaming\SaveSense 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Users\Paar Johanna\AppData\Local\SaveSenseLive 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\ProgramData\SaveSenseLive 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Program Files\SimilarSites 2014-02-21 17:16 - 2014-02-21 17:16 - 00000000 ____D () C:\Program Files\SaveSenseLive 2014-02-21 17:15 - 2014-02-21 17:15 - 02176336 _____ (WiseCleaner.com ) C:\Users\Paar Johanna\Downloads\WRCFree.exe 2014-02-21 16:59 - 2014-02-21 16:59 - 00283256 _____ (Mozilla) C:\Users\Paar Johanna\Downloads\Firefox Setup Stub 27.0.1.exe 2014-02-21 14:29 - 2014-02-21 14:29 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla 2014-02-21 14:29 - 2014-02-21 14:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla 2014-02-21 14:23 - 2014-02-21 14:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-02-21 14:19 - 2014-02-21 14:19 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Windows Live Writer 2014-02-21 14:19 - 2014-02-21 14:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Windows Live Writer 2014-02-21 14:14 - 2014-02-21 14:14 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\mquadr.at 2014-02-21 14:14 - 2014-02-21 14:14 - 00000000 ____D () C:\Users\Administrator\AppData\Local\mquadr.at 2014-02-21 14:14 - 2014-02-21 14:14 - 00000000 ____D () C:\Users\Administrator\AppData\Local\a1ta 2014-02-21 14:13 - 2014-02-21 14:13 - 00001470 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-21 14:13 - 2014-02-21 14:13 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Startmenü 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe 2014-02-21 14:13 - 2014-02-21 14:13 - 00000000 ____D () C:\Users\Administrator 2014-02-17 08:13 - 2013-09-10 11:45 - 02426791 _____ () C:\Users\Paar Johanna\Downloads\00368.mkv Files to move or delete: ==================== C:\ProgramData\Setup_A1Servicecenter_RTM_1.3.0.37.exe Some content of TEMP: ==================== C:\Users\Paar Johanna\AppData\Local\Temp\APNSetup.exe C:\Users\Paar Johanna\AppData\Local\Temp\BackupSetup.exe C:\Users\Paar Johanna\AppData\Local\Temp\DRPCUNLR.dll C:\Users\Paar Johanna\AppData\Local\Temp\fp_pl_pfs_installer-1.exe C:\Users\Paar Johanna\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Paar Johanna\AppData\Local\Temp\ose00000.exe C:\Users\Paar Johanna\AppData\Local\Temp\TUUUninstallHelper.exe C:\Users\Paar Johanna\AppData\Local\Temp\Uninst.exe C:\Users\Paar Johanna\AppData\Local\Temp\uninst1.exe C:\Users\Paar Johanna\AppData\Local\Temp\{EFF616A3-14B1-4A6A-9192-4E85EA2DE69E}_emergency.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-10 10:34 ==================== End Of Log ============================ FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01 Ran by Paar Johanna at 2014-03-17 09:54:15 Running from C:\Users\Paar Johanna\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7WAONE9K Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} AS: Kaspersky Internet Security (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E} ==================== Installed Programs ====================== A1 Servicecenter (HKLM\...\A1 Servicecenter) (Version: 1.3.0.38 - A1 Telekom Austria AG) Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Ask Toolbar (HKLM\...\{4F524A2D-5637-4300-76A7-A758B70C0A03}) (Version: 12.10.3.34 - APN, LLC) <==== ATTENTION ATI Catalyst Install Manager (HKLM\...\{BE4AE3A7-190D-BCB8-A953-A708C9E8E8AA}) (Version: 3.0.778.0 - ATI Technologies, Inc.) Bing Bar (HKLM\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation) Carambis Driver Updater (HKLM\...\{542068F1-9AAE-4E1B-8ACA-094FE03728BE}) (Version: 1.2.3.2273 - MEDIA FOG LTD) Catalyst Control Center Graphics Previews Vista (Version: 2010.0527.1242.20909 - ATI) Hidden Catalyst Control Center InstallProxy (Version: 2010.0527.1242.20909 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (Version: 2010.0527.1242.20909 - ATI) Hidden CCC Help Danish (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Dutch (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help English (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Finnish (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help French (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help German (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Italian (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Japanese (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Norwegian (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Spanish (Version: 2010.0527.1241.20909 - ATI) Hidden CCC Help Swedish (Version: 2010.0527.1241.20909 - ATI) Hidden ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden ccc-utility (Version: 2010.0527.1242.20909 - ATI) Hidden CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.) CyberLink LabelPrint (Version: 2.5.2515 - CyberLink Corp.) Hidden CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.) CyberLink Power2Go (Version: 6.1.3602c - CyberLink Corp.) Hidden CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.) CyberLink PowerDVD Copy (Version: 1.5.1306 - CyberLink Corp.) Hidden D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version: - Microsoft) Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden HOFER Bestellsoftware 4.9 (HKLM\...\HOFER Bestellsoftware) (Version: 4.9 - ORWO Net) Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216021FF}) (Version: 6.0.210 - Oracle) Junk Mail filter update (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Kaspersky Internet Security 2013 (HKLM\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab) Kaspersky Internet Security 2013 (Version: 13.0.1.4190 - Kaspersky Lab) Hidden Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.) Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6136 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden Schnappi Fungames XXL (HKLM\...\{EC76722E-DDB2-4E2B-A2C2-4B167BDCB951}) (Version: 1.00.0000 - ) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version: - Microsoft) Hidden System Requirements Lab for Intel (HKLM\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{4B93560B-F33D-4A67-A224-F5E1C329BD22}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft) Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation) Windows Live Communications Platform (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation) Windows Live Essentials (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live Mail (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live UX Platform (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live Writer (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden Windows Live Writer Resources (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 05-03-2014 08:43:20 Removed Claro Chrome Toolbar 05-03-2014 08:52:13 Removed CorelDRAW Essentials 4 - Windows Shell Extension. 05-03-2014 08:58:24 Windows Live Essentials 05-03-2014 08:58:57 WLSetup 05-03-2014 09:47:50 Windows Live Essentials 05-03-2014 09:49:26 WLSetup 05-03-2014 10:03:41 Windows Live Essentials 05-03-2014 10:05:15 WLSetup 05-03-2014 17:50:02 Installed Microsoft Office Home and Student 2010 06-03-2014 15:46:24 Installed System Requirements Lab for Intel 06-03-2014 15:49:33 Installed Java 7 Update 51 06-03-2014 18:14:07 Windows Update 06-03-2014 19:08:34 Windows Update 06-03-2014 20:22:05 Windows Update 09-03-2014 09:54:51 Windows Update 10-03-2014 15:41:21 Installiert Schnappi Fungames XXL 12-03-2014 18:39:34 Windows Update 12-03-2014 18:53:31 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {079EB85B-FA4E-4C9B-9667-EBF5B40B8EFF} - System32\Tasks\{7C1D3A9C-4C32-488D-A86B-D09CC0BE7952} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {1135A454-B5BE-441E-9231-30360C7D38F3} - System32\Tasks\{B7235BA7-7E99-4BB9-84CA-7B2A453723C8} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {122FE45D-1474-4E20-9A25-DB6272243103} - System32\Tasks\{965D8DE7-092B-4A57-B532-6C5F562A682B} => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe Task: {161B8239-AA3A-44E8-A305-10D6E6A848AA} - System32\Tasks\{94C01906-2EA5-4C98-A4D8-0030F930168A} => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe Task: {1E4421EF-7149-443D-916A-121310781D06} - System32\Tasks\{EB93D8E8-7DDC-4F36-9311-A15DAFEB1DEE} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {291FAEE3-D8DD-4A2B-A903-D29231B883B3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-10] (Google Inc.) Task: {2B9EDEEF-6BEB-4682-9239-3DC2E9BBD81A} - System32\Tasks\{8EE4DB36-2E76-44EF-A642-73D13774401A} => Firefox.exe Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype Task: {346BB715-FE96-4CCA-A2BF-A7CFFD492094} - System32\Tasks\{0CAE5C32-4141-434F-97DC-F40DC3E919ED} => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe Task: {3759BD9A-08EA-4843-AC9B-0B63DE53D154} - System32\Tasks\{7652F9FC-B6A2-45D3-AB8D-0666FF99E418} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {392E61C2-F4B5-4403-BC89-B806D81EC14D} - System32\Tasks\{DA6FC74C-00E1-4AFF-9354-28A5EA203339} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {41E5C8F3-D122-40D7-BDF8-D43827DDFD55} - System32\Tasks\{29EB5C1B-A841-4EAF-B31C-99A679C42FC8} => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe Task: {45A2308B-3211-43F5-B306-941C4DCCC882} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-21] (SaveSense) <==== ATTENTION Task: {4FC327A3-37A9-4C28-90ED-72513F8FDD1D} - System32\Tasks\{E208E92C-0CEF-4107-A144-FE307B278630} => C:\Program Files\A1\A1 Servicecenter\A1Servicecenter.exe [2012-08-03] () Task: {57FD06C9-A301-4230-AE2B-853DEA3C745D} - System32\Tasks\{0EE1E87D-9BEC-437E-A7AF-C52F6B8E01DE} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {5A14FA19-DF2B-4207-8C7A-467F1339F04C} - \AdobeFlashPlayerUpdate No Task File Task: {5A7A7900-BFE4-415A-A084-EECA1218B0FE} - System32\Tasks\{EE01FCCF-BD1C-4301-8971-66686DEDE16C} => \\JOHANNA\Program Files\Internet Explorer\ExtExport.exe [2013-12-01] (Microsoft Corporation) Task: {5C1148EB-B689-46DF-B23C-0B2E27EB9CA2} - System32\Tasks\Aufgaben der Ereignisanzeige\Application_Windows Backup_4099 => \\JOHANNA\Program Files\Internet Explorer\ieinstal.exe [2014-03-01] (Microsoft Corporation) Task: {67809407-F510-43AD-B4F8-EADAB916BE39} - System32\Tasks\SaveSense => C:\Users\PAARJO~1\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {6895722A-9801-425B-9494-BE8AC12402E1} - System32\Tasks\{67F258AF-EAC0-48C9-A017-92158C478CBE} => C:\Program Files\Canon\ZoomBrowser EX\Program\ZoomBrowser.exe Task: {6C7C5DB1-90C2-4CFF-AFED-ECDF27320C0E} - System32\Tasks\{3795F50C-4F9E-4B3D-837E-B975F8222EF3} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {7208120C-54E4-475E-A547-A90A629A33F0} - System32\Tasks\{B2EAFDE4-1F44-4001-B61E-DB6E837ED71B} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {72129E08-097C-4C48-9E0D-8DA4BB9F39BF} - System32\Tasks\Aufgaben der Ereignisanzeige\Application_Microsoft-Windows-RestartManager_10010 => \\JOHANNA\Program Files\Internet Explorer\ExtExport.exe [2013-12-01] (Microsoft Corporation) Task: {7431D319-98AC-4C5E-AD90-D8EC7CD54E42} - System32\Tasks\{D3838CC4-0708-48D5-8033-A28EDB764148} => C:\Program Files\Canon\ZoomBrowser EX\Program\ZoomBrowser.exe Task: {7810AD8D-8B0D-46FA-AA11-7EA6A7B5E0BB} - System32\Tasks\{2A5B22DC-DF5F-4E06-97A4-7D7F48C27374} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {7EA34AF2-4EDC-479A-AC1A-0A1905DC8D78} - System32\Tasks\{4487C858-77FF-488C-999E-88A077E3D278} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {80712C95-90CC-4689-9063-D98A48D16FEE} - System32\Tasks\Aufgaben der Ereignisanzeige\Application_Windows Backup_4104 => \\JOHANNA\Program Files\Internet Explorer\ieinstal.exe [2014-03-01] (Microsoft Corporation) Task: {854384BC-982B-484C-A707-82B72B55A072} - System32\Tasks\LaunchApp => C:\Program Files\MyPC Backup\MyPC Backup.exe Task: {8BD126CB-B8A9-4D8D-9B06-146C88C6E9EF} - System32\Tasks\{41B8992D-AEF5-4784-A706-F25FD660FDA8} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {8E0AA65D-5989-4BB6-A806-E84101413472} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe Task: {90169C6D-610C-4476-B744-F8719EC151B1} - System32\Tasks\{12C55DD8-A2CA-4E57-B840-A83C0E94CCD9} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {90809887-E274-4542-BFFE-7102A25CB04F} - System32\Tasks\{CC71F833-F39C-40E6-A9F6-33E0EF1942AD} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {915B9B07-2C04-4EAE-88A3-60ED3C1C2492} - System32\Tasks\{2305E47A-FDD6-4C44-ACCB-1123AE5F3DD2} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {9170460E-6A5A-4E92-8A6B-C5FAD6E2FC25} - System32\Tasks\{C7F0F3E3-1588-4072-AE60-2D54176E0674} => Firefox.exe Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype Task: {9832DE4E-F91B-44C4-9E23-26E6A5D27031} - System32\Tasks\{73B05082-3E6C-4B70-A9E3-FE1396AA2134} => \\JOHANNA\Program Files\Internet Explorer\ExtExport.exe [2013-12-01] (Microsoft Corporation) Task: {9A77F18B-342F-4B1E-A0EC-3C761B08065B} - System32\Tasks\{9BE36338-BDD3-462A-9977-D212BA63AE3E} => C:\Program Files\Microsoft Windows 7 Upgrade Advisor\WindowsUpgradeAdvisor.exe [2009-11-20] (Microsoft Corporation) Task: {9D20CD22-D5BE-47CE-A013-D69D38EE4A39} - \AdobeFlashPlayerUpdate 2 No Task File Task: {9D57C552-30B5-4CEA-B591-177E8E52E30D} - System32\Tasks\{4579C5E6-A794-451A-A897-4A0AA8345C43} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {9F381B10-7170-4A72-B789-1C570743A54F} - System32\Tasks\{EAF69592-888E-4163-A385-3486BAA4D7C3} => \\JOHANNA\Program Files\Internet Explorer\ieinstal.exe [2014-03-01] (Microsoft Corporation) Task: {A8858E07-B9C3-4C89-AECF-81DD36B8723D} - System32\Tasks\Aufgaben der Ereignisanzeige\Application_Microsoft-Windows-User Profiles Service_1530 => \\JOHANNA\Program Files\Internet Explorer\ExtExport.exe [2013-12-01] (Microsoft Corporation) Task: {A8A531E8-144C-407A-A634-206302D97BC6} - System32\Tasks\{6244125C-A998-41B1-ABBC-C0784758AF08} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {B4A4D645-F887-4A56-8FCD-98824EDFC44A} - System32\Tasks\{AA868F7F-B343-440A-88FF-7DD14A6A6450} => \\JOHANNA\Program Files\Avira\AntiVir Desktop\avadmin.exe Task: {B6B0EFE3-A360-4860-A676-E116439F6EF0} - System32\Tasks\{B454B7A1-6796-4CB3-8E94-663C44326125} => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe Task: {C527F3CC-6443-4232-856A-340BF8E8B4EC} - System32\Tasks\{22EAEEF9-D193-48ED-9960-5E172D565292} => C:\Program Files\Canon\EOS Utility\EOS Utility.exe Task: {C5C15CB7-CBE1-498E-978A-A4368FE730D7} - System32\Tasks\{FC8FEF3A-FA17-4872-9289-DC01171DC94A} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {C8EEB956-9B84-47BC-9904-CAC2A980CD69} - System32\Tasks\{3417A4A8-8262-4D05-A82D-90B166CDC0C9} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {CC9A7D06-8490-4490-9CD0-C94F8FCCC057} - System32\Tasks\{64191D6E-4F92-4958-A638-0935F337BA8A} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {D144D32B-E2BA-4186-B3A3-32D160D947E7} - System32\Tasks\{27967B5A-19A7-4BB1-BEE4-D907687A8023} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {DAF03AD3-7FE4-4961-A742-7F6D87904928} - System32\Tasks\{84A9AAF7-69C8-4454-A7F9-172DFB31FFB4} => \\JOHANNA\Program Files\Internet Explorer\ExtExport.exe [2013-12-01] (Microsoft Corporation) Task: {DB0834C2-E453-40F7-8D73-AC8A98D4C8D0} - System32\Tasks\{232E2E3D-85E6-4A21-A9F7-827FF5DF3B3D} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {DF87394B-251D-47DD-8D8A-C1C8FDBE2748} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-10] (Google Inc.) Task: {E1CFF595-6947-4887-B746-0BA5DDF17298} - System32\Tasks\{0BF6B1E4-3B35-4D37-B616-B7830598FCD6} => Firefox.exe Skype-Nutzungsbedingungen Task: {ECBEB2EE-FE19-4C58-8E3B-7305B024012D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {F4B9AFDF-2D28-481F-BE89-989D7D68FB7E} - System32\Tasks\{AE7C2CBE-C4A1-4343-AF9D-7CAD4CB345BE} => C:\Program Files\Windows Live\Mail\wlmail.exe [2014-01-10] (Microsoft Corporation) Task: {F918D9DF-5042-4272-9541-D41C3D9811CC} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-21] (SaveSense) <==== ATTENTION Task: {FD2D39C3-7C17-4491-A717-96517BB2F46E} - System32\Tasks\{98479E52-20AF-4DEB-801B-282378F55C85} => Firefox.exe Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\SaveSense.job => C:\Users\PAARJO~1\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2012-08-17 21:39 - 2014-03-04 09:25 - 01310136 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll 2010-05-27 20:40 - 2010-05-27 20:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Paar Johanna\AW_ Besuch zu Allerheiligen.eml:OECustomProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006 - Kopie - Kopie - Kopie.eml:OECustomProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006 - Kopie - Kopie - Kopie.eml:OEStandardProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006 - Kopie - Kopie.eml:OECustomProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006 - Kopie - Kopie.eml:OEStandardProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006 - Kopie.eml:OECustomProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006 - Kopie.eml:OEStandardProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006.eml:OECustomProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\25596B3C-00000006.eml:OEStandardProperty AlternateDataStreams: C:\Users\Paar Johanna\Documents\Fw_ Jetzt machen Sie Ihr Outlook 15 x besser!.eml:OECustomProperty AlternateDataStreams: C:\Users\Public\Documents\we hausmeisterabrechnung 1.eml:OECustomProperty ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service" ==================== Disabled items from MSCONFIG ============== MSCONFIG\Services: PSI_SVC_2 => 2 MSCONFIG\Services: savesenselive => 2 MSCONFIG\Services: savesenselivem => 3 MSCONFIG\startupreg: ApnTBMon => "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" MSCONFIG\startupreg: ApnUpdater => "C:\Program Files\Ask.com\Updater\Updater.exe" MSCONFIG\startupreg: BabylonToolbar => "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I MSCONFIG\startupreg: CLMLServer => "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" ==================== Faulty Device Manager Devices ============= Name: photosmart 7600 series Description: photosmart 7600 series Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Microsoft-Adapter für Miniports virtueller WiFis Description: Microsoft-Adapter für Miniports virtueller WiFis Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (03/13/2014 07:18:10 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (03/10/2014 04:41:20 PM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert . Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess. Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {73980509-bb10-416f-99ef-0b740abba419} Error: (03/10/2014 10:34:28 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (03/07/2014 10:12:10 AM) (Source: MsiInstaller) (User: Johanna) Description: Product: System Requirements Lab for Intel -- Error 1316. A network error occurred while attempting to read from the file: C:\Users\Paar Johanna\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y981YAD1\intel_srldetect_4.5.13.0.msi Error: (03/06/2014 05:26:31 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (03/06/2014 04:46:38 PM) (Source: MsiInstaller) (User: Johanna) Description: Product: System Requirements Lab for Intel -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one. Error: (03/05/2014 08:21:41 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: A1Diagnose.exe, Version: 4.5.1.232, Zeitstempel: 0x52d408f9 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb10c6 Ausnahmecode: 0x0eedfade Fehleroffset: 0x0000812f ID des fehlerhaften Prozesses: 0xe80 Startzeit der fehlerhaften Anwendung: 0xA1Diagnose.exe0 Pfad der fehlerhaften Anwendung: A1Diagnose.exe1 Pfad des fehlerhaften Moduls: A1Diagnose.exe2 Berichtskennung: A1Diagnose.exe3 Error: (03/05/2014 11:06:37 AM) (Source: Microsoft-Windows-RestartManager) (User: Johanna) Description: Die Anwendung oder der Dienst "Microsoft Windows Search Filter Host" konnte nicht heruntergefahren werden. Error: (03/05/2014 11:04:38 AM) (Source: Microsoft-Windows-RestartManager) (User: Johanna) Description: Die Anwendung oder der Dienst "Windows Search" konnte nicht heruntergefahren werden. Error: (03/05/2014 10:47:50 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert . Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess. Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {8cde8263-33ca-466d-8033-3ce155392192} System errors: ============= Error: (03/17/2014 09:42:55 AM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/17/2014 09:28:18 AM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/17/2014 09:18:00 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Aufgabenplanung" ist vom Dienst "Windows-Ereignisprotokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (03/17/2014 09:16:35 AM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (03/17/2014 09:12:53 AM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/15/2014 03:45:35 PM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/14/2014 08:04:32 AM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/13/2014 06:58:30 PM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/13/2014 06:27:22 PM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (03/12/2014 07:34:48 PM) (Source: SNMP) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Microsoft Office Sessions: ========================= Error: (03/13/2014 07:18:10 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (03/10/2014 04:41:20 PM) (Source: VSS)(User: ) Description: 0x80070005, Zugriff verweigert Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {73980509-bb10-416f-99ef-0b740abba419} Error: (03/10/2014 10:34:28 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (03/07/2014 10:12:10 AM) (Source: MsiInstaller)(User: Johanna) Description: Product: System Requirements Lab for Intel -- Error 1316. A network error occurred while attempting to read from the file: C:\Users\Paar Johanna\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y981YAD1\intel_srldetect_4.5.13.0.msi(NULL)(NULL)(NULL)(NULL)(NULL) Error: (03/06/2014 05:26:31 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (03/06/2014 04:46:38 PM) (Source: MsiInstaller)(User: Johanna) Description: Product: System Requirements Lab for Intel -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (03/05/2014 08:21:41 PM) (Source: Application Error)(User: ) Description: A1Diagnose.exe4.5.1.23252d408f9KERNELBASE.dll6.1.7601.1822951fb10c60eedfade0000812fe8001cf38a8176aef0aC:\Program Files\A1 Servicecenter\A1 Diagnose\A1Diagnose.exeC:\Windows\system32\KERNELBASE.dll60c9ddc0-a49b-11e3-bec2-485d60196a45 Error: (03/05/2014 11:06:37 AM) (Source: Microsoft-Windows-RestartManager)(User: Johanna) Description: 0C:\Windows\System32\SearchFilterHost.exeMicrosoft Windows Search Filter Host050175220143003A005C00500072006F006700720061006D002000460069006C00650073005C00570069006E0064006F007700730020004C006900760065005C004D00610069006C005C0077006C006D0069006D006500660069006C00740065007200330032002E0064006C006C000000 Error: (03/05/2014 11:04:38 AM) (Source: Microsoft-Windows-RestartManager)(User: Johanna) Description: 1SearchIndexer.exeWindows Search03026216150640 Error: (03/05/2014 10:47:50 AM) (Source: VSS)(User: ) Description: 0x80070005, Zugriff verweigert Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {8cde8263-33ca-466d-8033-3ce155392192} CodeIntegrity Errors: =================================== Date: 2014-03-13 19:19:09.264 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.264 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.264 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.248 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.248 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.248 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.233 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.233 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.233 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-13 19:19:09.217 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 3063.11 MB Available physical RAM: 1911 MB Total Pagefile: 6124.52 MB Available Pagefile: 4596.95 MB Total Virtual: 2047.88 MB Available Virtual: 1901.75 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:1356.17 GB) (Free:1282.07 GB) NTFS Drive d: (Recover) (Fixed) (Total:40 GB) (Free:31 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1397 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=-742852132864) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) ==================== End Of Log ============================ |
17.03.2014, 16:39 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | 2x Windows 7 - Kaspersky fand Trojaner - Programme laufen nicht richtig Du hast schon einen Thread => http://www.trojaner-board.de/150607-...ml#post1263616
__________________
__________________ |
Themen zu 2x Windows 7 - Kaspersky fand Trojaner - Programme laufen nicht richtig |
.dll, 4d36e972-e325-11ce-bfc1-08002be10318, adobe, bingbar, browser, canon, computer, desktop, ebanking, explorer, google, helper, home, homepage, internet, kaspersky, mozilla, msiinstaller, newtab, object, realtek, registry, security, services.exe, software, system, tastatur, trojaner, usb, windows, winlogon.exe |