| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Internet v. a. mit Firefox sehr langsam (versteckter "Proxy")Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
21.03.2014, 22:09
| #1 |
| |  Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo zusammen! Seit einiger Zeit habe ich extreme Probleme beim Surfen mit dem Firefox (aktuell 28) unter Win 7 SP1. Laut dem Speedtest von Kabel Deutschland kommen von gebuchten 16 Mbit/s max. 5 an. Der IE 9 läuft zwar schneller, allerdings "hängt" der auch etwas. Leitung von KD und Modem sind in Ordnung. Ich habe bereits eine komplette Neuinstallation von Firefox durchgeführt, allerdings ohne Erfolg. Auch ein Reset des Kabelmodems (direkt über LAN mit Netbook verbunden) und TCP-Reset haben nichts gebracht. Virenscanner (auch verschiedene Onlinescanner) zeigten keine Funde. Obwohl im Firefox kein Proxy eingestellt ist, weicht die unter wieistmeineip.de angezeigte IP-Adresse von der in ipconfig ab. Mit Malewarebytes hatte ich bei einem Quickscan dann das Ergebnis, dass Einträge zum unerwünschten Programm "OpenCandy" gefunden wurden: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.20.07 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16428 jana :: JANA-VAIO [Administrator] 21.03.2014 09:23:50 MBAM-log-2014-03-21 (09-55-33).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 295025 Laufzeit: 30 Minute(n), 39 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 4 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. Infizierte Verzeichnisse: 3 C:\Users\jana\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\jana\AppData\Roaming\OpenCandy\2BB230315A1E4201B7B8C945A31D6C5C (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\jana\AppData\Roaming\OpenCandy\9D92ADDC744D48BFB4FA76ACFF9C130C (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. Infizierte Dateien: 2 C:\Users\jana\Downloads\FreemakeVideoDownloaderSetup.exe (PUP.Optional.Ellora) -> Keine Aktion durchgeführt. C:\Users\jana\AppData\Roaming\OpenCandy\9D92ADDC744D48BFB4FA76ACFF9C130C\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. (Ende) Ich bin mir nicht sicher, ob ich mir hier einen Schädling eingefangen habe, oder ob das Problem eine andere Ursache hat. Würde mich sehr über Unterstützung freuen! Danke schonmal! Hier mal andere Logfiles: FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by jana (administrator) on JANA-VAIO on 21-03-2014 20:30:07
Running from C:\Users\jana\Desktop
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(AnVir Software) C:\Program Files\AnVir Task Manager Free\anvir.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-12-23] (Synaptics Incorporated)
HKLM\...\Run: [ISBMgr.exe] - C:\Program Files\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [6756048 2012-11-08] (COMODO)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [SpybotSD TeaTimer] - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [EPSON SX230 Series] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE [212480 2012-05-06] (SEIKO EPSON CORPORATION)
AppInit_DLLs: C:\Windows\system32\guard32.dll => C:\Windows\system32\guard32.dll [301264 2012-11-08] (COMODO)
==================== Internet (Whitelisted) ====================
ProxyServer: 62.2.150.188:8000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xECAB71C23B40CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225
FireFox:
========
FF ProfilePath: C:\Users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\pwwy96n1.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-04-27]
========================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 Apache2.2; C:\xampp\apache\bin\httpd.exe [20549 2010-10-18] (Apache Software Foundation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1990464 2012-11-08] (COMODO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] ()
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\collsvc.exe [122880 2009-09-16] (Intel Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SOHDBSvr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
S3 Tomcat6; C:\Program Files\Apache\Tomcat 6.0\bin\tomcat6.exe [61440 2010-07-19] (Apache Software Foundation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [204648 2009-11-30] (Sony Corporation)
S3 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [513392 2009-12-16] (Sony Corporation)
S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [480624 2009-09-16] (Sony Corporation)
S3 VcmINSMgr; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [361840 2009-09-01] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [692224 2009-12-18] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [669040 2009-10-30] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)
S3 XPrint-Client-Service; C:\Program Files\Schomaecker\XPrint-Client\XPrint-Client-Service\XPrint-Client-Service.exe [1144320 2008-08-28] (Schomäcker GmbH)
S3 postgresql-9.1; No ImagePath
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
==================== Drivers (Whitelisted) ====================
R1 CBDisk; C:\Windows\system32\drivers\{1ec00332-9da9-436d-9aaa-048787df45b7}.sys [57800 2012-12-09] (EldoS Corporation)
R1 CbFs; C:\Windows\system32\drivers\{E7224BCD-D889-4528-8456-60CE0724367E}.sys [145504 2012-12-09] (EldoS Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [19632 2012-11-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [494416 2012-11-08] (COMODO)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25984 2009-12-12] (The OpenVPN Project)
S3 netr28u; No ImagePath
S3 NSNDIS5; \??\C:\Windows\system32\NSNDIS5.SYS [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-21 20:30 - 2014-03-21 20:30 - 00014140 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-21 20:29 - 2014-03-21 20:30 - 00000000 ____D () C:\FRST
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 17:38 - 2014-03-21 17:39 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 11:25 - 2014-03-21 11:25 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-21 11:25 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-21 10:51 - 2014-03-21 16:14 - 00000000 ____D () C:\AdwCleaner
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 08:47 - 2014-03-21 08:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-21 08:47 - 2014-03-21 08:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-21 08:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:13 - 2014-03-20 23:28 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 22:58 - 2014-03-20 22:59 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:46 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-20 22:46 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-20 22:46 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-20 22:46 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-20 22:46 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-20 22:46 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-20 22:46 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-20 22:46 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-20 22:46 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-20 22:42 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 15:00 - 2014-03-18 15:01 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-17 21:37 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-12 13:50 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 13:50 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 13:50 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 13:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 13:50 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:55 - 2014-03-08 15:56 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:29 - 2014-03-08 11:27 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:28 - 2014-03-18 09:50 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-08 10:27 - 2014-03-08 10:26 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:56 - 2014-02-22 18:57 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:26 - 2014-02-22 18:28 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
2014-02-20 21:45 - 2014-02-20 21:45 - 06951048 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight.exe
2014-02-20 21:39 - 2014-03-13 08:21 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-20 21:31 - 2014-02-20 21:30 - 06284664 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight4.0.60531.0.exe
2014-02-20 16:32 - 2014-02-20 16:32 - 00000000 __HDC () C:\ProgramData\{BF7D58F7-EE72-4F10-93D4-6A100BDAF0F0}
2014-02-20 16:31 - 2014-02-20 16:34 - 00000000 ____D () C:\Program Files\WinSysClean X5 Trial
2014-02-20 16:26 - 2014-03-18 09:46 - 00000000 ____D () C:\Program Files\PeerBlock
2014-02-20 15:53 - 2014-02-20 15:53 - 02374320 _____ (PeerBlock, LLC ) C:\Users\jana\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-02-20 15:39 - 2014-02-20 15:38 - 00718442 _____ (Stephan Plath ) C:\Users\jana\Downloads\RidNacs-2.0.3-Setup.exe
2014-02-20 15:19 - 2014-02-20 15:19 - 18491136 _____ (Ultimate Systems, Inc. ) C:\Users\jana\Downloads\nw_29342_wscxvsetupexe.exe
==================== One Month Modified Files and Folders =======
2014-03-21 20:30 - 2014-03-21 20:30 - 00014140 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-21 20:30 - 2014-03-21 20:29 - 00000000 ____D () C:\FRST
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:26 - 2012-12-25 15:05 - 00000000 ____D () C:\Users\jana\Desktop\musikNEU
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:25 - 2012-06-08 12:33 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-03-21 20:25 - 2010-11-11 20:53 - 00000000 ____D () C:\Users\jana
2014-03-21 20:23 - 2010-11-11 22:29 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Skype
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 19:52 - 2013-05-29 08:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-21 19:14 - 2013-04-16 18:25 - 00314862 _____ () C:\Users\jana\AppData\Local\census.cache
2014-03-21 19:14 - 2013-04-16 18:24 - 00133966 _____ () C:\Users\jana\AppData\Local\ars.cache
2014-03-21 17:39 - 2014-03-21 17:38 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 16:23 - 2010-11-11 19:55 - 01638192 _____ () C:\Windows\WindowsUpdate.log
2014-03-21 16:23 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-21 16:23 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-21 16:15 - 2013-11-29 20:37 - 00015872 _____ () C:\Windows\setupact.log
2014-03-21 16:15 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-21 16:14 - 2014-03-21 10:51 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:06 - 2013-11-29 20:36 - 00079096 _____ () C:\Windows\PFRO.log
2014-03-21 16:03 - 2013-11-06 21:33 - 00000000 ____D () C:\Program Files\Cain
2014-03-21 11:25 - 2014-03-21 11:25 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-21 11:25 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-21 11:25 - 2014-03-17 21:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-21 11:25 - 2012-05-02 19:33 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Mozilla
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 09:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-21 08:55 - 2013-12-11 00:11 - 00073043 _____ () C:\Windows\IE11_main.log
2014-03-21 08:48 - 2014-03-21 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 08:47 - 2014-03-21 08:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-21 08:47 - 2014-03-21 08:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-21 08:04 - 2010-07-23 23:30 - 00000000 ____D () C:\Windows\InstDrvs
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:28 - 2014-03-20 23:13 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 23:22 - 2010-12-06 23:22 - 00000300 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-03-20 22:59 - 2014-03-20 22:58 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:50 - 2010-11-11 19:46 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-20 14:45 - 2012-06-08 10:52 - 00000000 ____D () C:\Program Files\COMODO
2014-03-20 11:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-20 00:29 - 2013-08-15 08:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-20 00:21 - 2011-01-09 13:33 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 21:17 - 2011-12-28 14:14 - 00000000 ____D () C:\Users\jana\Desktop\Filme
2014-03-18 20:29 - 2012-04-15 19:37 - 00000000 ____D () C:\Users\jana\Desktop\Filme2
2014-03-18 15:01 - 2014-03-18 15:00 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-18 09:50 - 2014-03-08 10:28 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-18 09:46 - 2014-02-20 16:26 - 00000000 ____D () C:\Program Files\PeerBlock
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-17 09:56 - 2012-08-16 08:56 - 00000000 ____D () C:\Users\jana\Desktop\aktuell
2014-03-15 16:51 - 2011-01-17 11:39 - 00164352 _____ () C:\Users\jana\Documents\Verdienstübersicht.xls
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-13 11:17 - 2013-10-19 16:38 - 00000000 ____D () C:\Users\jana\Desktop\WS13
2014-03-13 11:02 - 2010-07-23 23:18 - 01586464 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 08:23 - 2013-05-04 22:21 - 00355240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 08:21 - 2014-02-20 21:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 22:52 - 2012-05-02 18:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-11 22:52 - 2011-08-29 17:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:56 - 2014-03-08 15:55 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 15:55 - 2011-12-12 21:49 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:27 - 2014-03-08 11:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:27 - 2010-11-11 20:31 - 00000000 ____D () C:\Program Files\Java
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:26 - 2014-03-08 10:27 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-03-04 08:47 - 2011-02-06 18:02 - 00030208 _____ () C:\Users\jana\Documents\Vermögensplan.xls
2014-03-02 12:34 - 2011-04-23 13:33 - 00000000 ____D () C:\Users\jana\Desktop\Studium
2014-02-26 10:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:57 - 2014-02-22 18:56 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:28 - 2014-02-22 18:26 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
2014-02-20 21:45 - 2014-02-20 21:45 - 06951048 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight.exe
2014-02-20 21:30 - 2014-02-20 21:31 - 06284664 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight4.0.60531.0.exe
2014-02-20 16:34 - 2014-02-20 16:31 - 00000000 ____D () C:\Program Files\WinSysClean X5 Trial
2014-02-20 16:32 - 2014-02-20 16:32 - 00000000 __HDC () C:\ProgramData\{BF7D58F7-EE72-4F10-93D4-6A100BDAF0F0}
2014-02-20 15:53 - 2014-02-20 15:53 - 02374320 _____ (PeerBlock, LLC ) C:\Users\jana\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-02-20 15:38 - 2014-02-20 15:39 - 00718442 _____ (Stephan Plath ) C:\Users\jana\Downloads\RidNacs-2.0.3-Setup.exe
2014-02-20 15:19 - 2014-02-20 15:19 - 18491136 _____ (Ultimate Systems, Inc. ) C:\Users\jana\Downloads\nw_29342_wscxvsetupexe.exe
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-1592874016-3910639467-1926928520-1000\$da5da012b751b1a7f7d3893de860eefe
Files to move or delete:
====================
C:\Users\jana\akvis-magnifier-setup.exe
C:\Users\jana\Fport.exe
C:\Users\jana\h2cdimage.exe
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\SkypeSetup.exe
C:\Users\jana\AppData\Local\Temp\feedback.dll
C:\Users\jana\AppData\Local\Temp\Quarantine.exe
C:\Users\jana\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 16:41
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by jana at 2014-03-21 20:32:22
Running from C:\Users\jana\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AV: COMODO Antivirus (Enabled - Up to date) {458BB331-2324-0753-3D5F-1472EB102AC0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Defense+ (Enabled - Up to date) {FEEA52D5-051E-08DD-07EF-2F009097607D}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
AccessData FTK Imager (HKLM\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.1.8 - AccessData)
ActiveState Komodo Edit 7.1.3 (HKLM\...\{F69166F9-0171-49DA-8B63-6B8DD8279770}) (Version: 7.1.3 - ActiveState Software Inc.)
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader 9.5.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AKVIS Magnifier (HKLM\...\{9FDD51C9-F7AA-40AF-A4FF-0500E45E4A06}) (Version: 6.0.1006.8910 - AKVIS)
AnVir Task Manager Free (HKLM\...\AnVir Task Manager Free) (Version: - AnVir Software)
Apache Tomcat 6.0 (remove only) (HKLM\...\Apache Tomcat 6.0) (Version: - )
ArcSoft WebCam Companion 3 (HKLM\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.193 - ArcSoft)
Caesar III (HKLM\...\Caesar III) (Version: - )
Cain & Abel 4.9.46 (HKLM\...\Cain & Abel 4.9.46) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 3.17 - Piriform)
COMODO Internet Security (HKLM\...\{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}) (Version: 5.10.31649.2253 - COMODO Security Solutions Inc.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DbVisualizer 7.1.4 (HKLM\...\8973-4025-0853-7287) (Version: 7.1.4 - DbVis Software AB)
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM\...\Dev-C++) (Version: - )
Dia (nur entfernen) (HKLM\...\Dia) (Version: - )
Dr. Hardware 2013 13.0d (HKLM\...\Dr. Hardware 2013_is1) (Version: - Peter A. Gebhard)
Driver Magician Lite 4.21 (HKLM\...\Driver Magician Lite_is1) (Version: - GoldSolution Software, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version: - SEIKO EPSON Corporation)
Evernote (HKLM\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.0.545 - Evernote Corp.)
GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Update Helper (Version: 1.3.21.111 - Google Inc.) Hidden
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
inSSIDer (HKLM\...\{BF6379E6-9936-46B0-B6AC-C56EE3987D2E}) (Version: 2.1.1 - MetaGeek)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
Java(TM) Platform, Micro Edition Software Development Kit 3.0 (HKCU\...\nbi-javame-toolkit-3.0.0.0.20090408) (Version: - Sun Microsystems Inc.)
Java(TM) SE Development Kit 6 Update 22 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160220}) (Version: 1.6.0.220 - Oracle)
JMicron Ethernet Adapter NDIS Driver (HKLM\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.14.11 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.37.3 - JMicron Technology Corp.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{8E770F99-CF23-4BF9-BF4E-E3A2924FEB27}) (Version: 8.0.50727.762 - SAP)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4.0 redistributable (HKLM\...\{44D66AD9-AE19-4AFD-BE7E-A1B44C856697}) (Version: 4.0.0.0 - SAP)
MT66 Software Update (HKLM\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version: - )
MusicStation (HKLM\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
Norton Online Backup (HKLM\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
Notepad++ (HKLM\...\Notepad++) (Version: 5.8.4 - )
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
OpenVPN 2.1.1 (HKLM\...\OpenVPN) (Version: 2.1.1 - )
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.0.2 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.201.0 - Tracker Software Products Ltd)
pgAdmin III 1.14 (HKLM\...\{58D1EDF1-038E-4F62-A08E-C47581465A57}) (Version: 1.14 - The pgAdmin Development Team)
Photomizer Pro (HKLM\...\{41B5224D-6857-4D8B-0001-C8949A33B608}) (Version: 2.0.13.426 - Engelmann Media GmbH)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.0.00.10260 - Sony Corporation)
PostgreSQL 9.1 (HKLM\...\PostgreSQL 9.1) (Version: 9.1 - PostgreSQL Global Development Group)
Protege 4.3 (HKLM\...\Protege 4.3) (Version: 1.0.0.0 - Stanford Center for Biomedical Informatics Research)
Python 2.7.2 (HKLM\...\{2E295B5B-1AD4-4d36-97C2-A316084722CF}) (Version: 2.7.2150 - Python Software Foundation)
R for Windows 2.15.0 (HKLM\...\R for Windows 2.15.0_is1) (Version: 2.15.0 - R Development Core Team)
Rainmeter (HKLM\...\Rainmeter) (Version: - )
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6005 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reg Organizer version 6.01 (HKLM\...\Reg Organizer_is1) (Version: 6.01 - ChemTable Software)
Setting Utility Series (HKLM\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
SimpleScreenshot 1.40 (HKLM\...\SimpleScreenshot) (Version: - )
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sony Home Network Library (HKLM\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (Version: 2.0.1.10160 - Sony Corporation) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
STEUEReasy 2013 (HKLM\...\{4D0EAA2D-8EE2-43AB-BE00-18A1D0A9281C}) (Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
System Checkup 3.4 (HKLM\...\{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1) (Version: 3.4.0.53 - iolo technologies, LLC)
TeXnicCenter Version 1.0 Stable RC1 (HKLM\...\TeXnicCenter_is1) (Version: Version 1.0 Stable RC1 - TeXnicCenter.org)
TweakMe! (HKLM\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.2.0.7 - pXc-coding.com)
VAIO Care (HKLM\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 5.0.3.11130 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO Energie Verwaltung (HKLM\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.12150 - Sony Corporation)
VAIO Entertainment Platform (HKLM\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.6.0.09150 - Sony Corporation)
VAIO Entertainment Platform (Version: 3.6.0.09150 - Sony Corporation) Hidden
VAIO Event Service (HKLM\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.3.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (Version: 3.9.1 - Sony Corporation) Hidden
VAIO Marketing Tools (HKLM\...\MarketingTools) (Version: - Sony Corporation)
VAIO Media plus (HKLM\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Original Function Settings (Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Smart Network (HKLM\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.12170 - Sony Corporation)
VAIO Update 5 (HKLM\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.0.0.10300 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.0.10200 - Sony Corporation)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vistumbler (HKLM\...\Vistumbler) (Version: v10 - Vistumbler.net)
wGet-Installer (HKLM\...\{D901E911-3478-466F-8EA0-0AEE85F22E4B}) (Version: 1.09.0000 - GNU)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\BFEE6FC237B51D7CD2E0A40D81E188A6ED95001F) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinSCP 4.3.7 (HKLM\...\winscp3_is1) (Version: 4.3.7 - Martin Prikryl)
WinSysClean X5 Trial (HKLM\...\WinSysClean X5 Trial) (Version: 15.00 - Ultimate Systems, Inc.)
WinSysClean X5 Trial (Version: 15.00 - Ultimate Systems, Inc.) Hidden
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )
X-Print 4.0 Client (HKLM\...\X-Print Client Uni Passau_is1) (Version: - Schomaecker GmbH)
==================== Restore Points =========================
09-03-2014 10:23:14 Windows Update
12-03-2014 18:12:16 Windows Update
12-03-2014 21:36:21 Windows Update
15-03-2014 07:45:17 Windows Modules Installer
17-03-2014 07:19:37 Windows Update
17-03-2014 09:30:53 Windows Modules Installer
18-03-2014 19:08:14 Windows Modules Installer
19-03-2014 23:18:25 Windows Update
20-03-2014 10:29:18 Removed Oracle VM VirtualBox 4.2.18
20-03-2014 10:42:12 Windows Update
20-03-2014 13:11:53 Windows Update
20-03-2014 21:42:40 Windows Update
20-03-2014 22:00:43 Installed Microsoft Fix it 50123
20-03-2014 22:04:17 Windows Update
20-03-2014 22:12:09 Windows Update
21-03-2014 07:42:26 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2011-04-22 12:28 - 00432840 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {126C99D1-8F0F-4FBB-9506-133EC86278CD} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {313DEE4D-193A-4AC3-BE6B-39DE4F4492F7} - System32\Tasks\AnVir Task Manager => C:\Program Files\AnVir Task Manager Free\anvir.exe [2013-02-13] (AnVir Software)
Task: {383709C2-56D4-4139-97A1-DC60DEDF6310} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {475C701C-2F13-4FDB-9DDE-0730F979B1D9} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {4FBED1A8-06F0-4389-B239-65CD7A1DF6CE} - System32\Tasks\RegOrganizerQuickLaunch => C:\Program Files\Reg Organizer\RegOrganizer.exe [2013-01-28] (ChemTable Software)
Task: {6D42F8C7-53D3-40B9-B363-1FBC8FDD9513} - System32\Tasks\VAIO Care Service => C:\Program Files\Sony\VAIO Care\VAIOCareService.exe [2009-10-21] (Sony Corporation)
Task: {748F25EE-A5D9-4053-A9B8-B945F157295A} - System32\Tasks\SONY\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2009-10-30] (Sony Corporation)
Task: {836949B5-D072-462D-AF3D-4AA11B474F3F} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-24] (Sony Corporation)
Task: {88248CAD-6D29-467F-A5AE-1595BC70F1B2} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {90CF58AE-1DA3-438E-ABF1-D2CC7ED95FC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9121E016-75BC-4E66-86EC-699FAC08B274} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {9FB32F12-0C32-41EA-80B6-D6D28B8C8689} - System32\Tasks\MT66 Software Update => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)
Task: {9FDA5A78-E20B-4442-B95B-E05501DE3030} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {B317CCD1-6F72-419C-9853-E5AC44558030} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {B365C55C-105A-458B-813C-EC8348A2F3D0} - System32\Tasks\ReclaimerResumeInstall_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {BD753479-91BF-4BF4-BCB4-2B464E6820E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {C878D519-6A24-40C4-B8BE-CFE4C05CE680} - System32\Tasks\{0507F77E-6EAA-4A4C-9008-33ADC8C4C3DB} => C:\Users\jana\Fport.exe [2001-05-04] ()
Task: {DB0FC8D5-25FD-4A5A-B61E-75E3565A3602} - System32\Tasks\ReclaimerResumeInstallLogin_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {E808A515-6561-4333-BD85-3BD34D923A40} - System32\Tasks\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2009-10-19] (Sony Corporation)
Task: {F0144E4A-461B-42E4-861A-432540BDA2E4} - System32\Tasks\{83ECE4B7-6F12-4390-8349-28D243DE72D0} => C:\Program Files\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstallLogin_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstall_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
==================== Loaded Modules (whitelisted) =============
2011-12-19 17:59 - 2012-10-05 01:33 - 00070352 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2010-12-23 09:10 - 2001-10-28 17:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll
2008-10-24 15:35 - 2008-10-24 15:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2010-11-11 20:35 - 2009-11-30 19:19 - 00010752 _____ () C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll
2010-11-11 20:35 - 2009-11-30 19:20 - 00009728 _____ () C:\Program Files\Sony\VAIO Event Service\VESMgrSubPS.dll
2010-11-14 15:51 - 2010-11-14 15:51 - 00109056 _____ () C:\Program Files\Notepad++\NppShell_03.dll
2014-03-21 11:25 - 2014-03-15 09:40 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:31D9EFCC
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== Disabled items from MSCONFIG ==============
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RescueTime.lnk => C:\Windows\pss\RescueTime.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk.disabled => C:\Windows\pss\OpenOffice.org 3.2.lnk.disabled.Startup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainmeter.lnk.disabled => C:\Windows\pss\Rainmeter.lnk.disabled.Startup
MSCONFIG\startupreg: DriverScanner => "C:\Program Files\Uniblue\DriverScanner\launcher.exe" delay 20000
MSCONFIG\startupreg: Facebook Update => "C:\Users\jana\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: Google Update => "C:\Users\jana\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OnlineTime => "c:\program files\onlineeye\onlineeye.exe"
MSCONFIG\startupreg: SimpleScreenshot => C:\PROGRA~1\SSS\SIMPLESCREENSHOT.EXE
MSCONFIG\startupreg: SiteRanker => "C:\Program Files\SiteRanker\SiteRankTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
==================== Faulty Device Manager Devices =============
Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/21/2014 04:16:01 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 04:16:00 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 04:06:47 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 04:06:46 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 11:01:30 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 11:01:29 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 09:58:45 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 09:58:44 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 09:04:59 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 09:04:58 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
System errors:
=============
Error: (03/21/2014 10:38:38 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 10:38:35 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:58:59 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:58:56 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:58:53 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:11:11 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Internet Explorer 10 für Windows 7 (KB2909210)
Error: (03/21/2014 08:44:16 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 08:44:13 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 08:44:10 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 08:44:07 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Microsoft Office Sessions:
=========================
Error: (03/21/2014 04:16:01 PM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 04:16:00 PM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 04:06:47 PM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 04:06:46 PM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 11:01:30 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 11:01:29 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 09:58:45 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 09:58:44 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 09:04:59 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 09:04:58 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
CodeIntegrity Errors:
===================================
Date: 2012-01-01 19:46:22.480
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 19:40:04.640
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 17:36:24.918
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 49%
Total physical RAM: 2037 MB
Available physical RAM: 1036.08 MB
Total Pagefile: 4074.01 MB
Available Pagefile: 2660.74 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:226.04 GB) (Free:157.46 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: BE1562CA)
Partition: GPT Partition Type.
==================== End Of Log ============================
GMER im Anhang |
| Themen zu Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") |
| 4d36e972-e325-11ce-bfc1-08002be10318, adobe, antivirus, device driver, diagnostics, entfernen, error, firefox 28.0, flash player, home, hängt, langsam, microsoft fix it, minidump, mozilla, programm, proxy, pup.optional.ellora, pup.optional.helperbar.a, pup.optional.opencandy, rundll, safer networking, scan, schädling, security, services.exe, speedtest, svchost.exe, symantec, tracker, virtualbox, win32/bagle.gen.zip |
Baum-Darstellung