search.fbdownloader.com auf Windows Vista

dr.tschuna · 31.03.2014, 18:59

Hallo!

Jetzt hat es mich auch erwischt. Malwarebytes hat 13 Objekte gefunden und entfernt. Anbei der Log. Und FRST-Log

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.30.05

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Ron :: RON-PC [Administrator]

31.03.2014 17:42:53
mbam-log-2014-03-31 (17-42-53).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|H:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 264215
Laufzeit: 1 Stunde(n), 52 Minute(n), 32 Sekunde(n) [Abgebrochen]

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 10
HKCR\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53} (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{A1669086-99CD-4735-9B7D-BD0ED4EF4893} (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{E563EA8B-7C40-4E55-AD48-EF3A1463F16C} (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53} (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53} (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53} (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{3bc93e76-92f8-5fda-b676-5afee3735bf1} (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1} (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{B83C16AE-3C3D-5362-85D6-D19F9FB51262} (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{2C0830EC-8559-5E15-9DC7-5BB830020064} (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Ron\AppData\Local\ext_offermosquito\OfferMosquitoIEPlaceholder.dll (PUP.Optional.OfferMosquito) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Ron\AppData\Local\omesuperv.exe (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Ron\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll (PUP.Optional.OfferMosquito.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Ron at 2014-03-31 19:52:04
Running from C:\Users\Ron\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Activation Assistant for the 2007 Microsoft Office suites (HKLM-x32\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0.1 - Microsoft Corporation) Hidden
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.2 - Hewlett-Packard) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{CE42CFF5-F477-D440-6CFB-6CBAE0008B91}) (Version: 3.0.855.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )
Canon MP630 series Benutzerregistrierung (HKLM-x32\...\Canon MP630 series Benutzerregistrierung) (Version:  - )
Canon MP630 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP630_series) (Version:  - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
Catalyst Control Center InstallProxy (x32 Version: 2011.1109.2212.39826 - Advanced Micro Devices, Inc.) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2326 - CyberLink Corp.)
CyberLink DVD Suite Deluxe (x32 Version: 6.0.2326 - CyberLink Corp.) Hidden
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.0.20140114 - Landesfinanzdirektion Thüringen)
ElsterFormular 2008/2009 (HKLM-x32\...\{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}) (Version: 10.3.0.0 - Steuerverwaltung des Bundes und der Länder)
FormatFactory 2.50 (HKLM-x32\...\FormatFactory) (Version: 2.50 - Free Time)
Google Chrome Frame (HKLM-x32\...\{8618AE04-1210-3C32-A8C3-45A5E44CD340}) (Version: 65.169.107 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
Hardware Diagnose Tools (HKLM\...\PC-Doctor for Windows) (Version: 5.1.5048.14 - PC-Doctor, Inc.)
HP Active Support Library (HKLM-x32\...\{0295F89F-F698-4101-9A7D-49F407EC2D82}) (Version: 3.1.10.1 - Hewlett-Packard)
HP Customer Experience Enhancements (HKLM-x32\...\{E1591139-8B44-411B-A81B-D35F83A0565A}) (Version: 5.7.0.2875 - Hewlett-Packard)
HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 2.1.2717 - Hewlett-Packard)
HP MediaSmart DVD (x32 Version: 2.1.2717 - Hewlett-Packard) Hidden
HP MediaSmart Music/Photo/Video (HKLM-x32\...\InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 2.0.2415 - Hewlett-Packard)
HP MediaSmart Music/Photo/Video (x32 Version: 2.0.2415 - Hewlett-Packard) Hidden
HP MediaSmart SmartMenu (HKLM\...\{F1568AA6-5982-4AFB-A871-C68E4328BC3B}) (Version: 2.1.7 - Hewlett-Packard)
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
HP Picasso Media Center Add-In (x32 Version: 9.1.7.0 - Hewlett-Packard Development Company, L.P.) Hidden
HP Recovery Manager RSS (x32 Version: 92.0.0.9 - Hewlet Packard Company) Hidden
HP Support Information (HKLM-x32\...\{1CC069FA-1A86-402E-9787-3F04E652C67A}) (Version: 10.1.0001 - Hewlett-Packard)
HP Total Care Setup (HKLM-x32\...\{95A747E0-DF19-46CB-A622-20A0107201BD}) (Version: 1.1.2413.2876 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{47F36D92-E58E-456D-B73C-3382737E4C42}) (Version: 4.000.013.003 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
iTunes (HKLM\...\{96B53CA8-5ABB-49D8-96F1-F6C0D73A76C6}) (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216045FF}) (Version: 6.0.450 - Oracle)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
Light Image Resizer 4.0.6.8 (HKLM-x32\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.0.6.8 - ObviousIdea)
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
MAGIX Audio Cleaning Lab 17 deluxe (HKLM-x32\...\MAGIX_MSI_mclab_17dlx) (Version: 17.0.0.2 - MAGIX AG)
MAGIX Audio Cleaning Lab 17 deluxe (x32 Version: 17.0.0.2 - MAGIX AG) Hidden
MAGIX Speed 2 (MSI) (HKLM-x32\...\{FF34AF1C-705B-424A-A850-1A1F61D6EB71}) (Version: 6.0.1.4 - MAGIX AG)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft Works 6-9 Converter (HKLM-x32\...\{172423F9-522A-483A-AD65-03600CE4CA4F}) (Version: 9.7.0000 - Microsoft Corporation)
Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0407-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
muvee Reveal (HKLM-x32\...\{D722CF4B-4B06-BF11-FDEA-BD1B319FEA57}) (Version: 7.0.35.7918 - muvee Technologies Pte Ltd)
MyMDb 3.6 (HKLM-x32\...\MyMDb_0) (Version:  - )
Napster (HKLM-x32\...\{BBBCAE4B-B416-4182-A6F2-438180894A81}) (Version: 4.6.4.0 - Napster)
Napster Burn Engine (x32 Version: 3.5.0000 - Ihr Firmenname) Hidden
Napster Label Creator (HKLM-x32\...\{16FD907B-FA72-4F3C-B959-E076C8238F80}) (Version: 1.00.0000 - Roxio Inc.,)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
Optimierte Multimedia-Tastatur-Lösung (HKLM-x32\...\KBD) (Version: 1.0.9.2 - Hewlett-Packard)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.0 - Nikon)
PL-2303 Vista Driver Installer (HKLM-x32\...\{EEC010D0-1252-4E1D-BAD9-F1B8F414535C}) (Version: 3.2.0.0 - Prolific)
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.2325 - CyberLink Corp.)
Power2Go (x32 Version: 6.0.2325 - CyberLink Corp.) Hidden
Python 2.6 pywin32-212 (HKLM-x32\...\pywin32-py2.6) (Version: 2.12 - Python Software Foundation)
Python 2.6.1 (HKLM-x32\...\{9CC89170-000B-457D-91F1-53691F85B223}) (Version: 2.6.1150 - Python Software Foundation)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5740 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
Secunia PSI (3.0.0.6005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6005 - Secunia)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
sp43204 (HKLM-x32\...\sp43204) (Version:  - Hewlett-Packard)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM-x32\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VIS (HKLM-x32\...\VIS) (Version:  - ) <==== ATTENTION
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

16-01-2014 19:57:12 Geplanter Prüfpunkt
21-01-2014 07:51:17 Windows Update
22-01-2014 19:22:36 Geplanter Prüfpunkt
24-01-2014 09:57:00 Windows Update
29-01-2014 08:05:12 Windows Update
30-01-2014 05:16:32 Windows Update
04-02-2014 05:46:06 Windows Update
05-02-2014 07:59:27 Geplanter Prüfpunkt
05-02-2014 20:38:01 Geplanter Prüfpunkt
07-02-2014 07:52:36 Windows Update
09-02-2014 13:55:13 Installed Java 7 Update 51
11-02-2014 15:27:49 Geplanter Prüfpunkt
12-02-2014 07:32:48 Windows Update
13-02-2014 05:52:10 Windows Update
16-02-2014 14:27:22 Geplanter Prüfpunkt
17-02-2014 06:04:57 Windows Update
21-02-2014 11:34:18 Windows Update
22-02-2014 18:37:04 Geplanter Prüfpunkt
23-02-2014 17:51:11 Geplanter Prüfpunkt
25-02-2014 06:48:32 Windows Update
27-02-2014 19:36:48 Geplanter Prüfpunkt
01-03-2014 05:06:48 Windows Update
02-03-2014 19:07:37 Geplanter Prüfpunkt
04-03-2014 06:30:07 Windows Update
05-03-2014 10:03:20 Geplanter Prüfpunkt
08-03-2014 07:43:03 Windows Update
09-03-2014 19:09:26 Geplanter Prüfpunkt
10-03-2014 17:14:25 Geplanter Prüfpunkt
14-03-2014 18:18:26 Windows Update
15-03-2014 06:13:08 Windows Update
18-03-2014 07:24:21 Windows Update
19-03-2014 07:51:25 Windows Update
22-03-2014 18:03:41 Geplanter Prüfpunkt
26-03-2014 08:04:03 Windows Update
27-03-2014 19:22:33 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 14:34 - 2013-03-23 22:23 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {065DA873-2528-401A-8B7F-83B2D80EC84B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {08282741-5461-4111-B00A-DD5A9B7C174F} - System32\Tasks\PCDRScheduledMaintenance => C:\Program Files\PC-Doctor for Windows\pcdr5cuiw32.exe [2008-11-05] (PC-Doctor, Inc.)
Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {117A4663-83AB-4234-BEA8-2AC7C63E221C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-10] (Google Inc.)
Task: {119A5F16-495E-427F-941D-2B12710A052E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-10] (Google Inc.)
Task: {192DDA2D-5815-47B8-983F-65744FEEC03A} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {1E1D3464-698B-4C16-97EC-5EB60134094E} - System32\Tasks\HP Health Check => c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-12-04] (Hewlett-Packard)
Task: {254095AE-FB97-48EA-94A5-D8BF2AB79714} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {5098C3D7-A790-4457-9ECB-9717A2D8C853} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {6D3A4EA8-9B93-4537-B56A-E49EED8CCB93} - System32\Tasks\Fifth => C:\Users\Ron\AppData\Roaming\Fifth\Fifth.exe [2014-03-12] () <==== ATTENTION
Task: {7C638E5B-ECE5-4424-A7E5-2C913CA682E9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {A8768CBE-A113-4071-A24D-01D641F87202} - System32\Tasks\OMESupervisor => C:\Users\Ron\AppData\Local\omesuperv.exe <==== ATTENTION
Task: {AB45B906-363B-4712-AA59-7F1BC3F603E0} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {C88BDE0D-B6A8-46B0-9B6B-B6CB0D36F114} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E2B104FC-2CDF-40CB-917E-14D860B8D5CA} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Ron => C:\Program Files\Windows Calendar\WinCal.exe [2008-01-21] (Microsoft Corporation)
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDRScheduledMaintenance.job => C:\Program Files\PC-Doctor for Windows\pcdr5cuiw32.exe

==================== Loaded Modules (whitelisted) =============

2011-11-10 04:11 - 2011-11-10 04:11 - 00045056 _____ () C:\Windows\system32\atitmp64.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: USB ISDN-Connector
Description: USB ISDN-Connector
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/31/2014 07:51:05 PM) (Source: Application Hang) (User: )
Description: Programm FRST64(1).exe, Version 3.3.10.2 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 13c0
Anfangszeit: 01cf4d08a1dbb1d6
Zeitpunkt der Beendigung: 15

Error: (03/31/2014 07:39:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2014 05:17:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2014 08:53:07 AM) (Source: LoadPerf) (User: )
Description: ⨯ਪ⨠樠畑牥⁹慖楬慤楴湯倠畬楧⁮⸱⸹ਰ⨠ ‪瑨灴⼺戯獡楳瑳湡散搮⽥煪敵祲瀭畬楧獮樯畱牥⵹汰杵湩瘭污摩瑡潩⽮ ‪瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩੮⨠ ‪潃祰楲桧⁴挨 〲㘰ⴠ㈠㄰‱썊状⁮慚晥敦敲ੲ⨠ ‪畄污氠捩湥敳⁤湵敤⁲桴⁥䥍⁔湡⁤假⁌楬散獮獥਺⨠†栠瑴㩰⼯睷⹷灯湥潳牵散漮杲氯捩湥敳⽳業⵴楬散獮⹥桰ੰ⨠†栠瑴㩰⼯睷⹷湧⹵牯⽧楬散獮獥术汰栮浴੬⨠ਯ⠊畦据楴湯␨ ੻␊攮瑸湥⡤⸤湦‬੻⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慶楬慤整ऊ慶楬慤整›畦据楴湯 灯楴湯⁳ ੻ऊ⼉ 晩渠瑯楨杮椠⁳敳敬瑣摥‬敲畴湲渠瑯楨杮※慣❮⁴档楡⁮湡睹祡ऊ椉⁦ℨ桴獩氮湥瑧⥨笠ऊउ灯楴湯⁳☦漠瑰潩獮搮扥杵☠…楷摮睯挮湯潳敬☠…潣獮汯⹥慷湲 渢瑯楨杮猠汥捥整Ɽ挠湡琧瘠污摩瑡ⱥ爠瑥牵楮杮渠瑯楨杮•㬩ऊउ敲畴湲਻उ੽ऊ⼉ 档捥⁫晩愠瘠污摩瑡牯映牯琠楨⁳潦浲眠獡愠牬慥祤挠敲瑡摥ऊ瘉牡瘠污摩瑡牯㴠␠搮瑡⡡桴獩せⱝ✠慶楬慤潴❲㬩ऊ椉⁦ 慶楬慤潴⁲ ੻उ爉瑥牵⁮慶楬慤潴㭲ऊ紉ਊउ⼯䄠摤渠癯污摩瑡⁥慴⁧晩䠠䵔㕌ਮउ桴獩愮瑴⡲渧癯污摩瑡❥‬渧癯污摩瑡❥㬩ਊउ慶楬慤潴⁲‽敮⁷⸤慶楬慤潴⡲漠瑰潩獮‬桴獩せ⁝㬩ऊ␉搮瑡⡡桴獩せⱝ✠慶楬慤潴❲‬慶楬慤潴⥲਻ऊ椉⁦ 慶楬慤潴⹲敳瑴湩獧漮獮扵業⁴ ੻ऊउ慶⁲湩異獴湁䉤瑵潴獮㴠琠楨⹳楦摮∨湩異ⱴ戠瑵潴≮㬩ਊउ⼉ 污潬⁷畳灰敲楳杮瘠污摩瑡潩⁮祢愠摤湩⁧⁡慣据汥挠慬獳琠⁯桴⁥畳浢瑩戠瑵潴੮उ椉灮瑵䅳摮畂瑴湯⹳楦瑬牥∨挮湡散≬⸩汣捩⡫畦据楴湯⠠ ੻उउ慶楬慤潴⹲慣据汥畓浢瑩㴠琠畲㭥ऊउ⥽਻ऊउ⼯眠敨⁮⁡畳浢瑩慈摮敬⁲獩甠敳Ɽ挠灡畴敲琠敨猠扵業瑴湩⁧畢瑴湯ऊउ晩⠠慶楬慤潴⹲敳瑴湩獧献扵業䡴湡汤牥 ੻उउ湩異獴湁䉤瑵潴獮昮汩整⡲㨢畳浢瑩⤢挮楬正昨湵瑣潩⁮⤨笠ऊउउ慶楬慤潴⹲畳浢瑩畂瑴湯㴠琠楨㭳ऊउ紉㬩ऊउ੽ऊउ⼯瘠污摩瑡⁥桴⁥潦浲漠⁮畳浢瑩ऊउ桴獩献扵業⡴映湵瑣潩⡮攠敶瑮⤠笠ऊउ椉⁦ 慶楬慤潴⹲敳瑴湩獧搮扥杵⤠ऊउउ⼯瀠敲敶瑮映牯⁭畳浢瑩琠⁯敢愠汢⁥潴猠敥挠湯潳敬漠瑵異ੴउउ攉敶瑮瀮敲敶瑮敄慦汵⡴㬩ਊउउ畦据楴湯栠湡汤⡥ ੻उउ椉⁦ 慶楬慤潴⹲敳瑴湩獧献扵業䡴湡汤牥⤠笠ऊउउ椉⁦瘨污摩瑡牯献扵業䉴瑵潴⥮笠ऊउउउ⼯椠獮牥⁴⁡楨摤湥椠灮瑵愠⁳⁡敲汰捡浥湥⁴潦⁲桴⁥業獳湩⁧畳浢瑩戠瑵潴੮उउउ瘉牡栠摩敤⁮‽⠤㰢湩異⁴祴数✽楨摤湥⼧∾⸩瑡牴∨慮敭Ⱒ瘠污摩瑡牯献扵業䉴瑵潴⹮慮敭⸩慶⡬慶楬慤潴⹲畳浢瑩畂瑴湯瘮污敵⸩灡数摮潔瘨污摩瑡牯挮牵敲瑮潆浲㬩ऊउउ紉ऊउउ瘉污摩瑡牯献瑥楴杮⹳畳浢瑩慈摮敬⹲慣汬 慶楬慤潴Ⱳ瘠污摩瑡牯挮牵敲瑮潆浲⤠਻उउउ晩⠠慶楬慤潴⹲畳浢瑩畂瑴湯 ੻उउउ⼉ 湡⁤汣慥⁮灵愠瑦牥慷摲㭳琠慨歮⁳潴渠ⵯ汢捯⵫捳灯ⱥ栠摩敤⁮慣⁮敢爠晥牥湥散੤उउउ栉摩敤⹮敲潭敶⤨਻उउउ੽उउउ敲畴湲映污敳਻उउ紉ऊउउ敲畴湲琠畲㭥ऊउ紉ਊउउ⼯瀠敲敶瑮猠扵業⁴潦⁲湩慶楬⁤潦浲⁳牯挠獵潴⁭畳浢瑩栠湡汤牥ੳउउ晩⠠瘠污摩瑡牯挮湡散卬扵業⁴ ੻उउ瘉污摩瑡牯挮湡散卬扵業⁴‽慦獬㭥ऊउउ敲畴湲栠湡汤⡥㬩ऊउ紉ऊउ椉⁦ 慶楬慤潴⹲潦浲⤨⤠笠ऊउउ晩⠠瘠污摩瑡牯瀮湥楤杮敒畱獥⁴ ੻उउउ慶楬慤潴⹲潦浲畓浢瑩整⁤‽牴敵਻उउउ敲畴湲映污敳਻उउ紉ऊउउ敲畴湲栠湡汤⡥㬩ऊउ紉攠獬⁥੻उउ瘉污摩瑡牯昮捯獵湉慶楬⡤㬩ऊउउ敲畴湲映污敳਻उउ੽उ紉㬩ऊ紉ਊउ敲畴湲瘠污摩瑡牯਻紉ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慶楬੤瘉污摩›畦据楴湯⤨笠 †††椠⁦ ⠤桴獩せ⥝椮⡳昧牯❭⤩笠 †††††爠瑥牵⁮桴獩瘮污摩瑡⡥⸩潦浲⤨਻††††⁽汥敳笠 †††††瘠牡瘠污摩㴠琠畲㭥 †††††瘠牡瘠污摩瑡牯㴠␠琨楨孳崰昮牯⥭瘮污摩瑡⡥㬩 †††††琠楨⹳慥档昨湵瑣潩⡮ ੻उउ慶楬⁤㴦瘠污摩瑡牯攮敬敭瑮琨楨⥳਻††††††⥽਻††††††敲畴湲瘠污摩਻††††੽††ⱽऊ⼯愠瑴楲畢整㩳猠慰散猠灥牥瑡摥氠獩⁴景愠瑴楲畢整⁳潴爠瑥楲癥⁥湡⁤敲潭敶ऊ敲潭敶瑁牴㩳映湵瑣潩⡮瑡牴扩瑵獥 ੻उ慶⁲敲畳瑬㴠笠ⱽऊउ攤敬敭瑮㴠琠楨㭳ऊ␉攮捡⡨瑡牴扩瑵獥献汰瑩⼨獜⤯‬畦据楴湯椨摮硥‬慶畬⥥笠ऊउ敲畳瑬癛污敵⁝‽攤敬敭瑮愮瑴⡲慶畬⥥਻उ␉汥浥湥⹴敲潭敶瑁牴瘨污敵㬩ऊ紉㬩ऊ爉瑥牵⁮敲畳瑬਻紉ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮畲敬ੳ爉汵獥›畦据楴湯挨浯慭摮‬牡畧敭瑮 ੻उ慶⁲汥浥湥⁴‽桴獩せ㭝ਊउ晩⠠潣浭湡⥤笠ऊउ慶⁲敳瑴湩獧㴠␠搮瑡⡡汥浥湥⹴潦浲‬瘧污摩瑡牯⤧献瑥楴杮㭳ऊउ慶⁲瑳瑡捩畒敬⁳‽敳瑴湩獧爮汵獥਻उ瘉牡攠楸瑳湩剧汵獥㴠␠瘮污摩瑡牯献慴楴剣汵獥攨敬敭瑮㬩ऊउ睳瑩档挨浯慭摮 ੻उ按獡⁥愢摤㨢ऊउ␉攮瑸湥⡤硥獩楴杮畒敬ⱳ␠瘮污摩瑡牯渮牯慭楬敺畒敬愨杲浵湥⥴㬩ऊउ猉慴楴剣汵獥敛敬敭瑮渮浡嵥㴠攠楸瑳湩剧汵獥਻उउ晩⠠牡畧敭瑮洮獥慳敧⥳ऊउउ敳瑴湩獧洮獥慳敧孳汥浥湥⹴慮敭⁝‽⸤硥整摮 敳瑴湩獧洮獥慳敧孳汥浥湥⹴慮敭ⱝ愠杲浵湥⹴敭獳条獥⤠਻उउ牢慥㭫ऊउ慣敳∠敲潭敶㨢ऊउ椉⁦ℨ牡畧敭瑮 ੻उउ搉汥瑥⁥瑳瑡捩畒敬孳汥浥湥⹴慮敭㭝ऊउउ敲畴湲攠楸瑳湩剧汵獥਻उउ੽उउ慶⁲楦瑬牥摥㴠笠㭽ऊउ␉攮捡⡨牡畧敭瑮献汰瑩⼨獜⤯‬畦据楴湯椨摮硥‬敭桴摯 ੻उउ昉汩整敲孤敭桴摯⁝‽硥獩楴杮畒敬孳敭桴摯㭝ऊउउ敤敬整攠楸瑳湩剧汵獥浛瑥潨嵤਻उउ⥽਻उउ敲畴湲映汩整敲㭤ऊउ੽उ੽ऊ瘉牡搠瑡⁡‽⸤慶楬慤潴⹲潮浲污穩剥汵獥ਨउ⸤硥整摮ਨउ笉ⱽऊउ⸤慶楬慤潴⹲敭慴慤慴畒敬⡳汥浥湥⥴ਬउ␉瘮污摩瑡牯挮慬獳畒敬⡳汥浥湥⥴ਬउ␉瘮污摩瑡牯愮瑴楲畢整畒敬⡳汥浥湥⥴ਬउ␉瘮污摩瑡牯献慴楴剣汵獥攨敬敭瑮਩उⰩ攠敬敭瑮㬩ਊउ⼯洠歡⁥畳敲爠煥極敲⁤獩愠⁴牦湯ੴउ晩⠠慤慴爮煥極敲⥤笠ऊउ慶⁲慰慲⁭‽慤慴爮煥極敲㭤ऊउ敤敬整搠瑡⹡敲畱物摥਻उ搉瑡⁡‽⸤硥整摮笨敲畱物摥›慰慲絭‬慤慴㬩ऊ紉ਊउ敲畴湲搠瑡㭡ऊ੽⥽਻⼊ 畃瑳浯猠汥捥潴獲␊攮瑸湥⡤⸤硥牰≛∺ⱝ笠ऊ⼯栠瑴㩰⼯潤獣樮畱牥⹹潣⽭汐杵湩⽳慖楬慤楴湯戯慬歮ऊ汢湡㩫映湵瑣潩⡮⥡笠敲畴湲℠⸤牴浩∨•‫⹡慶畬⥥紻ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮楦汬摥ऊ楦汬摥›畦据楴湯愨 牻瑥牵⁮℡⸤牴浩∨•‫⹡慶畬⥥紻ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮湵档捥敫੤甉据敨正摥›畦据楴湯愨 牻瑥牵⁮愡挮敨正摥紻紊㬩ਊ⼯挠湯瑳畲瑣牯映牯瘠污摩瑡牯␊瘮污摩瑡牯㴠映湵瑣潩⡮漠瑰潩獮‬潦浲⤠笠ऊ桴獩献瑥楴杮⁳‽⸤硥整摮 牴敵‬絻‬⸤慶楬慤潴⹲敤慦汵獴‬灯楴湯⁳㬩ऊ桴獩挮牵敲瑮潆浲㴠映牯㭭ऊ桴獩椮楮⡴㬩紊਻␊瘮污摩瑡牯昮牯慭⁴‽畦据楴湯猨畯捲ⱥ瀠牡浡⥳笠ऊ晩⠠愠杲浵湥獴氮湥瑧⁨㴽ㄠ⤠ऊ爉瑥牵⁮畦据楴湯⤨笠ऊउ慶⁲牡獧㴠␠洮歡䅥牲祡愨杲浵湥獴㬩ऊउ牡獧甮獮楨瑦猨畯捲⥥਻उ爉瑥牵⁮⸤慶楬慤潴⹲潦浲瑡愮灰祬 桴獩‬牡獧⤠਻उ㭽ऊ晩⠠愠杲浵湥獴氮湥瑧⁨‾′☦瀠牡浡⹳潣獮牴捵潴⁲㴡䄠牲祡† ੻उ慰慲獭㴠␠洮歡䅥牲祡愨杲浵湥獴⸩汳捩⡥⤱਻紉ऊ晩⠠瀠牡浡⹳潣獮牴捵潴⁲㴡䄠牲祡⤠笠ऊ瀉牡浡⁳‽⁛慰慲獭崠਻紉ऊ⸤慥档瀨牡浡ⱳ映湵瑣潩⡮Ⱪ渠 ੻उ潳牵散㴠猠畯捲⹥敲汰捡⡥敮⁷敒䕧灸∨屜≻⬠椠⬠∠屜≽‬朢⤢‬⥮਻紉㬩ऊ敲畴湲猠畯捲㭥紊਻␊攮瑸湥⡤⸤慶楬慤潴Ⱳ笠ਊ搉晥畡瑬㩳笠ऊ洉獥慳敧㩳笠ⱽऊ有潲灵㩳笠ⱽऊ爉汵獥›絻ਬउ牥潲䍲慬獳›攢牲牯Ⱒऊ瘉污摩汃獡㩳∠慶楬≤ਬउ牥潲䕲敬敭瑮›氢扡汥Ⱒऊ昉捯獵湉慶楬㩤琠畲ⱥऊ攉牲牯潃瑮楡敮㩲␠ 嵛⤠ਬउ牥潲䱲扡汥潃瑮楡敮㩲␠ 嵛⤠ਬउ湯畳浢瑩›牴敵ਬउ杩潮敲›㨢楨摤湥Ⱒऊ椉湧牯呥瑩敬›慦獬ⱥऊ漉普捯獵湩›畦据楴湯攨敬敭瑮‬癥湥⥴笠ऊउ桴獩氮獡䅴瑣癩⁥‽汥浥湥㭴ਊउ⼉ 楨敤攠牲牯氠扡汥愠摮爠浥癯⁥牥潲⁲汣獡⁳湯映捯獵椠⁦湥扡敬੤उ椉⁦ 桴獩献瑥楴杮⹳潦畣䍳敬湡灵☠…琡楨⹳汢捯䙫捯獵汃慥畮⁰ ੻उउ桴獩献瑥楴杮⹳湵楨桧楬桧⁴☦琠楨⹳敳瑴湩獧甮桮杩汨杩瑨挮污⡬琠楨ⱳ攠敬敭瑮‬桴獩献瑥楴杮⹳牥潲䍲慬獳‬桴獩献瑥楴杮⹳慶楬䍤慬獳⤠਻उउ桴獩愮摤牗灡数⡲桴獩攮牲牯䙳牯攨敬敭瑮⤩栮摩⡥㬩ऊउ੽उⱽऊ漉普捯獵畯㩴映湵瑣潩⡮汥浥湥ⱴ攠敶瑮 ੻उ椉⁦ 琡楨⹳档捥慫汢⡥汥浥湥⥴☠…攨敬敭瑮渮浡⁥湩琠楨⹳畳浢瑩整⁤籼℠桴獩漮瑰潩慮⡬汥浥湥⥴  ੻उउ桴獩攮敬敭瑮攨敬敭瑮㬩ऊउ੽उⱽऊ漉歮祥灵›畦据楴湯攨敬敭瑮‬癥湥⥴笠ऊउ晩⠠攠敬敭瑮渮浡⁥湩琠楨⹳畳浢瑩整⁤籼攠敬敭瑮㴠‽桴獩氮獡䕴敬敭瑮⤠笠ऊउ琉楨⹳汥浥湥⡴汥浥湥⥴਻उ紉ऊ紉ਬउ湯汣捩㩫映湵瑣潩⡮汥浥湥ⱴ攠敶瑮 ੻उ⼉ 汣捩⁫湯猠汥捥獴‬慲楤扯瑵潴獮愠摮挠敨正潢數ੳउ椉⁦ 汥浥湥⹴慮敭椠⁮桴獩献扵業瑴摥⤠ऊउ琉楨⹳汥浥湥⡴汥浥湥⥴਻उ⼉ 牯漠瑰潩⁮汥浥湥獴‬档捥⁫慰敲瑮猠汥捥⁴湩琠慨⁴慣敳ऊउ汥敳椠⁦攨敬敭瑮瀮牡湥乴摯⹥慮敭椠⁮桴獩献扵業瑴摥਩उउ桴獩攮敬敭瑮攨敬敭瑮瀮牡湥乴摯⥥਻उⱽऊ栉杩汨杩瑨›畦据楴湯攨敬敭瑮‬牥潲䍲慬獳‬慶楬䍤慬獳 ੻उ椉⁦攨敬敭瑮琮灹⁥㴽‽爧摡潩⤧笠ऊउ琉楨⹳楦摮祂慎敭攨敬敭瑮渮浡⥥愮摤汃獡⡳牥潲䍲慬獳⸩敲潭敶汃獡⡳慶楬䍤慬獳㬩ऊउ⁽汥敳笠ऊउ␉攨敬敭瑮⸩摡䍤慬獳攨牲牯汃獡⥳爮浥癯䍥慬獳瘨污摩汃獡⥳਻उ紉ऊ紉ਬउ湵楨桧楬桧㩴映湵瑣潩⡮汥浥湥ⱴ攠牲牯汃獡ⱳ瘠污摩汃獡⥳笠ऊउ晩⠠汥浥湥⹴祴数㴠㴽✠慲楤❯ ੻उउ桴獩昮湩䉤乹浡⡥汥浥湥⹴慮敭⸩敲潭敶汃獡⡳牥潲䍲慬獳⸩摡䍤慬獳瘨污摩汃獡⥳਻उ紉攠獬⁥੻उउ⠤汥浥湥⥴爮浥癯䍥慬獳攨牲牯汃獡⥳愮摤汃獡⡳慶楬䍤慬獳㬩ऊउ੽उ੽紉ਬऊ⼯栠瑴㩰⼯潤獣樮畱牥⹹潣⽭汐杵湩⽳慖楬慤楴湯嘯污摩瑡牯猯瑥敄慦汵獴ऊ敳䑴晥畡瑬㩳映湵瑣潩⡮敳瑴湩獧 ੻उ⸤硥整摮 ⸤慶楬慤潴⹲敤慦汵獴‬敳瑴湩獧⤠਻紉ਬऊ敭獳条獥›੻उ⨯ऊ爉煥極敲㩤∠桔獩映敩摬椠⁳敲畱物摥∮ਬउ敲潭整›倢敬獡⁥楦⁸桴獩映敩摬∮ਬउ浥楡㩬∠汐慥敳攠瑮牥愠瘠污摩攠慭汩愠摤敲獳∮ਬउ牵㩬∠汐慥敳攠瑮牥愠瘠污摩唠䱒∮ਬउ慤整›倢敬獡⁥湥整⁲⁡慶楬⁤慤整∮ਬउ慤整卉㩏∠汐慥敳攠瑮牥愠瘠污摩搠瑡⁥䤨体⸩Ⱒऊ渉浵敢㩲∠汐慥敳攠瑮牥愠瘠污摩渠浵敢⹲Ⱒऊ搉杩瑩㩳∠汐慥敳攠瑮牥漠汮⁹楤楧獴∮ਬउ牣摥瑩慣摲›倢敬獡⁥湥整⁲⁡慶楬⁤牣摥瑩挠牡⁤畮扭牥∮ਬउ煥慵呬㩯∠汐慥敳攠瑮牥琠敨猠浡⁥慶畬⁥条楡⹮Ⱒऊ愉捣灥㩴∠汐慥敳攠瑮牥愠瘠污敵眠瑩⁨⁡慶楬⁤硥整獮潩⹮Ⱒऊ洉硡敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥渠⁯潭敲琠慨⁮ほ⁽档牡捡整獲∮Ⱙऊ洉湩敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠⁴敬獡⁴ほ⁽档牡捡整獲∮Ⱙऊ爉湡敧敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵戠瑥敷湥笠細愠摮笠紱挠慨慲瑣牥⁳潬杮∮Ⱙऊ爉湡敧›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵戠瑥敷湥笠細愠摮笠紱∮Ⱙऊ洉硡›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵氠獥⁳桴湡漠⁲煥慵⁬潴笠細∮Ⱙऊ洉湩›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵朠敲瑡牥琠慨⁮牯攠畱污琠⁯ほ⹽⤢ऊ⨉ਯउ敲畱物摥›䐢敩⁳獩⁴楥⁮晐楬档晴汥⹤Ⱒऊ爉浥瑯㩥∠楂瑴⁥볃敢慲扲楥整⁮楓⁥桉敲䔠湩慧敢⹮Ⱒऊ攉慭汩›䈢瑩整朠扥湥匠敩攠湩⁥捥瑨⁥ⵅ慍汩䄠牤獥敳攠湩∮ਬउ牵㩬∠楂瑴⁥敧敢⁮楓⁥楥敮攠档整唠䱒攠湩∮ਬउ慤整›䈢瑩整朠扥湥匠敩攠湩攠档整⁳慄畴⁭楥⹮Ⱒऊ搉瑡䥥体›䈢瑩整朠扥湥匠敩攠湩攠档整⁳慄畴⁭楥⹮⠠卉⥏∮ਬउ畮扭牥›䈢瑩整朠扥湥匠敩攠湩攠档整娠桡⁬楥⹮Ⱒऊ搉杩瑩㩳∠楂瑴⁥敧敢⁮楓⁥畮⁲慚汨湥攠湩∮ਬउ牣摥瑩慣摲›倢敬獡⁥湥整⁲⁡慶楬⁤牣摥瑩挠牡⁤畮扭牥∮ਬउ煥慵呬㩯∠楂瑴⁥楷摥牥潨敬⁮楓⁥楤⁥敬穴整䔠湩慧敢Ⱒऊ愉捣灥㩴∠汐慥敳攠瑮牥愠瘠污敵眠瑩⁨⁡慶楬⁤硥整獮潩⹮Ⱒऊ洉硡敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨敄⁲敗瑲猠汯瑬⁥楮档⁴敭牨愠獬笠細娠楥档湥氠湡⁧敳湩∮Ⱙऊ洉湩敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨敄⁲敗瑲猠汯瑬⁥業摮獥整獮笠細娠楥档湥氠湡⁧敳湩∮Ⱙऊ爉湡敧敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨敄⁲敗瑲猠汯瑬⁥睺捩敨⁮ほ⁽湵⁤ㅻ⁽敚捩敨⁮慬杮猠楥⹮⤢ਬउ慲杮㩥␠瘮污摩瑡牯昮牯慭⡴䜢扥湥匠敩攠湩湥圠牥⁴湡稠楷捳敨⁮ほ⁽湵⁤ㅻ⹽⤢ਬउ慭㩸␠瘮污摩瑡牯昮牯慭⡴䜢扥湥匠敩攠湩湥圠牥⁴湡搠牥欠敬湩牥椠瑳愠獬笠細∮Ⱙऊ洉湩›⸤慶楬慤潴⹲潦浲瑡∨敇敢⁮楓⁥楥敮⁮敗瑲愠⁮敤⁲牧뛃鿃牥椠瑳愠獬笠細∮਩紉ਬऊ畡潴牃慥整慒杮獥›慦獬ⱥਊ瀉潲潴祴数›੻ऊ椉楮㩴映湵瑣潩⡮ ੻उ琉楨⹳慬敢䍬湯慴湩牥㴠␠琨楨⹳敳瑴湩獧攮牲牯慌敢䍬湯慴湩牥㬩ऊउ桴獩攮牲牯潃瑮硥⁴‽桴獩氮扡汥潃瑮楡敮⹲敬杮桴☠…桴獩氮扡汥潃瑮楡敮⁲籼␠琨楨⹳畣牲湥䙴牯⥭਻उ琉楨⹳潣瑮楡敮獲㴠␠琨楨⹳敳瑴湩獧攮牲牯潃瑮楡敮⥲愮摤 桴獩献瑥楴杮⹳牥潲䱲扡汥潃瑮楡敮⁲㬩ऊउ桴獩献扵業瑴摥㴠笠㭽ऊउ桴獩瘮污敵慃档⁥‽絻਻उ琉楨⹳数摮湩剧煥敵瑳㴠〠਻उ琉楨⹳数摮湩⁧‽絻਻उ琉楨⹳湩慶楬⁤‽絻਻उ琉楨⹳敲敳⡴㬩ਊउ瘉牡朠潲灵⁳‽琨楨⹳牧畯獰㴠笠⥽਻उ␉攮捡⡨桴獩献瑥楴杮⹳牧畯獰‬畦据楴湯欨祥‬慶畬⥥笠ऊउ␉攮捡⡨慶畬⹥灳楬⡴尯⽳Ⱙ映湵瑣潩⡮湩敤ⱸ渠浡⥥笠ऊउउ牧畯獰湛浡嵥㴠欠祥਻उउ⥽਻उ紉㬩ऊउ慶⁲畲敬⁳‽桴獩献瑥楴杮⹳畲敬㭳ऊउ⸤慥档爨汵獥‬畦据楴湯欨祥‬慶畬⥥笠ऊउ爉汵獥歛祥⁝‽⸤慶楬慤潴⹲潮浲污穩剥汵⡥慶畬⥥਻उ紉㬩ਊउ昉湵瑣潩⁮敤敬慧整攨敶瑮 ੻उउ慶⁲慶楬慤潴⁲‽⸤慤慴琨楨孳崰昮牯Ɑ∠慶楬慤潴≲Ⱙऊउउ癥湥呴灹⁥‽漢≮⬠攠敶瑮琮灹⹥敲汰捡⡥帯慶楬慤整Ⱟ∠⤢਻उउ慶楬慤潴⹲敳瑴湩獧敛敶瑮祔数⁝☦瘠污摩瑡牯献瑥楴杮孳癥湥呴灹嵥挮污⡬慶楬慤潴Ⱳ琠楨孳崰‬癥湥⥴਻उ紉ऊउ⠤桴獩挮牵敲瑮潆浲਩उ †††瘮污摩瑡䑥汥来瑡⡥嬢祴数✽整瑸崧‬瑛灹㵥瀧獡睳牯❤ⱝ嬠祴数✽楦敬崧‬敳敬瑣‬整瑸牡慥‬•ਫउउउ嬢祴数✽畮扭牥崧‬瑛灹㵥猧慥捲❨⁝嬬祴数✽整❬ⱝ嬠祴数✽牵❬ⱝ∠⬠ऊउउ∉瑛灹㵥攧慭汩崧‬瑛灹㵥搧瑡瑥浩❥ⱝ嬠祴数✽慤整崧‬瑛灹㵥洧湯桴崧‬•ਫउउउ嬢祴数✽敷步崧‬瑛灹㵥琧浩❥ⱝ嬠祴数✽慤整楴敭氭捯污崧‬•ਫउउउ嬢祴数✽慲杮❥ⱝ嬠祴数✽潣潬❲⁝Ⱒऊउउ∉潦畣楳⁮潦畣潳瑵欠祥灵Ⱒ搠汥来瑡⥥ऊउ⸉慶楬慤整敄敬慧整∨瑛灹㵥爧摡潩崧‬瑛灹㵥挧敨正潢❸ⱝ猠汥捥ⱴ漠瑰潩≮‬挢楬正Ⱒ搠汥来瑡⥥਻ऊउ晩⠠桴獩献瑥楴杮⹳湩慶楬䡤湡汤牥਩उउ⠤桴獩挮牵敲瑮潆浲⸩楢摮∨湩慶楬ⵤ潦浲瘮污摩瑡≥‬桴獩献瑥楴杮⹳湩慶楬䡤湡汤牥㬩ऊ紉ਬऊ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慖楬慤潴⽲潦浲ऊ昉牯㩭映湵瑣潩⡮ ੻उ琉楨⹳档捥䙫牯⡭㬩ऊउ⸤硥整摮琨楨⹳畳浢瑩整Ɽ琠楨⹳牥潲䵲灡㬩ऊउ桴獩椮癮污摩㴠␠攮瑸湥⡤絻‬桴獩攮牲牯慍⥰਻उ椉⁦ℨ桴獩瘮污摩⤨਩उउ⠤桴獩挮牵敲瑮潆浲⸩牴杩敧䡲湡汤牥∨湩慶楬ⵤ潦浲Ⱒ嬠桴獩⥝਻उ琉楨⹳桳睯牅潲獲⤨਻उ爉瑥牵⁮桴獩瘮污摩⤨਻उⱽਊउ档捥䙫牯㩭映湵瑣潩⡮ ੻उ琉楨⹳牰灥牡䙥牯⡭㬩ऊउ潦⁲ 慶⁲⁩‽ⰰ攠敬敭瑮⁳‽琨楨⹳畣牲湥䕴敬敭瑮⁳‽桴獩攮敬敭瑮⡳⤩※汥浥湥獴楛㭝椠⬫⤠笠ऊउ琉楨⹳档捥⡫攠敬敭瑮孳嵩⤠਻उ紉ऊउ敲畴湲琠楨⹳慶楬⡤㬩ऊ紉ਬऊ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慖楬慤潴⽲汥浥湥ੴउ汥浥湥㩴映湵瑣潩⡮攠敬敭瑮⤠笠ऊउ汥浥湥⁴‽桴獩瘮污摩瑡潩呮牡敧䙴牯 桴獩挮�က䙊䙉Āā䠀䠀16

Error: (03/31/2014 08:07:40 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2014 08:46:11 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\RON\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\PQANXRTX.DEFAULT\SAFEBROWSING-TO_DELETE> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (03/30/2014 08:46:10 PM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\RON\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\PQANXRTX.DEFAULT\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (03/30/2014 08:41:14 PM) (Source: LoadPerf) (User: )
Description: ⨯ਪ⨠樠畑牥⁹慖楬慤楴湯倠畬楧⁮⸱⸹ਰ⨠ ‪瑨灴⼺戯獡楳瑳湡散搮⽥煪敵祲瀭畬楧獮樯畱牥⵹汰杵湩瘭污摩瑡潩⽮ ‪瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩੮⨠ ‪潃祰楲桧⁴挨 〲㘰ⴠ㈠㄰‱썊状⁮慚晥敦敲ੲ⨠ ‪畄污氠捩湥敳⁤湵敤⁲桴⁥䥍⁔湡⁤假⁌楬散獮獥਺⨠†栠瑴㩰⼯睷⹷灯湥潳牵散漮杲氯捩湥敳⽳業⵴楬散獮⹥桰ੰ⨠†栠瑴㩰⼯睷⹷湧⹵牯⽧楬散獮獥术汰栮浴੬⨠ਯ⠊畦据楴湯␨ ੻␊攮瑸湥⡤⸤湦‬੻⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慶楬慤整ऊ慶楬慤整›畦据楴湯 灯楴湯⁳ ੻ऊ⼉ 晩渠瑯楨杮椠⁳敳敬瑣摥‬敲畴湲渠瑯楨杮※慣❮⁴档楡⁮湡睹祡ऊ椉⁦ℨ桴獩氮湥瑧⥨笠ऊउ灯楴湯⁳☦漠瑰潩獮搮扥杵☠…楷摮睯挮湯潳敬☠…潣獮汯⹥慷湲 渢瑯楨杮猠汥捥整Ɽ挠湡琧瘠污摩瑡ⱥ爠瑥牵楮杮渠瑯楨杮•㬩ऊउ敲畴湲਻उ੽ऊ⼉ 档捥⁫晩愠瘠污摩瑡牯映牯琠楨⁳潦浲眠獡愠牬慥祤挠敲瑡摥ऊ瘉牡瘠污摩瑡牯㴠␠搮瑡⡡桴獩せⱝ✠慶楬慤潴❲㬩ऊ椉⁦ 慶楬慤潴⁲ ੻उ爉瑥牵⁮慶楬慤潴㭲ऊ紉ਊउ⼯䄠摤渠癯污摩瑡⁥慴⁧晩䠠䵔㕌ਮउ桴獩愮瑴⡲渧癯污摩瑡❥‬渧癯污摩瑡❥㬩ਊउ慶楬慤潴⁲‽敮⁷⸤慶楬慤潴⡲漠瑰潩獮‬桴獩せ⁝㬩ऊ␉搮瑡⡡桴獩せⱝ✠慶楬慤潴❲‬慶楬慤潴⥲਻ऊ椉⁦ 慶楬慤潴⹲敳瑴湩獧漮獮扵業⁴ ੻ऊउ慶⁲湩異獴湁䉤瑵潴獮㴠琠楨⹳楦摮∨湩異ⱴ戠瑵潴≮㬩ਊउ⼉ 污潬⁷畳灰敲楳杮瘠污摩瑡潩⁮祢愠摤湩⁧⁡慣据汥挠慬獳琠⁯桴⁥畳浢瑩戠瑵潴੮उ椉灮瑵䅳摮畂瑴湯⹳楦瑬牥∨挮湡散≬⸩汣捩⡫畦据楴湯⠠ ੻उउ慶楬慤潴⹲慣据汥畓浢瑩㴠琠畲㭥ऊउ⥽਻ऊउ⼯眠敨⁮⁡畳浢瑩慈摮敬⁲獩甠敳Ɽ挠灡畴敲琠敨猠扵業瑴湩⁧畢瑴湯ऊउ晩⠠慶楬慤潴⹲敳瑴湩獧献扵業䡴湡汤牥 ੻उउ湩異獴湁䉤瑵潴獮昮汩整⡲㨢畳浢瑩⤢挮楬正昨湵瑣潩⁮⤨笠ऊउउ慶楬慤潴⹲畳浢瑩畂瑴湯㴠琠楨㭳ऊउ紉㬩ऊउ੽ऊउ⼯瘠污摩瑡⁥桴⁥潦浲漠⁮畳浢瑩ऊउ桴獩献扵業⡴映湵瑣潩⡮攠敶瑮⤠笠ऊउ椉⁦ 慶楬慤潴⹲敳瑴湩獧搮扥杵⤠ऊउउ⼯瀠敲敶瑮映牯⁭畳浢瑩琠⁯敢愠汢⁥潴猠敥挠湯潳敬漠瑵異ੴउउ攉敶瑮瀮敲敶瑮敄慦汵⡴㬩ਊउउ畦据楴湯栠湡汤⡥ ੻उउ椉⁦ 慶楬慤潴⹲敳瑴湩獧献扵業䡴湡汤牥⤠笠ऊउउ椉⁦瘨污摩瑡牯献扵業䉴瑵潴⥮笠ऊउउउ⼯椠獮牥⁴⁡楨摤湥椠灮瑵愠⁳⁡敲汰捡浥湥⁴潦⁲桴⁥業獳湩⁧畳浢瑩戠瑵潴੮उउउ瘉牡栠摩敤⁮‽⠤㰢湩異⁴祴数✽楨摤湥⼧∾⸩瑡牴∨慮敭Ⱒ瘠污摩瑡牯献扵業䉴瑵潴⹮慮敭⸩慶⡬慶楬慤潴⹲畳浢瑩畂瑴湯瘮污敵⸩灡数摮潔瘨污摩瑡牯挮牵敲瑮潆浲㬩ऊउउ紉ऊउउ瘉污摩瑡牯献瑥楴杮⹳畳浢瑩慈摮敬⹲慣汬 慶楬慤潴Ⱳ瘠污摩瑡牯挮牵敲瑮潆浲⤠਻उउउ晩⠠慶楬慤潴⹲畳浢瑩畂瑴湯 ੻उउउ⼉ 湡⁤汣慥⁮灵愠瑦牥慷摲㭳琠慨歮⁳潴渠ⵯ汢捯⵫捳灯ⱥ栠摩敤⁮慣⁮敢爠晥牥湥散੤उउउ栉摩敤⹮敲潭敶⤨਻उउउ੽उउउ敲畴湲映污敳਻उउ紉ऊउउ敲畴湲琠畲㭥ऊउ紉ਊउउ⼯瀠敲敶瑮猠扵業⁴潦⁲湩慶楬⁤潦浲⁳牯挠獵潴⁭畳浢瑩栠湡汤牥ੳउउ晩⠠瘠污摩瑡牯挮湡散卬扵業⁴ ੻उउ瘉污摩瑡牯挮湡散卬扵業⁴‽慦獬㭥ऊउउ敲畴湲栠湡汤⡥㬩ऊउ紉ऊउ椉⁦ 慶楬慤潴⹲潦浲⤨⤠笠ऊउउ晩⠠瘠污摩瑡牯瀮湥楤杮敒畱獥⁴ ੻उउउ慶楬慤潴⹲潦浲畓浢瑩整⁤‽牴敵਻उउउ敲畴湲映污敳਻उउ紉ऊउउ敲畴湲栠湡汤⡥㬩ऊउ紉攠獬⁥੻उउ瘉污摩瑡牯昮捯獵湉慶楬⡤㬩ऊउउ敲畴湲映污敳਻उउ੽उ紉㬩ऊ紉ਊउ敲畴湲瘠污摩瑡牯਻紉ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慶楬੤瘉污摩›畦据楴湯⤨笠 †††椠⁦ ⠤桴獩せ⥝椮⡳昧牯❭⤩笠 †††††爠瑥牵⁮桴獩瘮污摩瑡⡥⸩潦浲⤨਻††††⁽汥敳笠 †††††瘠牡瘠污摩㴠琠畲㭥 †††††瘠牡瘠污摩瑡牯㴠␠琨楨孳崰昮牯⥭瘮污摩瑡⡥㬩 †††††琠楨⹳慥档昨湵瑣潩⡮ ੻उउ慶楬⁤㴦瘠污摩瑡牯攮敬敭瑮琨楨⥳਻††††††⥽਻††††††敲畴湲瘠污摩਻††††੽††ⱽऊ⼯愠瑴楲畢整㩳猠慰散猠灥牥瑡摥氠獩⁴景愠瑴楲畢整⁳潴爠瑥楲癥⁥湡⁤敲潭敶ऊ敲潭敶瑁牴㩳映湵瑣潩⡮瑡牴扩瑵獥 ੻उ慶⁲敲畳瑬㴠笠ⱽऊउ攤敬敭瑮㴠琠楨㭳ऊ␉攮捡⡨瑡牴扩瑵獥献汰瑩⼨獜⤯‬畦据楴湯椨摮硥‬慶畬⥥笠ऊउ敲畳瑬癛污敵⁝‽攤敬敭瑮愮瑴⡲慶畬⥥਻उ␉汥浥湥⹴敲潭敶瑁牴瘨污敵㬩ऊ紉㬩ऊ爉瑥牵⁮敲畳瑬਻紉ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮畲敬ੳ爉汵獥›畦据楴湯挨浯慭摮‬牡畧敭瑮 ੻उ慶⁲汥浥湥⁴‽桴獩せ㭝ਊउ晩⠠潣浭湡⥤笠ऊउ慶⁲敳瑴湩獧㴠␠搮瑡⡡汥浥湥⹴潦浲‬瘧污摩瑡牯⤧献瑥楴杮㭳ऊउ慶⁲瑳瑡捩畒敬⁳‽敳瑴湩獧爮汵獥਻उ瘉牡攠楸瑳湩剧汵獥㴠␠瘮污摩瑡牯献慴楴剣汵獥攨敬敭瑮㬩ऊउ睳瑩档挨浯慭摮 ੻उ按獡⁥愢摤㨢ऊउ␉攮瑸湥⡤硥獩楴杮畒敬ⱳ␠瘮污摩瑡牯渮牯慭楬敺畒敬愨杲浵湥⥴㬩ऊउ猉慴楴剣汵獥敛敬敭瑮渮浡嵥㴠攠楸瑳湩剧汵獥਻उउ晩⠠牡畧敭瑮洮獥慳敧⥳ऊउउ敳瑴湩獧洮獥慳敧孳汥浥湥⹴慮敭⁝‽⸤硥整摮 敳瑴湩獧洮獥慳敧孳汥浥湥⹴慮敭ⱝ愠杲浵湥⹴敭獳条獥⤠਻उउ牢慥㭫ऊउ慣敳∠敲潭敶㨢ऊउ椉⁦ℨ牡畧敭瑮 ੻उउ搉汥瑥⁥瑳瑡捩畒敬孳汥浥湥⹴慮敭㭝ऊउउ敲畴湲攠楸瑳湩剧汵獥਻उउ੽उउ慶⁲楦瑬牥摥㴠笠㭽ऊउ␉攮捡⡨牡畧敭瑮献汰瑩⼨獜⤯‬畦据楴湯椨摮硥‬敭桴摯 ੻उउ昉汩整敲孤敭桴摯⁝‽硥獩楴杮畒敬孳敭桴摯㭝ऊउउ敤敬整攠楸瑳湩剧汵獥浛瑥潨嵤਻उउ⥽਻उउ敲畴湲映汩整敲㭤ऊउ੽उ੽ऊ瘉牡搠瑡⁡‽⸤慶楬慤潴⹲潮浲污穩剥汵獥ਨउ⸤硥整摮ਨउ笉ⱽऊउ⸤慶楬慤潴⹲敭慴慤慴畒敬⡳汥浥湥⥴ਬउ␉瘮污摩瑡牯挮慬獳畒敬⡳汥浥湥⥴ਬउ␉瘮污摩瑡牯愮瑴楲畢整畒敬⡳汥浥湥⥴ਬउ␉瘮污摩瑡牯献慴楴剣汵獥攨敬敭瑮਩उⰩ攠敬敭瑮㬩ਊउ⼯洠歡⁥畳敲爠煥極敲⁤獩愠⁴牦湯ੴउ晩⠠慤慴爮煥極敲⥤笠ऊउ慶⁲慰慲⁭‽慤慴爮煥極敲㭤ऊउ敤敬整搠瑡⹡敲畱物摥਻उ搉瑡⁡‽⸤硥整摮笨敲畱物摥›慰慲絭‬慤慴㬩ऊ紉ਊउ敲畴湲搠瑡㭡ऊ੽⥽਻⼊ 畃瑳浯猠汥捥潴獲␊攮瑸湥⡤⸤硥牰≛∺ⱝ笠ऊ⼯栠瑴㩰⼯潤獣樮畱牥⹹潣⽭汐杵湩⽳慖楬慤楴湯戯慬歮ऊ汢湡㩫映湵瑣潩⡮⥡笠敲畴湲℠⸤牴浩∨•‫⹡慶畬⥥紻ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮楦汬摥ऊ楦汬摥›畦据楴湯愨 牻瑥牵⁮℡⸤牴浩∨•‫⹡慶畬⥥紻ਬ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮湵档捥敫੤甉据敨正摥›畦据楴湯愨 牻瑥牵⁮愡挮敨正摥紻紊㬩ਊ⼯挠湯瑳畲瑣牯映牯瘠污摩瑡牯␊瘮污摩瑡牯㴠映湵瑣潩⡮漠瑰潩獮‬潦浲⤠笠ऊ桴獩献瑥楴杮⁳‽⸤硥整摮 牴敵‬絻‬⸤慶楬慤潴⹲敤慦汵獴‬灯楴湯⁳㬩ऊ桴獩挮牵敲瑮潆浲㴠映牯㭭ऊ桴獩椮楮⡴㬩紊਻␊瘮污摩瑡牯昮牯慭⁴‽畦据楴湯猨畯捲ⱥ瀠牡浡⥳笠ऊ晩⠠愠杲浵湥獴氮湥瑧⁨㴽ㄠ⤠ऊ爉瑥牵⁮畦据楴湯⤨笠ऊउ慶⁲牡獧㴠␠洮歡䅥牲祡愨杲浵湥獴㬩ऊउ牡獧甮獮楨瑦猨畯捲⥥਻उ爉瑥牵⁮⸤慶楬慤潴⹲潦浲瑡愮灰祬 桴獩‬牡獧⤠਻उ㭽ऊ晩⠠愠杲浵湥獴氮湥瑧⁨‾′☦瀠牡浡⹳潣獮牴捵潴⁲㴡䄠牲祡† ੻उ慰慲獭㴠␠洮歡䅥牲祡愨杲浵湥獴⸩汳捩⡥⤱਻紉ऊ晩⠠瀠牡浡⹳潣獮牴捵潴⁲㴡䄠牲祡⤠笠ऊ瀉牡浡⁳‽⁛慰慲獭崠਻紉ऊ⸤慥档瀨牡浡ⱳ映湵瑣潩⡮Ⱪ渠 ੻उ潳牵散㴠猠畯捲⹥敲汰捡⡥敮⁷敒䕧灸∨屜≻⬠椠⬠∠屜≽‬朢⤢‬⥮਻紉㬩ऊ敲畴湲猠畯捲㭥紊਻␊攮瑸湥⡤⸤慶楬慤潴Ⱳ笠ਊ搉晥畡瑬㩳笠ऊ洉獥慳敧㩳笠ⱽऊ有潲灵㩳笠ⱽऊ爉汵獥›絻ਬउ牥潲䍲慬獳›攢牲牯Ⱒऊ瘉污摩汃獡㩳∠慶楬≤ਬउ牥潲䕲敬敭瑮›氢扡汥Ⱒऊ昉捯獵湉慶楬㩤琠畲ⱥऊ攉牲牯潃瑮楡敮㩲␠ 嵛⤠ਬउ牥潲䱲扡汥潃瑮楡敮㩲␠ 嵛⤠ਬउ湯畳浢瑩›牴敵ਬउ杩潮敲›㨢楨摤湥Ⱒऊ椉湧牯呥瑩敬›慦獬ⱥऊ漉普捯獵湩›畦据楴湯攨敬敭瑮‬癥湥⥴笠ऊउ桴獩氮獡䅴瑣癩⁥‽汥浥湥㭴ਊउ⼉ 楨敤攠牲牯氠扡汥愠摮爠浥癯⁥牥潲⁲汣獡⁳湯映捯獵椠⁦湥扡敬੤उ椉⁦ 桴獩献瑥楴杮⹳潦畣䍳敬湡灵☠…琡楨⹳汢捯䙫捯獵汃慥畮⁰ ੻उउ桴獩献瑥楴杮⹳湵楨桧楬桧⁴☦琠楨⹳敳瑴湩獧甮桮杩汨杩瑨挮污⡬琠楨ⱳ攠敬敭瑮‬桴獩献瑥楴杮⹳牥潲䍲慬獳‬桴獩献瑥楴杮⹳慶楬䍤慬獳⤠਻उउ桴獩愮摤牗灡数⡲桴獩攮牲牯䙳牯攨敬敭瑮⤩栮摩⡥㬩ऊउ੽उⱽऊ漉普捯獵畯㩴映湵瑣潩⡮汥浥湥ⱴ攠敶瑮 ੻उ椉⁦ 琡楨⹳档捥慫汢⡥汥浥湥⥴☠…攨敬敭瑮渮浡⁥湩琠楨⹳畳浢瑩整⁤籼℠桴獩漮瑰潩慮⡬汥浥湥⥴  ੻उउ桴獩攮敬敭瑮攨敬敭瑮㬩ऊउ੽उⱽऊ漉歮祥灵›畦据楴湯攨敬敭瑮‬癥湥⥴笠ऊउ晩⠠攠敬敭瑮渮浡⁥湩琠楨⹳畳浢瑩整⁤籼攠敬敭瑮㴠‽桴獩氮獡䕴敬敭瑮⤠笠ऊउ琉楨⹳汥浥湥⡴汥浥湥⥴਻उ紉ऊ紉ਬउ湯汣捩㩫映湵瑣潩⡮汥浥湥ⱴ攠敶瑮 ੻उ⼉ 汣捩⁫湯猠汥捥獴‬慲楤扯瑵潴獮愠摮挠敨正潢數ੳउ椉⁦ 汥浥湥⹴慮敭椠⁮桴獩献扵業瑴摥⤠ऊउ琉楨⹳汥浥湥⡴汥浥湥⥴਻उ⼉ 牯漠瑰潩⁮汥浥湥獴‬档捥⁫慰敲瑮猠汥捥⁴湩琠慨⁴慣敳ऊउ汥敳椠⁦攨敬敭瑮瀮牡湥乴摯⹥慮敭椠⁮桴獩献扵業瑴摥਩उउ桴獩攮敬敭瑮攨敬敭瑮瀮牡湥乴摯⥥਻उⱽऊ栉杩汨杩瑨›畦据楴湯攨敬敭瑮‬牥潲䍲慬獳‬慶楬䍤慬獳 ੻उ椉⁦攨敬敭瑮琮灹⁥㴽‽爧摡潩⤧笠ऊउ琉楨⹳楦摮祂慎敭攨敬敭瑮渮浡⥥愮摤汃獡⡳牥潲䍲慬獳⸩敲潭敶汃獡⡳慶楬䍤慬獳㬩ऊउ⁽汥敳笠ऊउ␉攨敬敭瑮⸩摡䍤慬獳攨牲牯汃獡⥳爮浥癯䍥慬獳瘨污摩汃獡⥳਻उ紉ऊ紉ਬउ湵楨桧楬桧㩴映湵瑣潩⡮汥浥湥ⱴ攠牲牯汃獡ⱳ瘠污摩汃獡⥳笠ऊउ晩⠠汥浥湥⹴祴数㴠㴽✠慲楤❯ ੻उउ桴獩昮湩䉤乹浡⡥汥浥湥⹴慮敭⸩敲潭敶汃獡⡳牥潲䍲慬獳⸩摡䍤慬獳瘨污摩汃獡⥳਻उ紉攠獬⁥੻उउ⠤汥浥湥⥴爮浥癯䍥慬獳攨牲牯汃獡⥳愮摤汃獡⡳慶楬䍤慬獳㬩ऊउ੽उ੽紉ਬऊ⼯栠瑴㩰⼯潤獣樮畱牥⹹潣⽭汐杵湩⽳慖楬慤楴湯嘯污摩瑡牯猯瑥敄慦汵獴ऊ敳䑴晥畡瑬㩳映湵瑣潩⡮敳瑴湩獧 ੻उ⸤硥整摮 ⸤慶楬慤潴⹲敤慦汵獴‬敳瑴湩獧⤠਻紉ਬऊ敭獳条獥›੻उ⨯ऊ爉煥極敲㩤∠桔獩映敩摬椠⁳敲畱物摥∮ਬउ敲潭整›倢敬獡⁥楦⁸桴獩映敩摬∮ਬउ浥楡㩬∠汐慥敳攠瑮牥愠瘠污摩攠慭汩愠摤敲獳∮ਬउ牵㩬∠汐慥敳攠瑮牥愠瘠污摩唠䱒∮ਬउ慤整›倢敬獡⁥湥整⁲⁡慶楬⁤慤整∮ਬउ慤整卉㩏∠汐慥敳攠瑮牥愠瘠污摩搠瑡⁥䤨体⸩Ⱒऊ渉浵敢㩲∠汐慥敳攠瑮牥愠瘠污摩渠浵敢⹲Ⱒऊ搉杩瑩㩳∠汐慥敳攠瑮牥漠汮⁹楤楧獴∮ਬउ牣摥瑩慣摲›倢敬獡⁥湥整⁲⁡慶楬⁤牣摥瑩挠牡⁤畮扭牥∮ਬउ煥慵呬㩯∠汐慥敳攠瑮牥琠敨猠浡⁥慶畬⁥条楡⹮Ⱒऊ愉捣灥㩴∠汐慥敳攠瑮牥愠瘠污敵眠瑩⁨⁡慶楬⁤硥整獮潩⹮Ⱒऊ洉硡敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥渠⁯潭敲琠慨⁮ほ⁽档牡捡整獲∮Ⱙऊ洉湩敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠⁴敬獡⁴ほ⁽档牡捡整獲∮Ⱙऊ爉湡敧敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵戠瑥敷湥笠細愠摮笠紱挠慨慲瑣牥⁳潬杮∮Ⱙऊ爉湡敧›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵戠瑥敷湥笠細愠摮笠紱∮Ⱙऊ洉硡›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵氠獥⁳桴湡漠⁲煥慵⁬潴笠細∮Ⱙऊ洉湩›⸤慶楬慤潴⹲潦浲瑡∨汐慥敳攠瑮牥愠瘠污敵朠敲瑡牥琠慨⁮牯攠畱污琠⁯ほ⹽⤢ऊ⨉ਯउ敲畱物摥›䐢敩⁳獩⁴楥⁮晐楬档晴汥⹤Ⱒऊ爉浥瑯㩥∠楂瑴⁥볃敢慲扲楥整⁮楓⁥桉敲䔠湩慧敢⹮Ⱒऊ攉慭汩›䈢瑩整朠扥湥匠敩攠湩⁥捥瑨⁥ⵅ慍汩䄠牤獥敳攠湩∮ਬउ牵㩬∠楂瑴⁥敧敢⁮楓⁥楥敮攠档整唠䱒攠湩∮ਬउ慤整›䈢瑩整朠扥湥匠敩攠湩攠档整⁳慄畴⁭楥⹮Ⱒऊ搉瑡䥥体›䈢瑩整朠扥湥匠敩攠湩攠档整⁳慄畴⁭楥⹮⠠卉⥏∮ਬउ畮扭牥›䈢瑩整朠扥湥匠敩攠湩攠档整娠桡⁬楥⹮Ⱒऊ搉杩瑩㩳∠楂瑴⁥敧敢⁮楓⁥畮⁲慚汨湥攠湩∮ਬउ牣摥瑩慣摲›倢敬獡⁥湥整⁲⁡慶楬⁤牣摥瑩挠牡⁤畮扭牥∮ਬउ煥慵呬㩯∠楂瑴⁥楷摥牥潨敬⁮楓⁥楤⁥敬穴整䔠湩慧敢Ⱒऊ愉捣灥㩴∠汐慥敳攠瑮牥愠瘠污敵眠瑩⁨⁡慶楬⁤硥整獮潩⹮Ⱒऊ洉硡敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨敄⁲敗瑲猠汯瑬⁥楮档⁴敭牨愠獬笠細娠楥档湥氠湡⁧敳湩∮Ⱙऊ洉湩敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨敄⁲敗瑲猠汯瑬⁥業摮獥整獮笠細娠楥档湥氠湡⁧敳湩∮Ⱙऊ爉湡敧敬杮桴›⸤慶楬慤潴⹲潦浲瑡∨敄⁲敗瑲猠汯瑬⁥睺捩敨⁮ほ⁽湵⁤ㅻ⁽敚捩敨⁮慬杮猠楥⹮⤢ਬउ慲杮㩥␠瘮污摩瑡牯昮牯慭⡴䜢扥湥匠敩攠湩湥圠牥⁴湡稠楷捳敨⁮ほ⁽湵⁤ㅻ⹽⤢ਬउ慭㩸␠瘮污摩瑡牯昮牯慭⡴䜢扥湥匠敩攠湩湥圠牥⁴湡搠牥欠敬湩牥椠瑳愠獬笠細∮Ⱙऊ洉湩›⸤慶楬慤潴⹲潦浲瑡∨敇敢⁮楓⁥楥敮⁮敗瑲愠⁮敤⁲牧뛃鿃牥椠瑳愠獬笠細∮਩紉ਬऊ畡潴牃慥整慒杮獥›慦獬ⱥਊ瀉潲潴祴数›੻ऊ椉楮㩴映湵瑣潩⡮ ੻उ琉楨⹳慬敢䍬湯慴湩牥㴠␠琨楨⹳敳瑴湩獧攮牲牯慌敢䍬湯慴湩牥㬩ऊउ桴獩攮牲牯潃瑮硥⁴‽桴獩氮扡汥潃瑮楡敮⹲敬杮桴☠…桴獩氮扡汥潃瑮楡敮⁲籼␠琨楨⹳畣牲湥䙴牯⥭਻उ琉楨⹳潣瑮楡敮獲㴠␠琨楨⹳敳瑴湩獧攮牲牯潃瑮楡敮⥲愮摤 桴獩献瑥楴杮⹳牥潲䱲扡汥潃瑮楡敮⁲㬩ऊउ桴獩献扵業瑴摥㴠笠㭽ऊउ桴獩瘮污敵慃档⁥‽絻਻उ琉楨⹳数摮湩剧煥敵瑳㴠〠਻उ琉楨⹳数摮湩⁧‽絻਻उ琉楨⹳湩慶楬⁤‽絻਻उ琉楨⹳敲敳⡴㬩ਊउ瘉牡朠潲灵⁳‽琨楨⹳牧畯獰㴠笠⥽਻उ␉攮捡⡨桴獩献瑥楴杮⹳牧畯獰‬畦据楴湯欨祥‬慶畬⥥笠ऊउ␉攮捡⡨慶畬⹥灳楬⡴尯⽳Ⱙ映湵瑣潩⡮湩敤ⱸ渠浡⥥笠ऊउउ牧畯獰湛浡嵥㴠欠祥਻उउ⥽਻उ紉㬩ऊउ慶⁲畲敬⁳‽桴獩献瑥楴杮⹳畲敬㭳ऊउ⸤慥档爨汵獥‬畦据楴湯欨祥‬慶畬⥥笠ऊउ爉汵獥歛祥⁝‽⸤慶楬慤潴⹲潮浲污穩剥汵⡥慶畬⥥਻उ紉㬩ਊउ昉湵瑣潩⁮敤敬慧整攨敶瑮 ੻उउ慶⁲慶楬慤潴⁲‽⸤慤慴琨楨孳崰昮牯Ɑ∠慶楬慤潴≲Ⱙऊउउ癥湥呴灹⁥‽漢≮⬠攠敶瑮琮灹⹥敲汰捡⡥帯慶楬慤整Ⱟ∠⤢਻उउ慶楬慤潴⹲敳瑴湩獧敛敶瑮祔数⁝☦瘠污摩瑡牯献瑥楴杮孳癥湥呴灹嵥挮污⡬慶楬慤潴Ⱳ琠楨孳崰‬癥湥⥴਻उ紉ऊउ⠤桴獩挮牵敲瑮潆浲਩उ †††瘮污摩瑡䑥汥来瑡⡥嬢祴数✽整瑸崧‬瑛灹㵥瀧獡睳牯❤ⱝ嬠祴数✽楦敬崧‬敳敬瑣‬整瑸牡慥‬•ਫउउउ嬢祴数✽畮扭牥崧‬瑛灹㵥猧慥捲❨⁝嬬祴数✽整❬ⱝ嬠祴数✽牵❬ⱝ∠⬠ऊउउ∉瑛灹㵥攧慭汩崧‬瑛灹㵥搧瑡瑥浩❥ⱝ嬠祴数✽慤整崧‬瑛灹㵥洧湯桴崧‬•ਫउउउ嬢祴数✽敷步崧‬瑛灹㵥琧浩❥ⱝ嬠祴数✽慤整楴敭氭捯污崧‬•ਫउउउ嬢祴数✽慲杮❥ⱝ嬠祴数✽潣潬❲⁝Ⱒऊउउ∉潦畣楳⁮潦畣潳瑵欠祥灵Ⱒ搠汥来瑡⥥ऊउ⸉慶楬慤整敄敬慧整∨瑛灹㵥爧摡潩崧‬瑛灹㵥挧敨正潢❸ⱝ猠汥捥ⱴ漠瑰潩≮‬挢楬正Ⱒ搠汥来瑡⥥਻ऊउ晩⠠桴獩献瑥楴杮⹳湩慶楬䡤湡汤牥਩उउ⠤桴獩挮牵敲瑮潆浲⸩楢摮∨湩慶楬ⵤ潦浲瘮污摩瑡≥‬桴獩献瑥楴杮⹳湩慶楬䡤湡汤牥㬩ऊ紉ਬऊ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慖楬慤潴⽲潦浲ऊ昉牯㩭映湵瑣潩⡮ ੻उ琉楨⹳档捥䙫牯⡭㬩ऊउ⸤硥整摮琨楨⹳畳浢瑩整Ɽ琠楨⹳牥潲䵲灡㬩ऊउ桴獩椮癮污摩㴠␠攮瑸湥⡤絻‬桴獩攮牲牯慍⥰਻उ椉⁦ℨ桴獩瘮污摩⤨਩उउ⠤桴獩挮牵敲瑮潆浲⸩牴杩敧䡲湡汤牥∨湩慶楬ⵤ潦浲Ⱒ嬠桴獩⥝਻उ琉楨⹳桳睯牅潲獲⤨਻उ爉瑥牵⁮桴獩瘮污摩⤨਻उⱽਊउ档捥䙫牯㩭映湵瑣潩⡮ ੻उ琉楨⹳牰灥牡䙥牯⡭㬩ऊउ潦⁲ 慶⁲⁩‽ⰰ攠敬敭瑮⁳‽琨楨⹳畣牲湥䕴敬敭瑮⁳‽桴獩攮敬敭瑮⡳⤩※汥浥湥獴楛㭝椠⬫⤠笠ऊउ琉楨⹳档捥⡫攠敬敭瑮孳嵩⤠਻उ紉ऊउ敲畴湲琠楨⹳慶楬⡤㬩ऊ紉ਬऊ⼉ 瑨灴⼺搯捯⹳煪敵祲挮浯倯畬楧獮嘯污摩瑡潩⽮慖楬慤潴⽲汥浥湥ੴउ汥浥湥㩴映湵瑣潩⡮攠敬敭瑮⤠笠ऊउ汥浥湥⁴‽桴獩瘮污摩瑡潩呮牡敧䙴牯 桴獩挮�က䙊䙉Āā䠀䠀16

Error: (03/30/2014 08:35:25 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2014 06:14:36 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\RON\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\PQANXRTX.DEFAULT\CACHE\9> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)


System errors:
=============
Error: (03/31/2014 07:39:30 PM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/31/2014 05:17:05 PM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/31/2014 08:07:42 AM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/30/2014 08:40:43 PM) (Source: Service Control Manager) (User: )
Description: Windows Update

Error: (03/30/2014 08:35:28 PM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/30/2014 06:04:16 AM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/29/2014 07:54:27 PM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/29/2014 06:19:13 AM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/28/2014 07:42:07 PM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt

Error: (03/28/2014 01:43:33 PM) (Source: Service Control Manager) (User: )
Description: Beep
i8042prt


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-03-31 19:51:46.767
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:51:46.440
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:51:46.097
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:51:45.753
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:45:54.407
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:45:54.111
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:45:53.814
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 19:45:53.518
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kl1.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 18:50:26.692
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-31 18:50:26.418
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 34%
Total physical RAM: 6142.33 MB
Available physical RAM: 4029.29 MB
Total Pagefile: 12399.5 MB
Available Pagefile: 10097.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:582.33 GB) (Free:313.45 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:13.84 GB) (Free:1.42 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP2) (Fixed) (Total:596.17 GB) (Free:587.82 GB) NTFS
Drive h: (Elements) (Fixed) (Total:931.51 GB) (Free:715.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=582 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=14 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 596 GB) (Disk ID: 6BD0662C)
Partition 1: (Not Active) - (Size=596 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 00039E2E)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Ron (administrator) on RON-PC on 31-03-2014 19:51:41
Running from C:\Users\Ron\Downloads
Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe
(Hewlett-Packard) c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Ron\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224 2008-11-18] (Hewlett-Packard)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe [210216 2008-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-06] (Apple Inc.)
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll [X]
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [SSync] - C:\Users\Ron\AppData\Roaming\SSync\SSync.exe [37376 2013-12-09] ()
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [DataMgr] - C:\Users\Ron\AppData\Roaming\DataMgr\DataMgr.exe [168824 2014-01-23] (HTTO Group, Ltd.)
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [Intermediate] - C:\Users\Ron\AppData\Roaming\Intermediate\Intermediate.exe [37376 2013-12-09] ()
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [SCheck] - C:\Users\Ron\AppData\Roaming\SCheck\SCheck.exe [37376 2013-12-09] ()
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [Snoozer] - C:\Users\Ron\AppData\Roaming\Snz\Snz.exe [1210387 2014-03-12] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=92&bd=Pavilion&pf=cndt
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C638C6B-5B27-4A85-83CB-40250D1E4AC4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKLM - {CA8FE908-E845-4081-937D-C045FEC0FC98} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKLM - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKLM-x32 - {7C638C6B-5B27-4A85-83CB-40250D1E4AC4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKLM-x32 - {CA8FE908-E845-4081-937D-C045FEC0FC98} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKLM-x32 - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKCU - {7C638C6B-5B27-4A85-83CB-40250D1E4AC4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKCU - {CA8FE908-E845-4081-937D-C045FEC0FC98} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKCU - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default
FF DefaultSearchEngine: Search
FF SelectedSearchEngine: Search
FF Homepage: hxxp://native-search.com/?channel=deg
FF Keyword.URL: hxxp://native-search.com/search.php?channel=deg&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\Ron\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF SearchPlugin: C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\searchplugins\search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: vis - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2014-02-10]
FF Extension: OfferMosquito - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\om@offermosquito.com.xpi [2014-02-28]
FF Extension: Simple New Tab - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-03-13]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2014-03-29]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-09-15]

Chrome: 
=======
CHR Extension: (OfferMosquito) - C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk [2014-02-17]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-02-17]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-08-14]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-01] (Kaspersky Lab ZAO)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660504 2013-02-07] (Secunia)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [X]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
S1 Beep; No ImagePath
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-01] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-02-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-01] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-18] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2008-11-28] (CyberLink Corp.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 LVcKap64; system32\DRIVERS\LVcKap64.sys [X]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUSBS64; system32\drivers\LVUSBS64.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCD5SRVC{8AAF211B-043E02A9-05040000}; \??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-31 19:42 - 2014-03-31 19:42 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(1).exe
2014-03-30 21:21 - 2014-03-31 19:51 - 00018128 _____ () C:\Users\Ron\Downloads\Addition.txt
2014-03-30 21:20 - 2014-03-31 19:51 - 00019765 _____ () C:\Users\Ron\Downloads\FRST.txt
2014-03-30 21:20 - 2014-03-30 21:20 - 00000000 ____D () C:\FRST
2014-03-30 21:19 - 2014-03-30 21:19 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64.exe
2014-03-30 06:07 - 2014-03-30 06:07 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Snz
2014-03-30 06:06 - 2014-03-30 06:06 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\SCheck
2014-03-29 20:03 - 2014-03-29 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-17 08:11 - 2014-03-17 08:11 - 02492928 _____ () C:\Users\Ron\Downloads\pbm.ppt
2014-03-15 08:18 - 2014-02-23 09:12 - 17847808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-15 08:18 - 2014-02-23 08:54 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 08:18 - 2014-02-23 08:52 - 10926592 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 08:18 - 2014-02-23 08:48 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 08:18 - 2014-02-23 08:48 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 08:18 - 2014-02-23 08:46 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 08:18 - 2014-02-23 08:46 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-15 08:18 - 2014-02-23 08:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 08:18 - 2014-02-23 08:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-15 08:18 - 2014-02-23 08:44 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 08:18 - 2014-02-23 08:44 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 08:18 - 2014-02-23 08:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-15 08:18 - 2014-02-23 08:43 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 08:18 - 2014-02-23 07:50 - 12347904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-15 08:18 - 2014-02-23 07:47 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 08:18 - 2014-02-23 07:43 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 08:18 - 2014-02-23 07:41 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 08:18 - 2014-02-23 07:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 08:18 - 2014-02-23 07:39 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 08:18 - 2014-02-23 07:38 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-15 08:18 - 2014-02-23 07:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 08:18 - 2014-02-23 07:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-15 08:18 - 2014-02-23 07:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-15 08:18 - 2014-02-23 07:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-15 08:18 - 2014-02-23 07:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 20:21 - 2014-01-30 12:12 - 01111040 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 20:21 - 2014-01-30 09:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 10:01 - 2014-02-03 15:20 - 00619008 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 10:01 - 2014-02-03 12:37 - 00505344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-14 10:01 - 2013-11-13 03:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-03-14 10:01 - 2013-11-13 02:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-03-14 09:56 - 2014-02-07 14:11 - 02776064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-03-31 19:51 - 2014-03-30 21:21 - 00018128 _____ () C:\Users\Ron\Downloads\Addition.txt
2014-03-31 19:51 - 2014-03-30 21:20 - 00019765 _____ () C:\Users\Ron\Downloads\FRST.txt
2014-03-31 19:45 - 2009-03-09 19:18 - 01683767 _____ () C:\Windows\WindowsUpdate.log
2014-03-31 19:42 - 2014-03-31 19:42 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(1).exe
2014-03-31 19:38 - 2014-02-10 13:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-31 19:38 - 2012-08-25 12:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-31 19:38 - 2008-01-21 05:26 - 00774480 _____ () C:\Windows\PFRO.log
2014-03-31 19:38 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-31 19:38 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-31 19:38 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-31 19:36 - 2006-11-02 17:42 - 00032530 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-31 19:35 - 2014-02-10 13:07 - 00000000 ____D () C:\Users\Ron\AppData\Local\ext_offermosquito
2014-03-31 19:32 - 2014-02-10 13:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-31 19:18 - 2012-07-05 19:40 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-31 08:55 - 2009-08-04 20:56 - 00000000 ___RD () C:\Users\Ron\Documents\Christine
2014-03-30 21:20 - 2014-03-30 21:20 - 00000000 ____D () C:\FRST
2014-03-30 21:19 - 2014-03-30 21:19 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64.exe
2014-03-30 06:09 - 2014-02-10 13:07 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Fifth
2014-03-30 06:08 - 2014-02-10 13:07 - 00003082 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-30 06:07 - 2014-03-30 06:07 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Snz
2014-03-30 06:07 - 2014-02-10 13:07 - 00003090 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-30 06:06 - 2014-03-30 06:06 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\SCheck
2014-03-30 06:02 - 2013-04-09 19:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 20:04 - 2014-03-29 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:27 - 2013-04-09 19:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-27 20:27 - 2013-04-09 19:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-25 11:42 - 2009-08-06 05:37 - 00044462 _____ () C:\Users\Ron\AppData\Roaming\wklnhst.dat
2014-03-21 23:29 - 2009-08-05 16:40 - 00000000 ___RD () C:\Users\Ron\Documents\Ronald
2014-03-20 13:57 - 2013-09-15 19:19 - 00625248 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-03-20 13:57 - 2013-09-15 19:19 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-03-19 09:57 - 2013-08-15 06:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 09:55 - 2006-11-02 14:35 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-03-17 08:11 - 2014-03-17 08:11 - 02492928 _____ () C:\Users\Ron\Downloads\pbm.ppt
2014-03-15 15:05 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\rescache
2014-03-15 10:17 - 2006-11-02 17:21 - 00332632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 10:13 - 2010-06-16 20:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 10:18 - 2013-04-03 21:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:18 - 2013-04-03 21:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:18 - 2012-07-05 19:40 - 00003736 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-08 17:36 - 2006-11-02 17:27 - 00235977 _____ () C:\Windows\setupact.log

Files to move or delete:
====================
C:\Users\Ron\AppData\Roaming\desktop.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Ron\AppData\Local\temp\FileSystemView.dll
C:\Users\Ron\AppData\Local\temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ron\AppData\Local\temp\VIS-2013-German.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 19:52

==================== End Of Log ============================

--- --- ---

schrauber · 31.03.2014, 19:59

hi,

Revo Uninstaller - Download - Filepony
Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION

Mit Revo auch Moderat die Reste entfernen lassen.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

dr.tschuna · 01.04.2014, 05:05

Hallo SChrauber!

Die Anweisung zum Revo Uninstaller verstehe ich nicht!
Meinst Du die Einträge im Log Additional.text? Habt Ihr ne Anleitung wie das geht?
Ich weiß nicht wie ich die EInträge löschen soll! Nur 2 Einträge "attention" bei den "scheduled Tasks".
Wieso sind da so viele Log Errors?

schrauber · 01.04.2014, 13:25

Zitat:

VIS

Diese Software mit Revo deinstallieren, dann die 3 Tools. Die Error sind normal, das sind die Einträge aus dem Eventviewer von Windows.

dr.tschuna · 02.04.2014, 20:53

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Ron (administrator) on RON-PC on 02-04-2014 21:49:26
Running from C:\Users\Ron\Downloads
Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Hewlett-Packard) c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Farbar) C:\Users\Ron\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224 2008-11-18] (Hewlett-Packard)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe [210216 2008-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-06] (Apple Inc.)
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll [X]
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=92&bd=Pavilion&pf=cndt
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C638C6B-5B27-4A85-83CB-40250D1E4AC4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKLM - {CA8FE908-E845-4081-937D-C045FEC0FC98} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKLM - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKLM-x32 - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKCU - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default
FF DefaultSearchEngine: Search
FF SelectedSearchEngine: Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\Ron\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Simple New Tab - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-03-13]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2014-03-29]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-09-15]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa []
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-08-14]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-01] (Kaspersky Lab ZAO)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660504 2013-02-07] (Secunia)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [X]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
S1 Beep; No ImagePath
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-01] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-02-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-01] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-18] (Kaspersky Lab ZAO)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2008-11-28] (CyberLink Corp.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 LVcKap64; system32\DRIVERS\LVcKap64.sys [X]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUSBS64; system32\drivers\LVUSBS64.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCD5SRVC{8AAF211B-043E02A9-05040000}; \??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-02 20:18 - 2014-04-02 20:18 - 00001980 _____ () C:\Users\Ron\Desktop\JRT.txt
2014-04-02 20:08 - 2014-04-02 20:08 - 01038974 _____ (Thisisu) C:\Users\Ron\Downloads\JRT(1).exe
2014-04-02 20:02 - 2014-04-02 20:02 - 00002563 _____ () C:\Users\Ron\Desktop\AdwCleaner[S0].txt
2014-04-02 19:57 - 2014-04-02 20:00 - 00000000 ____D () C:\AdwCleaner
2014-04-02 19:56 - 2014-04-02 19:56 - 01426178 _____ () C:\Users\Ron\Downloads\adwcleaner.exe
2014-04-02 19:55 - 2014-04-02 19:55 - 00001147 _____ () C:\Users\Ron\Desktop\mbam.txt
2014-04-02 19:09 - 2014-04-02 20:06 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-02 19:09 - 2014-04-02 19:09 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-02 19:09 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-02 19:09 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-02 19:08 - 2014-04-02 19:08 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Ron\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-01 05:43 - 2014-04-01 05:43 - 00001061 _____ () C:\Users\Ron\Desktop\Revo Uninstaller.lnk
2014-04-01 05:43 - 2014-04-01 05:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-01 05:42 - 2014-04-01 05:42 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Ron\Downloads\revosetup95.exe
2014-03-31 19:42 - 2014-03-31 19:42 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(1).exe
2014-03-30 21:21 - 2014-03-31 19:53 - 00069408 _____ () C:\Users\Ron\Downloads\Addition.txt
2014-03-30 21:20 - 2014-04-02 21:49 - 00017363 _____ () C:\Users\Ron\Downloads\FRST.txt
2014-03-30 21:20 - 2014-04-02 21:49 - 00000000 ____D () C:\FRST
2014-03-30 21:19 - 2014-03-30 21:19 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64.exe
2014-03-29 20:03 - 2014-03-29 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-17 08:11 - 2014-03-17 08:11 - 02492928 _____ () C:\Users\Ron\Downloads\pbm.ppt
2014-03-15 08:18 - 2014-02-23 09:12 - 17847808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-15 08:18 - 2014-02-23 08:54 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 08:18 - 2014-02-23 08:52 - 10926592 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 08:18 - 2014-02-23 08:48 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 08:18 - 2014-02-23 08:48 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 08:18 - 2014-02-23 08:46 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 08:18 - 2014-02-23 08:46 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-15 08:18 - 2014-02-23 08:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 08:18 - 2014-02-23 08:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-15 08:18 - 2014-02-23 08:44 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 08:18 - 2014-02-23 08:44 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 08:18 - 2014-02-23 08:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-15 08:18 - 2014-02-23 08:43 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 08:18 - 2014-02-23 07:50 - 12347904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-15 08:18 - 2014-02-23 07:47 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 08:18 - 2014-02-23 07:43 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 08:18 - 2014-02-23 07:41 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 08:18 - 2014-02-23 07:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 08:18 - 2014-02-23 07:39 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 08:18 - 2014-02-23 07:38 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-15 08:18 - 2014-02-23 07:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 08:18 - 2014-02-23 07:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-15 08:18 - 2014-02-23 07:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-15 08:18 - 2014-02-23 07:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-15 08:18 - 2014-02-23 07:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 20:21 - 2014-01-30 12:12 - 01111040 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 20:21 - 2014-01-30 09:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 10:01 - 2014-02-03 15:20 - 00619008 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 10:01 - 2014-02-03 12:37 - 00505344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-14 10:01 - 2013-11-13 03:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-03-14 10:01 - 2013-11-13 02:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-03-14 09:56 - 2014-02-07 14:11 - 02776064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-04-02 21:49 - 2014-03-30 21:20 - 00017363 _____ () C:\Users\Ron\Downloads\FRST.txt
2014-04-02 21:49 - 2014-03-30 21:20 - 00000000 ____D () C:\FRST
2014-04-02 21:47 - 2012-08-25 12:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-02 21:32 - 2014-02-10 13:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-02 21:18 - 2012-07-05 19:40 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-02 21:08 - 2009-03-09 19:18 - 01746996 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 20:18 - 2014-04-02 20:18 - 00001980 _____ () C:\Users\Ron\Desktop\JRT.txt
2014-04-02 20:08 - 2014-04-02 20:08 - 01038974 _____ (Thisisu) C:\Users\Ron\Downloads\JRT(1).exe
2014-04-02 20:06 - 2014-04-02 19:09 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-02 20:02 - 2014-04-02 20:02 - 00002563 _____ () C:\Users\Ron\Desktop\AdwCleaner[S0].txt
2014-04-02 20:02 - 2014-02-10 13:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-02 20:02 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 20:02 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-02 20:02 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-02 20:00 - 2014-04-02 19:57 - 00000000 ____D () C:\AdwCleaner
2014-04-02 20:00 - 2006-11-02 17:42 - 00032530 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-02 19:56 - 2014-04-02 19:56 - 01426178 _____ () C:\Users\Ron\Downloads\adwcleaner.exe
2014-04-02 19:55 - 2014-04-02 19:55 - 00001147 _____ () C:\Users\Ron\Desktop\mbam.txt
2014-04-02 19:51 - 2009-08-05 16:40 - 00000000 ___RD () C:\Users\Ron\Documents\Ronald
2014-04-02 19:09 - 2014-04-02 19:09 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-02 19:09 - 2013-03-17 13:45 - 00000903 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-02 19:09 - 2013-03-17 13:45 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Malwarebytes
2014-04-02 19:09 - 2013-03-17 13:45 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-02 19:08 - 2014-04-02 19:08 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Ron\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-01 20:22 - 2009-08-04 20:56 - 00000000 ___RD () C:\Users\Ron\Documents\Christine
2014-04-01 05:43 - 2014-04-01 05:43 - 00001061 _____ () C:\Users\Ron\Desktop\Revo Uninstaller.lnk
2014-04-01 05:43 - 2014-04-01 05:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-01 05:42 - 2014-04-01 05:42 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Ron\Downloads\revosetup95.exe
2014-03-31 19:53 - 2014-03-30 21:21 - 00069408 _____ () C:\Users\Ron\Downloads\Addition.txt
2014-03-31 19:42 - 2014-03-31 19:42 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(1).exe
2014-03-31 19:38 - 2008-01-21 05:26 - 00774480 _____ () C:\Windows\PFRO.log
2014-03-30 21:19 - 2014-03-30 21:19 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64.exe
2014-03-30 06:09 - 2014-02-10 13:07 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Fifth
2014-03-30 06:08 - 2014-02-10 13:07 - 00003082 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-30 06:07 - 2014-02-10 13:07 - 00003090 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-30 06:02 - 2013-04-09 19:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 20:04 - 2014-03-29 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:27 - 2013-04-09 19:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-27 20:27 - 2013-04-09 19:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-25 11:42 - 2009-08-06 05:37 - 00044462 _____ () C:\Users\Ron\AppData\Roaming\wklnhst.dat
2014-03-20 13:57 - 2013-09-15 19:19 - 00625248 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-03-20 13:57 - 2013-09-15 19:19 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-03-19 09:57 - 2013-08-15 06:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 09:55 - 2006-11-02 14:35 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-03-17 08:11 - 2014-03-17 08:11 - 02492928 _____ () C:\Users\Ron\Downloads\pbm.ppt
2014-03-15 15:05 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\rescache
2014-03-15 10:17 - 2006-11-02 17:21 - 00332632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 10:13 - 2010-06-16 20:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 10:18 - 2013-04-03 21:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:18 - 2013-04-03 21:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:18 - 2012-07-05 19:40 - 00003736 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-08 17:36 - 2006-11-02 17:27 - 00235977 _____ () C:\Windows\setupact.log
2014-03-05 09:26 - 2014-04-02 19:09 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-04-02 19:09 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2013-03-17 13:45 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Files to move or delete:
====================
C:\Users\Ron\AppData\Roaming\desktop.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Ron\AppData\Local\temp\FileSystemView.dll
C:\Users\Ron\AppData\Local\temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ron\AppData\Local\temp\Quarantine.exe
C:\Users\Ron\AppData\Local\temp\VIS-2013-German.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-02 20:11

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 02.04.2014
Suchlauf-Zeit: 19:42:50
Logdatei: mbam.text
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.04.02.05
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x64
Dateisystem: NTFS
Benutzer: Ron

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 279669
Verstrichene Zeit: 29 Min, 15 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:

ATTFilter

# AdwCleaner v3.023 - Bericht erstellt am 02/04/2014 um 20:00:05
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Benutzername : Ron - RON-PC
# Gestartet von : C:\Users\Ron\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Local\ext_offermosquito
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Roaming\Common\LuaRT
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Roaming\DataMgr
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Roaming\Intermediate
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Roaming\SCheck
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Roaming\Snz
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Roaming\SSync
[!] Ordner Gelöscht : C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Datei Gelöscht : C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\om@offermosquito.com.xpi
Datei Gelöscht : C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\searchplugins\search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKCU\Software\OfferMosquito
Schlüssel Gelöscht : HKCU\Software\Protector
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16540


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Ron\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2671 octets] - [02/04/2014 19:57:38]
AdwCleaner[S0].txt - [2423 octets] - [02/04/2014 20:00:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2483 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows (TM) Vista Home Premium x64
Ran by Ron on 02.04.2014 at 20:10:36,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7C638C6B-5B27-4A85-83CB-40250D1E4AC4}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CA8FE908-E845-4081-937D-C045FEC0FC98}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{7C638C6B-5B27-4A85-83CB-40250D1E4AC4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CA8FE908-E845-4081-937D-C045FEC0FC98}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\Ron\AppData\Roaming\mozilla\firefox\profiles\pqanxrtx.default\prefs.js

user_pref("browser.search.defaulturl", "hxxp://native-search.com/search.php?channel=deg&q=");
user_pref("browser.startup.homepage", "hxxp://native-search.com/?channel=deg");
user_pref("keyword.URL", "hxxp://native-search.com/search.php?channel=deg&q=");
user_pref("om.sssData", "{\"PR-8_cache\":{\"keyword\":\"bilderrahmen\",\"result\":{\"documentInfo\":{\"attributes\":null,\"cacheControl\":{\"etag\":\"MjIwMTQwMzMwMXx8MTM5NjM3O
user_pref("simplenewtab.url", "hxxp://native-search.com/?channel=deg_nt");
Emptied folder: C:\Users\Ron\AppData\Roaming\mozilla\firefox\profiles\pqanxrtx.default\minidumps [172 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.04.2014 at 20:18:36,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

schrauber · 03.04.2014, 12:01

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

dr.tschuna · 05.04.2014, 19:22

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=aabf0db93d2a534fb32c95081c5f1d0d
# engine=17766
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-05 06:04:39
# local_time=2014-04-05 08:04:39 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=5892 16776574 100 100 34215 234244985 0 0
# scanned=64360
# found=0
# cleaned=0
# scan_time=2448

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.80  
 Windows Vista Service Pack 2 x64 (UAC is enabled)  
 Internet Explorer 9  
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Internet Security   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Secunia PSI (3.0.0.6005)   
 Java(TM) 6 Update 45  
 Java 7 Update 51  
 Adobe Flash Player 	12.0.0.77  
 Adobe Reader 9 Adobe Reader out of Date! 
 Adobe Reader 10.1.9 Adobe Reader out of Date!  
 Mozilla Firefox (28.0) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe  
 Kaspersky Lab Kaspersky Internet Security 14.0.0 avpui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Ron (administrator) on RON-PC on 05-04-2014 20:20:49
Running from C:\Users\Ron\Downloads
Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe
(Farbar) C:\Users\Ron\Downloads\FRST64(2).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224 2008-11-18] (Hewlett-Packard)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe [210216 2008-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-06] (Apple Inc.)
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll [X]
HKU\S-1-5-21-2673002154-866942330-3263328844-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=92&bd=Pavilion&pf=cndt
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C638C6B-5B27-4A85-83CB-40250D1E4AC4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcndtie7-de-de
SearchScopes: HKLM - {CA8FE908-E845-4081-937D-C045FEC0FC98} URL = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
SearchScopes: HKLM - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKLM-x32 - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKCU - {EFA2CDF5-331C-4E0D-ADEE-706B5C3B0896} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default
FF DefaultSearchEngine: Search
FF SelectedSearchEngine: Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\Ron\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Simple New Tab - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\pqanxrtx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-03-13]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2014-03-29]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2013-09-15]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa []
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-08-14]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-01] (Kaspersky Lab ZAO)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660504 2013-02-07] (Secunia)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [X]

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
S1 Beep; No ImagePath
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-07] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-03-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-01] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-02-17] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-01] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2013-12-18] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-05] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2008-11-28] (CyberLink Corp.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 LVcKap64; system32\DRIVERS\LVcKap64.sys [X]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUSBS64; system32\drivers\LVUSBS64.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCD5SRVC{8AAF211B-043E02A9-05040000}; \??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-05 20:20 - 2014-04-05 20:20 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(2).exe
2014-04-05 20:13 - 2014-04-05 20:13 - 00987442 _____ () C:\Users\Ron\Downloads\SecurityCheck.exe
2014-04-05 19:20 - 2014-04-05 20:13 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-05 19:18 - 2014-04-05 19:19 - 02347384 _____ (ESET) C:\Users\Ron\Downloads\esetsmartinstaller_enu.exe
2014-04-04 05:35 - 2014-04-04 05:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\133E79D0.sys
2014-04-04 05:35 - 2014-04-04 05:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\10735C00.sys
2014-04-02 20:08 - 2014-04-02 20:08 - 01038974 _____ (Thisisu) C:\Users\Ron\Downloads\JRT(1).exe
2014-04-02 19:57 - 2014-04-02 20:00 - 00000000 ____D () C:\AdwCleaner
2014-04-02 19:56 - 2014-04-02 19:56 - 01426178 _____ () C:\Users\Ron\Downloads\adwcleaner.exe
2014-04-02 19:09 - 2014-04-05 19:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-02 19:09 - 2014-04-02 19:09 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-02 19:09 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-02 19:09 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-02 19:08 - 2014-04-02 19:08 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Ron\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-01 05:43 - 2014-04-01 05:43 - 00001061 _____ () C:\Users\Ron\Desktop\Revo Uninstaller.lnk
2014-04-01 05:43 - 2014-04-01 05:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-01 05:42 - 2014-04-01 05:42 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Ron\Downloads\revosetup95.exe
2014-03-31 19:42 - 2014-03-31 19:42 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(1).exe
2014-03-30 21:21 - 2014-03-31 19:53 - 00069408 _____ () C:\Users\Ron\Downloads\Addition.txt
2014-03-30 21:20 - 2014-04-05 20:20 - 00017790 _____ () C:\Users\Ron\Downloads\FRST.txt
2014-03-30 21:20 - 2014-04-05 20:20 - 00000000 ____D () C:\FRST
2014-03-30 21:19 - 2014-03-30 21:19 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64.exe
2014-03-29 20:03 - 2014-03-29 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-17 08:11 - 2014-03-17 08:11 - 02492928 _____ () C:\Users\Ron\Downloads\pbm.ppt
2014-03-15 08:18 - 2014-02-23 09:12 - 17847808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-15 08:18 - 2014-02-23 08:54 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 08:18 - 2014-02-23 08:52 - 10926592 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 08:18 - 2014-02-23 08:48 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 08:18 - 2014-02-23 08:48 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 08:18 - 2014-02-23 08:46 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 08:18 - 2014-02-23 08:46 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-15 08:18 - 2014-02-23 08:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-15 08:18 - 2014-02-23 08:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 08:18 - 2014-02-23 08:44 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-15 08:18 - 2014-02-23 08:44 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 08:18 - 2014-02-23 08:44 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 08:18 - 2014-02-23 08:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-15 08:18 - 2014-02-23 08:43 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 08:18 - 2014-02-23 07:50 - 12347904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-15 08:18 - 2014-02-23 07:47 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 08:18 - 2014-02-23 07:43 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 08:18 - 2014-02-23 07:41 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 08:18 - 2014-02-23 07:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 08:18 - 2014-02-23 07:39 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 08:18 - 2014-02-23 07:38 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-15 08:18 - 2014-02-23 07:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 08:18 - 2014-02-23 07:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 08:18 - 2014-02-23 07:37 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-15 08:18 - 2014-02-23 07:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-15 08:18 - 2014-02-23 07:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-15 08:18 - 2014-02-23 07:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-14 20:21 - 2014-01-30 12:12 - 01111040 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 20:21 - 2014-01-30 09:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-14 10:01 - 2014-02-03 15:20 - 00619008 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 10:01 - 2014-02-03 12:37 - 00505344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-14 10:01 - 2013-11-13 03:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-03-14 10:01 - 2013-11-13 02:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-03-14 09:56 - 2014-02-07 14:11 - 02776064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-04-05 20:21 - 2014-03-30 21:20 - 00017790 _____ () C:\Users\Ron\Downloads\FRST.txt
2014-04-05 20:20 - 2014-04-05 20:20 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(2).exe
2014-04-05 20:20 - 2014-03-30 21:20 - 00000000 ____D () C:\FRST
2014-04-05 20:18 - 2012-07-05 19:40 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-05 20:13 - 2014-04-05 20:13 - 00987442 _____ () C:\Users\Ron\Downloads\SecurityCheck.exe
2014-04-05 20:13 - 2014-04-05 19:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-05 19:32 - 2014-02-10 13:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-05 19:32 - 2014-02-10 13:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 19:22 - 2014-04-02 19:09 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-05 19:19 - 2014-04-05 19:18 - 02347384 _____ (ESET) C:\Users\Ron\Downloads\esetsmartinstaller_enu.exe
2014-04-05 19:10 - 2012-08-25 12:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-05 18:52 - 2009-03-09 19:18 - 01840919 _____ () C:\Windows\WindowsUpdate.log
2014-04-05 18:32 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-05 18:32 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-05 18:32 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-05 13:41 - 2006-11-02 17:42 - 00032530 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-04 20:59 - 2009-08-04 20:56 - 00000000 ___RD () C:\Users\Ron\Documents\Christine
2014-04-04 05:35 - 2014-04-04 05:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\133E79D0.sys
2014-04-04 05:35 - 2014-04-04 05:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\10735C00.sys
2014-04-02 20:08 - 2014-04-02 20:08 - 01038974 _____ (Thisisu) C:\Users\Ron\Downloads\JRT(1).exe
2014-04-02 20:00 - 2014-04-02 19:57 - 00000000 ____D () C:\AdwCleaner
2014-04-02 19:56 - 2014-04-02 19:56 - 01426178 _____ () C:\Users\Ron\Downloads\adwcleaner.exe
2014-04-02 19:51 - 2009-08-05 16:40 - 00000000 ___RD () C:\Users\Ron\Documents\Ronald
2014-04-02 19:09 - 2014-04-02 19:09 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-02 19:09 - 2013-03-17 13:45 - 00000903 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-02 19:09 - 2013-03-17 13:45 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Malwarebytes
2014-04-02 19:09 - 2013-03-17 13:45 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-02 19:08 - 2014-04-02 19:08 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Ron\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-01 05:43 - 2014-04-01 05:43 - 00001061 _____ () C:\Users\Ron\Desktop\Revo Uninstaller.lnk
2014-04-01 05:43 - 2014-04-01 05:43 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-04-01 05:42 - 2014-04-01 05:42 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Ron\Downloads\revosetup95.exe
2014-03-31 19:53 - 2014-03-30 21:21 - 00069408 _____ () C:\Users\Ron\Downloads\Addition.txt
2014-03-31 19:42 - 2014-03-31 19:42 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64(1).exe
2014-03-31 19:38 - 2008-01-21 05:26 - 00774480 _____ () C:\Windows\PFRO.log
2014-03-30 21:19 - 2014-03-30 21:19 - 02157056 _____ (Farbar) C:\Users\Ron\Downloads\FRST64.exe
2014-03-30 06:09 - 2014-02-10 13:07 - 00000000 ____D () C:\Users\Ron\AppData\Roaming\Fifth
2014-03-30 06:08 - 2014-02-10 13:07 - 00003082 _____ () C:\Windows\System32\Tasks\OMESupervisor
2014-03-30 06:07 - 2014-02-10 13:07 - 00003090 _____ () C:\Windows\System32\Tasks\Fifth
2014-03-30 06:02 - 2013-04-09 19:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 20:04 - 2014-03-29 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:27 - 2013-04-09 19:50 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-27 20:27 - 2013-04-09 19:50 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-25 11:42 - 2009-08-06 05:37 - 00044462 _____ () C:\Users\Ron\AppData\Roaming\wklnhst.dat
2014-03-20 13:57 - 2013-09-15 19:19 - 00625248 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-03-20 13:57 - 2013-09-15 19:19 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-03-19 09:57 - 2013-08-15 06:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 09:55 - 2006-11-02 14:35 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-03-17 08:11 - 2014-03-17 08:11 - 02492928 _____ () C:\Users\Ron\Downloads\pbm.ppt
2014-03-15 15:05 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\rescache
2014-03-15 10:17 - 2006-11-02 17:21 - 00332632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 10:13 - 2010-06-16 20:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 10:18 - 2013-04-03 21:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:18 - 2013-04-03 21:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 10:18 - 2012-07-05 19:40 - 00003736 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-08 17:36 - 2006-11-02 17:27 - 00235977 _____ () C:\Windows\setupact.log

Files to move or delete:
====================
C:\Users\Ron\AppData\Roaming\desktop.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Ron\AppData\Local\temp\FileSystemView.dll
C:\Users\Ron\AppData\Local\temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ron\AppData\Local\temp\Quarantine.exe
C:\Users\Ron\AppData\Local\temp\VIS-2013-German.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-05 18:41

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Scheint wieder alles in Ordnung !

schrauber · 06.04.2014, 15:48

Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Users\Ron\AppData\Roaming\desktop.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

dr.tschuna · 07.04.2014, 19:37

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Ron at 2014-04-07 20:35:59 Run:1
Running from C:\Users\Ron\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Ron\AppData\Roaming\desktop.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
*****************

C:\Users\Ron\AppData\Roaming\desktop.ini => Moved successfully.
C:\ProgramData\PKP_DLes.DAT => Moved successfully.
C:\ProgramData\PKP_DLet.DAT => Moved successfully.
C:\ProgramData\PKP_DLev.DAT => Moved successfully.

==== End of Fixlog ====

schrauber · 08.04.2014, 12:04

fertig

08.04.2014, 12:04	#10
schrauber /// the machine /// TB-Ausbilder	search.fbdownloader.com auf Windows Vista fertig __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

search.fbdownloader.com auf Windows Vista

Plagegeister aller Art und deren Bekämpfung: search.fbdownloader.com auf Windows Vista