|
Plagegeister aller Art und deren Bekämpfung: Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
19.04.2014, 09:28 | #16 |
| Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? werde Firefox und Chrome jetzt noch updaten... Hier die fixlist Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-04-2014 01 Ran by Holly at 2014-04-19 10:09:19 Run:1 Running from C:\Users\Holly\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR Extension: (BitSavEr) - C:\ProgramData\nadhabmbamefgebmhlgilclklmhnibhb [2013-12-31] CHR Extension: (YTNuoAdSS) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmkejmfimmgigjefjdjdoiioalnbokmd [2014-01-31] C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000 C:\Users\Holly\AppData\Local\Mozilla\Firefox\Profiles\d1fsonbc.default\Cache\2\41\D4B78d01 ***************** HKLM\SOFTWARE\Policies\Google => Key deleted successfully. C:\ProgramData\nadhabmbamefgebmhlgilclklmhnibhb => Moved successfully. C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmkejmfimmgigjefjdjdoiioalnbokmd => Moved successfully. C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000 => Moved successfully. C:\Users\Holly\AppData\Local\Mozilla\Firefox\Profiles\d1fsonbc.default\Cache\2\41\D4B78d01 => Moved successfully. ==== End of Fixlog ==== Glaubst gar nicht wie dankbar ich bin. Hier nochmal FRST und Adittion Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-04-2014 01 Ran by Holly at 2014-04-19 10:09:19 Run:1 Running from C:\Users\Holly\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR Extension: (BitSavEr) - C:\ProgramData\nadhabmbamefgebmhlgilclklmhnibhb [2013-12-31] CHR Extension: (YTNuoAdSS) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmkejmfimmgigjefjdjdoiioalnbokmd [2014-01-31] C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000 C:\Users\Holly\AppData\Local\Mozilla\Firefox\Profiles\d1fsonbc.default\Cache\2\41\D4B78d01 ***************** HKLM\SOFTWARE\Policies\Google => Key deleted successfully. C:\ProgramData\nadhabmbamefgebmhlgilclklmhnibhb => Moved successfully. C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmkejmfimmgigjefjdjdoiioalnbokmd => Moved successfully. C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000 => Moved successfully. C:\Users\Holly\AppData\Local\Mozilla\Firefox\Profiles\d1fsonbc.default\Cache\2\41\D4B78d01 => Moved successfully. ==== End of Fixlog ==== Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-04-2014 01 Ran by Holly at 2014-04-19 10:23:07 Running from C:\Users\Holly\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== "Fulda-Würzburg" - ProTrain Perfect Addon 1.0 (HKLM-x32\...\"Fulda-Würzburg" - ProTrain Perfect Addon 1.0) (Version: 1.0 - Blue Sky Interactive) "Leipzig-Saalfeld" - ProTrain Perfect Addon 1.0 (HKLM-x32\...\"Leipzig-Saalfeld" - ProTrain Perfect Addon 1.0) (Version: 1.0 - Blue Sky Interactive) "PTP Addon 11 "Gerolstein - Trier" 1.0 (HKLM-x32\...\"PTP Addon 11 "Gerolstein - Trier" 1.0) (Version: 1.0 - Blue Sky Interactive) "Stuttgart - München" - 3. ProTrain Perfect Addon 1.0 (HKLM-x32\...\"Stuttgart - München" - 3. ProTrain Perfect Addon 1.0) (Version: 1.0 - Blue Sky Interactive) ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1917.0000 - ABBYY Software House) Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) AMD Fusion Media Explorer (HKLM-x32\...\{2D943F95-2C76-4951-9AEF-0977AF5DE11A}) (Version: 1.0.2.0163 - Advanced Micro Devices, Inc.) AMD Fusion Utility for Desktops (HKLM-x32\...\{83F81F91-7BE9-44D1-98AF-2B87E0B8710C}) (Version: 1.1.1 - AMD) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Control Center (HKLM-x32\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.010.0113.2207 - ) Aureon 5.1 Fun ControlPanel (HKLM-x32\...\{17A87ED9-129A-4516-A3BF-5E513D23C3BB}) (Version: - ) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira) AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Bonn Hbf DEMO (HKLM-x32\...\Bonn Hbf DEMO) (Version: - SIGNALSOFT Rail Consultancy Ltd.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2208.39662 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0113.2208.39662 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help English (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help French (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help German (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden ccc-core-static (x32 Version: 2010.0113.2208.39662 - ATI) Hidden ccc-utility64 (Version: 2010.0113.2208.39662 - ATI) Hidden CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.7.2356 - CDBurnerXP) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DB Fahrplaninformation 2013 (HKLM-x32\...\DB Fahrplaninformation 2013) (Version: - ) Dboard64 (Version: 1.0.0 - Dell, Inc.) Hidden Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: - Dell) Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.40 - Dell) Dell DataSafe Online (HKLM-x32\...\{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}) (Version: 1.2.0011 - Dell, Inc.) Dell Dock (HKLM-x32\...\Dell Dock) (Version: - Stardock Corporation) Dell Dock (Version: 2.0 - Stardock Corporation) Hidden Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell P513w (HKLM\...\Dell P513w) (Version: - Dell, Inc.) Dell Symbolleiste (HKLM-x32\...\{09B71986-2AC5-482d-B6CB-42EA34F4F85B}) (Version: 1.8.12.0 - ) Diagnostics (HKLM-x32\...\{77984D73-00F7-4188-B44C-3678352691AC}) (Version: 1.0.0 - Dell, Inc.) DirectXInstallService (x32 Version: 9.0.2 - Roxio) Hidden DivX-Setup (HKLM-x32\...\DivX Setup.divx.com) (Version: 2.3.1.2 - DivX, LLC) Dropbox (HKCU\...\Dropbox) (Version: 1.6.18 - Dropbox, Inc.) EMCGadgets64 (Version: 1.1.501 - Ihr Firmenname) Hidden ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) FormatFactory 2.60 (HKLM-x32\...\FormatFactory) (Version: 2.60 - Free Time) Free Download Manager 3.0 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG) Free Studio version 5.0.6 (HKLM-x32\...\Free Studio_is1) (Version: - DVDVideoSoft Limited.) Free Video Dub version 1.8.10.305 (HKLM-x32\...\Free Video Dub_is1) (Version: - DVDVideoSoft Limited.) Free YouTube Download version 3.2.0.128 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.) Gelsenkirchen Hbf DEMO (HKLM-x32\...\Gelsenkirchen Hbf DEMO) (Version: - SIGNALSOFT Rail Consultancy Ltd.) Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.) Google Earth (HKLM-x32\...\{C768790F-04FB-11E0-9B2C-001AA037B01E}) (Version: 6.0.1.2032 - Google) Hattrick Organizer (remove only) (HKLM-x32\...\Hattrick Organizer) (Version: - ) High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0 - Nero AG) Hidden iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.) ICQ7.2 (HKLM-x32\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ) Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson) Imagine Picture Viewer (HKLM-x32\...\{F7B16013-896E-41CB-8D8A-AFF1CE38841D}) (Version: 2.2.3 - New Dreams Software) Inkscape 0.48.2 (HKLM-x32\...\Inkscape) (Version: 0.48.2 - ) Install 64 (Version: 1.0.0 - Dell, Inc.) Hidden Installation Stellwerk Hamburg-Altona (HKLM-x32\...\Installation Stellwerk Hamburg-Altona) (Version: - Gunnar Blumert Softwareentwicklung) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.28 - Irfan Skiljan) iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.) IZArc 4.1.2 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.1.2 - Ivan Zahariev) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LibreOffice 4.0.1.2 (HKLM-x32\...\{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}) (Version: 4.0.1.2 - The Document Foundation) Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MiscApps (x32 Version: 1.0.0 - Dell, Inc.) Hidden Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla) Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Multimedia Card Reader (HKLM-x32\...\InstallShield_{41068A8C-3F30-46B6-978A-EA692F28D1AF}) (Version: 1.7.915.93 - Fitipower) Multimedia Card Reader (x32 Version: 1.7.915.93 - Fitipower) Hidden Multiple Image Resizer .NET 4 (HKLM-x32\...\Multiple Image Resizer .NET 4) (Version: 4.0.0.1 - Acumen Business Systems Ltd) Multiple Image Resizer .NET 4 (x32 Version: 4.0.0.1 - Acumen Business Systems Ltd) Hidden My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.) Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.4.11600.19.100 - Nero AG) Nero BackItUp 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG) Nero BurningROM 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG) Nero BurnRights 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero Control Center 10 (x32 Version: 10.0.12000.1.4 - Nero AG) Hidden Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Core Components 10 (x32 Version: 2.0.13700.0.1 - Nero AG) Hidden Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG) Nero CoverDesigner 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10800.7.100 - Nero AG) Nero DiscSpeed 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero Dolby Files 10 (x32 Version: 2.0.11000.0.10 - Nero AG) Hidden Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG) Nero Express 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG) Nero InfoTool 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.0.13400.11.100 - Nero AG) Nero MediaHub 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13100 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG) Nero Recode 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10900.9.100 - Nero AG) Nero RescueAgent 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.6.10600.2.100 - Nero AG) Nero SoundTrax 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.0.11200.12.100 - Nero AG) Nero StartSmart 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG) Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.0.11100.8.100 - Nero AG) Nero Vision 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.6.10600.2.100 - Nero AG) Nero WaveEditor 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.0 - Tracker Software Products Ltd) Photomatix Pro version 4.0.2 (HKLM\...\PhotomatixPro4.0x64_is1) (Version: 4.0.2 - HDRsoft Sarl) PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars) ProTrainPerfect Aufgabenpack 4 1.0 (HKLM-x32\...\ProTrainPerfect Aufgabenpack 4 1.0) (Version: 1.0 - Blue Sky Interactive) PTP (HKLM-x32\...\{5ED9E38C-9A96-49D8-89B3-92E278003FCF}) (Version: 1.00.000 - ) Pubs (x32 Version: 1.0.0 - Dell, Inc.) Hidden RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 2.4.1540.27 - AMD) RAIDXpert (x32 Version: 2.4.1540.27 - AMD) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5983 - Realtek Semiconductor Corp.) Recore (HKLM-x32\...\{708F9451-0F52-4B71-ABB4-131EA8ACAA7E}) (Version: 1.0.0 - Dell, Inc.) Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden Roxio CinePlayer Decoder Pack (x32 Version: 4.3.0 - Roxio) Hidden Roxio Creator Audio (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Copy (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Data (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Premier (HKLM-x32\...\{469EF13B-4AD0-48D7-AF89-6B92278293E2}) (Version: 10.3 - Roxio) Roxio Creator Premier (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Premier 10 (x32 Version: 10.3.345 - Roxio) Hidden Roxio Creator Tools (x32 Version: 3.7.0 - Roxio) Hidden Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden Roxio Update Manager (x32 Version: 6.0.0 - Roxio) Hidden Skins (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Sony PC Companion 2.10.053 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.053 - Sony) Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated) System Booster (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a1851772}) (Version: - Surfnet) TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.9160 - TeamViewer GmbH) THX TruStudio PC (HKLM-x32\...\{010A785B-F920-4350-821B-6309909C20BB}) (Version: 1.0 - Creative Technology Limited) Toolbar (x32 Version: 1.0.0 - Dell, Inc.) Hidden Trillian (HKLM-x32\...\Trillian) (Version: - Cerulean Studios, LLC) Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - ) VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden VD64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden Veetle TV 0.9.18 (HKLM-x32\...\Veetle TV) (Version: 0.9.18 - Veetle, Inc) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) Wireless Setup Utility 64 (Version: 1.0.0 - Dell, Inc.) Hidden ==================== Restore Points ========================= 28-03-2014 11:34:40 Geplanter Prüfpunkt 08-04-2014 20:44:14 Windows Update 09-04-2014 06:37:54 Removed Java(TM) 6 Update 20 (64-bit) 09-04-2014 06:39:14 Removed Java(TM) 6 Update 20 18-04-2014 11:02:36 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {13C0AE5D-887D-4F56-83B4-AB4BEC6F4B60} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001Core => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-09] (Google Inc.) Task: {8BD0AC08-C251-49A6-BD15-BA97A2DC8C98} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {95B26FD0-B111-4B94-8D2A-95B92D74AD8D} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.) Task: {ABD1A3B6-CAB6-4CA2-A2DC-8C3EDCBFBFC4} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe Task: {E2FC91FA-43F6-4D2D-8C7F-370D38540B95} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.) Task: {E6CEF117-161C-41C0-82A4-0E492C1D1187} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001UA => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-09] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001Core.job => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001UA.job => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-11-23 20:59 - 2009-06-19 15:01 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\dlebdrpp.dll 2009-03-16 00:47 - 2009-03-16 00:47 - 00065536 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe 2010-09-23 19:49 - 2010-03-04 23:38 - 00071096 _____ () C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe 2010-09-09 09:30 - 2010-05-21 12:00 - 00783680 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe 2009-07-10 11:50 - 2009-07-10 11:50 - 00766632 _____ () C:\Program Files (x86)\Dell P513w\dlebmon.exe 2009-07-10 11:50 - 2009-07-10 11:50 - 00139944 _____ () C:\Program Files (x86)\Dell P513w\ezprint.exe 2010-02-09 13:34 - 2010-02-09 13:34 - 01807680 _____ () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe 2011-01-11 01:25 - 2011-01-11 01:25 - 01230704 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe 2008-11-18 12:00 - 2008-11-18 12:00 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-09 09:22 - 2010-09-09 09:22 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2009-03-16 00:47 - 2009-03-16 00:47 - 00122880 _____ () C:\Windows\SysWOW64\WinMsgBalloonServer.exe 2009-03-16 00:47 - 2009-03-16 00:47 - 00139264 _____ () C:\Windows\SysWOW64\WinMsgBalloonClient.exe 2013-02-23 09:44 - 2013-02-23 09:21 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2009-03-05 19:00 - 2009-03-05 19:00 - 00532480 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll 2012-08-27 22:33 - 2012-08-27 22:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-08-27 22:33 - 2012-08-27 22:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00116032 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00128320 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 01123648 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\LibXml2.dll 2010-09-09 09:30 - 2010-05-21 11:59 - 00079168 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00234816 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00075072 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00111936 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00121152 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll 2009-05-26 16:17 - 2009-05-26 16:17 - 00086121 _____ () C:\Program Files (x86)\Dell P513w\dlebcfg.dll 2009-05-29 10:08 - 2009-05-29 10:08 - 00389120 _____ () C:\Program Files (x86)\Dell P513w\dlebscw.dll 2009-05-29 10:09 - 2009-05-29 10:09 - 01159168 _____ () C:\Program Files (x86)\Dell P513w\dlebDRS.dll 2009-03-10 01:43 - 2009-03-10 01:43 - 00155648 _____ () C:\Program Files (x86)\Dell P513w\dlebcaps.dll 2009-03-05 13:55 - 2009-03-05 13:55 - 00059904 _____ () C:\Program Files (x86)\Dell P513w\dlebcnv4.dll 2010-09-09 18:53 - 2009-02-12 17:33 - 00381952 _____ () C:\Windows\system32\dlebsm.dll 2010-09-09 18:53 - 2009-04-28 13:57 - 00032768 _____ () C:\Windows\system32\dlebsmr.dll 2009-03-30 08:40 - 2009-03-30 08:40 - 00708608 _____ () C:\Program Files (x86)\Dell P513w\Epwizard.DLL 2009-03-30 08:38 - 2009-03-30 08:38 - 00159744 _____ () C:\Program Files (x86)\Dell P513w\customui.dll 2009-03-30 08:38 - 2009-03-30 08:38 - 00114688 _____ () C:\Program Files (x86)\Dell P513w\Eputil.DLL 2009-03-30 08:37 - 2009-03-30 08:37 - 00139264 _____ () C:\Program Files (x86)\Dell P513w\Imagutil.DLL 2009-03-30 08:38 - 2009-03-30 08:38 - 00061440 _____ () C:\Program Files (x86)\Dell P513w\Epfunct.DLL 2009-06-23 07:11 - 2009-06-23 07:11 - 02203648 _____ () C:\Program Files (x86)\Dell P513w\EPWizRes.dll 2009-06-23 07:13 - 2009-06-23 07:13 - 00045056 _____ () C:\Program Files (x86)\Dell P513w\epstring.dll 2009-06-23 07:13 - 2009-06-23 07:13 - 00221184 _____ () C:\Program Files (x86)\Dell P513w\EPOEMDll.dll 2009-04-07 15:25 - 2009-04-07 15:25 - 00409600 _____ () C:\Program Files (x86)\Dell P513w\iptk.dll 2009-03-02 10:25 - 2009-03-02 10:25 - 00151552 _____ () C:\Program Files (x86)\Dell P513w\dlebptp.dll 2010-05-04 16:36 - 2010-05-04 16:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00275776 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00058688 _____ () C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00095552 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00046400 _____ () C:\Program Files (x86)\Dell DataSafe Online\de\SdbUI.resources.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00365888 _____ () C:\Program Files (x86)\Dell DataSafe Online\de\DataSafeOnline.resources.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00152896 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00017728 _____ () C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll 2011-01-11 01:25 - 2011-01-11 01:25 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2014-03-19 10:52 - 2014-03-19 10:52 - 03018864 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2014-03-19 10:52 - 2014-03-19 10:52 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2014-03-19 10:52 - 2014-03-19 10:52 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 00065352 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 00674632 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\libglesv2.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 00093000 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\libegl.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 04081480 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll 2014-04-19 10:13 - 2014-04-02 03:58 - 00390472 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 01647432 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/19/2014 10:02:02 AM) (Source: BackItUp5) (User: ) Description: IDS_LINUX_INST_ERROR Error: (04/18/2014 10:58:48 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0xd7c Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 10:57:23 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0x1500 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 10:57:15 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0xd34 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 10:56:50 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0x1aa4 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 01:15:08 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung war nicht erfolgreich. Fehler: "Fehler beim Bestimmen des Bibliothekenspeicherorts eines der in die Scherung eingeschlossenen Benutzer durch die Windows-Sicherung. (0x81000031)" Error: (04/18/2014 01:04:45 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2014 01:04:38 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2014 01:04:38 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2014 00:59:09 PM) (Source: BackItUp5) (User: ) Description: IDS_LINUX_INST_ERROR System errors: ============= Error: (04/19/2014 10:01:20 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/19/2014 10:01:20 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/18/2014 00:56:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/18/2014 00:56:57 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/10/2014 11:09:46 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/10/2014 11:09:46 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/09/2014 10:07:18 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/09/2014 10:07:18 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/09/2014 08:46:06 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/09/2014 08:46:06 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Microsoft Office Sessions: ========================= Error: (04/19/2014 10:02:02 AM) (Source: BackItUp5)(User: ) Description: IDS_LINUX_INST_ERROR Error: (04/18/2014 10:58:48 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339dd7c01cf5b48fe9efd1eC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dll3c5cfd08-c73c-11e3-a106-b8ac6f9db33d Error: (04/18/2014 10:57:23 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339d150001cf5b48cbe5a07bC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dll09a85b67-c73c-11e3-a106-b8ac6f9db33d Error: (04/18/2014 10:57:15 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339dd3401cf5b48c6daf6f5C:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dll049a7d85-c73c-11e3-a106-b8ac6f9db33d Error: (04/18/2014 10:56:50 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339d1aa401cf5b48b71716dcC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dllf63d5e9d-c73b-11e3-a106-b8ac6f9db33d Error: (04/18/2014 01:15:08 PM) (Source: Windows Backup)(User: ) Description: Fehler beim Bestimmen des Bibliothekenspeicherorts eines der in die Scherung eingeschlossenen Benutzer durch die Windows-Sicherung. (0x81000031) Error: (04/18/2014 01:04:45 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Holly\Downloads\esetsmartinstaller_enu.exe Error: (04/18/2014 01:04:38 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Holly\Downloads\esetsmartinstaller_enu.exe Error: (04/18/2014 01:04:38 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Holly\Downloads\esetsmartinstaller_enu.exe Error: (04/18/2014 00:59:09 PM) (Source: BackItUp5)(User: ) Description: IDS_LINUX_INST_ERROR ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 6135.87 MB Available physical RAM: 3697 MB Total Pagefile: 12269.91 MB Available Pagefile: 9203.88 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:1662.89 GB) (Free:1216.81 GB) NTFS Drive d: (DATAPART1) (Fixed) (Total:189.31 GB) (Free:189.22 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1674 GB) (Disk ID: 08000000) Partition 1: (Not Active) - (Size=110 MB) - (Type=DE) Partition 2: (Active) - (Size=11 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=-413509091328) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 189 GB) (Disk ID: D5321FAB) Partition 1: (Not Active) - (Size=189 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Wie kann ich mich deiner Meinung nach vor so nem Kram schützen? Irgend ne Vollversion von z.B. Avira kaufen? Oder gibt es auch andere Möglichkeiten? LG Thorsten |
19.04.2014, 09:39 | #17 |
/// TB-Ausbilder /// Anleitungs-Guru | Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...?Bitte noch das FRST.txt Log posten oder Scan wiederholen... Hast zweimal das Fixlog gepostet... Wenn wir ganz fertig sind, bekommst noch Tipps, OK?
__________________ |
19.04.2014, 09:47 | #18 |
| Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? Meinst das hier?
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-04-2014 01 Ran by Holly at 2014-04-19 10:23:07 Running from C:\Users\Holly\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== "Fulda-Würzburg" - ProTrain Perfect Addon 1.0 (HKLM-x32\...\"Fulda-Würzburg" - ProTrain Perfect Addon 1.0) (Version: 1.0 - Blue Sky Interactive) "Leipzig-Saalfeld" - ProTrain Perfect Addon 1.0 (HKLM-x32\...\"Leipzig-Saalfeld" - ProTrain Perfect Addon 1.0) (Version: 1.0 - Blue Sky Interactive) "PTP Addon 11 "Gerolstein - Trier" 1.0 (HKLM-x32\...\"PTP Addon 11 "Gerolstein - Trier" 1.0) (Version: 1.0 - Blue Sky Interactive) "Stuttgart - München" - 3. ProTrain Perfect Addon 1.0 (HKLM-x32\...\"Stuttgart - München" - 3. ProTrain Perfect Addon 1.0) (Version: 1.0 - Blue Sky Interactive) ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1917.0000 - ABBYY Software House) Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) AMD Fusion Media Explorer (HKLM-x32\...\{2D943F95-2C76-4951-9AEF-0977AF5DE11A}) (Version: 1.0.2.0163 - Advanced Micro Devices, Inc.) AMD Fusion Utility for Desktops (HKLM-x32\...\{83F81F91-7BE9-44D1-98AF-2B87E0B8710C}) (Version: 1.1.1 - AMD) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Control Center (HKLM-x32\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.010.0113.2207 - ) Aureon 5.1 Fun ControlPanel (HKLM-x32\...\{17A87ED9-129A-4516-A3BF-5E513D23C3BB}) (Version: - ) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira) AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Bonn Hbf DEMO (HKLM-x32\...\Bonn Hbf DEMO) (Version: - SIGNALSOFT Rail Consultancy Ltd.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2208.39662 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0113.2208.39662 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help English (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help French (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help German (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0113.2207.39662 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden ccc-core-static (x32 Version: 2010.0113.2208.39662 - ATI) Hidden ccc-utility64 (Version: 2010.0113.2208.39662 - ATI) Hidden CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.7.2356 - CDBurnerXP) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DB Fahrplaninformation 2013 (HKLM-x32\...\DB Fahrplaninformation 2013) (Version: - ) Dboard64 (Version: 1.0.0 - Dell, Inc.) Hidden Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: - Dell) Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.40 - Dell) Dell DataSafe Online (HKLM-x32\...\{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}) (Version: 1.2.0011 - Dell, Inc.) Dell Dock (HKLM-x32\...\Dell Dock) (Version: - Stardock Corporation) Dell Dock (Version: 2.0 - Stardock Corporation) Hidden Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell P513w (HKLM\...\Dell P513w) (Version: - Dell, Inc.) Dell Symbolleiste (HKLM-x32\...\{09B71986-2AC5-482d-B6CB-42EA34F4F85B}) (Version: 1.8.12.0 - ) Diagnostics (HKLM-x32\...\{77984D73-00F7-4188-B44C-3678352691AC}) (Version: 1.0.0 - Dell, Inc.) DirectXInstallService (x32 Version: 9.0.2 - Roxio) Hidden DivX-Setup (HKLM-x32\...\DivX Setup.divx.com) (Version: 2.3.1.2 - DivX, LLC) Dropbox (HKCU\...\Dropbox) (Version: 1.6.18 - Dropbox, Inc.) EMCGadgets64 (Version: 1.1.501 - Ihr Firmenname) Hidden ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) FormatFactory 2.60 (HKLM-x32\...\FormatFactory) (Version: 2.60 - Free Time) Free Download Manager 3.0 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG) Free Studio version 5.0.6 (HKLM-x32\...\Free Studio_is1) (Version: - DVDVideoSoft Limited.) Free Video Dub version 1.8.10.305 (HKLM-x32\...\Free Video Dub_is1) (Version: - DVDVideoSoft Limited.) Free YouTube Download version 3.2.0.128 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.0.128 - DVDVideoSoft Ltd.) Gelsenkirchen Hbf DEMO (HKLM-x32\...\Gelsenkirchen Hbf DEMO) (Version: - SIGNALSOFT Rail Consultancy Ltd.) Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.) Google Earth (HKLM-x32\...\{C768790F-04FB-11E0-9B2C-001AA037B01E}) (Version: 6.0.1.2032 - Google) Hattrick Organizer (remove only) (HKLM-x32\...\Hattrick Organizer) (Version: - ) High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0 - Nero AG) Hidden iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.) ICQ7.2 (HKLM-x32\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ) Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson) Imagine Picture Viewer (HKLM-x32\...\{F7B16013-896E-41CB-8D8A-AFF1CE38841D}) (Version: 2.2.3 - New Dreams Software) Inkscape 0.48.2 (HKLM-x32\...\Inkscape) (Version: 0.48.2 - ) Install 64 (Version: 1.0.0 - Dell, Inc.) Hidden Installation Stellwerk Hamburg-Altona (HKLM-x32\...\Installation Stellwerk Hamburg-Altona) (Version: - Gunnar Blumert Softwareentwicklung) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.28 - Irfan Skiljan) iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.) IZArc 4.1.2 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.1.2 - Ivan Zahariev) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LibreOffice 4.0.1.2 (HKLM-x32\...\{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}) (Version: 4.0.1.2 - The Document Foundation) Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MiscApps (x32 Version: 1.0.0 - Dell, Inc.) Hidden Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla) Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Multimedia Card Reader (HKLM-x32\...\InstallShield_{41068A8C-3F30-46B6-978A-EA692F28D1AF}) (Version: 1.7.915.93 - Fitipower) Multimedia Card Reader (x32 Version: 1.7.915.93 - Fitipower) Hidden Multiple Image Resizer .NET 4 (HKLM-x32\...\Multiple Image Resizer .NET 4) (Version: 4.0.0.1 - Acumen Business Systems Ltd) Multiple Image Resizer .NET 4 (x32 Version: 4.0.0.1 - Acumen Business Systems Ltd) Hidden My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.) Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.4.11600.19.100 - Nero AG) Nero BackItUp 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG) Nero BurningROM 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG) Nero BurnRights 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero Control Center 10 (x32 Version: 10.0.12000.1.4 - Nero AG) Hidden Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Core Components 10 (x32 Version: 2.0.13700.0.1 - Nero AG) Hidden Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG) Nero CoverDesigner 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10800.7.100 - Nero AG) Nero DiscSpeed 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero Dolby Files 10 (x32 Version: 2.0.11000.0.10 - Nero AG) Hidden Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG) Nero Express 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG) Nero InfoTool 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.0.13400.11.100 - Nero AG) Nero MediaHub 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13100 - Nero AG) Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG) Nero Recode 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10900.9.100 - Nero AG) Nero RescueAgent 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.6.10600.2.100 - Nero AG) Nero SoundTrax 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.0.11200.12.100 - Nero AG) Nero StartSmart 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG) Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.0.11100.8.100 - Nero AG) Nero Vision 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.6.10600.2.100 - Nero AG) Nero WaveEditor 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.0 - Tracker Software Products Ltd) Photomatix Pro version 4.0.2 (HKLM\...\PhotomatixPro4.0x64_is1) (Version: 4.0.2 - HDRsoft Sarl) PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars) ProTrainPerfect Aufgabenpack 4 1.0 (HKLM-x32\...\ProTrainPerfect Aufgabenpack 4 1.0) (Version: 1.0 - Blue Sky Interactive) PTP (HKLM-x32\...\{5ED9E38C-9A96-49D8-89B3-92E278003FCF}) (Version: 1.00.000 - ) Pubs (x32 Version: 1.0.0 - Dell, Inc.) Hidden RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 2.4.1540.27 - AMD) RAIDXpert (x32 Version: 2.4.1540.27 - AMD) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5983 - Realtek Semiconductor Corp.) Recore (HKLM-x32\...\{708F9451-0F52-4B71-ABB4-131EA8ACAA7E}) (Version: 1.0.0 - Dell, Inc.) Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden Roxio CinePlayer Decoder Pack (x32 Version: 4.3.0 - Roxio) Hidden Roxio Creator Audio (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Copy (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Data (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Premier (HKLM-x32\...\{469EF13B-4AD0-48D7-AF89-6B92278293E2}) (Version: 10.3 - Roxio) Roxio Creator Premier (x32 Version: 3.8.0 - Roxio) Hidden Roxio Creator Premier 10 (x32 Version: 10.3.345 - Roxio) Hidden Roxio Creator Tools (x32 Version: 3.7.0 - Roxio) Hidden Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden Roxio Update Manager (x32 Version: 6.0.0 - Roxio) Hidden Skins (x32 Version: 2010.0113.2208.39662 - ATI) Hidden Sony PC Companion 2.10.053 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.053 - Sony) Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated) System Booster (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a1851772}) (Version: - Surfnet) TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.9160 - TeamViewer GmbH) THX TruStudio PC (HKLM-x32\...\{010A785B-F920-4350-821B-6309909C20BB}) (Version: 1.0 - Creative Technology Limited) Toolbar (x32 Version: 1.0.0 - Dell, Inc.) Hidden Trillian (HKLM-x32\...\Trillian) (Version: - Cerulean Studios, LLC) Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - ) VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden VD64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden Veetle TV 0.9.18 (HKLM-x32\...\Veetle TV) (Version: 0.9.18 - Veetle, Inc) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) Wireless Setup Utility 64 (Version: 1.0.0 - Dell, Inc.) Hidden ==================== Restore Points ========================= 28-03-2014 11:34:40 Geplanter Prüfpunkt 08-04-2014 20:44:14 Windows Update 09-04-2014 06:37:54 Removed Java(TM) 6 Update 20 (64-bit) 09-04-2014 06:39:14 Removed Java(TM) 6 Update 20 18-04-2014 11:02:36 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {13C0AE5D-887D-4F56-83B4-AB4BEC6F4B60} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001Core => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-09] (Google Inc.) Task: {8BD0AC08-C251-49A6-BD15-BA97A2DC8C98} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {95B26FD0-B111-4B94-8D2A-95B92D74AD8D} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.) Task: {ABD1A3B6-CAB6-4CA2-A2DC-8C3EDCBFBFC4} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe Task: {E2FC91FA-43F6-4D2D-8C7F-370D38540B95} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.) Task: {E6CEF117-161C-41C0-82A4-0E492C1D1187} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001UA => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-09] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001Core.job => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001UA.job => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-11-23 20:59 - 2009-06-19 15:01 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\dlebdrpp.dll 2009-03-16 00:47 - 2009-03-16 00:47 - 00065536 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe 2010-09-23 19:49 - 2010-03-04 23:38 - 00071096 _____ () C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe 2010-09-09 09:30 - 2010-05-21 12:00 - 00783680 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe 2009-07-10 11:50 - 2009-07-10 11:50 - 00766632 _____ () C:\Program Files (x86)\Dell P513w\dlebmon.exe 2009-07-10 11:50 - 2009-07-10 11:50 - 00139944 _____ () C:\Program Files (x86)\Dell P513w\ezprint.exe 2010-02-09 13:34 - 2010-02-09 13:34 - 01807680 _____ () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe 2011-01-11 01:25 - 2011-01-11 01:25 - 01230704 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe 2008-11-18 12:00 - 2008-11-18 12:00 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-09 09:22 - 2010-09-09 09:22 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2009-03-16 00:47 - 2009-03-16 00:47 - 00122880 _____ () C:\Windows\SysWOW64\WinMsgBalloonServer.exe 2009-03-16 00:47 - 2009-03-16 00:47 - 00139264 _____ () C:\Windows\SysWOW64\WinMsgBalloonClient.exe 2013-02-23 09:44 - 2013-02-23 09:21 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2009-03-05 19:00 - 2009-03-05 19:00 - 00532480 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll 2012-08-27 22:33 - 2012-08-27 22:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-08-27 22:33 - 2012-08-27 22:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00116032 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00128320 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 01123648 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\LibXml2.dll 2010-09-09 09:30 - 2010-05-21 11:59 - 00079168 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00234816 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00075072 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00111936 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll 2010-09-09 09:30 - 2010-05-21 11:58 - 00121152 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll 2009-05-26 16:17 - 2009-05-26 16:17 - 00086121 _____ () C:\Program Files (x86)\Dell P513w\dlebcfg.dll 2009-05-29 10:08 - 2009-05-29 10:08 - 00389120 _____ () C:\Program Files (x86)\Dell P513w\dlebscw.dll 2009-05-29 10:09 - 2009-05-29 10:09 - 01159168 _____ () C:\Program Files (x86)\Dell P513w\dlebDRS.dll 2009-03-10 01:43 - 2009-03-10 01:43 - 00155648 _____ () C:\Program Files (x86)\Dell P513w\dlebcaps.dll 2009-03-05 13:55 - 2009-03-05 13:55 - 00059904 _____ () C:\Program Files (x86)\Dell P513w\dlebcnv4.dll 2010-09-09 18:53 - 2009-02-12 17:33 - 00381952 _____ () C:\Windows\system32\dlebsm.dll 2010-09-09 18:53 - 2009-04-28 13:57 - 00032768 _____ () C:\Windows\system32\dlebsmr.dll 2009-03-30 08:40 - 2009-03-30 08:40 - 00708608 _____ () C:\Program Files (x86)\Dell P513w\Epwizard.DLL 2009-03-30 08:38 - 2009-03-30 08:38 - 00159744 _____ () C:\Program Files (x86)\Dell P513w\customui.dll 2009-03-30 08:38 - 2009-03-30 08:38 - 00114688 _____ () C:\Program Files (x86)\Dell P513w\Eputil.DLL 2009-03-30 08:37 - 2009-03-30 08:37 - 00139264 _____ () C:\Program Files (x86)\Dell P513w\Imagutil.DLL 2009-03-30 08:38 - 2009-03-30 08:38 - 00061440 _____ () C:\Program Files (x86)\Dell P513w\Epfunct.DLL 2009-06-23 07:11 - 2009-06-23 07:11 - 02203648 _____ () C:\Program Files (x86)\Dell P513w\EPWizRes.dll 2009-06-23 07:13 - 2009-06-23 07:13 - 00045056 _____ () C:\Program Files (x86)\Dell P513w\epstring.dll 2009-06-23 07:13 - 2009-06-23 07:13 - 00221184 _____ () C:\Program Files (x86)\Dell P513w\EPOEMDll.dll 2009-04-07 15:25 - 2009-04-07 15:25 - 00409600 _____ () C:\Program Files (x86)\Dell P513w\iptk.dll 2009-03-02 10:25 - 2009-03-02 10:25 - 00151552 _____ () C:\Program Files (x86)\Dell P513w\dlebptp.dll 2010-05-04 16:36 - 2010-05-04 16:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00275776 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00058688 _____ () C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00095552 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00046400 _____ () C:\Program Files (x86)\Dell DataSafe Online\de\SdbUI.resources.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00365888 _____ () C:\Program Files (x86)\Dell DataSafe Online\de\DataSafeOnline.resources.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00152896 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00017728 _____ () C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll 2011-01-11 01:25 - 2011-01-11 01:25 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2014-03-19 10:52 - 2014-03-19 10:52 - 03018864 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2014-03-19 10:52 - 2014-03-19 10:52 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2014-03-19 10:52 - 2014-03-19 10:52 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 00065352 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 00674632 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\libglesv2.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 00093000 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\libegl.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 04081480 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll 2014-04-19 10:13 - 2014-04-02 03:58 - 00390472 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll 2014-04-19 10:13 - 2014-04-02 03:57 - 01647432 _____ () C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/19/2014 10:02:02 AM) (Source: BackItUp5) (User: ) Description: IDS_LINUX_INST_ERROR Error: (04/18/2014 10:58:48 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0xd7c Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 10:57:23 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0x1500 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 10:57:15 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0xd34 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 10:56:50 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114286 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005339d ID des fehlerhaften Prozesses: 0x1aa4 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Error: (04/18/2014 01:15:08 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung war nicht erfolgreich. Fehler: "Fehler beim Bestimmen des Bibliothekenspeicherorts eines der in die Scherung eingeschlossenen Benutzer durch die Windows-Sicherung. (0x81000031)" Error: (04/18/2014 01:04:45 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2014 01:04:38 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2014 01:04:38 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2014 00:59:09 PM) (Source: BackItUp5) (User: ) Description: IDS_LINUX_INST_ERROR System errors: ============= Error: (04/19/2014 10:01:20 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/19/2014 10:01:20 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/18/2014 00:56:57 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/18/2014 00:56:57 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/10/2014 11:09:46 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/10/2014 11:09:46 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/09/2014 10:07:18 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/09/2014 10:07:18 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Error: (04/09/2014 08:46:06 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "dlebCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (04/09/2014 08:46:06 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst dlebCATSCustConnectService erreicht. Microsoft Office Sessions: ========================= Error: (04/19/2014 10:02:02 AM) (Source: BackItUp5)(User: ) Description: IDS_LINUX_INST_ERROR Error: (04/18/2014 10:58:48 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339dd7c01cf5b48fe9efd1eC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dll3c5cfd08-c73c-11e3-a106-b8ac6f9db33d Error: (04/18/2014 10:57:23 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339d150001cf5b48cbe5a07bC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dll09a85b67-c73c-11e3-a106-b8ac6f9db33d Error: (04/18/2014 10:57:15 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339dd3401cf5b48c6daf6f5C:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dll049a7d85-c73c-11e3-a106-b8ac6f9db33d Error: (04/18/2014 10:56:50 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE11.0.9600.1652153114286ntdll.dll6.1.7601.18247521eaf24c0000005000000000005339d1aa401cf5b48b71716dcC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\ntdll.dllf63d5e9d-c73b-11e3-a106-b8ac6f9db33d Error: (04/18/2014 01:15:08 PM) (Source: Windows Backup)(User: ) Description: Fehler beim Bestimmen des Bibliothekenspeicherorts eines der in die Scherung eingeschlossenen Benutzer durch die Windows-Sicherung. (0x81000031) Error: (04/18/2014 01:04:45 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Holly\Downloads\esetsmartinstaller_enu.exe Error: (04/18/2014 01:04:38 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Holly\Downloads\esetsmartinstaller_enu.exe Error: (04/18/2014 01:04:38 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Holly\Downloads\esetsmartinstaller_enu.exe Error: (04/18/2014 00:59:09 PM) (Source: BackItUp5)(User: ) Description: IDS_LINUX_INST_ERROR ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 6135.87 MB Available physical RAM: 3697 MB Total Pagefile: 12269.91 MB Available Pagefile: 9203.88 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:1662.89 GB) (Free:1216.81 GB) NTFS Drive d: (DATAPART1) (Fixed) (Total:189.31 GB) (Free:189.22 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1674 GB) (Disk ID: 08000000) Partition 1: (Not Active) - (Size=110 MB) - (Type=DE) Partition 2: (Active) - (Size=11 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=-413509091328) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 189 GB) (Disk ID: D5321FAB) Partition 1: (Not Active) - (Size=189 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
19.04.2014, 09:52 | #19 |
/// TB-Ausbilder /// Anleitungs-Guru | Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? Nein... FRST.txt
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
19.04.2014, 10:00 | #20 |
| Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...?FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-04-2014 01 Ran by Holly (administrator) on PC1DELL on 19-04-2014 10:22:29 Running from C:\Users\Holly\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Advanced Micro Devices) c:\Program Files (x86)\AMD\AMD Fusion Utility for Desktops\FusionSVC.exe (AMD) C:\Windows\system32\atiesrxx.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe (AMD) C:\Windows\system32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe () C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe ( ) c:\Windows\System32\dlebcoms.exe () C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files (x86)\Dell P513w\dlebmon.exe () C:\Program Files (x86)\Dell P513w\ezprint.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe (Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe () C:\Windows\SysWOW64\WinMsgBalloonServer.exe () C:\Windows\SysWOW64\WinMsgBalloonClient.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Holly\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9608224 2009-11-18] (Realtek Semiconductor) HKLM\...\Run: [RunDLLEntry_THXCfg] => C:\Windows\system32\THXCfg64.dll [17920 2009-10-15] (Creative Technology Ltd.) HKLM\...\Run: [RunDLLEntry_EptMon] => C:\Windows\system32\EptMon64.dll [21504 2009-10-15] (Creative Technology Ltd.) HKLM\...\Run: [dlebmon.exe] => C:\Program Files (x86)\Dell P513w\dlebmon.exe [766632 2009-07-10] () HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Dell P513w\ezprint.exe [139944 2009-07-10] () HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-13] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe [244208 2009-06-10] (Sonic Solutions) HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807680 2010-02-09] () HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [DellSupportCenter] => "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter HKLM-x32\...\Run: [NBAgent] => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1234216 2010-03-26] (Nero AG) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1230704 2011-01-11] () HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2010-05-21] (Softthinks) HKLM-x32\...\RunOnce: [DSUpdateLauncher] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" /NOCONSOLE /D="C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate" /RUNAS "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe" [161088 2010-05-21] () HKU\S-1-5-21-3018094874-1436405911-3996814479-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation) HKU\S-1-5-21-3018094874-1436405911-3996814479-1001\...\Run: [Sony PC Companion] => "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background HKU\S-1-5-21-3018094874-1436405911-3996814479-1001\...\Run: [Google Update] => C:\Users\Holly\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-09-09] (Google Inc.) HKU\S-1-5-21-3018094874-1436405911-3996814479-1001\...\MountPoints2: {b3e73b69-1e6f-11e1-951a-b8ac6f9db33d} - F:\Startme.exe AppInit_DLLs: C:\PROGRA~3\SYSTEM~1\SYSTEM~2.DLL => C:\ProgramData\System Booster\SystemBooster_x64.dll [4550656 2013-12-30] () Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0BD58186-21C1-4DCD-AE96-78BF78846F22} URL = SearchScopes: HKCU - {48DCAB9B-765B-423B-81A6-0D1F7032C8BF} URL = Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Holly\AppData\Roaming\Mozilla\Firefox\Profiles\d1fsonbc.default FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml FF DefaultSearchEngine: ICQ Search FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF SelectedSearchEngine: ICQ Search FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Holly\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Holly\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Users\Holly\AppData\Roaming\Mozilla\Firefox\Profiles\d1fsonbc.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011-02-11] FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011-02-11] Chrome: ======= CHR HomePage: CHR StartupUrls: "" CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Holly\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll () CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File CHR Plugin: (PDF-XChange Viewer) - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) CHR Plugin: (Google Update) - C:\Users\Holly\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () CHR Plugin: (TVU Web Player for FireFox) - C:\Windows\system32\TVUAx\npTVUAx.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File CHR Extension: (DivX HiQ) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2011-02-11] CHR Extension: (AdBlock) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-09-10] CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2012-09-30] CHR Extension: (Google Wallet) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Holly\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-02-11] CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-01-30] CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08] CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) S2 dlebCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dlebserv.exe [33448 2009-07-01] () R2 dleb_device; c:\Windows\System32\dlebcoms.exe [1054888 2009-07-01] ( ) R2 dleb_device; c:\Windows\SysWOW64\dlebcoms.exe [602792 2009-07-01] ( ) R2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG) S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] () S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-19 10:15 - 2014-04-19 10:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-19 10:02 - 2014-04-19 10:02 - 00000000 ____D () C:\Users\Holly\AppData\Local\{24209690-49BD-4829-878B-E78C09FAE7AA} 2014-04-18 23:03 - 2014-04-18 23:03 - 00003458 _____ () C:\Users\Holly\Desktop\mbam.txt 2014-04-18 18:39 - 2014-04-18 18:39 - 00001149 _____ () C:\Users\Holly\Desktop\mbam.log 2014-04-18 18:33 - 2014-04-18 18:33 - 00000000 ____D () C:\Users\Holly\Desktop\FRST-OlderVersion 2014-04-18 12:59 - 2014-04-18 12:59 - 00000000 ____D () C:\Users\Holly\AppData\Local\{92E04332-61A7-414C-9E63-CC38C109AF21} 2014-04-10 11:12 - 2014-04-10 11:12 - 00000000 ____D () C:\Users\Holly\AppData\Local\{D935B914-D5F1-4301-A0FD-C5AD0D516CEC} 2014-04-09 10:15 - 2014-04-09 10:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-04-09 10:12 - 2014-04-09 10:12 - 00000000 _____ () C:\Users\Holly\Desktop\Adw Cleaner.txt 2014-04-09 10:10 - 2014-04-09 10:10 - 02347384 _____ (ESET) C:\Users\Holly\Downloads\esetsmartinstaller_enu.exe 2014-04-09 10:02 - 2014-04-09 10:02 - 01426178 _____ () C:\Users\Holly\Downloads\adwcleaner3023.exe 2014-04-09 08:40 - 2014-02-12 21:00 - 00000424 _____ () C:\AVScanner.ini 2014-04-09 08:30 - 2014-04-09 08:30 - 00000000 ____D () C:\Users\Holly\AppData\Local\{F3BAD5BC-B6C1-4AC7-81EE-B08809162E29} 2014-04-08 22:29 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-08 22:29 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-08 22:29 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-08 22:29 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-08 22:29 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-08 22:29 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-08 22:29 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-08 22:29 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-08 22:29 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-08 22:28 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-08 22:28 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-08 22:28 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-08 22:28 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-08 22:28 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-08 22:28 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-08 22:28 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-08 22:28 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-08 22:28 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-08 22:28 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-08 22:28 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-08 22:28 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-08 13:40 - 2014-04-18 18:43 - 00046195 _____ () C:\Users\Holly\Desktop\Addition.txt 2014-04-08 13:22 - 2014-04-19 10:22 - 00021186 _____ () C:\Users\Holly\Desktop\FRST.txt 2014-04-08 13:18 - 2014-04-08 13:18 - 00000000 ____D () C:\Users\Holly\AppData\Local\{5B851204-7AE4-472F-8723-3FD1FFFA8BAC} 2014-04-08 01:18 - 2014-04-08 01:18 - 00000000 ____D () C:\Users\Holly\AppData\Local\{63BE19A2-3B8D-4528-AFAE-1031C14711FE} 2014-04-07 09:46 - 2014-04-07 09:46 - 00000000 ____D () C:\Users\Holly\AppData\Local\{C6BB8504-7DA3-4393-9138-269119395DAD} 2014-04-06 21:46 - 2014-04-06 21:46 - 00000000 ____D () C:\Users\Holly\AppData\Local\{62F0EBC2-9FF5-43B4-B886-EFD1B6C1F068} 2014-04-05 06:53 - 2014-04-05 06:53 - 00000000 ____D () C:\Users\Holly\AppData\Local\{07F23DC6-CD43-49F6-B3F9-15E4A3671F77} 2014-04-04 18:52 - 2014-04-04 18:52 - 00000000 ____D () C:\Users\Holly\AppData\Local\{A1748605-E876-47FB-9CA4-70B50672A435} 2014-04-02 17:02 - 2014-04-02 17:02 - 04134240 _____ (Kaspersky Lab ZAO) C:\Users\Holly\Downloads\tdsskiller.exe 2014-04-02 16:55 - 2014-04-02 16:56 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Holly\Downloads\rkill.exe 2014-04-02 15:54 - 2014-04-19 10:22 - 00000000 ____D () C:\FRST 2014-04-02 15:53 - 2014-04-18 18:33 - 02158592 _____ (Farbar) C:\Users\Holly\Desktop\FRST64.exe 2014-04-02 14:04 - 2014-04-18 17:48 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-02 14:02 - 2014-04-05 07:04 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-02 14:02 - 2014-04-05 07:04 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-02 14:02 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-02 14:02 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-02 14:02 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-02 14:02 - 2014-04-02 14:02 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-02 14:00 - 2014-04-02 14:01 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Holly\Downloads\mbam-setup-2.0.0.1000.exe 2014-04-02 13:35 - 2014-04-18 16:24 - 00000000 ____D () C:\AdwCleaner 2014-04-02 13:32 - 2014-04-02 13:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\Holly\Downloads\AdwCleaner - CHIP-Downloader.exe 2014-04-02 12:20 - 2014-04-02 12:26 - 28994126 _____ () C:\Users\Holly\Downloads\Vanessa_Y._-_Beer_Garden_Boob_Show_2014-03-28.rar 2014-04-02 10:21 - 2014-04-02 10:22 - 00000000 ____D () C:\Users\Holly\AppData\Local\{F31640BB-0747-4D89-97F7-16ABE0C966E1} 2014-04-01 20:32 - 2014-04-01 20:33 - 00000000 ____D () C:\Users\Holly\AppData\Local\{055F7623-EABB-4548-972C-D91C31A943AF} 2014-03-28 09:57 - 2014-03-28 09:58 - 00000000 ____D () C:\Users\Holly\AppData\Local\{49B2030B-2BEB-47B3-AA4F-5ADBA09D28A5} 2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Users\Holly\AppData\Local\{FBF806A8-BED8-4E69-A449-02A6BB9E9B32} 2014-03-27 05:12 - 2014-03-27 05:12 - 00000000 ____D () C:\Users\Holly\AppData\Local\{984E7D5B-3791-44EB-9BEE-E73D4685A3C3} 2014-03-26 16:36 - 2014-03-26 16:37 - 00000000 ____D () C:\Users\Holly\AppData\Local\{E32C66C1-C977-4038-9638-5A51A53590AE} 2014-03-22 19:17 - 2014-03-22 19:18 - 00000000 ____D () C:\Users\Holly\AppData\Local\{2247244F-DA0F-43ED-93F7-6DB45CC3CF49} 2014-03-22 07:17 - 2014-03-22 07:17 - 00000000 ____D () C:\Users\Holly\AppData\Local\{A31F2208-AEDA-4B42-A35F-B7D7560E2E89} 2014-03-20 08:37 - 2014-03-20 08:37 - 00000000 ____D () C:\Users\Holly\AppData\Local\{07E34B15-6906-4BE9-8494-2C1499175C60} ==================== One Month Modified Files and Folders ======= 2014-04-19 10:22 - 2014-04-08 13:22 - 00021186 _____ () C:\Users\Holly\Desktop\FRST.txt 2014-04-19 10:22 - 2014-04-02 15:54 - 00000000 ____D () C:\FRST 2014-04-19 10:21 - 2013-09-09 10:07 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001UA.job 2014-04-19 10:21 - 2013-09-09 10:07 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001Core.job 2014-04-19 10:16 - 2013-09-09 10:07 - 00004090 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001UA 2014-04-19 10:16 - 2013-09-09 10:07 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3018094874-1436405911-3996814479-1001Core 2014-04-19 10:15 - 2014-04-19 10:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-19 10:14 - 2012-06-08 13:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-19 10:14 - 2010-09-14 20:58 - 00000000 ____D () C:\Users\Holly\AppData\Local\Mozilla 2014-04-19 10:13 - 2013-09-09 10:14 - 00002363 _____ () C:\Users\Holly\Desktop\Google Chrome.lnk 2014-04-19 10:09 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-19 10:09 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-19 10:06 - 2009-07-14 19:58 - 00710336 _____ () C:\Windows\system32\perfh007.dat 2014-04-19 10:06 - 2009-07-14 19:58 - 00154514 _____ () C:\Windows\system32\perfc007.dat 2014-04-19 10:06 - 2009-07-14 07:13 - 01651100 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-19 10:06 - 2009-07-14 07:10 - 01181835 _____ () C:\Windows\WindowsUpdate.log 2014-04-19 10:02 - 2014-04-19 10:02 - 00000000 ____D () C:\Users\Holly\AppData\Local\{24209690-49BD-4829-878B-E78C09FAE7AA} 2014-04-19 10:01 - 2010-11-23 20:59 - 00336368 _____ () C:\ProgramData\dlebscan.log 2014-04-19 10:01 - 2010-11-18 21:52 - 00000000 ____D () C:\Users\Holly\Tracing 2014-04-19 10:01 - 2010-09-14 20:13 - 00000000 ____D () C:\Users\Holly\AppData\Local\SoftThinks 2014-04-19 10:01 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-19 10:01 - 2009-07-14 06:51 - 00145290 _____ () C:\Windows\setupact.log 2014-04-18 23:03 - 2014-04-18 23:03 - 00003458 _____ () C:\Users\Holly\Desktop\mbam.txt 2014-04-18 20:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-18 18:43 - 2014-04-08 13:40 - 00046195 _____ () C:\Users\Holly\Desktop\Addition.txt 2014-04-18 18:39 - 2014-04-18 18:39 - 00001149 _____ () C:\Users\Holly\Desktop\mbam.log 2014-04-18 18:33 - 2014-04-18 18:33 - 00000000 ____D () C:\Users\Holly\Desktop\FRST-OlderVersion 2014-04-18 18:33 - 2014-04-02 15:53 - 02158592 _____ (Farbar) C:\Users\Holly\Desktop\FRST64.exe 2014-04-18 17:48 - 2014-04-02 14:04 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-18 16:24 - 2014-04-02 13:35 - 00000000 ____D () C:\AdwCleaner 2014-04-18 16:02 - 2013-05-22 12:54 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2014-04-18 12:59 - 2014-04-18 12:59 - 00000000 ____D () C:\Users\Holly\AppData\Local\{92E04332-61A7-414C-9E63-CC38C109AF21} 2014-04-10 11:12 - 2014-04-10 11:12 - 00000000 ____D () C:\Users\Holly\AppData\Local\{D935B914-D5F1-4301-A0FD-C5AD0D516CEC} 2014-04-09 10:15 - 2014-04-09 10:15 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-04-09 10:12 - 2014-04-09 10:12 - 00000000 _____ () C:\Users\Holly\Desktop\Adw Cleaner.txt 2014-04-09 10:10 - 2014-04-09 10:10 - 02347384 _____ (ESET) C:\Users\Holly\Downloads\esetsmartinstaller_enu.exe 2014-04-09 10:02 - 2014-04-09 10:02 - 01426178 _____ () C:\Users\Holly\Downloads\adwcleaner3023.exe 2014-04-09 08:46 - 2010-09-09 09:45 - 00000000 ____D () C:\Program Files (x86)\McAfee 2014-04-09 08:45 - 2010-09-09 09:45 - 00000000 ____D () C:\ProgramData\McAfee 2014-04-09 08:45 - 2010-09-09 09:12 - 00771224 _____ () C:\Windows\PFRO.log 2014-04-09 08:40 - 2010-09-09 09:19 - 00000000 ____D () C:\Program Files (x86)\Java 2014-04-09 08:30 - 2014-04-09 08:30 - 00000000 ____D () C:\Users\Holly\AppData\Local\{F3BAD5BC-B6C1-4AC7-81EE-B08809162E29} 2014-04-08 22:46 - 2013-08-14 22:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-08 22:44 - 2010-09-19 10:24 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-08 13:18 - 2014-04-08 13:18 - 00000000 ____D () C:\Users\Holly\AppData\Local\{5B851204-7AE4-472F-8723-3FD1FFFA8BAC} 2014-04-08 01:18 - 2014-04-08 01:18 - 00000000 ____D () C:\Users\Holly\AppData\Local\{63BE19A2-3B8D-4528-AFAE-1031C14711FE} 2014-04-07 09:46 - 2014-04-07 09:46 - 00000000 ____D () C:\Users\Holly\AppData\Local\{C6BB8504-7DA3-4393-9138-269119395DAD} 2014-04-06 21:46 - 2014-04-06 21:46 - 00000000 ____D () C:\Users\Holly\AppData\Local\{62F0EBC2-9FF5-43B4-B886-EFD1B6C1F068} 2014-04-05 07:04 - 2014-04-02 14:02 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-05 07:04 - 2014-04-02 14:02 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-05 06:53 - 2014-04-05 06:53 - 00000000 ____D () C:\Users\Holly\AppData\Local\{07F23DC6-CD43-49F6-B3F9-15E4A3671F77} 2014-04-04 18:52 - 2014-04-04 18:52 - 00000000 ____D () C:\Users\Holly\AppData\Local\{A1748605-E876-47FB-9CA4-70B50672A435} 2014-04-03 09:51 - 2014-04-02 14:02 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-02 14:02 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-02 14:02 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-02 17:02 - 2014-04-02 17:02 - 04134240 _____ (Kaspersky Lab ZAO) C:\Users\Holly\Downloads\tdsskiller.exe 2014-04-02 16:56 - 2014-04-02 16:55 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Holly\Downloads\rkill.exe 2014-04-02 14:02 - 2014-04-02 14:02 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-02 14:01 - 2014-04-02 14:00 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Holly\Downloads\mbam-setup-2.0.0.1000.exe 2014-04-02 13:38 - 2010-12-27 21:45 - 00000000 ____D () C:\ProgramData\ICQ 2014-04-02 13:32 - 2014-04-02 13:32 - 00613200 _____ (Chip Digital GmbH) C:\Users\Holly\Downloads\AdwCleaner - CHIP-Downloader.exe 2014-04-02 13:23 - 2011-01-19 22:11 - 00000000 ____D () C:\Users\Holly\AppData\Roaming\SoftGrid Client 2014-04-02 12:26 - 2014-04-02 12:20 - 28994126 _____ () C:\Users\Holly\Downloads\Vanessa_Y._-_Beer_Garden_Boob_Show_2014-03-28.rar 2014-04-02 10:22 - 2014-04-02 10:21 - 00000000 ____D () C:\Users\Holly\AppData\Local\{F31640BB-0747-4D89-97F7-16ABE0C966E1} 2014-04-01 20:33 - 2014-04-01 20:32 - 00000000 ____D () C:\Users\Holly\AppData\Local\{055F7623-EABB-4548-972C-D91C31A943AF} 2014-03-31 09:35 - 2010-09-18 09:46 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-03-31 03:16 - 2014-04-08 22:29 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-31 03:13 - 2014-04-08 22:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-31 02:13 - 2014-04-08 22:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-31 01:57 - 2014-04-08 22:29 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-28 15:52 - 2010-09-15 18:54 - 00000000 ____D () C:\Users\Holly\AppData\Roaming\vlc 2014-03-28 09:58 - 2014-03-28 09:57 - 00000000 ____D () C:\Users\Holly\AppData\Local\{49B2030B-2BEB-47B3-AA4F-5ADBA09D28A5} 2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Users\Holly\AppData\Local\{FBF806A8-BED8-4E69-A449-02A6BB9E9B32} 2014-03-27 05:12 - 2014-03-27 05:12 - 00000000 ____D () C:\Users\Holly\AppData\Local\{984E7D5B-3791-44EB-9BEE-E73D4685A3C3} 2014-03-26 16:37 - 2014-03-26 16:36 - 00000000 ____D () C:\Users\Holly\AppData\Local\{E32C66C1-C977-4038-9638-5A51A53590AE} 2014-03-22 19:18 - 2014-03-22 19:17 - 00000000 ____D () C:\Users\Holly\AppData\Local\{2247244F-DA0F-43ED-93F7-6DB45CC3CF49} 2014-03-22 07:17 - 2014-03-22 07:17 - 00000000 ____D () C:\Users\Holly\AppData\Local\{A31F2208-AEDA-4B42-A35F-B7D7560E2E89} 2014-03-20 08:37 - 2014-03-20 08:37 - 00000000 ____D () C:\Users\Holly\AppData\Local\{07E34B15-6906-4BE9-8494-2C1499175C60} 2014-03-20 08:37 - 2014-03-19 10:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird Files to move or delete: ==================== C:\Users\Holly\trillian-v5.0.0.30.exe Some content of TEMP: ==================== C:\Users\Holly\AppData\Local\Temp\AskSLib.dll C:\Users\Holly\AppData\Local\Temp\avgnt.exe C:\Users\Holly\AppData\Local\Temp\contentDATs.exe C:\Users\Holly\AppData\Local\Temp\FFSetupSoftonic260.exe C:\Users\Holly\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe C:\Users\Holly\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe C:\Users\Holly\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\Holly\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Holly\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\Holly\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Holly\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Holly\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Holly\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe C:\Users\Holly\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe C:\Users\Holly\AppData\Local\Temp\SecurityScan_Release.exe C:\Users\Holly\AppData\Local\Temp\SkypeSetup.exe C:\Users\Holly\AppData\Local\Temp\vlc-2.0.4-win32.exe C:\Users\Holly\AppData\Local\Temp\vlc-2.0.8-win32.exe C:\Users\Holly\AppData\Local\Temp\vlc-2.1.3-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-18 19:59 ==================== End Of Log ============================ das hier hab den Überblick verloren |
19.04.2014, 10:09 | #21 |
/// TB-Ausbilder /// Anleitungs-Guru | Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? Kein Problem... Melde mich heute oder morgen wieder...
__________________ --> Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? |
19.04.2014, 10:21 | #22 |
| Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? Ok, dankeschön!!! |
19.04.2014, 12:42 | #23 |
/// TB-Ausbilder /// Anleitungs-Guru | Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? Hallo Thorsten! kurz gesagt, schaue besser wo Du etwas runterlädst und was noch optional dabei ist. Weiterführende Tipps kannst Du im Epilog nachlesen. Scanne ab und zu mit Malwarebytes Antimalware und Adwarecleaner. Lade ihn aber hier herunter und lösche Deinen von chip.de. Beim Videoschauen ist das Flashplayerplugin sicherheitsrelevant. Bitte klicke mit dem IE und FF bzw. Chrome diesen Link an und mache das Update. Zur Übung gleich den Haken beim "optionalen Angebot" entfernen... Gibts jetzt noch Probleme mit Deinem Rechner? Oder hast Du noch Fragen? Ansonsten...lade Dir bitte DelFix herunter.
Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst Du sie bedenkenlos löschen. >>clean<< Wir haben es geschafft! Die Logs sehen für mich im Moment sauber aus. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst.... und/oder das Forum mit einer kleinen Spende unterstützen. Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. Epilog: Tipps, Dos & Don'ts Aktualität von System und Software Das Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-Software Eine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine infizierte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im Internet Nebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine Hinweise Abschliessend noch ein paar grundsätzliche Bemerkungen:
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
Themen zu Wie lösche ich: Ads by BitSaver, Ads not by this site, YTNuoAdss...? |
ads, ads not by this site, bereits, dauerhaft, not, probleme, saver, this, verschiedene, verschiedenen |