| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Gerätemanager unter Windows7 leer -event. Trojaner ?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
22.04.2014, 15:54
| #1 |
 |  Gerätemanager unter Windows7 leer -event. Trojaner ? Hallo, hatte mein Problem schon in "Alles rund um Windows" vorgestellt und bin jetzt hierher verwiesen worden. Das Problem ist folgendes: Der Geräte-Manager ist vollkommen leer.Er zeigt gar nichts an.(auch nicht mit:ausgeblendete Geräte anzeigen)Plug&Play-Dienst und Enum-Registrierungsschlüssel hab ich schon überprüft. Norton Internet Security, Spybot und Malewarbytes habe ich auch schon durchlaufen lassen - haben alle nichts gefunden ! Es wäre schön, wenn mir jemand helfen könnte bzw. einen Rat hat ! |
|
22.04.2014, 15:57
| #2 |
| /// the machine /// TB-Ausbilder    | Gerätemanager unter Windows7 leer -event. Trojaner ? Hi,
__________________ist denn Hardware installiert?  Scherz  Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
22.04.2014, 16:10
| #3 |
| | Gerätemanager unter Windows7 leer -event. Trojaner ? Hallo, danke für die schnelle Hilfe !
__________________FRST.txt FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-04-2014 Ran by EDDIE (administrator) on EDDIE-PC on 22-04-2014 17:00:09 Running from C:\Users\EDDIE\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaMain.exe () C:\ProgramData\DatacardService\DCService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe () C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser HD Edition\MBCameraMonitor.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Fujitsu) C:\Program Files (x86)\Fujitsu\AIS Connect\bin\AISMessageForYou.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHndHkb.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNetDm.EXE (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNTray.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1861416 2009-10-09] (Synaptics Incorporated) HKLM\...\Run: [PfNet] => C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [6310912 2010-06-24] (FUJITSU LIMITED) HKLM\...\Run: [PSUTility] => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264 2009-07-30] (FUJITSU LIMITED) HKLM\...\Run: [FDM7] => C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164712 2009-11-26] (FUJITSU LIMITED) HKLM\...\Run: [LoadFujitsuQuickTouch] => C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [157544 2009-10-15] (FUJITSU LIMITED) HKLM\...\Run: [LoadBtnHnd] => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [35176 2009-10-15] (FUJITSU LIMITED) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor) HKLM-x32\...\Run: [LoadFUJ02E3] => C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe [36712 2009-10-08] (FUJITSU LIMITED) HKLM-x32\...\Run: [IndicatorUtility] => C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [47976 2009-10-09] (FUJITSU LIMITED) HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [YouCam Mirror Tray icon] => C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [162912 2009-07-08] (CyberLink Corp.) HKLM-x32\...\Run: [AIS_MessageForYou] => C:\Program Files (x86)\Fujitsu\AIS Connect\bin\AISMessageForYou.exe [1965056 2010-03-18] (Fujitsu) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1661856 2014-04-19] (Simply Super Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1881642484-1841782945-982198653-1001\...\Run: [SpybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.) HKU\S-1-5-21-1881642484-1841782945-982198653-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () Startup: C:\Users\EDDIE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=FTSG&bmod=FTSG SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {02FFDFB6-B3DD-45B6-96A3-DA5A801C59F4} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {1C07D89C-87EE-4C44-8B7B-79ADE7EE611D} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {428D14C8-8786-4B0C-9AE4-B3DF7D80F67A} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {55C603F5-9810-4BD9-BE03-CFBBED300935} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {B41CF142-459A-4ED2-B2BD-36928FA149CB} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0 SearchScopes: HKCU - {C7961BA8-7581-4101-8D7F-78D6BC8E3ECF} URL = SearchScopes: HKCU - {CA1858FF-6B74-4BAB-8CCC-A484AC44F0C9} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=98436b8d-4b61-468d-bc57-9480aca34693&pid=freewarede&mode=bounce&k=0 BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default FF DefaultSearchEngine: Amazon.de FF SelectedSearchEngine: Amazon.de FF Homepage: hxxp://www.ostseebad-trassenheide.de/template/trassenheide/webcamstrand/webcam_strand/pic.php?path=webcam_strand FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\duckduckgo.xml FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\googlede.xml FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\safesearch.xml FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\wettercom.xml FF SearchPlugin: C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\searchplugins\youtube-videosuche.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Schnäppchenfuchs Gutscheinfinder - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\firefox@schnaeppchenfuchs.com [2013-01-05] FF Extension: WOT - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-27] FF Extension: Adblock Plus Pop-up Addon - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\adblockpopups@jessehakanen.net.xpi [2011-12-27] FF Extension: anonymoX - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\client@anonymox.net.xpi [2013-12-15] FF Extension: external IP - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\externalip@erik.morlin.xpi [2011-08-25] FF Extension: Ghostery - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\firefox@ghostery.com.xpi [2013-08-17] FF Extension: DuckDuckGo Plus - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2013-09-08] FF Extension: TrackMeNot - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\trackmenot@mrl.nyu.edu.xpi [2013-01-13] FF Extension: NoScript - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2011-08-25] FF Extension: BugMeNot Plugin - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}.xpi [2011-12-27] FF Extension: Adblock Plus - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-08-25] FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ [] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2014-01-04] FF HKCU\...\Firefox\Extensions: [mail@shopping-preise.de] - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\extensions\mail@shopping-preise.de FF HKCU\...\Firefox\Extensions: [extension@preispilot.com] - C:\Users\EDDIE\AppData\Roaming\Mozilla\Firefox\Profiles\genm2u89.default\extensions\extension@preispilot.com ==================== Services (Whitelisted) ================= R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] () R2 AISConnect; C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaMain.exe [32768 2009-01-26] () R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] () R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [276376 2014-03-12] (Symantec Corporation) R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [330240 2010-06-24] (FUJITSU LIMITED) R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2009-07-30] (FUJITSU LIMITED) ==================== Drivers (Whitelisted) ==================== S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2011-09-06] (Google Inc) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-01-04] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-01-04] (Symantec Corporation) U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [252928 2010-04-30] (Huawei Technologies Co., Ltd.) U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [114560 2010-03-20] (Huawei Technologies Co., Ltd.) R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED) R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140421.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-22] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140421.033\ENG64.SYS [126040 2014-01-04] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140421.033\EX64.SYS [2099288 2014-01-04] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1502000.026\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1502000.026\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NISx64\1502000.026\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NISx64\1502000.026\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-01-04] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-22 17:00 - 2014-04-22 17:00 - 00022472 _____ () C:\Users\EDDIE\Downloads\FRST.txt 2014-04-22 17:00 - 2014-04-22 17:00 - 00000000 ____D () C:\FRST 2014-04-22 16:59 - 2014-04-22 16:59 - 02061312 _____ (Farbar) C:\Users\EDDIE\Downloads\FRST64.exe 2014-04-22 16:53 - 2014-04-22 16:53 - 00027400 _____ () C:\Users\EDDIE\Downloads\devcon.zip 2014-04-22 08:12 - 2014-04-22 08:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{D1E24903-6DD0-40DA-AF3F-8448CBDDE8CF} 2014-04-21 18:18 - 2014-04-21 18:18 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E8BC1574-5720-4DE5-ABCC-6EDFBF46ABDA} 2014-04-21 15:39 - 2014-04-21 15:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys 2014-04-21 15:38 - 2014-04-21 15:39 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{70622781-0C47-482E-A2FC-AACE24281AA5} 2014-04-20 09:08 - 2014-04-20 09:09 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CF600483-EBC7-41F1-9D7F-A40F0859787B} 2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\Documents\Simply Super Software 2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Roaming\Simply Super Software 2014-04-19 11:58 - 2014-04-19 12:00 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover 2014-04-19 11:58 - 2014-04-19 11:58 - 00001145 _____ () C:\Users\Public\Desktop\Trojan Remover.lnk 2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Simply Super Software 2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Licenses 2014-04-19 10:41 - 2014-04-19 10:42 - 21407864 _____ (Simply Super Software ) C:\Users\EDDIE\Downloads\trjsetup690.exe 2014-04-19 10:37 - 2014-04-19 10:37 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{8C2DA287-5E6B-4753-8475-3E350A0DE4F5} 2014-04-19 10:27 - 2014-04-19 10:27 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE(1).exe 2014-04-19 10:25 - 2014-04-22 10:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\NPE 2014-04-19 10:25 - 2014-04-19 10:26 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE.exe 2014-04-19 09:15 - 2014-04-19 09:15 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BED805A0-A0DB-4F47-A41F-DB29122EB2D0} 2014-04-18 19:07 - 2014-04-18 19:07 - 00380416 _____ () C:\Users\EDDIE\Downloads\Gmer-19357.exe 2014-04-18 18:21 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-18 18:21 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-18 18:21 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-18 18:21 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-18 18:20 - 2014-04-18 18:21 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-04-18 18:10 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-04-18 18:10 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-04-18 18:02 - 2014-04-18 18:03 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6D520F94-C704-4F57-9530-324394528595} 2014-04-17 16:34 - 2014-04-22 16:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-17 16:33 - 2014-04-17 16:33 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-17 16:33 - 2014-04-17 16:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-17 16:33 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-17 16:33 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-17 16:33 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-17 16:32 - 2014-04-17 16:33 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\EDDIE\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-17 15:14 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-04-17 15:14 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-04-17 15:14 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-04-17 15:14 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-04-17 15:14 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-04-17 15:14 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-04-17 15:14 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-04-17 15:14 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-04-17 15:14 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-04-17 15:14 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-04-17 15:14 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-04-17 15:14 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-04-17 15:14 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-04-17 15:14 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-04-17 15:14 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-04-17 15:14 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-04-17 15:14 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-04-17 15:14 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-04-17 14:56 - 2014-04-17 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf 2014-04-17 14:34 - 2014-04-17 14:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\LG Electronics 2014-04-17 14:09 - 2014-04-17 14:10 - 09441140 _____ () C:\Users\EDDIE\Downloads\LGUnitedMobileDriver_S4981MAN38AP22_ML_WHQL_Ver_3.8.1(0)_4.9.8.1.zip 2014-04-17 13:39 - 2014-04-17 14:33 - 00000000 ____D () C:\Program Files (x86)\LG Electronics 2014-04-17 08:06 - 2014-04-17 08:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AAF269BF-1297-44CB-B27F-C38908D1E84C} 2014-04-16 11:06 - 2014-04-16 11:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E50A0730-D4A0-4FB2-BB21-AB3C8662CFE3} 2014-04-15 10:14 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-15 10:14 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-15 10:13 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-15 10:13 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-15 10:13 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-15 10:13 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-15 10:13 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-15 10:13 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-15 10:13 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-15 10:13 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-15 10:13 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-15 10:13 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-15 10:13 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-15 10:13 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-15 10:13 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-15 10:13 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-15 10:13 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-15 10:13 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-15 10:13 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-15 10:13 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-15 10:13 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-15 10:13 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-15 10:13 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-15 10:13 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-15 10:13 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-15 10:13 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-15 10:13 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-15 10:13 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-15 10:13 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-15 10:13 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-15 10:13 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-15 10:13 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-15 10:13 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-15 10:13 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-15 10:13 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-15 10:13 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-15 10:13 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-15 10:13 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-15 10:13 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-15 10:13 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-15 10:13 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-15 10:13 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-15 10:13 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-15 10:13 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-15 10:13 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-15 10:13 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-15 10:13 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-15 10:13 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-15 07:59 - 2014-04-15 07:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{71FB05BA-58F0-407C-BEA8-68A6B15A0B1E} 2014-04-14 18:39 - 2014-04-14 18:40 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DDFC8284-B5A4-4938-8C0B-9A24A1581FFA} 2014-04-14 14:07 - 2014-04-14 14:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{471943C3-ECAF-4516-BD4C-6B403BB5E029} 2014-04-13 09:27 - 2014-04-13 09:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{790A7709-34DD-4E47-8FE3-A21FBDE658AC} 2014-04-13 09:00 - 2014-04-13 09:00 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{5BFDBC54-12C2-46E5-A4A8-FA7FC75ABB8F} 2014-04-13 08:58 - 2014-04-13 08:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{544021E9-DC95-415A-AE28-A2772642A9CE} 2014-04-12 13:27 - 2014-04-12 13:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9D0647AF-5AD9-4F87-9DE4-F2300967A03C} 2014-04-11 14:28 - 2014-04-11 14:29 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{79DB5F93-A169-4823-9B0C-7339CFDF4F51} 2014-04-10 14:17 - 2014-04-10 14:17 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{30901ABB-9B22-4F38-A007-E115CAD7C2F4} 2014-04-10 12:24 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 12:24 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 12:24 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 12:24 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 12:24 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 12:24 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 12:24 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 12:24 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 12:24 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 12:24 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 12:24 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 12:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-10 12:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 12:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 12:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 12:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 12:24 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-10 12:20 - 2014-04-10 12:20 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BA130065-622B-4BD9-B66E-A5A3F78D6525} 2014-04-09 18:10 - 2014-04-09 18:10 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{89FA2741-CF05-4847-8340-B6452F957A43} 2014-04-08 13:30 - 2014-04-08 13:30 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{00368F33-9306-4B1B-AD96-4152782B2562} 2014-04-07 08:53 - 2014-04-07 08:53 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9C536EBA-91C2-4076-ABEA-33CDE4236201} 2014-04-06 21:34 - 2014-04-06 21:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{91CB2D89-BE94-441F-A4FE-2404E36D97CB} 2014-04-06 10:55 - 2014-02-01 16:28 - 00450712 _____ () C:\Windows\system32\Drivers\etc\hosts.20140406-105550.backup 2014-04-06 08:50 - 2014-04-06 08:50 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3F0E3590-47AF-4C7E-B497-178D69BDE3C2} 2014-04-05 08:32 - 2014-04-05 08:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{A9E31A77-F3D3-4A9E-A3BD-A0F8E3572EFC} 2014-04-04 18:41 - 2014-04-04 18:42 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{17AD4D5A-EEA9-42E8-9ECF-A4C4E567F40B} 2014-04-03 08:26 - 2014-04-03 08:26 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CD7B67F5-B997-4806-A2EA-F3BE6C0A8C71} 2014-04-03 08:13 - 2014-04-03 08:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{803D5B67-1827-4AE8-81D0-A9B3E17AC2DA} 2014-04-02 14:32 - 2014-04-02 14:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{647E8175-90A9-45A2-9E25-B8252FAD6883} 2014-04-01 12:09 - 2014-04-01 12:09 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{1259CD38-8367-4ECA-BCE2-5F812DDA57C5} 2014-03-31 18:38 - 2014-03-31 18:38 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{33B5A778-788C-47DB-B36D-522701A137B7} 2014-03-31 13:43 - 2014-03-31 13:43 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{B7DAA449-EF50-4020-8ADB-FB99C2568195} 2014-03-30 09:20 - 2014-03-30 09:21 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6E5B666D-1A19-4AA3-BA79-6727D95333BA} 2014-03-29 10:34 - 2014-03-29 10:34 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-03-29 10:31 - 2014-03-29 10:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-29 09:40 - 2014-03-29 09:40 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{F6ADC4F1-2AFF-4FBA-8067-05FBF3B263FF} 2014-03-28 08:57 - 2014-03-28 08:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3EA1EA11-494C-469C-A910-48BA2A5451E1} 2014-03-27 14:46 - 2014-03-27 14:46 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{272568F4-A171-407A-9AD4-888B1E13A1A4} 2014-03-26 15:01 - 2014-03-26 15:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AE637F94-71E6-473E-8A10-7306F2D04E57} 2014-03-26 10:57 - 2014-03-26 10:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{63AB7EC0-84BF-4119-B908-5FB9D222E311} 2014-03-25 14:08 - 2014-03-25 14:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AB479E29-00AB-4000-9698-1FAE4564C295} 2014-03-24 12:01 - 2014-03-24 12:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DB912AFA-E1DA-4F67-8161-EE2A4C7A0171} 2014-03-23 09:10 - 2014-03-23 09:11 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AC5E8F6B-FA98-455C-B399-5BE29195864E} ==================== One Month Modified Files and Folders ======= 2014-04-22 17:00 - 2014-04-22 17:00 - 00022472 _____ () C:\Users\EDDIE\Downloads\FRST.txt 2014-04-22 17:00 - 2014-04-22 17:00 - 00000000 ____D () C:\FRST 2014-04-22 16:59 - 2014-04-22 16:59 - 02061312 _____ (Farbar) C:\Users\EDDIE\Downloads\FRST64.exe 2014-04-22 16:59 - 2011-08-23 21:59 - 01437067 _____ () C:\Windows\WindowsUpdate.log 2014-04-22 16:53 - 2014-04-22 16:53 - 00027400 _____ () C:\Users\EDDIE\Downloads\devcon.zip 2014-04-22 16:45 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-22 16:45 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-22 16:39 - 2014-04-17 16:34 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-22 16:37 - 2011-08-23 13:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-22 16:37 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-22 16:37 - 2009-07-14 06:51 - 00271137 _____ () C:\Windows\setupact.log 2014-04-22 16:07 - 2012-09-09 09:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-22 15:21 - 2011-08-23 13:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-22 15:07 - 2014-01-11 10:32 - 00000000 ____D () C:\Users\EDDIE\Documents\SCHRIFTVERKEHR 2014-04-22 12:49 - 2011-10-30 09:17 - 00173056 _____ () C:\Users\EDDIE\Desktop\Haushaltsbuch.xls 2014-04-22 10:13 - 2014-04-19 10:25 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\NPE 2014-04-22 08:13 - 2014-04-22 08:12 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{D1E24903-6DD0-40DA-AF3F-8448CBDDE8CF} 2014-04-21 18:18 - 2014-04-21 18:18 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E8BC1574-5720-4DE5-ABCC-6EDFBF46ABDA} 2014-04-21 15:39 - 2014-04-21 15:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys 2014-04-21 15:39 - 2014-04-21 15:38 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{70622781-0C47-482E-A2FC-AACE24281AA5} 2014-04-20 09:09 - 2014-04-20 09:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CF600483-EBC7-41F1-9D7F-A40F0859787B} 2014-04-19 14:23 - 2011-02-14 14:57 - 00700118 _____ () C:\Windows\system32\perfh007.dat 2014-04-19 14:23 - 2011-02-14 14:57 - 00149968 _____ () C:\Windows\system32\perfc007.dat 2014-04-19 14:23 - 2009-07-14 07:13 - 01622164 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-19 12:00 - 2014-04-19 11:58 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover 2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\Documents\Simply Super Software 2014-04-19 11:59 - 2014-04-19 11:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Roaming\Simply Super Software 2014-04-19 11:58 - 2014-04-19 11:58 - 00001145 _____ () C:\Users\Public\Desktop\Trojan Remover.lnk 2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Simply Super Software 2014-04-19 11:58 - 2014-04-19 11:58 - 00000000 ____D () C:\ProgramData\Licenses 2014-04-19 10:42 - 2014-04-19 10:41 - 21407864 _____ (Simply Super Software ) C:\Users\EDDIE\Downloads\trjsetup690.exe 2014-04-19 10:37 - 2014-04-19 10:37 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{8C2DA287-5E6B-4753-8475-3E350A0DE4F5} 2014-04-19 10:27 - 2014-04-19 10:27 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE(1).exe 2014-04-19 10:26 - 2014-04-19 10:25 - 03057128 ____N (Symantec Corporation) C:\Users\EDDIE\Downloads\NPE.exe 2014-04-19 10:25 - 2011-08-23 13:30 - 00000000 ____D () C:\ProgramData\Norton 2014-04-19 09:15 - 2014-04-19 09:15 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BED805A0-A0DB-4F47-A41F-DB29122EB2D0} 2014-04-18 19:07 - 2014-04-18 19:07 - 00380416 _____ () C:\Users\EDDIE\Downloads\Gmer-19357.exe 2014-04-18 18:22 - 2013-10-21 19:45 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-18 18:21 - 2014-04-18 18:20 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-04-18 18:21 - 2013-06-29 08:05 - 00000000 ____D () C:\Program Files (x86)\Java 2014-04-18 18:03 - 2014-04-18 18:02 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6D520F94-C704-4F57-9530-324394528595} 2014-04-17 16:33 - 2014-04-17 16:33 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-17 16:33 - 2014-04-17 16:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-17 16:33 - 2014-04-17 16:32 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\EDDIE\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-17 16:33 - 2013-03-14 18:45 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-17 14:56 - 2014-04-17 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf 2014-04-17 14:42 - 2011-08-23 13:22 - 00000000 ____D () C:\Users\EDDIE 2014-04-17 14:40 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-04-17 14:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-04-17 14:34 - 2014-04-17 14:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\LG Electronics 2014-04-17 14:33 - 2014-04-17 13:39 - 00000000 ____D () C:\Program Files (x86)\LG Electronics 2014-04-17 14:10 - 2014-04-17 14:09 - 09441140 _____ () C:\Users\EDDIE\Downloads\LGUnitedMobileDriver_S4981MAN38AP22_ML_WHQL_Ver_3.8.1(0)_4.9.8.1.zip 2014-04-17 08:06 - 2014-04-17 08:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AAF269BF-1297-44CB-B27F-C38908D1E84C} 2014-04-16 12:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-16 11:06 - 2014-04-16 11:06 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{E50A0730-D4A0-4FB2-BB21-AB3C8662CFE3} 2014-04-15 10:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-15 07:59 - 2014-04-15 07:59 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{71FB05BA-58F0-407C-BEA8-68A6B15A0B1E} 2014-04-14 20:13 - 2014-04-18 18:21 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-14 20:05 - 2014-04-18 18:21 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-14 20:05 - 2014-04-18 18:21 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-14 20:04 - 2014-04-18 18:21 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-14 18:40 - 2014-04-14 18:39 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DDFC8284-B5A4-4938-8C0B-9A24A1581FFA} 2014-04-14 14:08 - 2014-04-14 14:07 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{471943C3-ECAF-4516-BD4C-6B403BB5E029} 2014-04-13 09:27 - 2014-04-13 09:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{790A7709-34DD-4E47-8FE3-A21FBDE658AC} 2014-04-13 09:00 - 2014-04-13 09:00 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{5BFDBC54-12C2-46E5-A4A8-FA7FC75ABB8F} 2014-04-13 08:59 - 2014-04-13 08:58 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{544021E9-DC95-415A-AE28-A2772642A9CE} 2014-04-12 13:27 - 2014-04-12 13:27 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9D0647AF-5AD9-4F87-9DE4-F2300967A03C} 2014-04-12 13:24 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-11 14:29 - 2014-04-11 14:28 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{79DB5F93-A169-4823-9B0C-7339CFDF4F51} 2014-04-10 14:17 - 2014-04-10 14:17 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{30901ABB-9B22-4F38-A007-E115CAD7C2F4} 2014-04-10 12:30 - 2012-07-15 10:29 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-10 12:28 - 2013-07-15 07:55 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 12:26 - 2011-08-23 16:21 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-10 12:20 - 2014-04-10 12:20 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{BA130065-622B-4BD9-B66E-A5A3F78D6525} 2014-04-09 18:10 - 2014-04-09 18:10 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{89FA2741-CF05-4847-8340-B6452F957A43} 2014-04-08 13:30 - 2014-04-08 13:30 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{00368F33-9306-4B1B-AD96-4152782B2562} 2014-04-07 08:53 - 2014-04-07 08:53 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{9C536EBA-91C2-4076-ABEA-33CDE4236201} 2014-04-06 21:34 - 2014-04-06 21:34 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{91CB2D89-BE94-441F-A4FE-2404E36D97CB} 2014-04-06 20:16 - 2011-08-23 13:14 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-04-06 20:16 - 2011-08-23 13:14 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-04-06 08:50 - 2014-04-06 08:50 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3F0E3590-47AF-4C7E-B497-178D69BDE3C2} 2014-04-05 08:32 - 2014-04-05 08:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{A9E31A77-F3D3-4A9E-A3BD-A0F8E3572EFC} 2014-04-04 18:42 - 2014-04-04 18:41 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{17AD4D5A-EEA9-42E8-9ECF-A4C4E567F40B} 2014-04-03 09:51 - 2014-04-17 16:33 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-17 16:33 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-17 16:33 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-03 08:26 - 2014-04-03 08:26 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{CD7B67F5-B997-4806-A2EA-F3BE6C0A8C71} 2014-04-03 08:13 - 2014-04-03 08:13 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{803D5B67-1827-4AE8-81D0-A9B3E17AC2DA} 2014-04-02 14:32 - 2014-04-02 14:32 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{647E8175-90A9-45A2-9E25-B8252FAD6883} 2014-04-01 12:09 - 2014-04-01 12:09 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{1259CD38-8367-4ECA-BCE2-5F812DDA57C5} 2014-03-31 18:38 - 2014-03-31 18:38 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{33B5A778-788C-47DB-B36D-522701A137B7} 2014-03-31 13:43 - 2014-03-31 13:43 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{B7DAA449-EF50-4020-8ADB-FB99C2568195} 2014-03-30 09:21 - 2014-03-30 09:20 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{6E5B666D-1A19-4AA3-BA79-6727D95333BA} 2014-03-29 11:59 - 2012-05-03 12:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-03-29 10:34 - 2014-03-29 10:34 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-03-29 10:34 - 2014-01-04 20:55 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-03-29 10:34 - 2014-01-04 20:55 - 00002507 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk 2014-03-29 10:34 - 2014-01-04 20:54 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64 2014-03-29 10:31 - 2014-03-29 10:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-29 09:40 - 2014-03-29 09:40 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{F6ADC4F1-2AFF-4FBA-8067-05FBF3B263FF} 2014-03-28 17:07 - 2012-02-03 13:49 - 00000000 ____D () C:\ProgramData\ashampoo 2014-03-28 08:57 - 2014-03-28 08:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{3EA1EA11-494C-469C-A910-48BA2A5451E1} 2014-03-27 14:46 - 2014-03-27 14:46 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{272568F4-A171-407A-9AD4-888B1E13A1A4} 2014-03-26 15:01 - 2014-03-26 15:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AE637F94-71E6-473E-8A10-7306F2D04E57} 2014-03-26 10:57 - 2014-03-26 10:57 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{63AB7EC0-84BF-4119-B908-5FB9D222E311} 2014-03-25 14:08 - 2014-03-25 14:08 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AB479E29-00AB-4000-9698-1FAE4564C295} 2014-03-24 12:01 - 2014-03-24 12:01 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{DB912AFA-E1DA-4F67-8161-EE2A4C7A0171} 2014-03-23 09:11 - 2014-03-23 09:10 - 00000000 ____D () C:\Users\EDDIE\AppData\Local\{AC5E8F6B-FA98-455C-B399-5BE29195864E} Some content of TEMP: ==================== C:\Users\EDDIE\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-16 12:04 ==================== End Of Log ============================ Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-04-2014
Ran by EDDIE at 2014-04-22 17:01:13
Running from C:\Users\EDDIE\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
==================== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AIS Connect (HKLM-x32\...\AIS Connect) (Version: 1.1.1.6 - Fujitsu Technology Solutions GmbH)
AIS Connect (x32 Version: 1.1.1.6 - Fujitsu Technology Solutions GmbH) Hidden
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Ashampoo Burning Studio 6 FREE v.6.80 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.0 - ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
BILDmobil (HKLM-x32\...\BILDmobil) (Version: 16.001.06.00.761 - Huawei Technologies Co.,Ltd)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.3.2291.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 6.3.2291.0 - Microsoft Corporation) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.1908.7636 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.0.1908.7636 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Designer 2.0 (HKLM-x32\...\Designer 2.0_is1) (Version: 7.9.4 - Fomanu AG)
DeskUpdate 4.11 (HKLM-x32\...\DeskUpdate_is1) (Version: 4.11.0074 - Fujitsu Technology Solutions)
Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version: - )
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.0.4 - CEWE COLOR AG u Co. OHG)
eBay (HKLM-x32\...\{9983CD31-473F-4808-8317-5346119F0187}) (Version: 1.0.1 - eBay Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Everio MediaBrowser HD Edition (HKLM-x32\...\{548F12A2-BD2E-4B5A-9B62-BBC0AA8EB3DD}) (Version: 2.02.208 - PIXELA)
Fujitsu Display Manager (HKLM-x32\...\InstallShield_{4108974B-DE87-4AD4-9167-930C62C45691}) (Version: - )
Fujitsu Display Manager (Version: 7.01.00.210 - FUJITSU LIMITED) Hidden
Fujitsu Hotkey Utility (HKLM-x32\...\InstallShield_{BA0CC975-682B-4678-A35C-05E607F36387}) (Version: 3.60.1.0 - FUJITSU LIMITED)
Fujitsu Hotkey Utility (x32 Version: 3.60.1.0 - FUJITSU LIMITED) Hidden
Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version: - )
Fujitsu MobilityCenter Extension Utility (Version: 3.01.00.000 - Ihr Firmenname) Hidden
Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version: - )
Fujitsu System Extension Utility (Version: 3.1.1.0 - FUJITSU LIMITED) Hidden
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (HKLM\...\{ECFFD23C-3111-4685-8118-E1F79644203F}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Deskjet 1000 J110 series Hilfe (HKLM-x32\...\{DDDFCC77-7F9C-45E9-B38E-721BA599BA0C}) (Version: 140.0.65.65 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2025 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LG United Mobile Drivers (HKLM-x32\...\{C2944BE7-9BFF-4EF0-A362-CB3281B7C50D}) (Version: 3.6.0.0 - LG Electronics)
LifeBook Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version: - )
LifeBook Application Panel (Version: 8.1.0.0 - FUJITSU LIMITED) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0407-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.2.0.38 - Symantec Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Plugfree NETWORK (HKLM\...\{7BA64D21-EE46-4a9a-8145-52B0175C3F86}) (Version: 5.3.0.1 - FUJITSU LIMITED)
Plugfree NETWORK (Version: 5.3.001 - FUJITSU LIMITED) Hidden
Power Saving Utility (HKLM-x32\...\InstallShield_{7254349B-460B-488F-B4DB-A96100C5C48B}) (Version: - )
Power Saving Utility (Version: 31.01.11.013 - FUJITSU LIMITED) Hidden
Preispilot für Firefox (HKLM-x32\...\{0D8E6567-7082-48DB-A305-293873AC8B39}_is1) (Version: 2.0 - Preispilot)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5969 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30087 - Realtek Semiconductor Corp.)
Security Task Manager 1.8g (HKLM-x32\...\Security Task Manager) (Version: 1.8g - Neuber Software)
shopping-preise.de AddOn Firefox (HKLM-x32\...\{2B11BA9C-7F97-4C16-970F-1491FD77969B}_is1) (Version: 2.81 - shopping-preise.de)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Steuer-Spar-Erklärung 2012 (HKLM-x32\...\{CCD2BAD2-0919-40CB-80CC-E9538B0E4C2E}) (Version: 17.11 - Wolters Kluwer Deutschland GmbH)
Steuer-Spar-Erklärung 2013 (HKLM-x32\...\{AEB61F7A-4BBA-4292-A096-7893E09034A4}) (Version: 18.08 - Wolters Kluwer Deutschland GmbH)
SteuerSparErklärung 2014 (HKLM-x32\...\{A463EB06-22A6-47F5-9593-E52B291EF13E}) (Version: 19.08.82 - Akademische Arbeitsgemeinschaft)
Studie zur Verbesserung von HP Deskjet 1000 J110 series Produkten (HKLM\...\{3F7C54EA-F59C-45DD-BA93-AD1E084A9550}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
Sweet Home 3D version 4.3 (HKLM\...\Sweet Home 3D_is1) (Version: - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
Trojan Remover 6.9.1.2929 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.1.2929 - Simply Super Software)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
==================== Restore Points =========================
10-04-2014 10:24:44 Windows Update
10-04-2014 12:48:55 Windows Update
15-04-2014 08:12:37 Windows Update
17-04-2014 11:38:30 Installed LG United Mobile Drivers.
17-04-2014 12:36:44 Wiederherstellungsvorgang
17-04-2014 12:54:24 Installed LG United Mobile Drivers.
18-04-2014 16:19:29 Installed Java 7 Update 55
18-04-2014 16:40:05 Windows Update
22-04-2014 08:07:17 Norton_Power_Eraser_20140422100710161
==================== Hosts content: ==========================
2009-07-14 04:34 - 2014-04-06 10:55 - 00450712 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.10sek.com
127.0.0.1 10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.123fporn.info
127.0.0.1 123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {322CCE2C-5714-48BE-859F-4D6962CAFC71} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\WSCStub.exe [2014-03-12] (Symantec Corporation)
Task: {3A6704F2-431C-416B-ACF9-F21B269E3CF3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-23] (Google Inc.)
Task: {75BFF9C0-721F-46FF-998A-242F46AB4029} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {77F9D08C-BDD1-4F5E-9C13-9FA48000B302} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {9B4843F5-E148-4B24-9946-E8F3BAB684A7} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {D962FEF8-C30B-4E31-9292-2FFE23C080E1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-23] (Google Inc.)
Task: {EF2080CF-59F8-4641-81D0-A59AB723B81B} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2008-10-24 17:35 - 2008-10-24 17:35 - 00128296 _____ () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2009-01-26 17:49 - 2009-01-26 17:49 - 00032768 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaMain.exe
2010-05-08 13:48 - 2010-05-08 13:48 - 00229376 _____ () C:\ProgramData\DatacardService\DCService.exe
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\EDDIE\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\schedutils.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cutils.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00025088 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\osal.dll
2009-01-26 17:49 - 2009-01-26 17:49 - 00229376 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\serviceagent.dll
2009-01-26 17:46 - 2009-01-26 17:46 - 00204800 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\messaging.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00017920 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cmessaging.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00009216 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\threadpool.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\utils.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00011264 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cuxml.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\transports.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00208896 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\ssl.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00876544 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\crypto.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00077824 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\expat.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00081920 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\registration.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00090112 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\remoteaccess.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\scheduler.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00053248 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\pollingserver.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00045056 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\acm.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00021504 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\httpbroker.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00086016 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\monitormanager.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00053248 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\filetransfer.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00013312 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\urischeme.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00155648 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\filerepository.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00008192 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\md5c.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00258048 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\swupdate.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00053248 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\commoncfg.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00045056 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\usagejob.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00008192 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\sslinit.dll
2009-01-15 15:50 - 2009-01-15 15:50 - 00017408 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\c2sLogger.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00043008 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\httpServerConnDS.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00012288 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\sctunnel.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00017408 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\ttunnel.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\totalaccess.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00010240 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\qsaversions.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00014336 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\stdinstallers.dll
2009-03-25 11:23 - 2009-03-25 11:23 - 00029184 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\exectaDS.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00026112 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winwmids.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00009728 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\pstoreds.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winsysinfods.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00057344 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winvmstatds.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00025600 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\winfsinfods.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00026112 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\cmdds.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00006656 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\uadfw.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00016896 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\stdrules.dll
2008-10-14 13:38 - 2008-10-14 13:38 - 00008192 _____ () C:\Program Files (x86)\Fujitsu\AIS Connect\bin\rulelib.dll
2012-08-11 10:26 - 2004-09-09 17:13 - 00364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser HD Edition\pxl_m17n_tool.dll
2011-01-17 16:19 - 2011-10-26 12:03 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-03-29 10:31 - 2014-03-29 10:31 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9
AlternateDataStreams: C:\Users\EDDIE\Documents\Einladung!!!.eml:OECustomProperty
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Could not list Devices. Check "winmgmt" service or repair WMI.
==================== Event log errors: =========================
Application errors:
==================
Error: (04/22/2014 04:38:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/22/2014 02:45:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/22/2014 00:46:19 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/22/2014 10:11:05 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/22/2014 09:57:52 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/22/2014 09:52:45 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/22/2014 08:11:32 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/21/2014 06:17:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/21/2014 03:38:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/20/2014 04:54:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/22/2014 00:43:26 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMScheduler erreicht.
Error: (04/22/2014 00:42:51 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (04/17/2014 05:05:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (04/17/2014 05:04:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (04/17/2014 05:04:28 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}
Error: (04/17/2014 05:04:28 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}
Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (04/17/2014 05:01:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-02-11 11:34:44.395
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-02-11 11:34:44.270
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 48%
Total physical RAM: 3892.55 MB
Available physical RAM: 1994.55 MB
Total Pagefile: 7783.29 MB
Available Pagefile: 5649.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:463.76 GB) (Free:364.26 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: B477DB1C)
Partition 1: (Active) - (Size=2 GB) - (Type=27)
Partition 2: (Not Active) - (Size=464 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
22.04.2014, 19:22
| #4 |
| /// the machine /// TB-Ausbilder | Gerätemanager unter Windows7 leer -event. Trojaner ? Mach das mal: http://www.trojaner-board.de/126216-...epair-aio.html
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.04.2014, 07:29
| #5 |
| | Gerätemanager unter Windows7 leer -event. Trojaner ? Prima, hat geklappt, es funktioniert wieder alles!  Vielen Dank Eddie |
|
24.04.2014, 12:51
| #6 |
| /// the machine /// TB-Ausbilder | Gerätemanager unter Windows7 leer -event. Trojaner ? Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Gerätemanager unter Windows7 leer -event. Trojaner ? |
|
24.04.2014, 13:41
| #7 |
| | Gerätemanager unter Windows7 leer -event. Trojaner ? Alles erledigt ! Nochmals vielen Dank !!!  Gruß Eddie |
|
25.04.2014, 09:10
| #8 |
| /// the machine /// TB-Ausbilder | Gerätemanager unter Windows7 leer -event. Trojaner ? Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Gerätemanager unter Windows7 leer -event. Trojaner ? |
| anzeige, anzeigen, folge, folgendes, gefunde, gerätemanager, inter, interne, internet, internet security, leer, malewarbytes, nichts, norton, norton internet security, problem, schön, security, spybot, troja, trojaner, trojaner ?, vorgestellt, windows, windows7 |
Linear-Darstellung
