|
Plagegeister aller Art und deren Bekämpfung: Trojaner Adware: Generic_r.KlWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
23.04.2014, 20:36 | #1 |
| Trojaner Adware: Generic_r.Kl Hallo zusammen, seid ein paar Stunden habe ich das Problem, dass AntiVirus sich permanent meldet. Bei der Suche nach Gründen und Ursachen bin ich hier im Forum gelandet und habe bereits einiges gelesen (In diesem Beitrag wird das selbige Problem bereits beschrieben http://www.trojaner-board.de/152925-...eric_r-ke.html). Ich hoffe, dass mir hier jemand helfen kann und bedanke mich schon mal im Voraus. Unten sind die bereits ersten Schritte aus dem oben gennaten Beitrag. FRST: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-04-2014 Ran by Malte (administrator) on MALTE-PC on 23-04-2014 20:14:29 Running from C:\Users\Malte\Desktop\rep Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Just Develop It) C:\Program Files\MyPC Backup\BackupStack.exe (Dassault Systemes) C:\Program Files\Dassault Systemes\B12\intel_a\code\bin\CATSysDemon.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Syntek America Inc.) C:\Windows\System32\StkCSrv.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe (Systweak) C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe () C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe (Ask) C:\Program Files\Ask.com\Updater\Updater.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\ehome\ehtray.exe (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Samsung) C:\Program Files\Samsung\Kies\Kies.exe (MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe (Smart PC Solutions) C:\Program Files\PC Speed Maximizer\SPMSmartScan.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Smart PC Solutions) C:\Program Files\PC Speed Maximizer\SPMReminder.exe () C:\Program Files\Mega Browse\bin\utilMegaBrowse.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe () C:\Program Files\Mega Browse\bin\FilterApp_C.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (Microsoft Corporation) C:\Windows\system32\conime.exe (Microsoft Corporation) C:\Windows\system32\wuauclt.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_77_ActiveX.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [13543968 2008-06-09] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [92704 2008-06-09] (NVIDIA Corporation) HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [CloneCDTray] => C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2006-09-28] (SlySoft, Inc.) HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [vspdfprsrv.exe] => C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe [884224 2006-05-19] () HKLM\...\Run: [] => [X] HKLM\...\Run: [ApnUpdater] => C:\Program Files\Ask.com\Updater\Updater.exe [1568976 2012-06-20] (Ask) HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [309688 2012-11-12] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-01-20] (Google Inc.) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [968120 2012-11-12] (Samsung) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [577536 2012-11-01] (Samsung Electronics) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [PC Speed Maximizer] => C:\Program Files\PC Speed Maximizer\SPMLauncher.exe [135792 2013-12-19] (Smart PC Solutions) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000 HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {039ace29-9902-11dd-bc1f-001fe2ecef23} - F:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {15143fcc-30e0-11e2-b9f1-bab5751b984a} - H:\DIYWriter.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {51cbb4be-b1bb-11dd-96bf-001fe2ecef23} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {51cbb4d1-b1bb-11dd-96bf-001fe2ecef23} - H:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {87018b51-c954-11dd-8c82-806e6f6e6963} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {ec088d4f-b47a-11dd-8e41-001fe2ecef23} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {ec088d51-b47a-11dd-8e41-001fe2ecef23} - I:\AutoRun.exe AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll File Not Found Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr_14_13_ie&cd=2XzuyEtN2Y1L1QzutDtDtCtAyByBzy0DyDtByDyCzz0DtAtBtN0D0Tzu0SzztCzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0EyDtB0ByDzztBtGyCtBzyzytG0D0EyEyCtGtDtA0A0EtGtAtD0Dzz0CtCtBtDzytC0BtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0DyCtCyEyCtA0BtGtAzy0F0AtGtCyCyDtBtGtDyByD0CtGyC0B0ByByCyE0CzyyEtC0Bzy2Q&cr=1126240005&ir= SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr_14_13_ie&cd=2XzuyEtN2Y1L1QzutDtDtCtAyByBzy0DyDtByDyCzz0DtAtBtN0D0Tzu0SzztCzztN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0EyDtB0ByDzztBtGyCtBzyzytG0D0EyEyCtGtDtA0A0EtGtAtD0Dzz0CtCtBtDzytC0BtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0DyCtCyEyCtA0BtGtAzy0F0AtGtCyCyDtBtGtDyByD0CtGyC0B0ByByCyE0CzyyEtC0Bzy2Q&cr=1126240005&ir= SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=101&systemid=410&apn_dtid=BND410&apn_ptnrs=AGA&o=APN10649&apn_uid=3323242967434501&q={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = SearchScopes: HKCU - {395342F8-638C-4C2D-9C4E-09076FE649E4} URL = https://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: Mega Browse - {4e6cd411-ce62-4584-97ff-6afbcf6900af} - C:\Program Files\Mega Browse\MegaBrowsebho.dll (Mega Browse) BHO: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (MySearchDial) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKCU - &Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation) Toolbar: HKCU - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab DPF: {271A3CF5-5A54-447B-A08F-BE805F0DA60B} https://www.olb.de/olb_fb3_1867c/plugin/AXFOAM.CAB DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {C752FF21-A8EF-468E-B507-5BBAFB84359E} https://hbciweb.olb.de/financebrowser5/plugin/Signlet-Plugin.CAB DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default FF user.js: detected! => C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\user.js FF NewTab: about:blank FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @ptc.com/ProductViewLite - C:\Program Files\Common Files\PTC\np6_pvapplite9.dll (PTC) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npnul32.dll (mozilla.org) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\searchplugins\claro.xml FF SearchPlugin: C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\searchplugins\iminent.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Amazon.de.png FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Amazon.de.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\google.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\google.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.png FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Yahoo.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Yahoo.src FF Extension: Plus-HD-2.2 - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com [2013-12-30] FF Extension: CS Browser Assistant 2.0 - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\Extensions\f642a7a0-3e89-45d2-875f-8394cf2f7196@2c30b4c2-9e83-4875-a4ca-6acd1e9923b2.com [2013-12-30] FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\Extensions\staged [2013-11-20] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [r_y@pkeqxb.co.uk] - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions [2009-04-25] FF HKCU\...\Firefox\Extensions: [{58bd07eb-0ee0-4df0-8121-dc9b693373df}] - C:\ProgramData\BrowserProtect\2.5.1005.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension FF HKCU\...\Firefox\Extensions: [r_y@pkeqxb.co.uk] - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions [2009-04-25] Chrome: ======= CHR HomePage: CHR RestoreOnStartup: "browser": { "show_home_button" CHR Extension: (New Tab Page) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl [2014-01-04] CHR Extension: (SaveerExtenSion) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdclgmmbnpbjcfphmedcjocfecggkdke [2013-12-30] CHR Extension: (No Name) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\liakpfdafneophpiemfjlnnmingmnklh [2013-11-20] CHR Extension: (No Name) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo [2013-11-20] CHR Extension: (Iminent Chrome Toolbar) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb [2013-09-19] CHR Extension: (ShopiDDropp) - C:\ProgramData\nopbipmkfgdegglfeaochadfldoikfdj [2013-12-30] CHR HKLM\...\Chrome\Extension: [aaaangaohdajkgeopjhpbnlpkehbhmbj] - C:\Users\Malte\AppData\Local\APN\GoogleCRXs\aaaangaohdajkgeopjhpbnlpkehbhmbj_7.15.4.0.crx [2012-07-15] CHR HKLM\...\Chrome\Extension: [bicnnkjibmphdeigoodpjlcklcnaobdj] - C:\Program Files\TornTV.com\torntv10.crx [2013-06-30] CHR HKLM\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.5.1005.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [2013-06-30] ========================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [38440 2013-09-20] (Just Develop It) R2 BBDemon; C:\Program Files\Dassault Systemes\B12\intel_a\code\bin\CATSysDemon.exe [49214 2003-07-05] (Dassault Systemes) S4 gupdate1ca847c659c3e70; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-12-24] (Google Inc.) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-04-09] (IObit) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] () R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [31248 2008-01-16] (Syntek America Inc.) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1739064 2013-10-30] (AVG) S2 Update Mega Browse; C:\Program Files\Mega Browse\updateMegaBrowse.exe [350496 2014-04-18] () R2 Util Mega Browse; C:\Program Files\Mega Browse\bin\utilMegaBrowse.exe [350496 2014-04-23] () R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [35640 2013-10-30] (AVG) ==================== Drivers (Whitelisted) ==================== R2 Aspi32; C:\Windows\system32\Drivers\Aspi32.sys [23936 1997-12-22] (Adaptec) R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [210712 2013-11-25] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [149272 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22808 2014-01-19] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-11-01] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.) S3 btwampfl; C:\Windows\system32\drivers\btwampfl.sys [504360 2012-11-02] (Broadcom Corporation.) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2008-06-25] (SAMSUNG ELECTRONICS CO., LTD.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2009-07-12] () R3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1363088 2008-03-28] (Syntek) R1 tStLibG; C:\Windows\System32\drivers\tStLibG.sys [55232 2014-03-30] (StdLib) R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-09-18] (TuneUp Software) U3 a2r57538; C:\Windows\system32\Drivers\a2r57538.sys [0 ] (Microsoft Corporation) S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] S3 RimUsb; System32\Drivers\RimUsb.sys [X] U1 usbo0nea; \??\C:\Windows\system32\drivers\usbo0nea.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-23 20:14 - 2014-04-23 20:14 - 00000000 ____D () C:\FRST 2014-04-23 20:13 - 2014-04-23 20:14 - 00000000 ____D () C:\Users\Malte\Desktop\rep 2014-04-18 21:06 - 2014-04-18 21:06 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b 2014-04-10 21:46 - 2014-03-08 01:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-10 21:46 - 2014-03-08 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-10 21:46 - 2014-03-08 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-10 21:46 - 2014-03-08 00:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-10 21:46 - 2014-03-08 00:57 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-10 21:46 - 2014-03-08 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-10 21:46 - 2014-03-08 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-10 21:46 - 2014-03-08 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-10 21:46 - 2014-03-08 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-10 21:46 - 2014-03-08 00:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-10 21:46 - 2014-03-08 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-10 21:45 - 2014-03-08 01:51 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-10 21:45 - 2014-03-08 01:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-10 21:45 - 2014-03-08 01:03 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-10 21:45 - 2014-03-08 01:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-10 21:45 - 2014-03-08 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-10 21:26 - 2014-04-10 21:27 - 00000000 ____D () C:\Users\Malte\Desktop\SkypePortable 2014-04-09 21:12 - 2014-04-09 21:12 - 00653152 _____ (PortableApps.com) C:\Users\Malte\Downloads\SkypePortable_6.14.0.104_online.paf.exe 2014-04-09 21:00 - 2014-04-09 21:00 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\ProductData 2014-04-09 20:59 - 2014-04-18 21:01 - 00000000 ____D () C:\ProgramData\ProductData 2014-04-09 20:59 - 2014-04-09 21:00 - 00000000 ____D () C:\ProgramData\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00001058 _____ () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-04-09 20:59 - 2014-04-09 20:59 - 00001034 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Program Files\IObit 2014-04-09 20:37 - 2014-04-09 20:37 - 00000000 ____D () C:\Users\Malte\AppData\Local\DownloadGuide 2014-04-09 19:27 - 2014-02-06 03:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-05 23:18 - 2014-04-05 23:18 - 00000752 _____ () C:\Windows\scripten_i.log 2014-03-30 01:39 - 2014-03-30 01:39 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-03-30 01:10 - 2014-03-30 01:10 - 00055232 _____ (StdLib) C:\Windows\system32\Drivers\tStLibG.sys 2014-03-30 00:40 - 2014-04-12 15:01 - 00001374 _____ () C:\Users\Malte\Desktop\Registry kostenlos entrümpeln!.lnk 2014-03-28 23:23 - 2014-04-10 21:24 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Skype 2014-03-28 23:14 - 2014-03-30 01:13 - 00000106 _____ () C:\Users\Malte\AppData\Roaming\WB.CFG 2014-03-28 23:13 - 2014-04-23 20:13 - 00000292 _____ () C:\Windows\Tasks\UpdaterEX.job 2014-03-28 23:13 - 2014-04-19 23:57 - 00000000 ____D () C:\Program Files\Mega Browse 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\UpdaterEX 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\mysearchdial 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\ProgramData\Systweak 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Program Files\Mysearchdial 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Program Files\Advanced System Protector 2014-03-28 23:13 - 2012-07-25 13:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe 2014-03-28 23:12 - 2014-04-12 15:02 - 00000264 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job 2014-03-28 23:12 - 2014-04-09 22:12 - 00000272 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job 2014-03-28 23:12 - 2014-03-28 23:12 - 27488256 _____ () C:\Users\Malte\Downloads\SkypeSetup [1].exe 2014-03-28 23:12 - 2014-03-28 23:12 - 00000000 ____D () C:\Program Files\RegClean Pro 2014-03-26 22:38 - 2014-03-26 22:39 - 00659968 _____ () C:\Users\Malte\Desktop\MicrosoftFixit50195.msi 2014-03-26 22:25 - 2014-03-26 22:25 - 34829472 _____ () C:\Users\Malte\Desktop\SkypeSetupFull.exe.dap 2014-03-26 22:17 - 2014-04-09 20:46 - 00362029 _____ () C:\Users\Malte\Desktop\sqlite3.dll 2014-03-26 22:15 - 2014-03-26 22:17 - 34829472 _____ (Skype Technologies S.A.) C:\Users\Malte\Downloads\SkypeSetupFull.exe ==================== One Month Modified Files and Folders ======= 2014-04-23 20:14 - 2014-04-23 20:14 - 00000000 ____D () C:\FRST 2014-04-23 20:14 - 2014-04-23 20:13 - 00000000 ____D () C:\Users\Malte\Desktop\rep 2014-04-23 20:13 - 2014-03-28 23:13 - 00000292 _____ () C:\Windows\Tasks\UpdaterEX.job 2014-04-23 20:13 - 2008-06-25 07:36 - 00266401 _____ () C:\ProgramData\nvModes.001 2014-04-23 20:01 - 2013-09-30 19:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-23 19:29 - 2008-07-29 02:42 - 01745034 _____ () C:\Windows\WindowsUpdate.log 2014-04-23 19:17 - 2006-11-02 12:23 - 00000342 _____ () C:\Windows\win.ini 2014-04-23 19:16 - 2013-12-21 02:35 - 00000000 ____D () C:\ProgramData\MFAData 2014-04-23 19:14 - 2008-09-11 12:40 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-04-23 19:14 - 2008-06-25 07:36 - 00266401 _____ () C:\ProgramData\nvModes.dat 2014-04-23 19:13 - 2013-11-20 22:23 - 00001366 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-updater.job 2014-04-23 19:13 - 2013-11-20 22:23 - 00001268 _____ () C:\Windows\Tasks\CS Browser Assistant 2.0-codedownloader.job 2014-04-23 19:12 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-23 19:12 - 2006-11-02 14:47 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-23 19:12 - 2006-11-02 14:47 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-22 19:40 - 2008-06-25 23:08 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-04-22 19:40 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-22 19:35 - 2012-11-19 18:47 - 00000000 ____D () C:\Users\Malte\AppData\Local\CrashDumps 2014-04-22 19:30 - 2006-11-02 12:33 - 00007184 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-21 22:30 - 2014-03-07 22:40 - 00000000 ____D () C:\Users\Malte\AppData\Local\Skype 2014-04-19 23:57 - 2014-03-28 23:13 - 00000000 ____D () C:\Program Files\Mega Browse 2014-04-18 21:06 - 2014-04-18 21:06 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b 2014-04-18 21:01 - 2014-04-09 20:59 - 00000000 ____D () C:\ProgramData\ProductData 2014-04-12 15:02 - 2014-03-28 23:12 - 00000264 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job 2014-04-12 15:01 - 2014-03-30 00:40 - 00001374 _____ () C:\Users\Malte\Desktop\Registry kostenlos entrümpeln!.lnk 2014-04-10 21:48 - 2008-06-25 07:38 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-10 21:43 - 2013-07-30 20:07 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 21:35 - 2006-11-02 12:24 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-04-10 21:27 - 2014-04-10 21:26 - 00000000 ____D () C:\Users\Malte\Desktop\SkypePortable 2014-04-10 21:24 - 2014-03-28 23:23 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Skype 2014-04-10 21:15 - 2011-04-09 09:43 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Apple Computer 2014-04-09 22:12 - 2014-03-28 23:12 - 00000272 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job 2014-04-09 21:12 - 2014-04-09 21:12 - 00653152 _____ (PortableApps.com) C:\Users\Malte\Downloads\SkypePortable_6.14.0.104_online.paf.exe 2014-04-09 21:04 - 2008-09-08 20:11 - 00000000 ____D () C:\ProgramData\Skype 2014-04-09 21:00 - 2014-04-09 21:00 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\ProductData 2014-04-09 21:00 - 2014-04-09 20:59 - 00000000 ____D () C:\ProgramData\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00001058 _____ () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-04-09 20:59 - 2014-04-09 20:59 - 00001034 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Program Files\IObit 2014-04-09 20:46 - 2014-03-26 22:17 - 00362029 _____ () C:\Users\Malte\Desktop\sqlite3.dll 2014-04-09 20:37 - 2014-04-09 20:37 - 00000000 ____D () C:\Users\Malte\AppData\Local\DownloadGuide 2014-04-09 20:14 - 2008-12-06 23:37 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\uTorrent 2014-04-07 18:35 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-04-05 23:18 - 2014-04-05 23:18 - 00000752 _____ () C:\Windows\scripten_i.log 2014-04-05 21:56 - 2013-11-20 22:22 - 00000000 ____D () C:\Program Files\CS Browser Assistant 2.0 2014-04-05 21:56 - 2013-09-19 18:26 - 00000000 ____D () C:\Program Files\Plus-HD-2.2 2014-03-30 01:39 - 2014-03-30 01:39 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-03-30 01:13 - 2014-03-28 23:14 - 00000106 _____ () C:\Users\Malte\AppData\Roaming\WB.CFG 2014-03-30 01:10 - 2014-03-30 01:10 - 00055232 _____ (StdLib) C:\Windows\system32\Drivers\tStLibG.sys 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\UpdaterEX 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\mysearchdial 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\ProgramData\Systweak 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Program Files\Mysearchdial 2014-03-28 23:13 - 2014-03-28 23:13 - 00000000 ____D () C:\Program Files\Advanced System Protector 2014-03-28 23:13 - 2013-11-03 17:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Systweak 2014-03-28 23:13 - 2012-11-17 20:44 - 00000000 ____D () C:\Program Files\Searchqu Toolbar 2014-03-28 23:12 - 2014-03-28 23:12 - 27488256 _____ () C:\Users\Malte\Downloads\SkypeSetup [1].exe 2014-03-28 23:12 - 2014-03-28 23:12 - 00000000 ____D () C:\Program Files\RegClean Pro 2014-03-28 21:55 - 2013-09-12 18:23 - 00000000 ____D () C:\Program Files\SearchProtect2093767 2014-03-26 22:39 - 2014-03-26 22:38 - 00659968 _____ () C:\Users\Malte\Desktop\MicrosoftFixit50195.msi 2014-03-26 22:25 - 2014-03-26 22:25 - 34829472 _____ () C:\Users\Malte\Desktop\SkypeSetupFull.exe.dap 2014-03-26 22:17 - 2014-03-26 22:15 - 34829472 _____ (Skype Technologies S.A.) C:\Users\Malte\Downloads\SkypeSetupFull.exe 2014-03-25 20:48 - 2008-01-21 04:47 - 00443444 _____ () C:\Windows\PFRO.log 2014-03-25 11:10 - 2008-08-29 12:40 - 00000000 ____D () C:\Users\Malte Files to move or delete: ==================== C:\Users\Malte\AppData\Roaming\desktop.ini C:\Users\Malte\AppData\Roaming\skype.ini Some content of TEMP: ==================== C:\Users\Malte\AppData\Local\Temp\avgnt.exe C:\Users\Malte\AppData\Local\Temp\expertpdf_v4_pro1.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-23 19:26 ==================== End Of Log ============================ Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-04-2014 Ran by Malte at 2014-04-23 20:16:05 Running from C:\Users\Malte\Desktop\rep Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated) Adobe Reader 8.3.1 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A83000000003}) (Version: 8.3.1 - Adobe Systems Incorporated) Adobe Shockwave Player (HKLM\...\Adobe Shockwave Player) (Version: 11 - Adobe Systems, Inc.) Advanced System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.12594 - Systweak Software) <==== ATTENTION Agere Systems HDA Modem (HKLM\...\Agere Systems Soft Modem) (Version: - Agere Systems) Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.4.0 - Ask.com) <==== ATTENTION Atheros WLAN Client (HKLM\...\{04983D37-2202-4295-94A2-8B547C66133F}) (Version: 1.00.000 - ) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4355 - AVG Technologies) AVG 2014 (Version: 14.0.3920 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4355 - AVG Technologies) Hidden AVG PC TuneUp 2014 (de-DE) (Version: 14.0.1001.229 - AVG) Hidden AVG PC TuneUp 2014 (HKLM\...\AVG PC TuneUp) (Version: 14.0.1001.229 - AVG) AVG PC TuneUp 2014 (Version: 14.0.1001.229 - AVG) Hidden avi2divx (HKLM\...\avi2divx_is1) (Version: - Readmesoft) Avira SearchFree Toolbar plus Web Protection Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.3.0.23930 - Ask.com) <==== ATTENTION Bullzip PDF Printer 6.0.0.659 (HKLM\...\Bullzip PDF Printer_is1) (Version: - Bullzip) CloneCD (HKLM\...\CloneCD) (Version: - SlySoft) CS Browser Assistant 2.0 (HKLM\...\CS Browser Assistant 2.0) (Version: 1.29.153.0 - GetDeal GmbH) CyberLink DVD Suite (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 5.0.2403 - CyberLink Corp.) CyberLink Power2Go (HKLM\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.0.3825 - CyberLink Corp.) Dassault Systemes Fonts (HKLM\...\{4519F894-278A-414D-9CA0-E216D01D94C2}) (Version: 0.9.0 - Dassault Systemes) Dassault Systemes Software B12 (HKLM\...\Dassault Systemes B12_0) (Version: - ) Dassault Systemes Software Prerequisites x86 (HKLM\...\{6DE6837F-F3A3-40FF-9F5C-A0B95948E32D}) (Version: 8.1.3 - Dassault Systemes) DDBAC (HKLM\...\{F161B4FF-3976-4917-BD27-CA28C95A13AE}) (Version: 5.3.0 - DataDesign) DivX Codec (HKLM\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.9.1 - DivX, Inc.) DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.) DivX Player (HKLM\...\{8ADFC4160D694100B5B8A22DE9DCABD9}) (Version: 7.2.0 - DivX, Inc.) DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version: - DivX, Inc.) DivX Plus Web Player (HKLM\...\{B7050CBDB2504B34BC2A9CA0A692CC29}) (Version: 2.0.0 - DivX,Inc.) DIY Writer (HKLM\...\DIY Writer) (Version: - ) Download Accelerator Plus (DAP) (HKLM\...\Download Accelerator Plus (DAP)) (Version: 8700 (Build 532) - Speedbit Ltd.) Easy Battery Manager (HKLM\...\{6F730513-8688-4C3C-90A3-6B9792CE2EF3}) (Version: 3.2.1.7 - ) Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 2.0.0.0 - Samsung) Easy Network Manager 3.0 (HKLM\...\InstallShield_{4EA8EA5D-8E46-4698-9BF7-2F2AD8E1C185}) (Version: 3.0.0.0 - Ihr Firmenname) Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Hidden Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.0.1.0 - ) Enterprise Dynamics Studio 7.2.0 781 (HKLM\...\Enterprise Dynamics 7 Studio edition - v7.2.0 r781) (Version: - ) eXPert PDF 4 (HKLM\...\{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}) (Version: 4.2.50.0 - Visage Software) Extended Update (HKCU\...\UpdaterEX) (Version: - Extended Update) FilesFrog Update Checker (HKLM\...\FilesFrog Update Checker) (Version: - ) <==== ATTENTION Free Mp3 Wma Converter V 2.2 (HKLM\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft) Furnish Pro (HKLM\...\Furnish Pro) (Version: - ) GIMP 2.4.2 (HKLM\...\WinGimp-2.0_is1) (Version: - ) GOM Player (HKLM\...\GOM Player) (Version: 2.1.27.5031 - Gretech Corporation) Google Chrome (HKLM\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.) Google Toolbar for Internet Explorer (Version: 4.0.0.002 - Google Inc.) Hidden Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPL Ghostscript Lite 8.63 (HKLM\...\GPL Ghostscript Lite_is1) (Version: - ) iCloud (HKLM\...\{925F1DB6-E86E-4378-9091-D1F68B0583C9}) (Version: 2.1.2.8 - Apple Inc.) ICQ6.5 (HKLM\...\{60DE4033-9503-48D1-A483-7846BD217CA9}) (Version: 6.5 - ICQ) IKEA Home Planner (HKLM\...\{E7310F2E-C551-4FAB-BA07-EAC2E158B1BB}) (Version: 1.9.9 - IKEA IT) imagine digital freedom - Samsung (HKLM\...\{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}) (Version: 1.0.2.0 - Samsung Electronics Co., LTD) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{BA5F3E0E-8F3E-47BD-88E4-AD3EB5225F51}) (Version: 12.00.2000 - Intel(R) Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 3.2.9.10 - IObit) iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 15 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle) Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 11 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.110 - Sun Microsystems, Inc.) Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.) Konz 2013 (HKLM\...\InstallShield_{76651FD7-2B71-4B61-9F3A-E82F52F08D92}) (Version: 1.00.0000 - USM) Konz 2013 (Version: 1.00.0000 - USM) Hidden LabelPrint (HKLM\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: .2406 - CyberLink Corp.) Langenscheidt Vokabeltrainer 3.0 Demoversion (HKLM\...\{09A5B343-7E0C-46E2-98D0-13E2FF1A54D6}) (Version: 3.0.22 - Langenscheidt) LEGO Digital Designer (HKLM\...\New LEGO Digital Designer) (Version: - ) Lexware Info Service (HKLM\...\{59624372-3B85-47f4-9B04-4911E551DF1E}) (Version: 2.61.00.0033 - Lexware GmbH & Co. KG) LightScribe System Software 1.12.37.1 (HKLM\...\{004C5DA2-2051-4D25-94BA-51CF810C91EB}) (Version: 1.12.37.1 - LightScribe) Mega Browse (HKLM\...\Mega Browse) (Version: 2014.03.28.000038 - Mega Browse) <==== ATTENTION Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft) Microsoft Office Visio 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Visio MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 (HKLM\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Visio Professional 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SOAP Toolkit 2.0 SP2 (HKLM\...\{36BEAD11-8577-49AD-9250-E06A50AE87B0}) (Version: 623.1 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{1D1D8ADC-BF08-4E61-9393-5FA305B16864}) (Version: 9.00.3042.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{5C759B74-34F4-43C6-A5D9-039CB754C5E9}) (Version: 9.00.3042.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox (1.0.7) (HKLM\...\Mozilla Firefox (1.0.7)) (Version: 1.0.7 (de-DE) - Mozilla) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyPC Backup (HKLM\...\MyPC Backup) (Version: - MyPC Backup) <==== ATTENTION Norton Security Scan (Symantec Corporation) (HKLM\...\NSSSetup.{D16D8A48-65A4-4B19-8A02-DC9A40FB80C4}) (Version: 2.0.0 - Symantec Corporation) Norton Security Scan (Version: 2.0.0 - Symantec Corporation) Hidden NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) OpenOffice.org Installer 1.0 (HKLM\...\{E728E952-DD4F-4BCD-A5C8-40FBFEFF91FE}) (Version: 1.0.9221 - Sun Microsystems) PC Speed Maximizer v3.2 (HKLM\...\PC Speed Maximizer_is1) (Version: 3.2 - Smart PC Solutions) Pixie 1.4.1 (HKLM\...\Pixie_is1) (Version: 1.4.1 - Pixie Developers) Play AVStation (HKLM\...\InstallShield_{955597D8-E5E1-474D-B647-60AC44566D24}) (Version: 4.1.20.50 - Ihr Firmenname) Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Hidden Play Camera (HKLM\...\InstallShield_{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}) (Version: 2.0.0.13 - Ihr Firmenname) Play Camera (Version: 2.0.0.13 - Ihr Firmenname) Hidden Plus-HD-2.2 (HKLM\...\Plus-HD-2.2) (Version: 1.28.153.3 - Plus HD) <==== ATTENTION PowerDirector (HKLM\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 5.0.3927 - CyberLink Corp.) PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - CyberLink Corp.) PowerProducer (HKLM\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 085120(3.7)_Vista_SSPC - CyberLink Corp.) ProductView Express 9.1 (HKLM\...\{E21F683E-AFAD-4932-91BB-21B355087FB5}) (Version: 9.1.30.12 - PTC) QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5605 - Realtek Semiconductor Corp.) RegClean Pro (HKLM\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.0.12104_15 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.5.0.12104_15 - Samsung Electronics Co., Ltd.) Hidden Samsung Magic Doctor (HKLM\...\{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}) (Version: 5.00 - Samsung Electronics Co., LTD) Samsung Recovery Solution III (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 3.0.0.5 - Samsung) Samsung Update Plus (HKLM\...\InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}) (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Samsung Update Plus (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.16.0 - SAMSUNG Electronics Co., Ltd.) SmartTools Publishing · Excel Projektplan (HKCU\...\SmartTools Publishing · Excel Projektplan) (Version: - SmartTools Publishing) Steuer 2009 (HKLM\...\{410AB9BC-B057-4D39-9260-660EE1B4BED2}) (Version: 16.05.00.0003 - Lexware GmbH & Co. KG) Steuer 2012 (HKLM\...\{01159E8A-44F7-4885-A7F9-872CE4D74063}) (Version: 20.00.8137 - Buhl Data Service GmbH) Super Clone DVD 3.0 (HKLM\...\Super Clone DVD_is1) (Version: - PowerImage inc.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.1.2.0 - Synaptics) The Rosetta Stone (HKLM\...\The Rosetta Stone) (Version: - ) TIPP10 Version 2.0.1 (HKLM\...\TIPP10_is1) (Version: - (c) 2006-2007, Tom Thielicke) TornTV (HKLM\...\1ClickDownload) (Version: 2.1 Build 26473 - TornTV.com) <==== ATTENTION TurnierPlaner Version 4.0 (HKLM\...\{E3485A74-C329-43F0-B6DA-B2613E5BC6B9}_is1) (Version: 4.0 - CilexSoft) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.3042.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) USB2.0 UVC 1.3M WebCam (HKLM\...\USB2.0 UVC 1.3M WebCam) (Version: - ) USB2.0 UVC WebCam (HKLM\...\{090962E2-4BE8-4A8A-86B0-7A5ED31C1273}) (Version: 6.11.706.012 - D-MAX) User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - ) VBA (3821b) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.) Vokabeltrainer für Windows Version 1.51 (HKLM\...\Vokabeltrainer für Windows_is1) (Version: - diginvent) WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2700 - Broadcom Corporation) WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) xVideoServiceThief (HKLM\...\{CE27EACD-B61A-4E4B-8D61-25BF51D40007}) (Version: 1.8.2 - Xesc & Technology) Yahoo! Toolbar (HKLM\...\Yahoo! Companion) (Version: - ) ==================== Restore Points ========================= 08-04-2014 20:22:45 Windows Update 09-04-2014 18:21:52 Removed Skype™ 6.14 09-04-2014 19:00:58 Removed Skype™ 6.14 10-04-2014 19:23:33 Windows Update 11-04-2014 20:01:37 Windows Update 12-04-2014 08:13:58 Geplanter Prüfpunkt 13-04-2014 19:54:12 Windows Update 14-04-2014 17:37:53 Windows Update 15-04-2014 17:30:24 Windows Update 18-04-2014 19:14:22 Windows Update 19-04-2014 22:02:07 Windows Update 21-04-2014 18:56:08 Windows Update 22-04-2014 17:32:53 Windows Update ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {0AA60ADE-1999-4F56-A1B9-EF09CA2714C6} - System32\Tasks\SamsungMagicDoctor => C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [2007-07-05] (Samsung Electronics Co., Ltd.) Task: {12648F27-9A3E-4FA4-B3EA-C47FFA81DEAE} - \couponsupport-S-649636217 No Task File <==== ATTENTION Task: {138BA823-620A-416F-A499-95E58C392DCE} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-04-09] (IObit) Task: {150CAC15-208D-4407-9345-25181B149584} - System32\Tasks\CS Browser Assistant 2.0-codedownloader => C:\Program Files\CS Browser Assistant 2.0\CS Browser Assistant 2.0-codedownloader.exe [2013-11-20] (GetDeal GmbH) Task: {19522D00-46A2-44B9-A972-F8E684DC4067} - System32\Tasks\Lexware-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2008-11-03] (Lexware GmbH & Co. KG) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3A2FA10E-E78E-4C1D-B825-43FD5F756F10} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-18] (Adobe Systems Incorporated) Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {47FDEC04-04E4-459E-8531-1FD20597424B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4933B3D8-214D-475D-B1A4-D2D492B1F215} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29] (Adobe Systems Incorporated) Task: {49F3B6FC-9BEE-4734-82C4-FAA606100F0A} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2008-05-22] (SAMSUNG Electronics) Task: {53403752-F29A-45E1-97AD-465D3F834308} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe [2008-04-17] (SAMSUNG Electronics co., LTD.) Task: {59177162-23D2-413F-993E-AA53CFD4BD03} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe [2014-02-28] (Systweak) <==== ATTENTION Task: {84C0E566-0A9A-40C5-9CFA-6BFF8FA9351C} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION Task: {90D73159-F3E8-44FB-B1CF-061A615EDB42} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {941FD8D6-59AD-4980-AC39-88DA8A84FC45} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2008-04-25] (Samsung Electronics Co., Ltd.) Task: {98A944BD-912A-4F31-AED9-E3B81C4AA968} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION Task: {98DF37CA-5A8A-40AE-825F-8532C34A42E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-24] (Google Inc.) Task: {9B7B5177-4AD5-4101-B274-7D272A2401BC} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.) Task: {A31500F9-801F-4634-9939-CFAFAAC896B9} - System32\Tasks\Norton Security Scan for Malte => C:\Program Files\Norton Security Scan\Nss.exe [2008-09-19] (Symantec Corporation) Task: {DDEF4F2D-0CEE-4D61-B219-89FDA203E0A7} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe [2013-10-30] (AVG) Task: {E4DAF2EB-F908-4895-9C08-E478949B0067} - System32\Tasks\UpdaterEX => C:\Users\Malte\AppData\Roaming\UpdaterEX\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {F7BAF841-102D-423F-97E9-362F45E16924} - System32\Tasks\CS Browser Assistant 2.0-updater => C:\Program Files\CS Browser Assistant 2.0\CS Browser Assistant 2.0-updater.exe [2013-11-20] (GetDeal GmbH) Task: {FF32FB37-A3F1-461F-B12E-B2BB59FA2837} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-24] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\CS Browser Assistant 2.0-codedownloader.job => C:\Program Files\CS Browser Assistant 2.0\CS Browser Assistant 2.0-codedownloader.exe Task: C:\Windows\Tasks\CS Browser Assistant 2.0-updater.job => C:\Program Files\CS Browser Assistant 2.0\CS Browser Assistant 2.0-updater.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Norton Security Scan for Malte.job => C:\Program Files\Norton Security Scan\Nss.exe Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\Malte\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2010-09-29 21:59 - 2005-06-02 12:40 - 00014336 _____ () C:\Windows\System32\vsmon1.dll 2008-05-23 06:46 - 2008-05-23 06:46 - 00200704 _____ () C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL 2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-04 14:57 - 2014-01-04 14:57 - 00911128 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll 2013-09-20 00:37 - 2013-09-20 00:37 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll 2008-09-11 12:40 - 2006-12-19 16:23 - 00272024 ____N () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2013-10-30 12:27 - 2013-10-30 12:27 - 00501560 _____ () C:\Program Files\AVG\AVG PC TuneUp\avgreplibx.dll 2014-03-28 23:13 - 2012-07-25 13:03 - 00886272 _____ () C:\Program Files\Advanced System Protector\System.Data.SQLite.dll 2014-03-28 23:13 - 2014-02-28 19:29 - 01730928 _____ () C:\Program Files\Advanced System Protector\aspsys.dll 2014-03-28 23:13 - 2012-07-25 13:03 - 00168448 _____ () C:\Program Files\Advanced System Protector\UNRAR.DLL 2008-06-25 07:30 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll 2008-06-25 07:30 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll 2008-06-25 07:30 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\SAMSUNG\EasySpeedUpManager\HookDllPS2.dll 2006-05-19 18:40 - 2006-05-19 18:40 - 00884224 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe 2006-05-19 18:39 - 2006-05-19 18:39 - 01239552 _____ () C:\Program Files\Visagesoft\eXPert PDF\VSPDFDIALOGS100.BPL 2006-03-02 20:39 - 2006-03-02 20:39 - 01844224 _____ () C:\Program Files\Visagesoft\eXPert PDF\te100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 03014656 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfcore100.bpl 2005-12-26 13:20 - 2005-12-26 13:20 - 02098176 _____ () C:\Program Files\Visagesoft\eXPert PDF\PKIECtrl100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 01026048 _____ () C:\Program Files\Visagesoft\eXPert PDF\vsvector100.bpl 2006-03-02 19:57 - 2006-03-02 19:57 - 00383488 _____ () C:\Program Files\Visagesoft\eXPert PDF\visage100.bpl 2006-03-02 20:28 - 2006-03-02 20:28 - 00139776 _____ () C:\Program Files\Visagesoft\eXPert PDF\uoolep100.bpl 2006-04-15 06:34 - 2006-04-15 06:34 - 00568320 _____ () C:\Program Files\Visagesoft\eXPert PDF\TMSlite100.bpl 2006-03-02 20:33 - 2006-03-02 20:33 - 00444928 _____ () C:\Program Files\Visagesoft\eXPert PDF\VirtualTree100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 00230912 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfeditor100.bpl 2006-03-02 19:55 - 2006-03-02 19:55 - 00089088 _____ () C:\Program Files\Visagesoft\eXPert PDF\vsmisc100.bpl 2006-03-02 20:01 - 2006-03-02 20:01 - 00071168 _____ () C:\Program Files\Visagesoft\eXPert PDF\VSDesktop100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 00241152 _____ () C:\Program Files\Visagesoft\eXPert PDF\EXPERTPDF4CORE.BPL 2003-08-22 07:23 - 2003-08-22 07:23 - 00225792 _____ () C:\Program Files\Visagesoft\eXPert PDF\SQLITE.DLL 2014-03-28 23:38 - 2014-03-28 23:38 - 00181760 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\1c423d6268f42d4f0569eb433daa8b77\Kies.Common.DeviceServiceLib.Interface.ni.dll 2014-04-05 21:56 - 2014-04-05 21:56 - 12620288 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\875cdfa8906f9c530e00879761eea4be\Kies.Theme.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 01764352 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\0ab8a6edf61b36d193c0cf7015801b58\Kies.UI.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\dea2304b9cdd1d0aeea1f616f9b06a4d\Kies.MVVM.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll 2014-03-29 00:14 - 2014-04-23 19:16 - 00350496 _____ () C:\Program Files\Mega Browse\bin\utilMegaBrowse.exe 2014-03-30 01:10 - 2014-03-30 01:10 - 00238880 _____ () C:\Program Files\Mega Browse\bin\FilterApp_C.exe ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:0F8F5844 AlternateDataStreams: C:\ProgramData\TEMP:AD022376 ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Microsoft-ISATAP-Adapter #2 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #3 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #3 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #6 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #7 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #8 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #8 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #9 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #10 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #11 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #12 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #13 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #14 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #15 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #16 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #17 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #18 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #19 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #20 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #21 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #22 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #23 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #23 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #24 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #25 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #26 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #27 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #28 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #29 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #30 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #31 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #32 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #33 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #34 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #35 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #36 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #37 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #38 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Microsoft-ISATAP-Adapter #38 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #39 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #40 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #41 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #42 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #43 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #43 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #44 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #45 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #46 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #47 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #48 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #48 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #49 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #50 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #51 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Broadcom 2045 Bluetooth 2.0+EDR USB Device Description: Broadcom 2045 Bluetooth 2.0+EDR USB Device Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Broadcom Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (04/23/2014 07:23:23 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 9.0.8112.16545 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 814 Anfangszeit: 01cf5f185ca72951 Zeitpunkt der Beendigung: 135 Error: (04/23/2014 07:21:51 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 9.0.8112.16545 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 1564 Anfangszeit: 01cf5f17bc52c9f1 Zeitpunkt der Beendigung: 129 Error: (04/23/2014 07:15:18 PM) (Source: Perflib) (User: ) Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4 Error: (04/23/2014 07:15:07 PM) (Source: Perflib) (User: ) Description: EmdCacheC:\Windows\system32\emdmgmt.dll4 Error: (04/23/2014 07:15:07 PM) (Source: Perflib) (User: ) Description: BITSC:\Windows\system32\bitsperf.dll4 Error: (04/23/2014 07:13:06 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/22/2014 07:37:47 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Produkt: Microsoft .NET Framework 1.1 - Update "{411EDCF7-755D-414E-A74B-3DCD6583F589}" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 Error: (04/22/2014 07:37:44 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1. The Windows installer cannot continue. Error: (04/22/2014 07:34:53 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16545, Zeitstempel 0x531a4f73, fehlerhaftes Modul gdiplus.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x515ba857, Ausnahmecode 0xc0000005, Fehleroffset 0x73ec74b2, Prozess-ID 0xaa4, Anwendungsstartzeit iexplore.exe0. Error: (04/22/2014 07:31:50 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 9.0.8112.16545 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 1334 Anfangszeit: 01cf5e50839e30df Zeitpunkt der Beendigung: 180 System errors: ============= Error: (12/07/2009 09:17:27 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 06.12.2009 um 13:14:43 unerwartet heruntergefahren. Error: (12/06/2009 10:29:37 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: 0x80070643Microsoft .NET Framework 1.1 Service Pack 1{6F5DC828-0F05-4577-9A8A-74AB1CBE00A9}106 Error: (12/06/2009 10:23:38 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (12/06/2009 10:22:09 AM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (12/06/2009 10:22:05 AM) (Source: Service Control Manager) (User: ) Description: Backbone Service4216362 (0x40562A) Error: (12/06/2009 10:22:05 AM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (12/06/2009 10:21:58 AM) (Source: HTTP) (User: ) Description: \Device\Http\ReqQueueKerberos Error: (12/03/2009 10:28:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: 0x80070643Microsoft .NET Framework 1.1 Service Pack 1{6F5DC828-0F05-4577-9A8A-74AB1CBE00A9}106 Error: (12/03/2009 10:20:22 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (12/03/2009 10:19:56 PM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Microsoft Office Sessions: ========================= Error: (03/19/2013 10:28:30 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 3557 seconds with 3480 seconds of active time. This session ended with a crash. Error: (03/10/2013 10:19:12 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1110 seconds with 900 seconds of active time. This session ended with a crash. Error: (03/10/2013 10:00:34 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 189 seconds with 180 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:57:18 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 10462 seconds with 600 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:54:08 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 179 seconds with 0 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:51:01 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2503 seconds with 1860 seconds of active time. This session ended with a crash. Error: (01/29/2013 08:42:55 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 279 seconds with 240 seconds of active time. This session ended with a crash. Error: (12/30/2012 00:42:23 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1803 seconds with 120 seconds of active time. This session ended with a crash. Error: (05/02/2011 09:46:32 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6550.5004, Microsoft Office Version: 12.0.6425.1000. This session lasted 1239 seconds with 540 seconds of active time. This session ended with a crash. Error: (11/22/2010 09:30:25 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-04-23 20:14:52.945 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:52.274 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:51.581 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:50.886 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:50.138 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:49.366 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:48.492 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-23 20:14:47.688 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-04 23:47:24.994 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\AVG\AVG2014\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-04 23:47:24.703 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\AVG\AVG2014\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 56% Total physical RAM: 3065.88 MB Available physical RAM: 1344.16 MB Total Pagefile: 6330.89 MB Available Pagefile: 4344.33 MB Total Virtual: 2047.88 MB Available Virtual: 1909.21 MB ==================== Drives ================================ Drive c: (Windows Vista) (Fixed) (Total:144.09 GB) (Free:53.98 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Windows XP) (Fixed) (Total:72.05 GB) (Free:18.64 GB) NTFS Drive g: (Dateien) (Fixed) (Total:71.94 GB) (Free:1.58 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298 GB) (Disk ID: 3A21C8C8) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=72 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=72 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
24.04.2014, 06:22 | #2 |
/// the machine /// TB-Ausbilder | Trojaner Adware: Generic_r.Kl hi,
__________________Revo Uninstaller - Download - Filepony Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION Mit Revo auch Moderat die Reste entfernen lassen. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
28.04.2014, 21:51 | #3 |
| Trojaner Adware: Generic_r.Kl hallo,
__________________so nun bin ich mit allem fertig. schon mal vorab, danke für die gute hilfe. mbam Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Update, 28.04.2014 21:13:54, SYSTEM, MALTE-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1, Update, 28.04.2014 21:14:06, SYSTEM, MALTE-PC, Manual, Malware Database, 2014.3.4.9, 2014.4.28.9, (end) adwcleaner Code:
ATTFilter # AdwCleaner v3.205 - Bericht erstellt am 28/04/2014 um 22:01:00 # Aktualisiert 28/04/2014 von Xplode # Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # Benutzername : Malte - MALTE-PC # Gestartet von : C:\Users\Malte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NWQ5PLVH\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : tStLibG ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files\003 Ordner Gelöscht : C:\Program Files\CS Browser Assistant 2.0 Ordner Gelöscht : C:\Program Files\CSBrowserHelper Ordner Gelöscht : C:\Program Files\DAEMON Tools Toolbar Ordner Gelöscht : C:\Program Files\Iminent Ordner Gelöscht : C:\Program Files\IminentToolbar Ordner Gelöscht : C:\Program Files\Mysearchdial Ordner Gelöscht : C:\Program Files\Searchqu Toolbar Ordner Gelöscht : C:\Program Files\SupTab Ordner Gelöscht : C:\Windows\system32\SearchProtect Ordner Gelöscht : C:\Users\Malte\.android Ordner Gelöscht : C:\Users\Malte\AppData\Local\apn Ordner Gelöscht : C:\Users\Malte\AppData\Local\Conduit Ordner Gelöscht : C:\Users\Malte\AppData\Local\DownloadGuide Ordner Gelöscht : C:\Users\Malte\AppData\Local\genienext Ordner Gelöscht : C:\Users\Malte\AppData\Local\lollipop Ordner Gelöscht : C:\Users\Malte\AppData\Local\Mobogenie Ordner Gelöscht : C:\Users\Malte\AppData\Local\SearchProtect Ordner Gelöscht : C:\Users\Malte\AppData\Local\Smartbar Ordner Gelöscht : C:\Users\Malte\AppData\Local\Temp\Mega Browse Ordner Gelöscht : C:\Users\Malte\AppData\LocalLow\Claro LTD Ordner Gelöscht : C:\Users\Malte\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\Malte\AppData\LocalLow\DataMngr Ordner Gelöscht : C:\Users\Malte\AppData\LocalLow\koyotesofttoolbarnew Ordner Gelöscht : C:\Users\Malte\AppData\LocalLow\PriceGong Ordner Gelöscht : C:\Users\Malte\AppData\LocalLow\searchresultstb Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\Mysearchdial Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\newnext.me Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\PerformerSoft Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\SupTab Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\Systweak Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\UpdaterEX Ordner Gelöscht : C:\Users\Malte\Documents\Mobogenie Ordner Gelöscht : C:\Users\Malte\Documents\PC Speed Maximizer Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\koyotesofttoolbarnew Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\Extensions\quick_start@gmail.com Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\Extensions\f642a7a0-3e89-45d2-875f-8394cf2f7196@2c30b4c2-9e83-4875-a4ca-6acd1e9923b2.com Ordner Gelöscht : C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com Ordner Gelöscht : C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl Ordner Gelöscht : C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo Ordner Gelöscht : C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkhojieggfgllhllcegoffdcnmdeojgb Datei Gelöscht : C:\Windows\system32\drivers\tStLibG.sys Datei Gelöscht : C:\Users\Malte\daemonprocess.txt Datei Gelöscht : C:\Users\Malte\Desktop\Continue VuuPC Installation.lnk Datei Gelöscht : C:\Program Files\Mozilla Firefox\.autoreg Datei Gelöscht : C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\searchplugins\claro.xml Datei Gelöscht : C:\Windows\Tasks\UpdaterEX.job Datei Gelöscht : C:\Windows\System32\Tasks\UpdaterEX Datei Gelöscht : C:\Windows\Tasks\CS Browser Assistant 2.0-codedownloader.job Datei Gelöscht : C:\Windows\System32\Tasks\CS Browser Assistant 2.0-codedownloader Datei Gelöscht : C:\Windows\Tasks\CS Browser Assistant 2.0-updater.job Datei Gelöscht : C:\Windows\System32\Tasks\CS Browser Assistant 2.0-updater ***** [ Verknüpfungen ] ***** Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox (Safe Mode).lnk Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox.lnk Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk Verknüpfung Desinfiziert : C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk Verknüpfung Desinfiziert : C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Verknüpfung Desinfiziert : C:\Users\Malte\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Verknüpfung Desinfiziert : C:\Users\Malte\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{58BD07EB-0EE0-4DF0-8121-DC9B693373DF}] Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4DAF2EB-F908-4895-9C08-E478949B0067} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4DAF2EB-F908-4895-9C08-E478949B0067} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{150CAC15-208D-4407-9345-25181B149584} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{150CAC15-208D-4407-9345-25181B149584} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F7BAF841-102D-423F-97E9-362F45E16924} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7BAF841-102D-423F-97E9-362F45E16924} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd Schlüssel Gelöscht : HKCU\Software\d0dcd0bc68ef43 Schlüssel Gelöscht : HKLM\SOFTWARE\d0dcd0bc68ef43 Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411421186} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322302236} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422422286} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0BF91075-F457-4A8B-99EF-140B52D2F22A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431FB0E5-2CBB-4602-9FE6-F1D64488ADD7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5C9A230D-70A5-11D5-AFB0-0050DAC67890} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8911483C-C00A-4183-9FBC-6C9C00946C15} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C3F058A9-407D-4CD1-8F66-B75605B54B69} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355305536} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455425586} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366306636} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466426686} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411421186} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EC1A45C-8BC3-4BFE-B226-4051C5D3D068} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{30cf102f-182c-4447-baa0-bbb212afad8c} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52ab7886-6907-445d-8e7d-6c83f62c2514} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9bf4b325-6596-4ef1-a40d-d16b4a2b7a40} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9f0a7c4a-13b3-4b10-941f-3947e3aa5152} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Schlüssel Gelöscht : HKCU\Software\APN DTX Schlüssel Gelöscht : HKCU\Software\AVG Secure Search Schlüssel Gelöscht : HKCU\Software\distromatic Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions Schlüssel Gelöscht : HKCU\Software\lollipop Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx Schlüssel Gelöscht : HKCU\Software\SmartBar Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\systweak Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\CS Browser Assistant 2.0 Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B} Schlüssel Gelöscht : HKLM\Software\Conduit Schlüssel Gelöscht : HKLM\Software\dt soft\daemon tools toolbar Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions Schlüssel Gelöscht : HKLM\Software\LevelQualityWatcher Schlüssel Gelöscht : HKLM\Software\SearchProtect Schlüssel Gelöscht : HKLM\Software\SP Global Schlüssel Gelöscht : HKLM\Software\SProtector Schlüssel Gelöscht : HKLM\Software\supTab Schlüssel Gelöscht : HKLM\Software\supWPM Schlüssel Gelöscht : HKLM\Software\systweak Schlüssel Gelöscht : HKLM\Software\CS Browser Assistant 2.0 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CS Browser Assistant 2.0 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FilesFrog Update Checker Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mega Browse Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PC Speed Maximizer_is1 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Plus-HD-2.2 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\UpdaterEX Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\CS Browser Assistant 2.0 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287 Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7 ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16545 Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] -\\ Mozilla Firefox v1.0.7 (de-DE) [ Datei : C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\prefs.js ] Zeile gelöscht : user_pref("browser.search.defaultenginename", "qone8"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "qone8"); Zeile gelöscht : user_pref("extensions.claro.admin", false); Zeile gelöscht : user_pref("extensions.claro.aflt", "babsst"); Zeile gelöscht : user_pref("extensions.claro.appId", "{C3110516-8EFC-49D6-8B72-69354F332062}"); Zeile gelöscht : user_pref("extensions.claro.autoRvrt", "false"); Zeile gelöscht : user_pref("extensions.claro.dfltLng", "en"); Zeile gelöscht : user_pref("extensions.claro.excTlbr", false); Zeile gelöscht : user_pref("extensions.claro.id", "f6298d32000000000000001fe2ecef23"); Zeile gelöscht : user_pref("extensions.claro.instlDay", "15700"); Zeile gelöscht : user_pref("extensions.claro.instlRef", "sst"); Zeile gelöscht : user_pref("extensions.claro.prdct", "claro"); Zeile gelöscht : user_pref("extensions.claro.prtnrId", "claro"); Zeile gelöscht : user_pref("extensions.claro.rvrt", "false"); Zeile gelöscht : user_pref("extensions.claro.tlbrId", "claro"); Zeile gelöscht : user_pref("extensions.claro.tlbrSrchUrl", ""); Zeile gelöscht : user_pref("extensions.claro.vrsn", "1.8.8.5"); Zeile gelöscht : user_pref("extensions.claro.vrsni", "1.8.8.5"); Zeile gelöscht : user_pref("extensions.claro_i.excTlbr", false); Zeile gelöscht : user_pref("extensions.claro_i.newTab", false); Zeile gelöscht : user_pref("extensions.claro_i.smplGrp", "none"); Zeile gelöscht : user_pref("extensions.claro_i.vrsnTs", "1.8.8.520:38:33"); Zeile gelöscht : user_pref("extensions.iminent.admin", false); Zeile gelöscht : user_pref("extensions.iminent.aflt", "orgnl"); Zeile gelöscht : user_pref("extensions.iminent.appId", "{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}"); Zeile gelöscht : user_pref("extensions.iminent.autoRvrt", "false"); Zeile gelöscht : user_pref("extensions.iminent.dfltLng", ""); Zeile gelöscht : user_pref("extensions.iminent.excTlbr", false); Zeile gelöscht : user_pref("extensions.iminent.ffxUnstlRst", false); Zeile gelöscht : user_pref("extensions.iminent.id", "f6298d32000000000000001fe2ecef23"); Zeile gelöscht : user_pref("extensions.iminent.instlDay", "15967"); Zeile gelöscht : user_pref("extensions.iminent.instlRef", ""); Zeile gelöscht : user_pref("extensions.iminent.newTab", false); Zeile gelöscht : user_pref("extensions.iminent.prdct", "iminent"); Zeile gelöscht : user_pref("extensions.iminent.prtnrId", "iminent"); Zeile gelöscht : user_pref("extensions.iminent.rvrt", "false"); Zeile gelöscht : user_pref("extensions.iminent.smplGrp", "none"); Zeile gelöscht : user_pref("extensions.iminent.tlbrId", "base"); Zeile gelöscht : user_pref("extensions.iminent.tlbrSrchUrl", "hxxp://start.iminent.com/?ref=toolbarm#q="); Zeile gelöscht : user_pref("extensions.iminent.vrsn", "1.8.25.0"); Zeile gelöscht : user_pref("extensions.iminent.vrsnTs", "1.8.25.018:26:14"); Zeile gelöscht : user_pref("extensions.iminent.vrsni", "1.8.25.0"); -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht [Extension] : amfclgbdpgndipgoegfpkkgobahigbcl Gelöscht [Extension] : jpmbfleldcgkldadpdinhjjopdfpjfjp ************************* AdwCleaner[R0].txt - [25651 octets] - [28/04/2014 21:59:49] AdwCleaner[S0].txt - [24439 octets] - [28/04/2014 22:01:00] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24500 octets] ########## JRT Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows Vista (TM) Home Premium x86 Ran by Malte on 28.04.2014 at 22:14:20,96 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{C430996F-4AA8-4AA8-81DE-F54432CD5786} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311301136} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess" ~~~ FireFox Successfully deleted: [Folder] C:\Users\Malte\AppData\Roaming\mozilla\firefox\profiles\73qj76vb.default\extensions\staged ~~~ Chrome Successfully deleted: [Folder] C:\Users\Malte\appdata\local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl Successfully deleted: [Folder] C:\Users\Malte\appdata\local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 28.04.2014 at 22:18:42,06 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014 Ran by Malte (administrator) on MALTE-PC on 28-04-2014 22:30:45 Running from C:\Users\Malte\Desktop\rep Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\SLsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Dassault Systemes) C:\Program Files\Dassault Systemes\B12\intel_a\code\bin\CATSysDemon.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Windows\System32\mobsync.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Syntek America Inc.) C:\Windows\System32\StkCSrv.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe () C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\ehome\ehtray.exe (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Samsung) C:\Program Files\Samsung\Kies\Kies.exe (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe (Microsoft Corporation) C:\Windows\system32\wuauclt.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Windows\system32\conime.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [13543968 2008-06-09] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [92704 2008-06-09] (NVIDIA Corporation) HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [vspdfprsrv.exe] => C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe [884224 2006-05-19] () HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [309688 2012-11-12] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-01-20] (Google Inc.) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [968120 2012-11-12] (Samsung) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [577536 2012-11-01] (Samsung Electronics) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000 HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {039ace29-9902-11dd-bc1f-001fe2ecef23} - F:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {15143fcc-30e0-11e2-b9f1-bab5751b984a} - H:\DIYWriter.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {51cbb4be-b1bb-11dd-96bf-001fe2ecef23} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {51cbb4d1-b1bb-11dd-96bf-001fe2ecef23} - H:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {87018b51-c954-11dd-8c82-806e6f6e6963} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {ec088d4f-b47a-11dd-8e41-001fe2ecef23} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {ec088d51-b47a-11dd-8e41-001fe2ecef23} - I:\AutoRun.exe AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL File Not Found Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {395342F8-638C-4C2D-9C4E-09076FE649E4} URL = https://www.google.com/search?q={searchTerms} Toolbar: HKCU - &Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation) DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab DPF: {271A3CF5-5A54-447B-A08F-BE805F0DA60B} https://www.olb.de/olb_fb3_1867c/plugin/AXFOAM.CAB DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {C752FF21-A8EF-468E-B507-5BBAFB84359E} https://hbciweb.olb.de/financebrowser5/plugin/Signlet-Plugin.CAB DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll No File FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @ptc.com/ProductViewLite - C:\Program Files\Common Files\PTC\np6_pvapplite9.dll (PTC) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npnul32.dll (mozilla.org) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Amazon.de.png FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Amazon.de.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\google.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\google.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.png FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Yahoo.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Yahoo.src FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [r_y@pkeqxb.co.uk] - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions [2009-04-25] FF HKCU\...\Firefox\Extensions: [r_y@pkeqxb.co.uk] - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions [2009-04-25] Chrome: ======= CHR HomePage: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_37d00ba32c7e411c89233e6b83975dd0_39_1006_20140424_DE_cr_sp_adppi11 CHR RestoreOnStartup: "hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_37d00ba32c7e411c89233e6b83975dd0_39_1006_20140424_DE_cr_sp_adppi11" CHR DefaultSearchKeyword: qone8 CHR DefaultSearchProvider: qone8 CHR DefaultSearchURL: hxxp://www.qone8.com/web/?type=ds&ts=1398709226&from=ild&uid=SAMSUNGXHM320JI_S1HQJD0Q713566&q={searchTerms} CHR Extension: (SaveerExtenSion) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdclgmmbnpbjcfphmedcjocfecggkdke [2013-12-30] CHR Extension: (No Name) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\liakpfdafneophpiemfjlnnmingmnklh [2013-11-20] CHR Extension: (ShopiDDropp) - C:\ProgramData\nopbipmkfgdegglfeaochadfldoikfdj [2013-12-30] ========================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.) R2 BBDemon; C:\Program Files\Dassault Systemes\B12\intel_a\code\bin\CATSysDemon.exe [49214 2003-07-05] (Dassault Systemes) S4 gupdate1ca847c659c3e70; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-12-24] (Google Inc.) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-04-09] (IObit) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] () R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [31248 2008-01-16] (Syntek America Inc.) ==================== Drivers (Whitelisted) ==================== R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [123160 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [199960 2014-04-18] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [150296 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22296 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [193304 2014-03-27] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [238872 2014-03-27] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [108312 2014-03-31] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [28440 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [211224 2014-03-31] (AVG Technologies CZ, s.r.o.) R3 btwampfl; C:\Windows\system32\drivers\btwampfl.sys [504360 2012-11-02] (Broadcom Corporation.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2008-06-25] (SAMSUNG ELECTRONICS CO., LTD.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2009-07-12] () R3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1363088 2008-03-28] (Syntek) U3 art5sbv3; C:\Windows\system32\Drivers\art5sbv3.sys [0 ] (Microsoft Corporation) S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] S3 RimUsb; System32\Drivers\RimUsb.sys [X] S3 USBAAPL; System32\Drivers\usbaapl.sys [X] U1 usbo0nea; \??\C:\Windows\system32\drivers\usbo0nea.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-28 22:14 - 2014-04-28 22:14 - 00000000 ____D () C:\Windows\ERUNT 2014-04-28 22:06 - 2014-04-28 22:06 - 00024581 _____ () C:\Users\Malte\Desktop\AdwCleaner[S0].txt 2014-04-28 21:59 - 2014-04-28 22:01 - 00000000 ____D () C:\AdwCleaner 2014-04-28 21:13 - 2014-04-28 21:53 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 21:13 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-28 21:13 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-28 21:13 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\ProgramData\IePluginService 2014-04-28 20:11 - 2014-04-28 20:11 - 00025811 _____ () C:\Users\Malte\Downloads\[TorrentDownloads.me]_[HorribleSubs] Naruto Shippuuden - 360 [720p] mkv.torrent 2014-04-24 19:30 - 2014-04-25 20:27 - 00000000 ____D () C:\Program Files\Amazon 2014-04-24 19:18 - 2014-04-24 19:18 - 00001070 _____ () C:\Users\Malte\Desktop\Revo Uninstaller.lnk 2014-04-24 19:18 - 2014-04-24 19:18 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-04-24 19:17 - 2014-04-24 19:17 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Malte\Downloads\revosetup95.exe 2014-04-23 20:14 - 2014-04-28 22:30 - 00000000 ____D () C:\FRST 2014-04-23 20:13 - 2014-04-28 22:30 - 00000000 ____D () C:\Users\Malte\Desktop\rep 2014-04-18 21:06 - 2014-04-18 21:06 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b 2014-04-18 15:02 - 2014-04-18 15:02 - 00199960 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys 2014-04-10 21:46 - 2014-03-08 01:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-10 21:46 - 2014-03-08 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-10 21:46 - 2014-03-08 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-10 21:46 - 2014-03-08 00:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-10 21:46 - 2014-03-08 00:57 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-10 21:46 - 2014-03-08 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-10 21:46 - 2014-03-08 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-10 21:46 - 2014-03-08 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-10 21:46 - 2014-03-08 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-10 21:46 - 2014-03-08 00:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-10 21:46 - 2014-03-08 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-10 21:45 - 2014-03-08 01:51 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-10 21:45 - 2014-03-08 01:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-10 21:45 - 2014-03-08 01:03 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-10 21:45 - 2014-03-08 01:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-10 21:45 - 2014-03-08 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-10 21:26 - 2014-04-10 21:27 - 00000000 ____D () C:\Users\Malte\Desktop\SkypePortable 2014-04-09 21:12 - 2014-04-09 21:12 - 00653152 _____ (PortableApps.com) C:\Users\Malte\Downloads\SkypePortable_6.14.0.104_online.paf.exe 2014-04-09 21:00 - 2014-04-09 21:00 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\ProductData 2014-04-09 20:59 - 2014-04-28 19:49 - 00000000 ____D () C:\ProgramData\ProductData 2014-04-09 20:59 - 2014-04-28 19:48 - 00000000 ____D () C:\Program Files\IObit 2014-04-09 20:59 - 2014-04-09 21:00 - 00000000 ____D () C:\ProgramData\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\IObit 2014-04-09 19:27 - 2014-02-06 03:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-05 23:18 - 2014-04-05 23:18 - 00000752 _____ () C:\Windows\scripten_i.log 2014-04-04 23:48 - 2014-04-25 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2014-03-31 16:11 - 2014-03-31 16:11 - 00211224 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdix.sys 2014-03-31 16:11 - 2014-03-31 16:11 - 00108312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys 2014-03-30 01:39 - 2014-03-30 01:39 - 00000000 ____D () C:\Users\Public\Documents\CrashDump ==================== One Month Modified Files and Folders ======= 2014-04-28 22:30 - 2014-04-23 20:14 - 00000000 ____D () C:\FRST 2014-04-28 22:30 - 2014-04-23 20:13 - 00000000 ____D () C:\Users\Malte\Desktop\rep 2014-04-28 22:26 - 2008-07-29 02:42 - 01845425 _____ () C:\Windows\WindowsUpdate.log 2014-04-28 22:24 - 2008-06-25 07:36 - 00266401 _____ () C:\ProgramData\nvModes.dat 2014-04-28 22:24 - 2008-06-25 07:36 - 00266401 _____ () C:\ProgramData\nvModes.001 2014-04-28 22:22 - 2008-09-11 12:40 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-04-28 22:21 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-28 22:21 - 2006-11-02 14:47 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-28 22:21 - 2006-11-02 14:47 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-28 22:20 - 2008-06-25 23:08 - 00001076 _____ () C:\Windows\bthservsdp.dat 2014-04-28 22:20 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-28 22:19 - 2013-12-21 02:35 - 00000000 ____D () C:\ProgramData\MFAData 2014-04-28 22:14 - 2014-04-28 22:14 - 00000000 ____D () C:\Windows\ERUNT 2014-04-28 22:06 - 2014-04-28 22:06 - 00024581 _____ () C:\Users\Malte\Desktop\AdwCleaner[S0].txt 2014-04-28 22:02 - 2008-01-21 04:47 - 00457554 _____ () C:\Windows\PFRO.log 2014-04-28 22:01 - 2014-04-28 21:59 - 00000000 ____D () C:\AdwCleaner 2014-04-28 22:01 - 2013-09-30 19:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-28 22:01 - 2009-12-24 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-04-28 22:01 - 2009-04-25 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 2014-04-28 22:01 - 2009-04-25 19:55 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-04-28 22:01 - 2008-08-29 12:42 - 00000988 _____ () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-28 22:01 - 2008-08-29 12:40 - 00000000 ____D () C:\Users\Malte 2014-04-28 21:53 - 2014-04-28 21:13 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 21:44 - 2013-11-20 22:22 - 00000000 ____D () C:\ProgramData\ShoppingChip 2014-04-28 21:44 - 2013-09-12 18:23 - 00000000 ____D () C:\Program Files\SearchProtect2093767 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 20:39 - 2010-05-06 21:18 - 00000000 ____D () C:\Program Files\Common Files\Lexware 2014-04-28 20:33 - 2009-10-26 19:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company 2014-04-28 20:33 - 2009-10-26 19:25 - 00000000 ____D () C:\Program Files\LEGO Company 2014-04-28 20:31 - 2009-01-19 19:33 - 00000000 ____D () C:\Program Files\GRETECH 2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\ProgramData\IePluginService 2014-04-28 20:11 - 2014-04-28 20:11 - 00025811 _____ () C:\Users\Malte\Downloads\[TorrentDownloads.me]_[HorribleSubs] Naruto Shippuuden - 360 [720p] mkv.torrent 2014-04-28 20:03 - 2013-09-30 19:32 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-04-28 20:03 - 2011-08-14 20:40 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-04-28 19:54 - 2006-11-02 12:33 - 00007184 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-28 19:49 - 2014-04-09 20:59 - 00000000 ____D () C:\ProgramData\ProductData 2014-04-28 19:48 - 2014-04-09 20:59 - 00000000 ____D () C:\Program Files\IObit 2014-04-28 19:48 - 2008-06-25 07:14 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-04-26 23:26 - 2008-06-25 07:32 - 00000000 ____D () C:\Windows\WinClon 2014-04-26 23:26 - 2008-06-25 07:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-26 23:25 - 2008-06-25 07:27 - 00000000 ____D () C:\Program Files\Samsung 2014-04-26 23:18 - 2013-11-21 09:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-04-26 23:17 - 2014-03-07 22:40 - 00000000 ____D () C:\Users\Malte\AppData\Local\Skype 2014-04-26 23:03 - 2011-06-03 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurnierPlaner 2014-04-26 22:54 - 2009-05-02 19:46 - 00000000 ____D () C:\Program Files\Yahoo! 2014-04-25 23:03 - 2008-09-11 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-04-25 23:03 - 2008-09-11 12:38 - 00000000 ____D () C:\Program Files\CyberLink 2014-04-25 22:47 - 2008-06-25 07:15 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll 2014-04-25 22:47 - 2008-06-25 07:15 - 00000000 ____D () C:\Windows\system32\RTCOM 2014-04-25 21:58 - 2013-04-05 16:52 - 00000000 ____D () C:\Program Files\USM 2014-04-25 21:36 - 2009-05-09 18:44 - 00000000 ____D () C:\ProgramData\Apple 2014-04-25 21:27 - 2006-11-02 13:18 - 00000000 ____D () C:\Program Files\Common Files\System 2014-04-25 21:22 - 2008-09-09 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2014-04-25 21:06 - 2008-09-26 20:18 - 00000000 ____D () C:\Program Files\SlySoft 2014-04-25 21:02 - 2008-09-13 17:39 - 00000000 ____D () C:\Windows\system32\codec 2014-04-25 20:35 - 2013-12-21 02:41 - 00000000 ____D () C:\Program Files\AVG 2014-04-25 20:27 - 2014-04-24 19:30 - 00000000 ____D () C:\Program Files\Amazon 2014-04-25 16:56 - 2014-04-04 23:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2014-04-25 16:56 - 2006-11-02 12:23 - 00000342 _____ () C:\Windows\win.ini 2014-04-24 19:18 - 2014-04-24 19:18 - 00001070 _____ () C:\Users\Malte\Desktop\Revo Uninstaller.lnk 2014-04-24 19:18 - 2014-04-24 19:18 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-04-24 19:17 - 2014-04-24 19:17 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Malte\Downloads\revosetup95.exe 2014-04-24 10:27 - 2013-12-21 02:43 - 00000000 ____D () C:\ProgramData\AVG2014 2014-04-23 20:48 - 2012-11-19 18:47 - 00000000 ____D () C:\Users\Malte\AppData\Local\CrashDumps 2014-04-18 21:06 - 2014-04-18 21:06 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b 2014-04-18 15:02 - 2014-04-18 15:02 - 00199960 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys 2014-04-10 21:48 - 2008-06-25 07:38 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-10 21:43 - 2013-07-30 20:07 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 21:35 - 2006-11-02 12:24 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-04-10 21:27 - 2014-04-10 21:26 - 00000000 ____D () C:\Users\Malte\Desktop\SkypePortable 2014-04-10 21:24 - 2014-03-28 23:23 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Skype 2014-04-10 21:15 - 2011-04-09 09:43 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Apple Computer 2014-04-09 21:12 - 2014-04-09 21:12 - 00653152 _____ (PortableApps.com) C:\Users\Malte\Downloads\SkypePortable_6.14.0.104_online.paf.exe 2014-04-09 21:04 - 2008-09-08 20:11 - 00000000 ____D () C:\ProgramData\Skype 2014-04-09 21:00 - 2014-04-09 21:00 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\ProductData 2014-04-09 21:00 - 2014-04-09 20:59 - 00000000 ____D () C:\ProgramData\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\IObit 2014-04-09 20:46 - 2014-03-26 22:17 - 00362029 _____ () C:\Users\Malte\Desktop\sqlite3.dll 2014-04-07 18:35 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-04-05 23:18 - 2014-04-05 23:18 - 00000752 _____ () C:\Windows\scripten_i.log 2014-04-03 09:51 - 2014-04-28 21:13 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-28 21:13 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-28 21:13 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-31 16:11 - 2014-03-31 16:11 - 00211224 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdix.sys 2014-03-31 16:11 - 2014-03-31 16:11 - 00108312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys 2014-03-30 01:39 - 2014-03-30 01:39 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-03-30 01:13 - 2014-03-28 23:14 - 00000106 _____ () C:\Users\Malte\AppData\Roaming\WB.CFG Files to move or delete: ==================== C:\Users\Malte\AppData\Roaming\desktop.ini C:\Users\Malte\AppData\Roaming\skype.ini Some content of TEMP: ==================== C:\Users\Malte\AppData\Local\Temp\avgnt.exe C:\Users\Malte\AppData\Local\Temp\BackupSetup.exe C:\Users\Malte\AppData\Local\Temp\expertpdf_v4_pro1.exe C:\Users\Malte\AppData\Local\Temp\Quarantine.exe C:\Users\Malte\AppData\Local\Temp\z3v2hbig.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-28 22:30 ==================== End Of Log ============================ Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-04-2014 Ran by Malte at 2014-04-28 22:31:30 Running from C:\Users\Malte\Desktop\rep Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Reader 8.3.1 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A83000000003}) (Version: 8.3.1 - Adobe Systems Incorporated) Adobe Shockwave Player (HKLM\...\Adobe Shockwave Player) (Version: 11 - Adobe Systems, Inc.) Agere Systems HDA Modem (HKLM\...\Agere Systems Soft Modem) (Version: - Agere Systems) Atheros WLAN Client (HKLM\...\{04983D37-2202-4295-94A2-8B547C66133F}) (Version: 1.00.000 - ) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4570 - AVG Technologies) AVG 2014 (Version: 14.0.3931 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4570 - AVG Technologies) Hidden Bullzip PDF Printer 6.0.0.659 (HKLM\...\Bullzip PDF Printer_is1) (Version: - Bullzip) CyberLink DVD Suite (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 5.0.2403 - CyberLink Corp.) Dassault Systemes Fonts (HKLM\...\{4519F894-278A-414D-9CA0-E216D01D94C2}) (Version: 0.9.0 - Dassault Systemes) Dassault Systemes Software B12 (HKLM\...\Dassault Systemes B12_0) (Version: - ) Dassault Systemes Software Prerequisites x86 (HKLM\...\{6DE6837F-F3A3-40FF-9F5C-A0B95948E32D}) (Version: 8.1.3 - Dassault Systemes) DDBAC (HKLM\...\{F161B4FF-3976-4917-BD27-CA28C95A13AE}) (Version: 5.3.0 - DataDesign) DivX Codec (HKLM\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.9.1 - DivX, Inc.) DivX Player (HKLM\...\{8ADFC4160D694100B5B8A22DE9DCABD9}) (Version: 7.2.0 - DivX, Inc.) Download Accelerator Plus (DAP) (HKLM\...\Download Accelerator Plus (DAP)) (Version: 8700 (Build 532) - Speedbit Ltd.) Enterprise Dynamics Studio 7.2.0 781 (HKLM\...\Enterprise Dynamics 7 Studio edition - v7.2.0 r781) (Version: - ) eXPert PDF 4 (HKLM\...\{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}) (Version: 4.2.50.0 - Visage Software) Furnish Pro (HKLM\...\Furnish Pro) (Version: - ) GIMP 2.4.2 (HKLM\...\WinGimp-2.0_is1) (Version: - ) Google Chrome (HKLM\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.) Google Toolbar for Internet Explorer (Version: 4.0.0.002 - Google Inc.) Hidden Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPL Ghostscript Lite 8.63 (HKLM\...\GPL Ghostscript Lite_is1) (Version: - ) iCloud (HKLM\...\{925F1DB6-E86E-4378-9091-D1F68B0583C9}) (Version: 2.1.2.8 - Apple Inc.) imagine digital freedom - Samsung (HKLM\...\{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}) (Version: 1.0.2.0 - Samsung Electronics Co., LTD) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{BA5F3E0E-8F3E-47BD-88E4-AD3EB5225F51}) (Version: 12.00.2000 - Intel(R) Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 15 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle) Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 11 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.110 - Sun Microsystems, Inc.) Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.) Lexware Info Service (HKLM\...\{59624372-3B85-47f4-9B04-4911E551DF1E}) (Version: 2.61.00.0033 - Lexware GmbH & Co. KG) Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft) Microsoft Office Visio 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Visio MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 (HKLM\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Visio Professional 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation) Microsoft SOAP Toolkit 2.0 SP2 (HKLM\...\{36BEAD11-8577-49AD-9250-E06A50AE87B0}) (Version: 623.1 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{1D1D8ADC-BF08-4E61-9393-5FA305B16864}) (Version: 9.00.3042.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{5C759B74-34F4-43C6-A5D9-039CB754C5E9}) (Version: 9.00.3042.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox (1.0.7) (HKLM\...\Mozilla Firefox (1.0.7)) (Version: 1.0.7 (de-DE) - Mozilla) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) Play AVStation (HKLM\...\InstallShield_{955597D8-E5E1-474D-B647-60AC44566D24}) (Version: 4.1.20.50 - Ihr Firmenname) Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Hidden Play Camera (HKLM\...\InstallShield_{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}) (Version: 2.0.0.13 - Ihr Firmenname) Play Camera (Version: 2.0.0.13 - Ihr Firmenname) Hidden PowerDirector (HKLM\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 5.0.3927 - CyberLink Corp.) PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - CyberLink Corp.) ProductView Express 9.1 (HKLM\...\{E21F683E-AFAD-4932-91BB-21B355087FB5}) (Version: 9.1.30.12 - PTC) Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.0.12104_15 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.5.0.12104_15 - Samsung Electronics Co., Ltd.) Hidden Samsung Update Plus (HKLM\...\InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}) (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Samsung Update Plus (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.16.0 - SAMSUNG Electronics Co., Ltd.) SmartTools Publishing · Excel Projektplan (HKCU\...\SmartTools Publishing · Excel Projektplan) (Version: - SmartTools Publishing) Steuer 2012 (HKLM\...\{01159E8A-44F7-4885-A7F9-872CE4D74063}) (Version: 20.00.8137 - Buhl Data Service GmbH) Super Clone DVD 3.0 (HKLM\...\Super Clone DVD_is1) (Version: - PowerImage inc.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.1.2.0 - Synaptics) The Rosetta Stone (HKLM\...\The Rosetta Stone) (Version: - ) TIPP10 Version 2.0.1 (HKLM\...\TIPP10_is1) (Version: - (c) 2006-2007, Tom Thielicke) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.3042.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) USB2.0 UVC 1.3M WebCam (HKLM\...\USB2.0 UVC 1.3M WebCam) (Version: - ) USB2.0 UVC WebCam (HKLM\...\{090962E2-4BE8-4A8A-86B0-7A5ED31C1273}) (Version: 6.11.706.012 - D-MAX) User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - ) VBA (3821b) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Vokabeltrainer für Windows Version 1.51 (HKLM\...\Vokabeltrainer für Windows_is1) (Version: - diginvent) WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2700 - Broadcom Corporation) WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) xVideoServiceThief (HKLM\...\{CE27EACD-B61A-4E4B-8D61-25BF51D40007}) (Version: 1.8.2 - Xesc & Technology) ==================== Restore Points ========================= 24-04-2014 17:33:13 Removed Avira SearchFree Toolbar plus Web Protection. 25-04-2014 14:47:36 Revo Uninstaller's restore point - Easy SpeedUp Manager 25-04-2014 14:55:19 Removed Easy SpeedUp Manager 25-04-2014 18:26:28 Revo Uninstaller's restore point - Amazon 1Button App 25-04-2014 18:28:24 Revo Uninstaller's restore point - Amazon 1Button App 25-04-2014 18:31:28 Revo Uninstaller's restore point - AVG PC TuneUp 2014 25-04-2014 18:33:31 AVG PC TuneUp 2014 wird entfernt 25-04-2014 18:35:22 AVG PC TuneUp 2014 (de-DE) wird entfernt 25-04-2014 18:37:15 Revo Uninstaller's restore point - Easy Battery Manager 25-04-2014 18:38:27 Removed Easy Battery Manager 25-04-2014 18:42:00 Revo Uninstaller's restore point - Easy Display Manager 25-04-2014 18:43:05 Removed Easy Display Manager 25-04-2014 18:47:22 Revo Uninstaller's restore point - FilesFrog Update Checker 25-04-2014 18:50:10 Revo Uninstaller's restore point - Easy Network Manager 3.0 25-04-2014 18:51:19 Konfiguriert Easy Network Manager 3.0 25-04-2014 18:53:46 Revo Uninstaller's restore point - Advanced Disk Recovery 25-04-2014 18:54:56 Revo Uninstaller's restore point - Free Mp3 Wma Converter V 2.2 25-04-2014 18:58:54 Revo Uninstaller's restore point - ICQ6.5 25-04-2014 19:02:11 Revo Uninstaller's restore point - avi2divx 25-04-2014 19:04:42 Revo Uninstaller's restore point - CloneCD 25-04-2014 19:05:50 Remove CloneCD 25-04-2014 19:07:36 Revo Uninstaller's restore point - CyberLink Power2Go 25-04-2014 19:13:09 Revo Uninstaller's restore point - DivX Plus DirectShow Filters 25-04-2014 19:15:01 Revo Uninstaller's restore point - Extended Update 25-04-2014 19:19:14 Revo Uninstaller's restore point - DivX Converter 25-04-2014 19:21:34 Revo Uninstaller's restore point - DivX Plus Web Player 25-04-2014 19:23:09 Revo Uninstaller's restore point - DIY Writer 25-04-2014 19:33:37 Revo Uninstaller's restore point - Apple Application Support 25-04-2014 19:37:01 Revo Uninstaller's restore point - Apple Mobile Device Support 25-04-2014 19:41:24 Revo Uninstaller's restore point - Apple Software Update 25-04-2014 19:44:37 Revo Uninstaller's restore point - Google Chrome 25-04-2014 19:45:59 Revo Uninstaller's restore point - IObit Uninstaller 25-04-2014 19:52:06 Revo Uninstaller's restore point - LabelPrint 25-04-2014 19:56:35 Revo Uninstaller's restore point - Konz 2013 25-04-2014 19:57:03 Entfernt Konz 2013 25-04-2014 19:59:16 Revo Uninstaller's restore point - Langenscheidt Vokabeltrainer 3.0 Demoversion 25-04-2014 19:59:40 Langenscheidt Vokabeltrainer 3.0 Demoversion wird entfernt 25-04-2014 20:02:46 Revo Uninstaller's restore point - MyPC Backup 25-04-2014 20:10:30 Revo Uninstaller's restore point - Norton Security Scan (Symantec Corporation) 25-04-2014 20:13:10 Revo Uninstaller's restore point - OpenOffice.org Installer 1.0 25-04-2014 20:13:34 OpenOffice.org Installer 1.0 wird entfernt 25-04-2014 20:16:22 Revo Uninstaller's restore point - PC Cleaner 25-04-2014 20:18:25 Revo Uninstaller's restore point - PC Speed Maximizer v3.2 25-04-2014 20:21:42 Revo Uninstaller's restore point - LightScribe System Software 1.12.37.1 25-04-2014 20:22:02 Removed LightScribe System Software 1.12.37.1. 25-04-2014 20:26:28 Revo Uninstaller's restore point - Microsoft Silverlight 25-04-2014 20:26:57 Removed Microsoft Silverlight 25-04-2014 20:33:56 Revo Uninstaller's restore point - Plus-HD-2.2 25-04-2014 20:40:40 Revo Uninstaller's restore point - QuickTime 25-04-2014 20:44:08 Revo Uninstaller's restore point - Mega Browse 25-04-2014 20:46:32 Revo Uninstaller's restore point - Realtek High Definition Audio Driver 25-04-2014 21:00:49 Revo Uninstaller's restore point - PowerProducer 25-04-2014 21:09:21 Revo Uninstaller's restore point - Samsung Kies 25-04-2014 21:11:34 Revo Uninstaller's restore point - Samsung Magic Doctor 25-04-2014 21:12:50 Removed Samsung Magic Doctor 26-04-2014 20:54:01 Revo Uninstaller's restore point - Yahoo! Toolbar 26-04-2014 20:55:37 Revo Uninstaller's restore point - Systweak Support Dock 26-04-2014 20:57:40 Revo Uninstaller's restore point - TornTV 26-04-2014 21:00:30 Revo Uninstaller's restore point - TurnierPlaner Version 4.0 26-04-2014 21:13:51 Revo Uninstaller's restore point - VoiceOver Kit 26-04-2014 21:24:44 Revo Uninstaller's restore point - Samsung Recovery Solution III 26-04-2014 21:26:01 Entfernt Samsung Recovery Solution III 28-04-2014 17:55:08 Windows Update 28-04-2014 18:12:37 Installed AVG 2014 ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {12648F27-9A3E-4FA4-B3EA-C47FFA81DEAE} - \couponsupport-S-649636217 No Task File <==== ATTENTION Task: {19522D00-46A2-44B9-A972-F8E684DC4067} - System32\Tasks\Lexware-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2008-11-03] (Lexware GmbH & Co. KG) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3A2FA10E-E78E-4C1D-B825-43FD5F756F10} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-28] (Adobe Systems Incorporated) Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {4933B3D8-214D-475D-B1A4-D2D492B1F215} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29] (Adobe Systems Incorporated) Task: {90D73159-F3E8-44FB-B1CF-061A615EDB42} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {98DF37CA-5A8A-40AE-825F-8532C34A42E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-24] (Google Inc.) Task: {9B7B5177-4AD5-4101-B274-7D272A2401BC} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {FF32FB37-A3F1-461F-B12E-B2BB59FA2837} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-24] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2008-05-23 06:46 - 2008-05-23 06:46 - 00200704 _____ () C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL 2010-09-29 21:59 - 2005-06-02 12:40 - 00014336 _____ () C:\Windows\System32\vsmon1.dll 2008-09-11 12:40 - 2006-12-19 16:23 - 00272024 ____N () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2006-05-19 18:40 - 2006-05-19 18:40 - 00884224 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe 2006-05-19 18:39 - 2006-05-19 18:39 - 01239552 _____ () C:\Program Files\Visagesoft\eXPert PDF\VSPDFDIALOGS100.BPL 2006-03-02 20:39 - 2006-03-02 20:39 - 01844224 _____ () C:\Program Files\Visagesoft\eXPert PDF\te100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 03014656 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfcore100.bpl 2005-12-26 13:20 - 2005-12-26 13:20 - 02098176 _____ () C:\Program Files\Visagesoft\eXPert PDF\PKIECtrl100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 01026048 _____ () C:\Program Files\Visagesoft\eXPert PDF\vsvector100.bpl 2006-03-02 19:57 - 2006-03-02 19:57 - 00383488 _____ () C:\Program Files\Visagesoft\eXPert PDF\visage100.bpl 2006-03-02 20:28 - 2006-03-02 20:28 - 00139776 _____ () C:\Program Files\Visagesoft\eXPert PDF\uoolep100.bpl 2006-04-15 06:34 - 2006-04-15 06:34 - 00568320 _____ () C:\Program Files\Visagesoft\eXPert PDF\TMSlite100.bpl 2006-03-02 20:33 - 2006-03-02 20:33 - 00444928 _____ () C:\Program Files\Visagesoft\eXPert PDF\VirtualTree100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 00230912 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfeditor100.bpl 2006-03-02 19:55 - 2006-03-02 19:55 - 00089088 _____ () C:\Program Files\Visagesoft\eXPert PDF\vsmisc100.bpl 2006-03-02 20:01 - 2006-03-02 20:01 - 00071168 _____ () C:\Program Files\Visagesoft\eXPert PDF\VSDesktop100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 00241152 _____ () C:\Program Files\Visagesoft\eXPert PDF\EXPERTPDF4CORE.BPL 2003-08-22 07:23 - 2003-08-22 07:23 - 00225792 _____ () C:\Program Files\Visagesoft\eXPert PDF\SQLITE.DLL 2014-03-28 23:38 - 2014-03-28 23:38 - 00181760 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\1c423d6268f42d4f0569eb433daa8b77\Kies.Common.DeviceServiceLib.Interface.ni.dll 2014-04-05 21:56 - 2014-04-05 21:56 - 12620288 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\875cdfa8906f9c530e00879761eea4be\Kies.Theme.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 01764352 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\0ab8a6edf61b36d193c0cf7015801b58\Kies.UI.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\dea2304b9cdd1d0aeea1f616f9b06a4d\Kies.MVVM.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:0F8F5844 AlternateDataStreams: C:\ProgramData\TEMP:AD022376 ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Microsoft-ISATAP-Adapter #2 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #3 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #3 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #6 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #7 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #8 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #8 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #9 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #10 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #11 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #12 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #13 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #14 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #15 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #16 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #17 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #18 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #19 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #20 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #21 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #22 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #23 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #23 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #24 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #25 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #26 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #27 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #28 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #29 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #30 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #31 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #32 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #33 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #34 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #35 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #36 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #37 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #38 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Microsoft-ISATAP-Adapter #38 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #39 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #40 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #41 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #42 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #43 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #43 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #44 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #45 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #46 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #47 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #48 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #48 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #49 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #50 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #51 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (04/28/2014 10:40:01 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\LOW\HISTORY.IE5\DESKTOP.INI> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (04/28/2014 10:39:55 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\LOW\HISTORY.IE5\MSHIST012014042820140429> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (04/28/2014 10:27:37 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\.ANDROID\ADBKEY.PUB> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (04/28/2014 10:27:37 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\.ANDROID\ADBKEY> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (04/28/2014 10:26:01 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\DESKTOP.INI> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (04/28/2014 10:22:54 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 10:19:31 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\MSHIST012014042820140429> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) System errors: ============= Error: (04/28/2014 10:26:50 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (04/28/2014 10:23:00 PM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (04/28/2014 10:22:55 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Microsoft Office Sessions: ========================= Error: (03/19/2013 10:28:30 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 3557 seconds with 3480 seconds of active time. This session ended with a crash. Error: (03/10/2013 10:19:12 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1110 seconds with 900 seconds of active time. This session ended with a crash. Error: (03/10/2013 10:00:34 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 189 seconds with 180 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:57:18 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 10462 seconds with 600 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:54:08 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 179 seconds with 0 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:51:01 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2503 seconds with 1860 seconds of active time. This session ended with a crash. Error: (01/29/2013 08:42:55 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 279 seconds with 240 seconds of active time. This session ended with a crash. Error: (12/30/2012 00:42:23 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1803 seconds with 120 seconds of active time. This session ended with a crash. Error: (05/02/2011 09:46:32 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6550.5004, Microsoft Office Version: 12.0.6425.1000. This session lasted 1239 seconds with 540 seconds of active time. This session ended with a crash. Error: (11/22/2010 09:30:25 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-04-28 22:31:19.476 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:19.117 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:18.762 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:18.407 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:18.044 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:17.779 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:17.531 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:17.280 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:16.782 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-28 22:31:16.520 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 46% Total physical RAM: 3065.88 MB Available physical RAM: 1651.7 MB Total Pagefile: 6330.89 MB Available Pagefile: 4787.44 MB Total Virtual: 2047.88 MB Available Virtual: 1925.07 MB ==================== Drives ================================ Drive c: (Windows Vista) (Fixed) (Total:144.09 GB) (Free:60.17 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Windows XP) (Fixed) (Total:72.05 GB) (Free:18.64 GB) NTFS Drive g: (Dateien) (Fixed) (Total:71.94 GB) (Free:1.58 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298 GB) (Disk ID: 3A21C8C8) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=72 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=72 GB) - (Type=OF Extended) ==================== End Of Log ============================ Vielen Dank nochmals Gruß |
29.04.2014, 19:50 | #4 |
/// the machine /// TB-Ausbilder | Trojaner Adware: Generic_r.KlESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.05.2014, 21:39 | #5 |
| Trojaner Adware: Generic_r.Kl nabend, anbei die logfile Eset: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=0ee66a3fa12f2e4b825c600c3ff88387 # engine=18102 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-05-02 01:35:52 # local_time=2014-05-02 03:35:52 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=5892 16776574 100 100 10615489 236570480 0 0 # scanned=248993 # found=7 # cleaned=0 # scan_time=71201 sh=16325F0A1972A603FCDDB79B3DC19C0B0C3D2C44 ft=1 fh=184445771bc0b6b0 vn="Variante von Win32/SpeedingUpMyPC.F Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2396745843-670575525-1643572242-1003\$R6N2H4P.exe" sh=C6903523CA77EFEC5EC261B57E8F8CEDB6323BE9 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\liakpfdafneophpiemfjlnnmingmnklh\1.1\O11ug.js" sh=B78EDBC50A554DA76F927677E4EDC9DB9B2BBB17 ft=0 fh=0000000000000000 vn="JS/Exploit.Agent.NFW Trojaner" ac=I fn="C:\Users\Malte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PAF2IOJ6\pd[1].htm" sh=E0E3ECB336E1E26F1B9EEA04F51CFF4B3FF7E268 ft=0 fh=0000000000000000 vn="JS/Kryptik.AQM Trojaner" ac=I fn="C:\Users\Malte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V1GLM3IG\msie[1].htm" sh=3A6F4A9C5E2973757A77CF55669030FE5B00A41B ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NBI Trojaner" ac=I fn="C:\Users\Malte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\3ecb30c-16663b83" sh=9C0EFE203B4BEC315059CEE4FF65464E0BAB10B4 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.PRO Trojaner" ac=I fn="C:\Users\Malte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\2e6a9570-28cc23ed" sh=5863F4063665031E132D9129E14A9163C5EE006E ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Malte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\4f6f2d85-6c162b53" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=0ee66a3fa12f2e4b825c600c3ff88387 # engine=18111 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-05-02 03:17:54 # local_time=2014-05-02 05:17:54 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=5892 16776574 100 100 11460411 236576602 0 0 # scanned=262391 # found=6 # cleaned=6 # scan_time=5769 sh=16325F0A1972A603FCDDB79B3DC19C0B0C3D2C44 ft=1 fh=184445771bc0b6b0 vn="Variante von Win32/SpeedingUpMyPC.F Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\$Recycle.Bin\S-1-5-21-2396745843-670575525-1643572242-1003\$R6N2H4P.exe" sh=C6903523CA77EFEC5EC261B57E8F8CEDB6323BE9 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\liakpfdafneophpiemfjlnnmingmnklh\1.1\O11ug.js" sh=B78EDBC50A554DA76F927677E4EDC9DB9B2BBB17 ft=0 fh=0000000000000000 vn="JS/Exploit.Agent.NFW Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Malte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PAF2IOJ6\pd[1].htm" sh=4EE8540352B651BB84D8910F143AA4C0DDB1C21A ft=0 fh=0000000000000000 vn="HTML/Iframe.B.Gen Virus (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Malte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V1GLM3IG\mod[1].js" sh=E0E3ECB336E1E26F1B9EEA04F51CFF4B3FF7E268 ft=0 fh=0000000000000000 vn="JS/Kryptik.AQM Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Malte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V1GLM3IG\msie[1].htm" sh=9C0EFE203B4BEC315059CEE4FF65464E0BAB10B4 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.PRO Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Malte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\2e6a9570-28cc23ed" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=0ee66a3fa12f2e4b825c600c3ff88387 # engine=18117 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-05-02 08:10:26 # local_time=2014-05-02 10:10:26 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=5892 16776574 100 100 11477963 236594154 0 0 # scanned=256060 # found=2 # cleaned=0 # scan_time=7012 sh=3A6F4A9C5E2973757A77CF55669030FE5B00A41B ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NBI Trojaner" ac=I fn="C:\Users\Malte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\3ecb30c-16663b83" sh=5863F4063665031E132D9129E14A9163C5EE006E ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Malte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\4f6f2d85-6c162b53" Code:
ATTFilter Results of screen317's Security Check version 0.99.82 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` AVG AntiVirus Free Edition 2014 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java(TM) 6 Update 11 Java 7 Update 15 Java(TM) 6 Update 7 Java version out of Date! Adobe Reader 8 Adobe Reader out of Date! Mozilla Firefox (1.0.7) Firefox out of Date! Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` AVG avgwdsvc.exe AVG avgrsx.exe AVG avgnsx.exe AVG avgemc.exe Malte Desktop SkypePortable SkypePortable.exe Malte Desktop SkypePortable App\Skype\Phone\Skype.exe Malte AppData Local Microsoft\Windows\Temporary Internet Files\Content.IE5\NWQ5PLVH\SecurityCheck.exe Malte AppData Local Temp\RarSFX2\SecurityCheck\Objlist.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-05-2014 Ran by Malte (administrator) on MALTE-PC on 02-05-2014 22:31:09 Running from C:\Users\Malte\Desktop\rep Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe (Dassault Systemes) C:\Program Files\Dassault Systemes\B12\intel_a\code\bin\CATSysDemon.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7Debug\mdm.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Syntek America Inc.) C:\Windows\System32\StkCSrv.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe () C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\ehome\ehtray.exe (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Samsung) C:\Program Files\Samsung\Kies\Kies.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_13_0_0_206_ActiveX.exe (PortableApps.com) C:\Users\Malte\Desktop\SkypePortable\SkypePortable.exe (Skype Technologies S.A.) C:\Users\Malte\Desktop\SkypePortable\App\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.) HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [13543968 2008-06-09] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [92704 2008-06-09] (NVIDIA Corporation) HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.) HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] () HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [vspdfprsrv.exe] => C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe [884224 2006-05-19] () HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [309688 2012-11-12] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-01-20] (Google Inc.) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [968120 2012-11-12] (Samsung) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [577536 2012-11-01] (Samsung Electronics) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000 HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {039ace29-9902-11dd-bc1f-001fe2ecef23} - F:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {15143fcc-30e0-11e2-b9f1-bab5751b984a} - H:\DIYWriter.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {51cbb4be-b1bb-11dd-96bf-001fe2ecef23} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {51cbb4d1-b1bb-11dd-96bf-001fe2ecef23} - H:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {87018b51-c954-11dd-8c82-806e6f6e6963} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {ec088d4f-b47a-11dd-8e41-001fe2ecef23} - F:\AutoRun.exe HKU\S-1-5-21-2396745843-670575525-1643572242-1003\...\MountPoints2: {ec088d51-b47a-11dd-8e41-001fe2ecef23} - I:\AutoRun.exe AppInit_DLLs: C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL => C:\PROGRA~1\Amazon\AMAZON~1\\AMAZON~1.DLL File Not Found Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {395342F8-638C-4C2D-9C4E-09076FE649E4} URL = https://www.google.com/search?q={searchTerms} Toolbar: HKCU - &Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation) DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab DPF: {271A3CF5-5A54-447B-A08F-BE805F0DA60B} https://www.olb.de/olb_fb3_1867c/plugin/AXFOAM.CAB DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {C752FF21-A8EF-468E-B507-5BBAFB84359E} https://hbciweb.olb.de/financebrowser5/plugin/Signlet-Plugin.CAB DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll No File FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @ptc.com/ProductViewLite - C:\Program Files\Common Files\PTC\np6_pvapplite9.dll (PTC) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npnul32.dll (mozilla.org) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Amazon.de.png FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Amazon.de.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\google.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\google.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.png FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.src FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Yahoo.gif FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Yahoo.src FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [r_y@pkeqxb.co.uk] - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions [2009-04-25] FF HKCU\...\Firefox\Extensions: [r_y@pkeqxb.co.uk] - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions FF Extension: No Name - C:\Users\Malte\AppData\Roaming\Mozilla\Firefox\Profiles\73qj76vb.default\extensions [2009-04-25] Chrome: ======= CHR HomePage: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_37d00ba32c7e411c89233e6b83975dd0_39_1006_20140424_DE_cr_sp_adppi11 CHR RestoreOnStartup: "hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_37d00ba32c7e411c89233e6b83975dd0_39_1006_20140424_DE_cr_sp_adppi11" CHR DefaultSearchKeyword: qone8 CHR DefaultSearchProvider: qone8 CHR DefaultSearchURL: hxxp://www.qone8.com/web/?type=ds&ts=1398709226&from=ild&uid=SAMSUNGXHM320JI_S1HQJD0Q713566&q={searchTerms} CHR Extension: (SaveerExtenSion) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdclgmmbnpbjcfphmedcjocfecggkdke [2013-12-30] CHR Extension: (No Name) - C:\Users\Malte\AppData\Local\Google\Chrome\User Data\Default\Extensions\liakpfdafneophpiemfjlnnmingmnklh [2013-11-20] CHR Extension: (ShopiDDropp) - C:\ProgramData\nopbipmkfgdegglfeaochadfldoikfdj [2013-12-30] ========================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.) R2 BBDemon; C:\Program Files\Dassault Systemes\B12\intel_a\code\bin\CATSysDemon.exe [49214 2003-07-05] (Dassault Systemes) S4 gupdate1ca847c659c3e70; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-12-24] (Google Inc.) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-04-09] (IObit) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] () S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] () R2 StkSSrv; C:\Windows\System32\StkCSrv.exe [31248 2008-01-16] (Syntek America Inc.) ==================== Drivers (Whitelisted) ==================== R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [123160 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [199960 2014-04-18] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [150296 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22296 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [193304 2014-03-27] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [238872 2014-03-27] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [108312 2014-03-31] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [28440 2014-03-27] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [211224 2014-03-31] (AVG Technologies CZ, s.r.o.) R3 btwampfl; C:\Windows\system32\drivers\btwampfl.sys [504360 2012-11-02] (Broadcom Corporation.) R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2008-06-25] (SAMSUNG ELECTRONICS CO., LTD.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2009-07-12] () R3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1363088 2008-03-28] (Syntek) U3 aeh5wyi8; C:\Windows\system32\Drivers\aeh5wyi8.sys [0 ] (Microsoft Corporation) S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] S3 RimUsb; System32\Drivers\RimUsb.sys [X] S3 USBAAPL; System32\Drivers\usbaapl.sys [X] U1 usbo0nea; \??\C:\Windows\system32\drivers\usbo0nea.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-02 22:28 - 2014-05-02 22:28 - 00001290 _____ () C:\Users\Malte\Desktop\checkup.txt 2014-05-02 20:37 - 2014-05-02 20:37 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\SkypePM 2014-04-29 19:38 - 2014-04-29 19:38 - 00000871 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-04-28 22:14 - 2014-04-28 22:14 - 00000000 ____D () C:\Windows\ERUNT 2014-04-28 22:06 - 2014-04-28 22:06 - 00024581 _____ () C:\Users\Malte\Desktop\AdwCleaner[S0].txt 2014-04-28 21:59 - 2014-04-28 22:01 - 00000000 ____D () C:\AdwCleaner 2014-04-28 21:13 - 2014-04-28 21:53 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 21:13 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-28 21:13 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-28 21:13 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\ProgramData\IePluginService 2014-04-28 20:11 - 2014-04-28 20:11 - 00025811 _____ () C:\Users\Malte\Downloads\[TorrentDownloads.me]_[HorribleSubs] Naruto Shippuuden - 360 [720p] mkv.torrent 2014-04-24 19:30 - 2014-04-25 20:27 - 00000000 ____D () C:\Program Files\Amazon 2014-04-24 19:18 - 2014-04-24 19:18 - 00001070 _____ () C:\Users\Malte\Desktop\Revo Uninstaller.lnk 2014-04-24 19:18 - 2014-04-24 19:18 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-04-24 19:17 - 2014-04-24 19:17 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Malte\Downloads\revosetup95.exe 2014-04-23 20:14 - 2014-05-02 22:31 - 00000000 ____D () C:\FRST 2014-04-23 20:13 - 2014-05-02 22:31 - 00000000 ____D () C:\Users\Malte\Desktop\rep 2014-04-18 21:06 - 2014-04-18 21:06 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b 2014-04-18 15:02 - 2014-04-18 15:02 - 00199960 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys 2014-04-10 21:46 - 2014-03-08 01:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-10 21:46 - 2014-03-08 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-10 21:46 - 2014-03-08 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-10 21:46 - 2014-03-08 00:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-10 21:46 - 2014-03-08 00:57 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-10 21:46 - 2014-03-08 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-10 21:46 - 2014-03-08 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-10 21:46 - 2014-03-08 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-10 21:46 - 2014-03-08 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-10 21:46 - 2014-03-08 00:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-10 21:46 - 2014-03-08 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-10 21:45 - 2014-03-08 01:51 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-10 21:45 - 2014-03-08 01:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-10 21:45 - 2014-03-08 01:03 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-10 21:45 - 2014-03-08 01:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-10 21:45 - 2014-03-08 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-10 21:26 - 2014-04-10 21:27 - 00000000 ____D () C:\Users\Malte\Desktop\SkypePortable 2014-04-09 21:12 - 2014-04-09 21:12 - 00653152 _____ (PortableApps.com) C:\Users\Malte\Downloads\SkypePortable_6.14.0.104_online.paf.exe 2014-04-09 21:00 - 2014-04-09 21:00 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\ProductData 2014-04-09 20:59 - 2014-04-28 19:49 - 00000000 ____D () C:\ProgramData\ProductData 2014-04-09 20:59 - 2014-04-28 19:48 - 00000000 ____D () C:\Program Files\IObit 2014-04-09 20:59 - 2014-04-09 21:00 - 00000000 ____D () C:\ProgramData\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\IObit 2014-04-09 19:27 - 2014-02-06 03:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-05 23:18 - 2014-04-05 23:18 - 00000752 _____ () C:\Windows\scripten_i.log 2014-04-04 23:48 - 2014-04-29 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG ==================== One Month Modified Files and Folders ======= 2014-05-02 22:31 - 2014-04-23 20:14 - 00000000 ____D () C:\FRST 2014-05-02 22:31 - 2014-04-23 20:13 - 00000000 ____D () C:\Users\Malte\Desktop\rep 2014-05-02 22:28 - 2014-05-02 22:28 - 00001290 _____ () C:\Users\Malte\Desktop\checkup.txt 2014-05-02 22:06 - 2006-11-02 14:47 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-02 22:06 - 2006-11-02 14:47 - 00004784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-02 22:01 - 2013-09-30 19:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-02 20:43 - 2008-06-25 07:36 - 00266401 _____ () C:\ProgramData\nvModes.dat 2014-05-02 20:43 - 2008-06-25 07:36 - 00266401 _____ () C:\ProgramData\nvModes.001 2014-05-02 20:37 - 2014-05-02 20:37 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\SkypePM 2014-05-02 20:37 - 2014-03-07 22:40 - 00000000 ____D () C:\Users\Malte\AppData\Local\Skype 2014-05-02 20:11 - 2008-07-29 02:42 - 01991670 _____ () C:\Windows\WindowsUpdate.log 2014-05-02 20:10 - 2013-12-21 02:35 - 00000000 ____D () C:\ProgramData\MFAData 2014-05-02 20:08 - 2008-09-11 12:40 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-05-02 20:06 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-02 17:28 - 2008-06-25 23:08 - 00001076 _____ () C:\Windows\bthservsdp.dat 2014-05-02 17:28 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-01 18:57 - 2012-11-19 18:47 - 00000000 ____D () C:\Users\Malte\AppData\Local\CrashDumps 2014-04-29 19:47 - 2006-11-02 12:33 - 00007184 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-29 19:38 - 2014-04-29 19:38 - 00000871 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-04-29 19:38 - 2014-04-04 23:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2014-04-28 22:14 - 2014-04-28 22:14 - 00000000 ____D () C:\Windows\ERUNT 2014-04-28 22:06 - 2014-04-28 22:06 - 00024581 _____ () C:\Users\Malte\Desktop\AdwCleaner[S0].txt 2014-04-28 22:02 - 2008-01-21 04:47 - 00457554 _____ () C:\Windows\PFRO.log 2014-04-28 22:01 - 2014-04-28 21:59 - 00000000 ____D () C:\AdwCleaner 2014-04-28 22:01 - 2009-12-24 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-04-28 22:01 - 2009-04-25 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 2014-04-28 22:01 - 2009-04-25 19:55 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-04-28 22:01 - 2008-08-29 12:42 - 00000988 _____ () C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-28 22:01 - 2008-08-29 12:40 - 00000000 ____D () C:\Users\Malte 2014-04-28 21:53 - 2014-04-28 21:13 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 21:44 - 2013-11-20 22:22 - 00000000 ____D () C:\ProgramData\ShoppingChip 2014-04-28 21:44 - 2013-09-12 18:23 - 00000000 ____D () C:\Program Files\SearchProtect2093767 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 21:13 - 2014-04-28 21:13 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 20:39 - 2010-05-06 21:18 - 00000000 ____D () C:\Program Files\Common Files\Lexware 2014-04-28 20:33 - 2009-10-26 19:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company 2014-04-28 20:33 - 2009-10-26 19:25 - 00000000 ____D () C:\Program Files\LEGO Company 2014-04-28 20:31 - 2009-01-19 19:33 - 00000000 ____D () C:\Program Files\GRETECH 2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\ProgramData\IePluginService 2014-04-28 20:11 - 2014-04-28 20:11 - 00025811 _____ () C:\Users\Malte\Downloads\[TorrentDownloads.me]_[HorribleSubs] Naruto Shippuuden - 360 [720p] mkv.torrent 2014-04-28 20:03 - 2013-09-30 19:32 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-04-28 20:03 - 2011-08-14 20:40 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-04-28 19:49 - 2014-04-09 20:59 - 00000000 ____D () C:\ProgramData\ProductData 2014-04-28 19:48 - 2014-04-09 20:59 - 00000000 ____D () C:\Program Files\IObit 2014-04-28 19:48 - 2008-06-25 07:14 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-04-26 23:26 - 2008-06-25 07:32 - 00000000 ____D () C:\Windows\WinClon 2014-04-26 23:26 - 2008-06-25 07:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-26 23:25 - 2008-06-25 07:27 - 00000000 ____D () C:\Program Files\Samsung 2014-04-26 23:18 - 2013-11-21 09:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-04-26 23:03 - 2011-06-03 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurnierPlaner 2014-04-26 22:54 - 2009-05-02 19:46 - 00000000 ____D () C:\Program Files\Yahoo! 2014-04-25 23:03 - 2008-09-11 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2014-04-25 23:03 - 2008-09-11 12:38 - 00000000 ____D () C:\Program Files\CyberLink 2014-04-25 22:47 - 2008-06-25 07:15 - 00319456 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll 2014-04-25 22:47 - 2008-06-25 07:15 - 00000000 ____D () C:\Windows\system32\RTCOM 2014-04-25 21:58 - 2013-04-05 16:52 - 00000000 ____D () C:\Program Files\USM 2014-04-25 21:36 - 2009-05-09 18:44 - 00000000 ____D () C:\ProgramData\Apple 2014-04-25 21:27 - 2006-11-02 13:18 - 00000000 ____D () C:\Program Files\Common Files\System 2014-04-25 21:22 - 2008-09-09 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2014-04-25 21:06 - 2008-09-26 20:18 - 00000000 ____D () C:\Program Files\SlySoft 2014-04-25 21:02 - 2008-09-13 17:39 - 00000000 ____D () C:\Windows\system32\codec 2014-04-25 20:35 - 2013-12-21 02:41 - 00000000 ____D () C:\Program Files\AVG 2014-04-25 20:27 - 2014-04-24 19:30 - 00000000 ____D () C:\Program Files\Amazon 2014-04-25 16:56 - 2006-11-02 12:23 - 00000342 _____ () C:\Windows\win.ini 2014-04-24 19:18 - 2014-04-24 19:18 - 00001070 _____ () C:\Users\Malte\Desktop\Revo Uninstaller.lnk 2014-04-24 19:18 - 2014-04-24 19:18 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-04-24 19:17 - 2014-04-24 19:17 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Malte\Downloads\revosetup95.exe 2014-04-24 10:27 - 2013-12-21 02:43 - 00000000 ____D () C:\ProgramData\AVG2014 2014-04-18 21:06 - 2014-04-18 21:06 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b 2014-04-18 15:02 - 2014-04-18 15:02 - 00199960 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys 2014-04-10 21:48 - 2008-06-25 07:38 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-10 21:43 - 2013-07-30 20:07 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 21:35 - 2006-11-02 12:24 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-04-10 21:27 - 2014-04-10 21:26 - 00000000 ____D () C:\Users\Malte\Desktop\SkypePortable 2014-04-10 21:24 - 2014-03-28 23:23 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Skype 2014-04-10 21:15 - 2011-04-09 09:43 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\Apple Computer 2014-04-09 21:12 - 2014-04-09 21:12 - 00653152 _____ (PortableApps.com) C:\Users\Malte\Downloads\SkypePortable_6.14.0.104_online.paf.exe 2014-04-09 21:04 - 2008-09-08 20:11 - 00000000 ____D () C:\ProgramData\Skype 2014-04-09 21:00 - 2014-04-09 21:00 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\ProductData 2014-04-09 21:00 - 2014-04-09 20:59 - 00000000 ____D () C:\ProgramData\IObit 2014-04-09 20:59 - 2014-04-09 20:59 - 00000000 ____D () C:\Users\Malte\AppData\Roaming\IObit 2014-04-09 20:46 - 2014-03-26 22:17 - 00362029 _____ () C:\Users\Malte\Desktop\sqlite3.dll 2014-04-07 18:35 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-04-05 23:18 - 2014-04-05 23:18 - 00000752 _____ () C:\Windows\scripten_i.log 2014-04-03 09:51 - 2014-04-28 21:13 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-28 21:13 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-28 21:13 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys Files to move or delete: ==================== C:\Users\Malte\AppData\Roaming\desktop.ini C:\Users\Malte\AppData\Roaming\skype.ini Some content of TEMP: ==================== C:\Users\Malte\AppData\Local\Temp\avgnt.exe C:\Users\Malte\AppData\Local\Temp\BackupSetup.exe C:\Users\Malte\AppData\Local\Temp\expertpdf_v4_pro1.exe C:\Users\Malte\AppData\Local\Temp\Quarantine.exe C:\Users\Malte\AppData\Local\Temp\z3v2hbig.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-02 20:14 ==================== End Of Log ============================ addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:01-05-2014 Ran by Malte at 2014-05-02 22:31:37 Running from C:\Users\Malte\Desktop\rep Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Reader 8.3.1 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A83000000003}) (Version: 8.3.1 - Adobe Systems Incorporated) Adobe Shockwave Player (HKLM\...\Adobe Shockwave Player) (Version: 11 - Adobe Systems, Inc.) Agere Systems HDA Modem (HKLM\...\Agere Systems Soft Modem) (Version: - Agere Systems) Atheros WLAN Client (HKLM\...\{04983D37-2202-4295-94A2-8B547C66133F}) (Version: 1.00.000 - ) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4577 - AVG Technologies) AVG 2014 (Version: 14.0.3931 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4577 - AVG Technologies) Hidden Bullzip PDF Printer 6.0.0.659 (HKLM\...\Bullzip PDF Printer_is1) (Version: - Bullzip) CyberLink DVD Suite (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 5.0.2403 - CyberLink Corp.) Dassault Systemes Fonts (HKLM\...\{4519F894-278A-414D-9CA0-E216D01D94C2}) (Version: 0.9.0 - Dassault Systemes) Dassault Systemes Software B12 (HKLM\...\Dassault Systemes B12_0) (Version: - ) Dassault Systemes Software Prerequisites x86 (HKLM\...\{6DE6837F-F3A3-40FF-9F5C-A0B95948E32D}) (Version: 8.1.3 - Dassault Systemes) DDBAC (HKLM\...\{F161B4FF-3976-4917-BD27-CA28C95A13AE}) (Version: 5.3.0 - DataDesign) DivX Codec (HKLM\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.9.1 - DivX, Inc.) DivX Player (HKLM\...\{8ADFC4160D694100B5B8A22DE9DCABD9}) (Version: 7.2.0 - DivX, Inc.) Download Accelerator Plus (DAP) (HKLM\...\Download Accelerator Plus (DAP)) (Version: 8700 (Build 532) - Speedbit Ltd.) Enterprise Dynamics Studio 7.2.0 781 (HKLM\...\Enterprise Dynamics 7 Studio edition - v7.2.0 r781) (Version: - ) eXPert PDF 4 (HKLM\...\{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}) (Version: 4.2.50.0 - Visage Software) Furnish Pro (HKLM\...\Furnish Pro) (Version: - ) GIMP 2.4.2 (HKLM\...\WinGimp-2.0_is1) (Version: - ) Google Chrome (HKLM\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.) Google Toolbar for Internet Explorer (Version: 4.0.0.002 - Google Inc.) Hidden Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden GPL Ghostscript Lite 8.63 (HKLM\...\GPL Ghostscript Lite_is1) (Version: - ) iCloud (HKLM\...\{925F1DB6-E86E-4378-9091-D1F68B0583C9}) (Version: 2.1.2.8 - Apple Inc.) imagine digital freedom - Samsung (HKLM\...\{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}) (Version: 1.0.2.0 - Samsung Electronics Co., LTD) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{BA5F3E0E-8F3E-47BD-88E4-AD3EB5225F51}) (Version: 12.00.2000 - Intel(R) Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 15 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217015FF}) (Version: 7.0.150 - Oracle) Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 11 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.110 - Sun Microsystems, Inc.) Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.) Lexware Info Service (HKLM\...\{59624372-3B85-47f4-9B04-4911E551DF1E}) (Version: 2.61.00.0033 - Lexware GmbH & Co. KG) Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft) Microsoft Office Visio 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Visio MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 (HKLM\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Visio Professional 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation) Microsoft SOAP Toolkit 2.0 SP2 (HKLM\...\{36BEAD11-8577-49AD-9250-E06A50AE87B0}) (Version: 623.1 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{1D1D8ADC-BF08-4E61-9393-5FA305B16864}) (Version: 9.00.3042.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{5C759B74-34F4-43C6-A5D9-039CB754C5E9}) (Version: 9.00.3042.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox (1.0.7) (HKLM\...\Mozilla Firefox (1.0.7)) (Version: 1.0.7 (de-DE) - Mozilla) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) Play AVStation (HKLM\...\InstallShield_{955597D8-E5E1-474D-B647-60AC44566D24}) (Version: 4.1.20.50 - Ihr Firmenname) Play AVStation (Version: 4.1.20.50 - Ihr Firmenname) Hidden Play Camera (HKLM\...\InstallShield_{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}) (Version: 2.0.0.13 - Ihr Firmenname) Play Camera (Version: 2.0.0.13 - Ihr Firmenname) Hidden PowerDirector (HKLM\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 5.0.3927 - CyberLink Corp.) PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - CyberLink Corp.) ProductView Express 9.1 (HKLM\...\{E21F683E-AFAD-4932-91BB-21B355087FB5}) (Version: 9.1.30.12 - PTC) Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.0.12104_15 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.5.0.12104_15 - Samsung Electronics Co., Ltd.) Hidden Samsung Update Plus (HKLM\...\InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}) (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Samsung Update Plus (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.16.0 - SAMSUNG Electronics Co., Ltd.) SmartTools Publishing · Excel Projektplan (HKCU\...\SmartTools Publishing · Excel Projektplan) (Version: - SmartTools Publishing) Steuer 2012 (HKLM\...\{01159E8A-44F7-4885-A7F9-872CE4D74063}) (Version: 20.00.8137 - Buhl Data Service GmbH) Super Clone DVD 3.0 (HKLM\...\Super Clone DVD_is1) (Version: - PowerImage inc.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.1.2.0 - Synaptics) The Rosetta Stone (HKLM\...\The Rosetta Stone) (Version: - ) TIPP10 Version 2.0.1 (HKLM\...\TIPP10_is1) (Version: - (c) 2006-2007, Tom Thielicke) Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.3042.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) USB2.0 UVC 1.3M WebCam (HKLM\...\USB2.0 UVC 1.3M WebCam) (Version: - ) USB2.0 UVC WebCam (HKLM\...\{090962E2-4BE8-4A8A-86B0-7A5ED31C1273}) (Version: 6.11.706.012 - D-MAX) User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - ) VBA (3821b) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Vokabeltrainer für Windows Version 1.51 (HKLM\...\Vokabeltrainer für Windows_is1) (Version: - diginvent) WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2700 - Broadcom Corporation) WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) xVideoServiceThief (HKLM\...\{CE27EACD-B61A-4E4B-8D61-25BF51D40007}) (Version: 1.8.2 - Xesc & Technology) ==================== Restore Points ========================= 25-04-2014 18:37:15 Revo Uninstaller's restore point - Easy Battery Manager 25-04-2014 18:38:27 Removed Easy Battery Manager 25-04-2014 18:42:00 Revo Uninstaller's restore point - Easy Display Manager 25-04-2014 18:43:05 Removed Easy Display Manager 25-04-2014 18:47:22 Revo Uninstaller's restore point - FilesFrog Update Checker 25-04-2014 18:50:10 Revo Uninstaller's restore point - Easy Network Manager 3.0 25-04-2014 18:51:19 Konfiguriert Easy Network Manager 3.0 25-04-2014 18:53:46 Revo Uninstaller's restore point - Advanced Disk Recovery 25-04-2014 18:54:56 Revo Uninstaller's restore point - Free Mp3 Wma Converter V 2.2 25-04-2014 18:58:54 Revo Uninstaller's restore point - ICQ6.5 25-04-2014 19:02:11 Revo Uninstaller's restore point - avi2divx 25-04-2014 19:04:42 Revo Uninstaller's restore point - CloneCD 25-04-2014 19:05:50 Remove CloneCD 25-04-2014 19:07:36 Revo Uninstaller's restore point - CyberLink Power2Go 25-04-2014 19:13:09 Revo Uninstaller's restore point - DivX Plus DirectShow Filters 25-04-2014 19:15:01 Revo Uninstaller's restore point - Extended Update 25-04-2014 19:19:14 Revo Uninstaller's restore point - DivX Converter 25-04-2014 19:21:34 Revo Uninstaller's restore point - DivX Plus Web Player 25-04-2014 19:23:09 Revo Uninstaller's restore point - DIY Writer 25-04-2014 19:33:37 Revo Uninstaller's restore point - Apple Application Support 25-04-2014 19:37:01 Revo Uninstaller's restore point - Apple Mobile Device Support 25-04-2014 19:41:24 Revo Uninstaller's restore point - Apple Software Update 25-04-2014 19:44:37 Revo Uninstaller's restore point - Google Chrome 25-04-2014 19:45:59 Revo Uninstaller's restore point - IObit Uninstaller 25-04-2014 19:52:06 Revo Uninstaller's restore point - LabelPrint 25-04-2014 19:56:35 Revo Uninstaller's restore point - Konz 2013 25-04-2014 19:57:03 Entfernt Konz 2013 25-04-2014 19:59:16 Revo Uninstaller's restore point - Langenscheidt Vokabeltrainer 3.0 Demoversion 25-04-2014 19:59:40 Langenscheidt Vokabeltrainer 3.0 Demoversion wird entfernt 25-04-2014 20:02:46 Revo Uninstaller's restore point - MyPC Backup 25-04-2014 20:10:30 Revo Uninstaller's restore point - Norton Security Scan (Symantec Corporation) 25-04-2014 20:13:10 Revo Uninstaller's restore point - OpenOffice.org Installer 1.0 25-04-2014 20:13:34 OpenOffice.org Installer 1.0 wird entfernt 25-04-2014 20:16:22 Revo Uninstaller's restore point - PC Cleaner 25-04-2014 20:18:25 Revo Uninstaller's restore point - PC Speed Maximizer v3.2 25-04-2014 20:21:42 Revo Uninstaller's restore point - LightScribe System Software 1.12.37.1 25-04-2014 20:22:02 Removed LightScribe System Software 1.12.37.1. 25-04-2014 20:26:28 Revo Uninstaller's restore point - Microsoft Silverlight 25-04-2014 20:26:57 Removed Microsoft Silverlight 25-04-2014 20:33:56 Revo Uninstaller's restore point - Plus-HD-2.2 25-04-2014 20:40:40 Revo Uninstaller's restore point - QuickTime 25-04-2014 20:44:08 Revo Uninstaller's restore point - Mega Browse 25-04-2014 20:46:32 Revo Uninstaller's restore point - Realtek High Definition Audio Driver 25-04-2014 21:00:49 Revo Uninstaller's restore point - PowerProducer 25-04-2014 21:09:21 Revo Uninstaller's restore point - Samsung Kies 25-04-2014 21:11:34 Revo Uninstaller's restore point - Samsung Magic Doctor 25-04-2014 21:12:50 Removed Samsung Magic Doctor 26-04-2014 20:54:01 Revo Uninstaller's restore point - Yahoo! Toolbar 26-04-2014 20:55:37 Revo Uninstaller's restore point - Systweak Support Dock 26-04-2014 20:57:40 Revo Uninstaller's restore point - TornTV 26-04-2014 21:00:30 Revo Uninstaller's restore point - TurnierPlaner Version 4.0 26-04-2014 21:13:51 Revo Uninstaller's restore point - VoiceOver Kit 26-04-2014 21:24:44 Revo Uninstaller's restore point - Samsung Recovery Solution III 26-04-2014 21:26:01 Entfernt Samsung Recovery Solution III 28-04-2014 17:55:08 Windows Update 28-04-2014 18:12:37 Installed AVG 2014 29-04-2014 17:21:16 Windows Update 29-04-2014 17:35:34 Installed AVG 2014 30-04-2014 21:12:19 Windows Update 01-05-2014 11:44:05 Windows Update 02-05-2014 01:00:13 Windows Update ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {12648F27-9A3E-4FA4-B3EA-C47FFA81DEAE} - \couponsupport-S-649636217 No Task File <==== ATTENTION Task: {19522D00-46A2-44B9-A972-F8E684DC4067} - System32\Tasks\Lexware-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2008-11-03] (Lexware GmbH & Co. KG) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3A2FA10E-E78E-4C1D-B825-43FD5F756F10} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-28] (Adobe Systems Incorporated) Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {4933B3D8-214D-475D-B1A4-D2D492B1F215} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29] (Adobe Systems Incorporated) Task: {90D73159-F3E8-44FB-B1CF-061A615EDB42} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {98DF37CA-5A8A-40AE-825F-8532C34A42E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-24] (Google Inc.) Task: {9B7B5177-4AD5-4101-B274-7D272A2401BC} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {FF32FB37-A3F1-461F-B12E-B2BB59FA2837} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-24] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2008-05-23 06:46 - 2008-05-23 06:46 - 00200704 _____ () C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL 2010-09-29 21:59 - 2005-06-02 12:40 - 00014336 _____ () C:\Windows\System32\vsmon1.dll 2008-09-11 12:40 - 2006-12-19 16:23 - 00272024 ____N () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2006-05-19 18:40 - 2006-05-19 18:40 - 00884224 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe 2006-05-19 18:39 - 2006-05-19 18:39 - 01239552 _____ () C:\Program Files\Visagesoft\eXPert PDF\VSPDFDIALOGS100.BPL 2006-03-02 20:39 - 2006-03-02 20:39 - 01844224 _____ () C:\Program Files\Visagesoft\eXPert PDF\te100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 03014656 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfcore100.bpl 2005-12-26 13:20 - 2005-12-26 13:20 - 02098176 _____ () C:\Program Files\Visagesoft\eXPert PDF\PKIECtrl100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 01026048 _____ () C:\Program Files\Visagesoft\eXPert PDF\vsvector100.bpl 2006-03-02 19:57 - 2006-03-02 19:57 - 00383488 _____ () C:\Program Files\Visagesoft\eXPert PDF\visage100.bpl 2006-03-02 20:28 - 2006-03-02 20:28 - 00139776 _____ () C:\Program Files\Visagesoft\eXPert PDF\uoolep100.bpl 2006-04-15 06:34 - 2006-04-15 06:34 - 00568320 _____ () C:\Program Files\Visagesoft\eXPert PDF\TMSlite100.bpl 2006-03-02 20:33 - 2006-03-02 20:33 - 00444928 _____ () C:\Program Files\Visagesoft\eXPert PDF\VirtualTree100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 00230912 _____ () C:\Program Files\Visagesoft\eXPert PDF\vspdfeditor100.bpl 2006-03-02 19:55 - 2006-03-02 19:55 - 00089088 _____ () C:\Program Files\Visagesoft\eXPert PDF\vsmisc100.bpl 2006-03-02 20:01 - 2006-03-02 20:01 - 00071168 _____ () C:\Program Files\Visagesoft\eXPert PDF\VSDesktop100.bpl 2006-05-19 18:39 - 2006-05-19 18:39 - 00241152 _____ () C:\Program Files\Visagesoft\eXPert PDF\EXPERTPDF4CORE.BPL 2003-08-22 07:23 - 2003-08-22 07:23 - 00225792 _____ () C:\Program Files\Visagesoft\eXPert PDF\SQLITE.DLL 2014-03-28 23:38 - 2014-03-28 23:38 - 00181760 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\1c423d6268f42d4f0569eb433daa8b77\Kies.Common.DeviceServiceLib.Interface.ni.dll 2014-04-05 21:56 - 2014-04-05 21:56 - 12620288 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\875cdfa8906f9c530e00879761eea4be\Kies.Theme.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 01764352 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\0ab8a6edf61b36d193c0cf7015801b58\Kies.UI.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\dea2304b9cdd1d0aeea1f616f9b06a4d\Kies.MVVM.ni.dll 2014-03-28 23:38 - 2014-03-28 23:38 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll 2014-05-02 20:37 - 2014-05-02 20:37 - 00029696 _____ () C:\Users\Malte\AppData\Local\Temp\nsgBD38.tmp\registry.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:0F8F5844 AlternateDataStreams: C:\ProgramData\TEMP:AD022376 ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Microsoft-ISATAP-Adapter #2 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #3 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #3 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #6 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #7 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #8 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #8 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #9 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #10 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #11 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #12 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #13 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #14 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #15 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #16 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #17 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #18 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #19 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #20 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #21 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #22 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #23 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #23 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #24 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #25 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #26 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #27 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #28 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #29 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #30 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #31 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #32 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #33 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #34 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #35 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #36 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #37 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #38 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Microsoft-ISATAP-Adapter #38 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #39 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #40 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #41 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #42 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #43 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #43 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #44 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #45 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #46 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #47 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #48 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #48 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #49 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #50 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Microsoft-ISATAP-Adapter #51 Description: Microsoft-ISATAP-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (05/02/2014 08:18:17 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 9.0.8112.16545 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 1444 Anfangszeit: 01cf6632550da6a6 Zeitpunkt der Beendigung: 165 Error: (05/02/2014 08:07:24 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/02/2014 03:03:08 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Produkt: Microsoft .NET Framework 1.1 - Update "{411EDCF7-755D-414E-A74B-3DCD6583F589}" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 Error: (05/02/2014 03:03:06 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Microsoft .NET Framework 1.1 -- Error 1706.No valid source could be found for product Microsoft .NET Framework 1.1. The Windows installer cannot continue. Error: (05/01/2014 07:52:24 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 9.0.8112.16545 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 1520 Anfangszeit: 01cf6565af19f83f Zeitpunkt der Beendigung: 164 Error: (05/01/2014 07:47:34 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD DEINSTALLIEREN.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (05/01/2014 07:47:34 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\POWERDVD DEINSTALLIEREN.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (05/01/2014 07:47:34 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\README.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (05/01/2014 07:47:34 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\README.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) Error: (05/01/2014 07:47:34 PM) (Source: Windows Search Service) (User: ) Description: Eintrag <C:\USERS\MALTE\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\CYBERLINK DVD SUITE\POWERDVD\ONLINE-REGISTRIERUNG.LNK> in der Hash-Zuordnung kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details: Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f) System errors: ============= Error: (05/02/2014 08:13:04 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (05/02/2014 08:07:26 PM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (05/02/2014 08:07:26 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (05/02/2014 03:06:46 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: 0x80070643Microsoft .NET Framework 1.1 Service Pack 1{6F5DC828-0F05-4577-9A8A-74AB1CBE00A9}106 Error: (05/01/2014 07:47:30 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Error: (05/01/2014 07:44:37 PM) (Source: Service Control Manager) (User: ) Description: SQL Server VSS Writer1 Error: (05/01/2014 07:44:37 PM) (Source: Service Control Manager) (User: ) Description: Parallel port driver%%1058 Error: (05/01/2014 07:44:10 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 01.05.2014 um 19:42:32 unerwartet heruntergefahren. Error: (05/01/2014 07:32:16 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT) Description: 0x8000002a29\??\C:\Users\Malte\ntuser.dat Error: (05/01/2014 07:29:40 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT) Description: 0x80070032 Microsoft Office Sessions: ========================= Error: (03/19/2013 10:28:30 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 3557 seconds with 3480 seconds of active time. This session ended with a crash. Error: (03/10/2013 10:19:12 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1110 seconds with 900 seconds of active time. This session ended with a crash. Error: (03/10/2013 10:00:34 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 189 seconds with 180 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:57:18 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 10, Application Name: Microsoft Office Visio, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 10462 seconds with 600 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:54:08 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 179 seconds with 0 seconds of active time. This session ended with a crash. Error: (03/10/2013 09:51:01 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2503 seconds with 1860 seconds of active time. This session ended with a crash. Error: (01/29/2013 08:42:55 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 279 seconds with 240 seconds of active time. This session ended with a crash. Error: (12/30/2012 00:42:23 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 1803 seconds with 120 seconds of active time. This session ended with a crash. Error: (05/02/2011 09:46:32 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6550.5004, Microsoft Office Version: 12.0.6425.1000. This session lasted 1239 seconds with 540 seconds of active time. This session ended with a crash. Error: (11/22/2010 09:30:25 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-05-02 22:31:32.672 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:32.431 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:32.180 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:31.922 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:31.660 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:31.413 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:31.176 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:30.939 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:30.539 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-02 22:31:30.295 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 70% Total physical RAM: 3065.88 MB Available physical RAM: 899.73 MB Total Pagefile: 6330.89 MB Available Pagefile: 4119.53 MB Total Virtual: 2047.88 MB Available Virtual: 1925.07 MB ==================== Drives ================================ Drive c: (Windows Vista) (Fixed) (Total:144.09 GB) (Free:58.36 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Windows XP) (Fixed) (Total:72.05 GB) (Free:48.88 GB) NTFS Drive g: (Dateien) (Fixed) (Total:71.94 GB) (Free:6.4 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298 GB) (Disk ID: 3A21C8C8) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=72 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=72 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
04.05.2014, 07:25 | #6 |
/// the machine /// TB-Ausbilder | Trojaner Adware: Generic_r.Kl Java, Adobe und Firefox updaten. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Malte\AppData\Roaming\desktop.ini C:\Users\Malte\AppData\Roaming\skype.ini Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Trojaner Adware: Generic_r.Kl |
22.05.2014, 20:44 | #7 |
| Trojaner Adware: Generic_r.Kl Hallo Schrauber, danke für deine Unterstützung. Ich bin jetzt erst dazu gekommen. Ich werde mir deine Tipps genau durchlesen und beherzigen anbei der Inhalt der Fixlog.txt Datei Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:21-05-2014 Ran by Malte at 2014-05-22 21:41:20 Run:1 Running from C:\Users\Malte\Desktop\rep Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Users\Malte\AppData\Roaming\desktop.ini C:\Users\Malte\AppData\Roaming\skype.ini ***************** C:\Users\Malte\AppData\Roaming\desktop.ini => Moved successfully. C:\Users\Malte\AppData\Roaming\skype.ini => Moved successfully. ==== End of Fixlog ==== wasty |
23.05.2014, 16:24 | #8 |
/// the machine /// TB-Ausbilder | Trojaner Adware: Generic_r.Kl Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |