|
Plagegeister aller Art und deren Bekämpfung: Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
27.04.2014, 22:22 | #16 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424Prima! Kein Problem, poste die Logs wie es für Dich am besten ist.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
28.04.2014, 07:08 | #17 |
| Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=4e99138d3d2c164ca45981eb70a7f8c6 # engine=18051 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-04-27 09:33:09 # local_time=2014-04-27 11:33:09 (+0100, Mitteleuropäische Sommerzeit) # country="United Kingdom" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 94 14819 169302094 7583 0 # compatibility_mode=5893 16776573 100 94 10584 150264239 0 0 # scanned=409 # found=0 # cleaned=0 # scan_time=85 ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=4e99138d3d2c164ca45981eb70a7f8c6 # engine=18051 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-04-28 06:06:35 # local_time=2014-04-28 08:06:35 (+0100, Mitteleuropäische Sommerzeit) # country="United Kingdom" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 94 45625 169332900 38389 0 # compatibility_mode=5893 16776573 100 94 30698 150295045 0 0 # scanned=228790 # found=0 # cleaned=0 # scan_time=30390 |
28.04.2014, 07:11 | #18 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Guten Morgähn...
__________________Sieht schon mal gut aus...
__________________ |
28.04.2014, 07:21 | #19 |
| Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2014 03 Ran by Lena (administrator) on LENA-VAIO on 28-04-2014 08:10:26 Running from C:\Users\Lena\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtSvc.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtCtrl.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-27] (Microsoft Corp.) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282632 2013-04-02] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-2584018587-2600382852-1638487148-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.) HKU\S-1-5-21-2584018587-2600382852-1638487148-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HDD Password Tool.lnk ShortcutTarget: HDD Password Tool.lnk -> C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtCtrl.exe (TOSHIBA CORPORATION) Startup: C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Lena\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?p=pLsH3anR-Rz0cILJ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File BHO-x32: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll () BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671 FF NewTab: about:blank FF SearchEngineOrder.1: Ask Search FF SelectedSearchEngine: Google FF Homepage: about:home FF Keyword.URL: hxxp://www.google.com/search?rls=org.mozilla:en-US:official&client=firefox-a&q= FF NetworkProxy: "http", "91.228.53.28" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Play4Free - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\battlefieldplay4free@ea.com [2013-08-05] FF Extension: Flashblock - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2013-04-16] FF Extension: Adblock Plus Pop-up Addon - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\adblockpopups@jessehakanen.net.xpi [2012-10-04] FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\admin@proxy-listen.de.xpi [2013-01-19] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21] FF Extension: Adblock Plus - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-04] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-08-22] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-27] (Microsoft Corp.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 TosExtSvc; C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtSvc.exe [1629560 2012-08-20] (TOSHIBA CORPORATION) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1021112 2011-03-30] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-26] (Disc Soft Ltd) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited) R0 TosExt; C:\Windows\System32\Drivers\TosExt.sys [25976 2012-08-20] (TOSHIBA Corporation) R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2014-02-26] (WinISO.com) S3 vpnva; system32\DRIVERS\vpnva64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-27 23:16 - 2014-04-27 23:20 - 02347384 _____ (ESET) C:\Users\Lena\Downloads\esetsmartinstaller_deu.exe 2014-04-27 20:32 - 2014-04-27 20:32 - 00026853 _____ () C:\ComboFix.txt 2014-04-27 20:13 - 2014-04-27 20:32 - 00000000 ____D () C:\ComboFix 2014-04-27 20:13 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-04-27 20:13 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-04-27 20:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-04-27 20:12 - 2014-04-27 20:32 - 00000000 ____D () C:\Qoobox 2014-04-27 20:12 - 2014-04-27 20:30 - 00000000 ____D () C:\Windows\erdnt 2014-04-27 20:10 - 2014-04-27 20:11 - 05196309 ____R (Swearware) C:\Users\Lena\Downloads\ComboFix.exe 2014-04-27 20:06 - 2014-04-27 20:07 - 00000000 ____D () C:\AdwCleaner 2014-04-27 20:05 - 2014-04-27 20:05 - 01329501 _____ () C:\Users\Lena\Downloads\adwcleaner.exe 2014-04-27 20:01 - 2014-04-27 20:01 - 00001164 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-04-27 19:40 - 2014-04-27 19:40 - 00011834 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.7z 2014-04-27 19:35 - 2014-04-27 19:35 - 00212566 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.txt 2014-04-27 19:33 - 2014-04-27 19:33 - 01110476 _____ () C:\Users\Lena\Downloads\7z920.exe 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-04-27 12:08 - 2014-04-27 12:08 - 00001798 _____ () C:\Users\Lena\Documents\uebung.txt 2014-04-26 23:58 - 2014-04-27 00:00 - 00040818 _____ () C:\Users\Lena\Desktop\Addition.txt 2014-04-26 23:57 - 2014-04-28 08:10 - 00018945 _____ () C:\Users\Lena\Desktop\FRST.txt 2014-04-26 23:57 - 2014-04-28 08:10 - 00000000 ____D () C:\FRST 2014-04-26 23:56 - 2014-04-26 23:56 - 02061824 _____ (Farbar) C:\Users\Lena\Desktop\FRST64.exe 2014-04-26 23:01 - 2014-04-26 23:01 - 00212564 _____ () C:\Users\Lena\Documents\verlaufsprotokoll.txt 2014-04-26 23:00 - 2014-04-26 23:00 - 00599578 _____ () C:\Users\Lena\Documents\log.xml 2014-04-26 22:41 - 2014-04-27 23:14 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-26 22:41 - 2014-04-27 23:10 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-26 22:41 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-26 22:41 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-26 22:41 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-26 22:40 - 2014-04-26 22:40 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Lena\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-26 22:26 - 2014-04-26 22:26 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove(1).diagcab 2014-04-26 21:46 - 2014-04-26 21:46 - 00000000 ___RD () C:\MSOCache 2014-04-26 21:40 - 2014-04-26 21:40 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove.diagcab 2014-04-26 17:47 - 2014-04-26 17:47 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-04-26 17:46 - 2014-04-26 17:47 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\DAEMON Tools Lite 2014-04-26 17:46 - 2014-04-26 17:46 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-04-26 17:46 - 2014-04-26 17:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-04-26 17:45 - 2014-04-26 17:48 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-04-24 20:30 - 2014-04-24 20:30 - 00001252 _____ () C:\Users\Lena\Desktop\WinISO.lnk 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinISO 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Local\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Program Files (x86)\WinISO Computing 2014-04-24 20:30 - 2014-02-26 12:09 - 00204032 _____ (WinISO.com) C:\Windows\system32\Drivers\WinisoCDBus.sys 2014-04-24 20:29 - 2014-04-24 20:30 - 07043816 _____ (WinISO Computing Inc.) C:\Users\Lena\Downloads\winiso.exe 2014-04-24 17:57 - 2014-04-24 17:57 - 00000000 ____D () C:\Users\Lena\Documents\Ashampoo Burning Studio FREE 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Local\ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo 2014-04-24 17:54 - 2014-04-24 17:55 - 00000000 ____D () C:\ProgramData\Ashampoo 2014-04-24 17:54 - 2014-04-24 17:54 - 00000000 ____D () C:\Program Files (x86)\Ashampoo 2014-04-24 17:52 - 2014-04-24 17:53 - 33649640 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Lena\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe 2014-04-24 17:36 - 2014-04-27 20:07 - 00001083 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-04-24 17:34 - 2014-04-24 17:35 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Local\TuneUp Software 2014-04-24 17:33 - 2014-04-24 17:37 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Nero 2014-04-24 17:25 - 2014-04-24 17:47 - 00000000 ____D () C:\ProgramData\Nero 2014-04-24 17:14 - 2014-04-24 17:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Lena\Downloads\Nero 2014 - CHIP-Downloader.exe 2014-04-24 15:30 - 2014-04-24 15:41 - 00000000 ____D () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb 2014-04-24 15:14 - 2014-04-24 15:29 - 662454996 _____ () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb.zip 2014-04-24 15:13 - 2014-04-24 15:13 - 00010056 _____ () C:\Users\Lena\Downloads\free_download_sw.htm 2014-04-13 22:30 - 2014-04-13 22:30 - 00000000 ____D () C:\Users\Lena\Documents\Benutzerdefinierte Office-Vorlagen 2014-04-13 22:06 - 2014-04-13 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 15 2014-04-13 22:04 - 2014-04-13 22:04 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(2).exe 2014-04-13 21:53 - 2014-04-13 21:53 - 01319104 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X64.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-04-13 21:51 - 2014-04-13 21:51 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(1).exe 2014-04-13 21:00 - 2014-04-13 21:00 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-03-31 11:56 - 2014-04-27 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-04-28 08:10 - 2014-04-26 23:57 - 00018945 _____ () C:\Users\Lena\Desktop\FRST.txt 2014-04-28 08:10 - 2014-04-26 23:57 - 00000000 ____D () C:\FRST 2014-04-28 07:35 - 2012-06-03 23:59 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-28 07:35 - 2012-05-04 09:02 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-28 07:35 - 2011-12-01 13:36 - 01851244 _____ () C:\Windows\WindowsUpdate.log 2014-04-28 07:34 - 2012-12-21 17:58 - 00099263 _____ () C:\Windows\setupact.log 2014-04-27 23:38 - 2011-08-08 15:28 - 00701332 _____ () C:\Windows\system32\perfh007.dat 2014-04-27 23:38 - 2011-08-08 15:28 - 00152404 _____ () C:\Windows\system32\perfc007.dat 2014-04-27 23:38 - 2009-07-14 07:13 - 01612484 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-27 23:20 - 2014-04-27 23:16 - 02347384 _____ (ESET) C:\Users\Lena\Downloads\esetsmartinstaller_deu.exe 2014-04-27 23:19 - 2009-07-14 06:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-27 23:19 - 2009-07-14 06:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-27 23:14 - 2014-04-26 22:41 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-27 23:13 - 2011-12-01 13:50 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Skype 2014-04-27 23:12 - 2012-10-14 00:49 - 00000000 ___RD () C:\Users\Lena\Dropbox 2014-04-27 23:12 - 2012-10-14 00:48 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Dropbox 2014-04-27 23:12 - 2012-06-03 23:59 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-27 23:11 - 2013-01-29 12:39 - 00058002 _____ () C:\Windows\PFRO.log 2014-04-27 23:11 - 2011-08-08 06:05 - 00000000 ____D () C:\Windows\bg 2014-04-27 23:11 - 2011-08-08 05:50 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-04-27 23:11 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-27 23:10 - 2014-04-26 22:41 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-27 21:31 - 2012-02-13 17:23 - 00000023 _____ () C:\test.xml 2014-04-27 20:32 - 2014-04-27 20:32 - 00026853 _____ () C:\ComboFix.txt 2014-04-27 20:32 - 2014-04-27 20:13 - 00000000 ____D () C:\ComboFix 2014-04-27 20:32 - 2014-04-27 20:12 - 00000000 ____D () C:\Qoobox 2014-04-27 20:32 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-04-27 20:30 - 2014-04-27 20:12 - 00000000 ____D () C:\Windows\erdnt 2014-04-27 20:26 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-04-27 20:23 - 2011-12-01 13:36 - 00000000 ____D () C:\Users\Lena 2014-04-27 20:11 - 2014-04-27 20:10 - 05196309 ____R (Swearware) C:\Users\Lena\Downloads\ComboFix.exe 2014-04-27 20:07 - 2014-04-27 20:06 - 00000000 ____D () C:\AdwCleaner 2014-04-27 20:07 - 2014-04-24 17:36 - 00001083 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-04-27 20:05 - 2014-04-27 20:05 - 01329501 _____ () C:\Users\Lena\Downloads\adwcleaner.exe 2014-04-27 20:04 - 2014-03-31 11:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-27 20:04 - 2011-08-08 05:54 - 00000000 ____D () C:\Program Files (x86)\Java 2014-04-27 20:01 - 2014-04-27 20:01 - 00001164 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-04-27 19:40 - 2014-04-27 19:40 - 00011834 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.7z 2014-04-27 19:35 - 2014-04-27 19:35 - 00212566 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.txt 2014-04-27 19:33 - 2014-04-27 19:33 - 01110476 _____ () C:\Users\Lena\Downloads\7z920.exe 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-04-27 12:08 - 2014-04-27 12:08 - 00001798 _____ () C:\Users\Lena\Documents\uebung.txt 2014-04-27 11:14 - 2011-12-03 13:19 - 00000000 ____D () C:\Users\Lena\Documents\Studium 2014-04-27 11:07 - 2011-12-01 13:38 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{F5E40832-3334-40DB-9F43-758FD6532A4F} 2014-04-27 00:00 - 2014-04-26 23:58 - 00040818 _____ () C:\Users\Lena\Desktop\Addition.txt 2014-04-26 23:56 - 2014-04-26 23:56 - 02061824 _____ (Farbar) C:\Users\Lena\Desktop\FRST64.exe 2014-04-26 23:54 - 2009-07-14 06:45 - 00492392 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-26 23:30 - 2011-12-01 13:36 - 00129544 _____ () C:\Users\Lena\AppData\Local\GDIPFONTCACHEV1.DAT 2014-04-26 23:15 - 2011-12-03 23:29 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-26 23:15 - 2011-07-13 04:58 - 00000000 ____D () C:\Windows\ShellNew 2014-04-26 23:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-04-26 23:14 - 2009-07-14 04:34 - 00000387 _____ () C:\Windows\win.ini 2014-04-26 23:01 - 2014-04-26 23:01 - 00212564 _____ () C:\Users\Lena\Documents\verlaufsprotokoll.txt 2014-04-26 23:00 - 2014-04-26 23:00 - 00599578 _____ () C:\Users\Lena\Documents\log.xml 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-26 22:40 - 2014-04-26 22:40 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Lena\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-26 22:26 - 2014-04-26 22:26 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove(1).diagcab 2014-04-26 22:04 - 2012-03-30 16:24 - 00000000 ____D () C:\Users\Lena\AppData\Local\CrashDumps 2014-04-26 21:46 - 2014-04-26 21:46 - 00000000 ___RD () C:\MSOCache 2014-04-26 21:40 - 2014-04-26 21:40 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove.diagcab 2014-04-26 17:48 - 2014-04-26 17:45 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-04-26 17:47 - 2014-04-26 17:47 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-04-26 17:47 - 2014-04-26 17:46 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\DAEMON Tools Lite 2014-04-26 17:46 - 2014-04-26 17:46 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-04-26 17:46 - 2014-04-26 17:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-04-24 20:30 - 2014-04-24 20:30 - 00001252 _____ () C:\Users\Lena\Desktop\WinISO.lnk 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinISO 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Local\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Program Files (x86)\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:29 - 07043816 _____ (WinISO Computing Inc.) C:\Users\Lena\Downloads\winiso.exe 2014-04-24 17:57 - 2014-04-24 17:57 - 00000000 ____D () C:\Users\Lena\Documents\Ashampoo Burning Studio FREE 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Local\ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo 2014-04-24 17:55 - 2014-04-24 17:54 - 00000000 ____D () C:\ProgramData\Ashampoo 2014-04-24 17:54 - 2014-04-24 17:54 - 00000000 ____D () C:\Program Files (x86)\Ashampoo 2014-04-24 17:53 - 2014-04-24 17:52 - 33649640 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Lena\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe 2014-04-24 17:47 - 2014-04-24 17:25 - 00000000 ____D () C:\ProgramData\Nero 2014-04-24 17:37 - 2014-04-24 17:33 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Nero 2014-04-24 17:35 - 2014-04-24 17:34 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Local\TuneUp Software 2014-04-24 17:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors 2014-04-24 17:14 - 2014-04-24 17:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Lena\Downloads\Nero 2014 - CHIP-Downloader.exe 2014-04-24 15:41 - 2014-04-24 15:30 - 00000000 ____D () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb 2014-04-24 15:29 - 2014-04-24 15:14 - 662454996 _____ () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb.zip 2014-04-24 15:13 - 2014-04-24 15:13 - 00010056 _____ () C:\Users\Lena\Downloads\free_download_sw.htm 2014-04-13 22:30 - 2014-04-13 22:30 - 00000000 ____D () C:\Users\Lena\Documents\Benutzerdefinierte Office-Vorlagen 2014-04-13 22:06 - 2014-04-13 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 15 2014-04-13 22:04 - 2014-04-13 22:04 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(2).exe 2014-04-13 21:53 - 2014-04-13 21:53 - 01319104 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X64.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-04-13 21:51 - 2014-04-13 21:51 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(1).exe 2014-04-13 21:21 - 2011-12-01 13:37 - 00000000 ____D () C:\Users\Lena\AppData\Local\VirtualStore 2014-04-13 21:16 - 2012-06-03 23:59 - 00000000 ____D () C:\Program Files (x86)\Google 2014-04-13 21:11 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-04-13 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-04-13 21:00 - 2014-04-13 21:00 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-04-13 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-04-08 10:32 - 2012-08-17 14:55 - 00000000 ____D () C:\Users\Lena\Documents\Arbeit 2014-04-03 09:51 - 2014-04-26 22:41 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-26 22:41 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-26 22:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-01 06:37 - 2012-05-04 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service ZeroAccess: C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56} C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56}\@ Some content of TEMP: ==================== C:\Users\Lena\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-31 23:43 ==================== End Of Log ============================ --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2014 03 Ran by Lena at 2014-04-28 08:11:03 Running from C:\Users\Lena\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) ALDI Bestellsoftware 4.12.2 (HKLM-x32\...\ALDI Bestellsoftware) (Version: 4.12.2 - ORWO Net) Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft) ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.392 - ArcSoft) Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira) Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4487 - APN, LLC) Battlefield Play4Free (HKLM-x32\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version: - EA Digital illusions) Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation) Bing Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.174.0 - Microsoft Corporation) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.100 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Cambridge English Pronouncing Dictionary - 17th Edition (HKLM-x32\...\cepd17) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: - ) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.1.0 - Canon Inc.) Canon MG3200 series Benutzerregistrierung (HKLM-x32\...\Canon MG3200 series Benutzerregistrierung) (Version: - Canon Inc.) Canon MG3200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3200_series) (Version: 1.01 - Canon Inc.) Canon MG3200 series On-screen Manual (HKLM-x32\...\Canon MG3200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon MG3500 series Benutzerregistrierung (HKLM-x32\...\Canon MG3500 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MG3500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3500_series) (Version: 1.00 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.0.0 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 3.18 - Piriform) Citavi (HKLM-x32\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.4.0.2 - Swiss Academic Software) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant) Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Free YouTube Download version 3.0.19.1206 (HKLM-x32\...\Free YouTube Download_is1) (Version: - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.11.34.1015 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.34.1015 - DVDVideoSoft Ltd.) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GeoGebra 4.2 (HKLM-x32\...\GeoGebra 4.2) (Version: 4.2.60.0 - International GeoGebra Institute) GEONExT 1.74 (HKLM-x32\...\GEONExT_is1) (Version: 1.74 - GEONExT Group) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden HDD Password Tool (HKLM-x32\...\{97CA1EE3-9477-4C3C-BFCF-89A84B6A222E}) (Version: 1.00.0820 - TOSHIBA CORPORATION.) HotPotatoes v 6.3.0.5 (HKLM-x32\...\hotpot_is1) (Version: - HalfBaked) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation) iTunes (HKLM\...\{F73A118B-8271-47E2-8790-0C636B2539C5}) (Version: 11.1.0.126 - Apple Inc.) Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3.3 - Notepad++ Team) NVIDIA 3D Vision Treiber 267.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 267.21 - NVIDIA Corporation) NVIDIA Grafiktreiber 267.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.21 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.2.19.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.19.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.265.39.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6721 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 267.21 (Version: 267.21 - NVIDIA Corporation) Hidden Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.6.00.06030 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06010 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06140 - Sony Corporation) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QUICKfind (HKLM-x32\...\{593AFFA4-D08E-4272-BABB-420949D32A10}) (Version: - ) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.) Remote Keyboard (x32 Version: 1.1.1.03020 - Sony Corporation) Hidden Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) Hidden Secure Download Manager (HKLM-x32\...\{47CED407-95BF-4EF5-AD14-89F979480E1A}) (Version: 3.0.2 - e-academy Inc.) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Sony Corporation (Version: 1.0.0 - Default Company Name) Hidden Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.19 - Safer-Networking Ltd.) SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation) VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{66081CDD-C1FE-415F-BB3A-F2622BA27461}) (Version: 1.6.00.06030 - Sony Corporation) VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.6.00.06140 - Sony Corporation) VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation) VAIO - Remote-Tastatur (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.1.03020 - Sony Corporation) VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.0.15030 - Sony Corporation) VAIO Care (x32 Version: 6.4.0.15030 - Sony Corporation) Hidden VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) Hidden VAIO Easy Connect (HKLM-x32\...\{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.0.0.03050 - Sony Corporation) VAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.3.0.11090 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) Hidden VAIO Hero Screensaver - Summer 2011 Screensaver (HKLM-x32\...\VAIO Hero Screensaver - Summer 2011 Screensaver) (Version: - ) VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation) VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation) VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.5.3 - Sony Corporation) VAIO Quick Web Access (x32 Version: 1.4.5.3 - Sony Corporation) Hidden VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.5.0.02280 - Sony Corporation) VAIO Update (HKLM-x32\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.4.0.15300 - Sony Corporation) VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation) VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VESx64 (Version: 1.0.0 - Sony Corporation) Hidden VESx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VIx64 (Version: 1.0.0 - Sony Corporation) Hidden VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Windows Live Messenger (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinISO (HKLM-x32\...\WinISO) (Version: 6.4.0.5170 - WinISO Computing Inc.) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Елемент керування Windows Live Mesh ActiveX для віддалених підключень (HKLM-x32\...\{6756D5CA-3E31-4308-9BF0-79DFD1AF196E}) (Version: 15.4.5722.2 - Microsoft Corporation) Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation) ==================== Restore Points ========================= 13-04-2014 19:05:00 Removed Microsoft Office Professional Plus 2010 24-04-2014 15:24:29 Installed Nero 2014. 24-04-2014 15:41:44 Removed Nero Info. 24-04-2014 15:43:48 Removed Nero 2014. 24-04-2014 16:28:34 TuneUp Utilities 2014 wird entfernt 24-04-2014 16:29:35 TuneUp Utilities 2014 (de-DE) wird entfernt 26-04-2014 15:46:22 Gerätetreiber-Paketinstallation: DT Soft Ltd Systemgeräte 26-04-2014 15:49:01 Installed Microsoft Office Professional Plus 2013 26-04-2014 15:49:18 PROPLUS 26-04-2014 15:59:11 Installed Microsoft Office Professional Plus 2013 26-04-2014 15:59:35 PROPLUS 26-04-2014 19:32:10 Installed Microsoft Office Professional Plus 2013 26-04-2014 19:32:35 PROPLUS 26-04-2014 19:45:46 Installed Microsoft Office Professional Plus 2013 26-04-2014 19:46:10 PROPLUS 26-04-2014 20:04:57 Installed Microsoft Office Professional Plus 2013 26-04-2014 20:05:20 PROPLUS 26-04-2014 21:06:45 Installed Microsoft Office Professional Plus 2013 26-04-2014 21:07:30 PROPLUS 27-04-2014 18:03:33 Removed Java(TM) 6 Update 22 27-04-2014 18:04:31 Removed Java(TM) 6 Update 22 (64-bit) ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1414D482-1CAC-41E4-949C-182C2E30BFA1} - System32\Tasks\{00906BCA-FAE0-4F88-AECA-EEA75DC69419} => Firefox.exe Task: {28E4527C-1710-404E-8FA8-D5D5D9FAC471} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated) Task: {2EE7C66A-7782-4511-8287-C53F8BB67AF6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-03] (Google Inc.) Task: {398C2296-55F8-47CF-9518-7482685BC52F} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-11-16] (Sony Corporation) Task: {3DCCF04C-DF4E-4C31-8EE5-678F22811BCE} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2584018587-2600382852-1638487148-1001 Task: {696A6324-2441-4B15-BFDD-1A452E2F5551} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient Task: {70804D32-3257-488A-95B0-1EABC80DF1CF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {7614E6F6-FDDB-45F1-9BC4-50B24E717CEA} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation) Task: {7A8B6C87-68E4-4A7C-998F-9EDBE9B5FAD9} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {91E6593D-5A0D-4CCB-B258-E405C5334726} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2011-03-30] (Sony Corporation) Task: {939625EF-BBF1-4868-98FF-9EF17A4F60DC} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation) Task: {A287311A-BA85-42DA-A358-CB9BC9F6557A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {AA031AFF-A2A3-4C4A-9352-4DF21675B572} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {B49E9995-72E2-4494-9E00-050C60E3BE64} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {B9CE3BFF-60AA-4864-B8CC-3DCC7617BB73} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-11-16] (Sony Corporation) Task: {C2353867-8BDC-4400-AC5C-F437D6A1D056} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-03] (Google Inc.) Task: {E5ACFD57-43B8-4BBC-A31E-3E6F47BA3087} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {FB5D8298-85B2-4DB2-B6FD-E45A161CFB20} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-30 19:07 - 2013-05-14 11:50 - 00140936 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2011-08-08 06:43 - 2011-02-25 17:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll 2011-08-08 05:57 - 2011-03-30 09:09 - 00049664 _____ () C:\Program Files\Sony\VAIO Update 5\VUAgentPS64.dll 2013-08-06 08:38 - 2013-08-05 14:47 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2011-09-27 08:23 - 2011-09-27 08:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-09-27 08:22 - 2011-09-27 08:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-07-20 20:25 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-07-20 20:25 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-07-20 20:25 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-07-20 20:25 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-07-20 20:25 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2011-08-08 05:57 - 2011-03-05 16:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2013-01-18 13:39 - 2013-01-18 13:39 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9a6476e0725c79a5e8787d0d2f83c458\IsdiInterop.ni.dll 2011-08-08 05:42 - 2010-09-13 18:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2014-03-31 11:56 - 2014-03-31 11:56 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2011-02-18 11:18 - 2011-02-18 11:18 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll 2014-03-12 18:15 - 2014-03-12 18:15 - 16276872 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/28/2014 08:08:03 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:34:02 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:33:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:33:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:20:10 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:20:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:20:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:20:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:12:02 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/27/2014 08:25:53 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (04/28/2014 07:34:51 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 06:57:41 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 06:57:31 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (04/27/2014 08:24:26 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (04/27/2014 08:20:59 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (04/27/2014 08:09:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (04/27/2014 08:09:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (04/27/2014 08:08:31 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Security Center Service" ist von folgendem Dienst abhängig: wscsvc. Dieser Dienst ist eventuell nicht installiert. Error: (04/27/2014 08:08:31 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (04/27/2014 08:08:31 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "IPsec-Richtlinien-Agent" ist von folgendem Dienst abhängig: BFE. Dieser Dienst ist eventuell nicht installiert. Microsoft Office Sessions: ========================= Error: (04/28/2014 08:08:03 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (04/27/2014 11:34:02 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:33:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:33:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:20:10 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:20:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:20:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:20:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:12:02 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/27/2014 08:25:53 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Percentage of memory in use: 56% Total physical RAM: 4077.86 MB Available physical RAM: 1771.7 MB Total Pagefile: 8153.91 MB Available Pagefile: 5365.77 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:451.77 GB) (Free:369.09 GB) NTFS Drive e: (Office2013 Pro Pl. DE x32 RZUWb) (CDROM) (Total:0.71 GB) (Free:0 GB) UDF Drive f: (STORE N GO) (Removable) (Total:3.73 GB) (Free:3.26 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 68A796D5) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: F770A443) Partition 1: (Not Active) - (Size=4 GB) - (Type=0C) ==================== End Of Log ============================ Guten morgen so hier mein vorerst letzter post; jetzt muss ich erstmal in die uni Code:
ATTFilter Farbar Service Scanner Version: 25-02-2014 Ran by Lena (administrator) on 28-04-2014 at 08:18:29 Running from "C:\Users\Lena\Downloads" Microsoft Windows 7 Home Premium Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit C:\Windows\System32\ipnathlp.dll => MD5 is legit C:\Windows\System32\iphlpsvc.dll => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log **** |
28.04.2014, 07:43 | #20 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Sieht schon sehr gut aus... Müssen aber noch etwas fixen. Fragen negenbei: 1. Firewall dürfte wieder gehen oder? 2. Ist der von Dir, der Proxyeintrag? Kann der weg? Code:
ATTFilter FF NetworkProxy: "http", "91.228.53.28" FF NetworkProxy: "http_port", 8080
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
28.04.2014, 10:32 | #21 |
| Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 juhuu proxyeintrag? hm..sagt mir nichts. ja, die firewall geht wieder |
28.04.2014, 10:34 | #22 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Ok...dann melde ich mich wieder mit nem Fix usw.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
28.04.2014, 18:37 | #23 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Hi, Lena... Wir machen so weiter: Schritt 1 Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster. Klicke auf OK und kopiere nun den Text aus der Codebox in das leere Textdokument: Code:
ATTFilter ZeroAccess: C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56} C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56}\@ FF NetworkProxy: "http", "91.228.53.28" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "type", 0
Schritt 2 Bitte lade und installiere von hier den neuesten Internetexplorer. Bitte von hier das neueste Java herunterladen. Die Version 45 dann in der Programmliste anklicken und deinstallieren. Bitte lade und installiere von hier den neuesten Flashplayer. Besuche mit dem Internetexplorer und dem Firefox die Seite des Links und installiere das neueste Flash. Verzichte auf alle optionalen Angebote. Schritt 3 Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
28.04.2014, 20:23 | #24 |
| Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-04-2014 03 Ran by Lena at 2014-04-28 20:47:14 Run:1 Running from C:\Users\Lena\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** ZeroAccess: C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56} C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56}\@ FF NetworkProxy: "http", "91.228.53.28" FF NetworkProxy: "http_port", 8080 FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "type", 0 ***************** C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56} => Moved successfully. "C:\Users\Lena\AppData\Local\{0a9f6865-dc7a-7a66-8c39-f4933acdfb56}\@" => File/Directory not found. Firefox Proxy settings were reset. Firefox Proxy settings were reset. Firefox Proxy settings were reset. Firefox Proxy settings were reset. ==== End of Fixlog ==== FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-04-2014 03 Ran by Lena (administrator) on LENA-VAIO on 28-04-2014 21:21:40 Running from C:\Users\Lena\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtSvc.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtCtrl.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-27] (Microsoft Corp.) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282632 2013-04-02] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-2584018587-2600382852-1638487148-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.) HKU\S-1-5-21-2584018587-2600382852-1638487148-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HDD Password Tool.lnk ShortcutTarget: HDD Password Tool.lnk -> C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtCtrl.exe (TOSHIBA CORPORATION) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Lena\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?p=pLsH3anR-Rz0cILJ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File BHO-x32: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll () BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671 FF NewTab: about:blank FF SearchEngineOrder.1: Ask Search FF SelectedSearchEngine: Google FF Homepage: about:home FF Keyword.URL: hxxp://www.google.com/search?rls=org.mozilla:en-US:official&client=firefox-a&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Play4Free - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\battlefieldplay4free@ea.com [2013-08-05] FF Extension: Flashblock - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2013-04-16] FF Extension: Adblock Plus Pop-up Addon - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\adblockpopups@jessehakanen.net.xpi [2012-10-04] FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\admin@proxy-listen.de.xpi [2013-01-19] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21] FF Extension: Adblock Plus - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\x3ze5ktz.default-1349367259671\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-04] FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-08-22] Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Extension: (Google Docs) - C:\Users\Lena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-28] CHR Extension: (Google Drive) - C:\Users\Lena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-28] CHR Extension: (YouTube) - C:\Users\Lena\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-28] CHR Extension: (Google-Suche) - C:\Users\Lena\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-28] CHR Extension: (Google Wallet) - C:\Users\Lena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-28] CHR Extension: (Google Mail) - C:\Users\Lena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-28] CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-04-28] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-27] (Microsoft Corp.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] () S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.) R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 TosExtSvc; C:\Program Files (x86)\TOSHIBA\HDD Password Tool\TosExtSvc.exe [1629560 2012-08-20] (TOSHIBA CORPORATION) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1021112 2011-03-30] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-26] (Disc Soft Ltd) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited) R0 TosExt; C:\Windows\System32\Drivers\TosExt.sys [25976 2012-08-20] (TOSHIBA Corporation) R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2014-02-26] (WinISO.com) S3 vpnva; system32\DRIVERS\vpnva64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-28 21:20 - 2014-04-28 21:20 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-28 21:20 - 2014-04-28 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-04-28 21:15 - 2014-04-28 21:15 - 00002170 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-04-28 21:15 - 2014-04-28 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2014-04-28 21:15 - 2014-04-28 21:15 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-04-28 21:15 - 2014-04-28 21:15 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan 2014-04-28 21:11 - 2014-04-28 21:11 - 00005449 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-04-28 21:11 - 2014-04-28 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-28 21:11 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-28 21:11 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-28 21:11 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-28 21:11 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-28 21:09 - 2014-04-28 21:09 - 00921512 _____ (Oracle Corporation) C:\Users\Lena\Downloads\jxpiinstall(3).exe 2014-04-28 21:06 - 2014-04-28 21:06 - 00001373 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-28 21:02 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-04-28 20:57 - 2014-04-28 20:57 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-28 20:57 - 2014-04-28 20:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-28 20:57 - 2014-04-28 20:57 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-28 20:57 - 2014-04-28 20:57 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-28 20:57 - 2014-04-28 20:57 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-04-28 20:57 - 2014-04-28 20:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-04-28 20:57 - 2014-04-28 20:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-04-28 20:57 - 2014-04-28 20:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-04-28 20:57 - 2014-04-28 20:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-04-28 20:57 - 2014-04-28 20:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-04-28 20:57 - 2014-04-28 20:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-04-28 20:55 - 2014-04-28 20:55 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-04-28 20:55 - 2014-04-28 20:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-04-28 20:55 - 2014-04-28 20:55 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-28 20:54 - 2014-04-28 20:54 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-28 20:52 - 2014-04-28 20:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-04-28 20:52 - 2014-04-28 20:52 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-04-28 20:49 - 2014-04-28 21:02 - 00011535 _____ () C:\Windows\IE11_main.log 2014-04-28 20:48 - 2014-04-28 20:49 - 63320784 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\IE11-Windows6.1-x64-de-de.exe 2014-04-28 20:45 - 2014-04-28 20:45 - 00000301 _____ () C:\Users\Lena\Documents\Fixlist.txt 2014-04-28 08:18 - 2014-04-28 08:18 - 00002082 _____ () C:\Users\Lena\Downloads\FSS.txt 2014-04-28 08:17 - 2014-04-28 08:17 - 00409600 _____ (Farbar) C:\Users\Lena\Downloads\FSS.exe 2014-04-27 23:16 - 2014-04-27 23:20 - 02347384 _____ (ESET) C:\Users\Lena\Downloads\esetsmartinstaller_deu.exe 2014-04-27 20:32 - 2014-04-27 20:32 - 00026853 _____ () C:\ComboFix.txt 2014-04-27 20:13 - 2014-04-27 20:32 - 00000000 ____D () C:\ComboFix 2014-04-27 20:13 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-04-27 20:13 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-04-27 20:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-04-27 20:13 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-04-27 20:12 - 2014-04-27 20:32 - 00000000 ____D () C:\Qoobox 2014-04-27 20:12 - 2014-04-27 20:30 - 00000000 ____D () C:\Windows\erdnt 2014-04-27 20:10 - 2014-04-27 20:11 - 05196309 ____R (Swearware) C:\Users\Lena\Downloads\ComboFix.exe 2014-04-27 20:06 - 2014-04-27 20:07 - 00000000 ____D () C:\AdwCleaner 2014-04-27 20:05 - 2014-04-27 20:05 - 01329501 _____ () C:\Users\Lena\Downloads\adwcleaner.exe 2014-04-27 20:01 - 2014-04-27 20:01 - 00001164 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-04-27 19:40 - 2014-04-27 19:40 - 00011834 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.7z 2014-04-27 19:35 - 2014-04-27 19:35 - 00212566 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.txt 2014-04-27 19:33 - 2014-04-27 19:33 - 01110476 _____ () C:\Users\Lena\Downloads\7z920.exe 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-04-27 12:08 - 2014-04-27 12:08 - 00001798 _____ () C:\Users\Lena\Documents\uebung.txt 2014-04-26 23:58 - 2014-04-28 08:11 - 00049013 _____ () C:\Users\Lena\Desktop\Addition.txt 2014-04-26 23:57 - 2014-04-28 21:22 - 00020803 _____ () C:\Users\Lena\Desktop\FRST.txt 2014-04-26 23:57 - 2014-04-28 21:21 - 00000000 ____D () C:\FRST 2014-04-26 23:56 - 2014-04-26 23:56 - 02061824 _____ (Farbar) C:\Users\Lena\Desktop\FRST64.exe 2014-04-26 23:01 - 2014-04-26 23:01 - 00212564 _____ () C:\Users\Lena\Documents\verlaufsprotokoll.txt 2014-04-26 23:00 - 2014-04-26 23:00 - 00599578 _____ () C:\Users\Lena\Documents\log.xml 2014-04-26 22:41 - 2014-04-27 23:14 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-26 22:41 - 2014-04-27 23:10 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-26 22:41 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-26 22:41 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-26 22:41 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-26 22:40 - 2014-04-26 22:40 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Lena\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-26 22:26 - 2014-04-26 22:26 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove(1).diagcab 2014-04-26 21:46 - 2014-04-26 21:46 - 00000000 ___RD () C:\MSOCache 2014-04-26 21:40 - 2014-04-26 21:40 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove.diagcab 2014-04-26 17:47 - 2014-04-26 17:47 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-04-26 17:46 - 2014-04-26 17:47 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\DAEMON Tools Lite 2014-04-26 17:46 - 2014-04-26 17:46 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-04-26 17:46 - 2014-04-26 17:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-04-26 17:45 - 2014-04-26 17:48 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-04-24 20:30 - 2014-04-24 20:30 - 00001252 _____ () C:\Users\Lena\Desktop\WinISO.lnk 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinISO 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Local\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Program Files (x86)\WinISO Computing 2014-04-24 20:30 - 2014-02-26 12:09 - 00204032 _____ (WinISO.com) C:\Windows\system32\Drivers\WinisoCDBus.sys 2014-04-24 20:29 - 2014-04-24 20:30 - 07043816 _____ (WinISO Computing Inc.) C:\Users\Lena\Downloads\winiso.exe 2014-04-24 17:57 - 2014-04-24 17:57 - 00000000 ____D () C:\Users\Lena\Documents\Ashampoo Burning Studio FREE 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Local\ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo 2014-04-24 17:54 - 2014-04-24 17:55 - 00000000 ____D () C:\ProgramData\Ashampoo 2014-04-24 17:54 - 2014-04-24 17:54 - 00000000 ____D () C:\Program Files (x86)\Ashampoo 2014-04-24 17:52 - 2014-04-24 17:53 - 33649640 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Lena\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe 2014-04-24 17:36 - 2014-04-27 20:07 - 00001083 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-04-24 17:34 - 2014-04-24 17:35 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Local\TuneUp Software 2014-04-24 17:33 - 2014-04-24 17:37 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Nero 2014-04-24 17:25 - 2014-04-24 17:47 - 00000000 ____D () C:\ProgramData\Nero 2014-04-24 17:14 - 2014-04-24 17:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Lena\Downloads\Nero 2014 - CHIP-Downloader.exe 2014-04-24 15:30 - 2014-04-24 15:41 - 00000000 ____D () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb 2014-04-24 15:14 - 2014-04-24 15:29 - 662454996 _____ () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb.zip 2014-04-24 15:13 - 2014-04-24 15:13 - 00010056 _____ () C:\Users\Lena\Downloads\free_download_sw.htm 2014-04-13 22:30 - 2014-04-13 22:30 - 00000000 ____D () C:\Users\Lena\Documents\Benutzerdefinierte Office-Vorlagen 2014-04-13 22:06 - 2014-04-13 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 15 2014-04-13 22:04 - 2014-04-13 22:04 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(2).exe 2014-04-13 21:53 - 2014-04-13 21:53 - 01319104 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X64.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-04-13 21:51 - 2014-04-13 21:51 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(1).exe 2014-04-13 21:00 - 2014-04-13 21:00 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-03-31 11:56 - 2014-04-27 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-04-28 21:22 - 2014-04-26 23:57 - 00020803 _____ () C:\Users\Lena\Desktop\FRST.txt 2014-04-28 21:21 - 2014-04-26 23:57 - 00000000 ____D () C:\FRST 2014-04-28 21:21 - 2011-12-01 14:36 - 00000000 ____D () C:\Users\Lena\AppData\Local\Adobe 2014-04-28 21:20 - 2014-04-28 21:20 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-28 21:20 - 2014-04-28 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-04-28 21:20 - 2012-06-03 23:59 - 00000000 ____D () C:\Users\Lena\AppData\Local\Google 2014-04-28 21:20 - 2012-06-03 23:59 - 00000000 ____D () C:\Program Files (x86)\Google 2014-04-28 21:19 - 2012-05-04 09:02 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-28 21:19 - 2012-05-04 09:02 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-28 21:19 - 2012-05-04 09:02 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-28 21:19 - 2012-03-30 16:24 - 00000000 ____D () C:\Users\Lena\AppData\Local\CrashDumps 2014-04-28 21:19 - 2012-01-21 20:06 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-28 21:18 - 2012-10-14 00:49 - 00000000 ___RD () C:\Users\Lena\Dropbox 2014-04-28 21:15 - 2014-04-28 21:15 - 00002170 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-04-28 21:15 - 2014-04-28 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2014-04-28 21:15 - 2014-04-28 21:15 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-04-28 21:15 - 2014-04-28 21:15 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan 2014-04-28 21:15 - 2012-06-03 23:59 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-28 21:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-28 21:12 - 2013-11-04 14:01 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-28 21:11 - 2014-04-28 21:11 - 00005449 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-04-28 21:11 - 2014-04-28 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-28 21:11 - 2011-08-08 15:28 - 00701332 _____ () C:\Windows\system32\perfh007.dat 2014-04-28 21:11 - 2011-08-08 15:28 - 00152404 _____ () C:\Windows\system32\perfc007.dat 2014-04-28 21:11 - 2011-08-08 05:54 - 00000000 ____D () C:\Program Files (x86)\Java 2014-04-28 21:11 - 2009-07-14 07:13 - 01612484 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-28 21:11 - 2009-07-14 06:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-28 21:11 - 2009-07-14 06:45 - 00020928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-28 21:09 - 2014-04-28 21:09 - 00921512 _____ (Oracle Corporation) C:\Users\Lena\Downloads\jxpiinstall(3).exe 2014-04-28 21:09 - 2011-12-01 13:36 - 01866867 _____ () C:\Windows\WindowsUpdate.log 2014-04-28 21:08 - 2012-10-14 00:48 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Dropbox 2014-04-28 21:07 - 2011-12-01 13:50 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Skype 2014-04-28 21:06 - 2014-04-28 21:06 - 00001373 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-28 21:06 - 2012-06-03 23:59 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-28 21:05 - 2012-12-21 17:58 - 00099711 _____ () C:\Windows\setupact.log 2014-04-28 21:05 - 2011-08-08 05:50 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-04-28 21:05 - 2011-02-11 00:48 - 00000000 ____D () C:\Windows\Panther 2014-04-28 21:05 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-28 21:02 - 2014-04-28 20:49 - 00011535 _____ () C:\Windows\IE11_main.log 2014-04-28 21:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-04-28 21:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-04-28 21:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-04-28 21:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-04-28 21:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-28 20:57 - 2014-04-28 20:57 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-28 20:57 - 2014-04-28 20:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-28 20:57 - 2014-04-28 20:57 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-28 20:57 - 2014-04-28 20:57 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-28 20:57 - 2014-04-28 20:57 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-04-28 20:57 - 2014-04-28 20:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-04-28 20:57 - 2014-04-28 20:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-04-28 20:57 - 2014-04-28 20:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-04-28 20:57 - 2014-04-28 20:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-04-28 20:57 - 2014-04-28 20:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-04-28 20:57 - 2014-04-28 20:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-04-28 20:57 - 2014-04-28 20:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-04-28 20:57 - 2014-04-28 20:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-04-28 20:55 - 2014-04-28 20:55 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-04-28 20:55 - 2014-04-28 20:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-04-28 20:55 - 2014-04-28 20:55 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-28 20:55 - 2014-04-28 20:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-28 20:55 - 2014-04-28 20:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-28 20:54 - 2014-04-28 20:54 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-28 20:54 - 2014-04-28 20:54 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-28 20:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-04-28 20:52 - 2014-04-28 20:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-04-28 20:52 - 2014-04-28 20:52 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-04-28 20:49 - 2014-04-28 20:48 - 63320784 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\IE11-Windows6.1-x64-de-de.exe 2014-04-28 20:45 - 2014-04-28 20:45 - 00000301 _____ () C:\Users\Lena\Documents\Fixlist.txt 2014-04-28 18:45 - 2011-12-01 13:38 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{F5E40832-3334-40DB-9F43-758FD6532A4F} 2014-04-28 10:14 - 2013-01-29 12:39 - 00058836 _____ () C:\Windows\PFRO.log 2014-04-28 08:18 - 2014-04-28 08:18 - 00002082 _____ () C:\Users\Lena\Downloads\FSS.txt 2014-04-28 08:17 - 2014-04-28 08:17 - 00409600 _____ (Farbar) C:\Users\Lena\Downloads\FSS.exe 2014-04-28 08:11 - 2014-04-26 23:58 - 00049013 _____ () C:\Users\Lena\Desktop\Addition.txt 2014-04-27 23:20 - 2014-04-27 23:16 - 02347384 _____ (ESET) C:\Users\Lena\Downloads\esetsmartinstaller_deu.exe 2014-04-27 23:14 - 2014-04-26 22:41 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-27 23:11 - 2011-08-08 06:05 - 00000000 ____D () C:\Windows\bg 2014-04-27 23:10 - 2014-04-26 22:41 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-27 21:31 - 2012-02-13 17:23 - 00000023 _____ () C:\test.xml 2014-04-27 20:32 - 2014-04-27 20:32 - 00026853 _____ () C:\ComboFix.txt 2014-04-27 20:32 - 2014-04-27 20:13 - 00000000 ____D () C:\ComboFix 2014-04-27 20:32 - 2014-04-27 20:12 - 00000000 ____D () C:\Qoobox 2014-04-27 20:32 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-04-27 20:30 - 2014-04-27 20:12 - 00000000 ____D () C:\Windows\erdnt 2014-04-27 20:26 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-04-27 20:23 - 2011-12-01 13:36 - 00000000 ____D () C:\Users\Lena 2014-04-27 20:11 - 2014-04-27 20:10 - 05196309 ____R (Swearware) C:\Users\Lena\Downloads\ComboFix.exe 2014-04-27 20:07 - 2014-04-27 20:06 - 00000000 ____D () C:\AdwCleaner 2014-04-27 20:07 - 2014-04-24 17:36 - 00001083 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-04-27 20:05 - 2014-04-27 20:05 - 01329501 _____ () C:\Users\Lena\Downloads\adwcleaner.exe 2014-04-27 20:04 - 2014-03-31 11:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-27 20:01 - 2014-04-27 20:01 - 00001164 _____ () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-04-27 19:40 - 2014-04-27 19:40 - 00011834 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.7z 2014-04-27 19:35 - 2014-04-27 19:35 - 00212566 _____ () C:\Users\Lena\Desktop\anwendungsprotokoll.txt 2014-04-27 19:33 - 2014-04-27 19:33 - 01110476 _____ () C:\Users\Lena\Downloads\7z920.exe 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-04-27 19:33 - 2014-04-27 19:33 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-04-27 12:08 - 2014-04-27 12:08 - 00001798 _____ () C:\Users\Lena\Documents\uebung.txt 2014-04-27 11:14 - 2011-12-03 13:19 - 00000000 ____D () C:\Users\Lena\Documents\Studium 2014-04-26 23:56 - 2014-04-26 23:56 - 02061824 _____ (Farbar) C:\Users\Lena\Desktop\FRST64.exe 2014-04-26 23:54 - 2009-07-14 06:45 - 00492392 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-26 23:30 - 2011-12-01 13:36 - 00129544 _____ () C:\Users\Lena\AppData\Local\GDIPFONTCACHEV1.DAT 2014-04-26 23:15 - 2011-12-03 23:29 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-26 23:15 - 2011-07-13 04:58 - 00000000 ____D () C:\Windows\ShellNew 2014-04-26 23:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-04-26 23:14 - 2009-07-14 04:34 - 00000387 _____ () C:\Windows\win.ini 2014-04-26 23:01 - 2014-04-26 23:01 - 00212564 _____ () C:\Users\Lena\Documents\verlaufsprotokoll.txt 2014-04-26 23:00 - 2014-04-26 23:00 - 00599578 _____ () C:\Users\Lena\Documents\log.xml 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-26 22:41 - 2014-04-26 22:41 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-26 22:40 - 2014-04-26 22:40 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Lena\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-26 22:26 - 2014-04-26 22:26 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove(1).diagcab 2014-04-26 21:46 - 2014-04-26 21:46 - 00000000 ___RD () C:\MSOCache 2014-04-26 21:40 - 2014-04-26 21:40 - 02947139 _____ () C:\Users\Lena\Downloads\O15CTRRemove.diagcab 2014-04-26 17:48 - 2014-04-26 17:45 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-04-26 17:47 - 2014-04-26 17:47 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-04-26 17:47 - 2014-04-26 17:46 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\DAEMON Tools Lite 2014-04-26 17:46 - 2014-04-26 17:46 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-04-26 17:46 - 2014-04-26 17:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-04-24 20:30 - 2014-04-24 20:30 - 00001252 _____ () C:\Users\Lena\Desktop\WinISO.lnk 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinISO 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Users\Lena\AppData\Local\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:30 - 00000000 ____D () C:\Program Files (x86)\WinISO Computing 2014-04-24 20:30 - 2014-04-24 20:29 - 07043816 _____ (WinISO Computing Inc.) C:\Users\Lena\Downloads\winiso.exe 2014-04-24 17:57 - 2014-04-24 17:57 - 00000000 ____D () C:\Users\Lena\Documents\Ashampoo Burning Studio FREE 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\Users\Lena\AppData\Local\ashampoo 2014-04-24 17:55 - 2014-04-24 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo 2014-04-24 17:55 - 2014-04-24 17:54 - 00000000 ____D () C:\ProgramData\Ashampoo 2014-04-24 17:54 - 2014-04-24 17:54 - 00000000 ____D () C:\Program Files (x86)\Ashampoo 2014-04-24 17:53 - 2014-04-24 17:52 - 33649640 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Lena\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe 2014-04-24 17:47 - 2014-04-24 17:25 - 00000000 ____D () C:\ProgramData\Nero 2014-04-24 17:37 - 2014-04-24 17:33 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\Nero 2014-04-24 17:35 - 2014-04-24 17:34 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Roaming\TuneUp Software 2014-04-24 17:34 - 2014-04-24 17:34 - 00000000 ____D () C:\Users\Lena\AppData\Local\TuneUp Software 2014-04-24 17:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors 2014-04-24 17:14 - 2014-04-24 17:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Lena\Downloads\Nero 2014 - CHIP-Downloader.exe 2014-04-24 15:41 - 2014-04-24 15:30 - 00000000 ____D () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb 2014-04-24 15:29 - 2014-04-24 15:14 - 662454996 _____ () C:\Users\Lena\Downloads\office2013-prof-plus-32bit-de-RZUWb.zip 2014-04-24 15:13 - 2014-04-24 15:13 - 00010056 _____ () C:\Users\Lena\Downloads\free_download_sw.htm 2014-04-14 20:13 - 2014-04-28 21:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-14 20:05 - 2014-04-28 21:11 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-14 20:05 - 2014-04-28 21:11 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-14 20:04 - 2014-04-28 21:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-13 22:30 - 2014-04-13 22:30 - 00000000 ____D () C:\Users\Lena\Documents\Benutzerdefinierte Office-Vorlagen 2014-04-13 22:06 - 2014-04-13 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 15 2014-04-13 22:04 - 2014-04-13 22:04 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(2).exe 2014-04-13 21:53 - 2014-04-13 21:53 - 01319104 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X64.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-04-13 21:51 - 2014-04-13 21:51 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_(1).exe 2014-04-13 21:21 - 2011-12-01 13:37 - 00000000 ____D () C:\Users\Lena\AppData\Local\VirtualStore 2014-04-13 21:11 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-04-13 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-04-13 21:00 - 2014-04-13 21:00 - 00966336 _____ (Microsoft Corporation) C:\Users\Lena\Downloads\Setup.X86.de-de_O365ProPlusRetail_97e7ffce-f364-470c-80e0-63a7470dda8c_TX_PR_.exe 2014-04-08 10:32 - 2012-08-17 14:55 - 00000000 ____D () C:\Users\Lena\Documents\Arbeit 2014-04-03 09:51 - 2014-04-26 22:41 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-26 22:41 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-26 22:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-04-01 06:37 - 2012-05-04 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service Some content of TEMP: ==================== C:\Users\Lena\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-31 23:43 ==================== End Of Log ============================ --- --- --- |
28.04.2014, 20:24 | #25 |
| Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 So, auch diese Anweisung ist geschafft Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2014 03 Ran by Lena at 2014-04-28 21:22:37 Running from C:\Users\Lena\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) ActiveX контрола на Windows Live Mesh за отдалечени връзки (HKLM-x32\...\{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}) (Version: 15.4.5722.2 - Microsoft Corporation) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) ALDI Bestellsoftware 4.12.2 (HKLM-x32\...\ALDI Bestellsoftware) (Version: 4.12.2 - ORWO Net) Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft) ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.392 - ArcSoft) Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira) Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4487 - APN, LLC) Battlefield Play4Free (HKLM-x32\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version: - EA Digital illusions) Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation) Bing Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.174.0 - Microsoft Corporation) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.100 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Cambridge English Pronouncing Dictionary - 17th Edition (HKLM-x32\...\cepd17) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: - ) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.1.0 - Canon Inc.) Canon MG3200 series Benutzerregistrierung (HKLM-x32\...\Canon MG3200 series Benutzerregistrierung) (Version: - Canon Inc.) Canon MG3200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3200_series) (Version: 1.01 - Canon Inc.) Canon MG3200 series On-screen Manual (HKLM-x32\...\Canon MG3200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon MG3500 series Benutzerregistrierung (HKLM-x32\...\Canon MG3500 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MG3500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3500_series) (Version: 1.00 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.0.0 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 3.18 - Piriform) Citavi (HKLM-x32\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.4.0.2 - Swiss Academic Software) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant) Control ActiveX Windows Live Mesh pentru conexiuni la distanță (HKLM-x32\...\{260E3D78-94E6-47EC-8E29-46301572BB1E}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Free YouTube Download version 3.0.19.1206 (HKLM-x32\...\Free YouTube Download_is1) (Version: - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.11.34.1015 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.34.1015 - DVDVideoSoft Ltd.) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GeoGebra 4.2 (HKLM-x32\...\GeoGebra 4.2) (Version: 4.2.60.0 - International GeoGebra Institute) GEONExT 1.74 (HKLM-x32\...\GEONExT_is1) (Version: 1.74 - GEONExT Group) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 29.0.1547.66 - Google Inc.) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden HDD Password Tool (HKLM-x32\...\{97CA1EE3-9477-4C3C-BFCF-89A84B6A222E}) (Version: 1.00.0820 - TOSHIBA CORPORATION.) HotPotatoes v 6.3.0.5 (HKLM-x32\...\hotpot_is1) (Version: - HalfBaked) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation) iTunes (HKLM\...\{F73A118B-8271-47E2-8790-0C636B2539C5}) (Version: 11.1.0.126 - Apple Inc.) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 3.0.285.6 - McAfee, Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3.3 - Notepad++ Team) NVIDIA 3D Vision Treiber 267.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 267.21 - NVIDIA Corporation) NVIDIA Grafiktreiber 267.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.21 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.2.19.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.19.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.265.39.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6721 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 267.21 (Version: 267.21 - NVIDIA Corporation) Hidden Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.6.00.06030 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06010 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06140 - Sony Corporation) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QUICKfind (HKLM-x32\...\{593AFFA4-D08E-4272-BABB-420949D32A10}) (Version: - ) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.) Remote Keyboard (x32 Version: 1.1.1.03020 - Sony Corporation) Hidden Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) Hidden Secure Download Manager (HKLM-x32\...\{47CED407-95BF-4EF5-AD14-89F979480E1A}) (Version: 3.0.2 - e-academy Inc.) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Sony Corporation (Version: 1.0.0 - Default Company Name) Hidden Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.19 - Safer-Networking Ltd.) SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation) VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{66081CDD-C1FE-415F-BB3A-F2622BA27461}) (Version: 1.6.00.06030 - Sony Corporation) VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.6.00.06140 - Sony Corporation) VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation) VAIO - Remote-Tastatur (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.1.03020 - Sony Corporation) VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.0.15030 - Sony Corporation) VAIO Care (x32 Version: 6.4.0.15030 - Sony Corporation) Hidden VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) Hidden VAIO Easy Connect (HKLM-x32\...\{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.0.0.03050 - Sony Corporation) VAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.3.0.11090 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) Hidden VAIO Hero Screensaver - Summer 2011 Screensaver (HKLM-x32\...\VAIO Hero Screensaver - Summer 2011 Screensaver) (Version: - ) VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation) VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation) VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.5.3 - Sony Corporation) VAIO Quick Web Access (x32 Version: 1.4.5.3 - Sony Corporation) Hidden VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.5.0.02280 - Sony Corporation) VAIO Update (HKLM-x32\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.4.0.15300 - Sony Corporation) VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation) VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VESx64 (Version: 1.0.0 - Sony Corporation) Hidden VESx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VIx64 (Version: 1.0.0 - Sony Corporation) Hidden VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Windows Live Messenger (x32 Version: 15.4.3502.0922 - Корпорація Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinISO (HKLM-x32\...\WinISO) (Version: 6.4.0.5170 - WinISO Computing Inc.) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Елемент керування Windows Live Mesh ActiveX для віддалених підключень (HKLM-x32\...\{6756D5CA-3E31-4308-9BF0-79DFD1AF196E}) (Version: 15.4.5722.2 - Microsoft Corporation) Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation) ==================== Restore Points ========================= 24-04-2014 15:41:44 Removed Nero Info. 24-04-2014 15:43:48 Removed Nero 2014. 24-04-2014 16:28:34 TuneUp Utilities 2014 wird entfernt 24-04-2014 16:29:35 TuneUp Utilities 2014 (de-DE) wird entfernt 26-04-2014 15:46:22 Gerätetreiber-Paketinstallation: DT Soft Ltd Systemgeräte 26-04-2014 15:49:01 Installed Microsoft Office Professional Plus 2013 26-04-2014 15:49:18 PROPLUS 26-04-2014 15:59:11 Installed Microsoft Office Professional Plus 2013 26-04-2014 15:59:35 PROPLUS 26-04-2014 19:32:10 Installed Microsoft Office Professional Plus 2013 26-04-2014 19:32:35 PROPLUS 26-04-2014 19:45:46 Installed Microsoft Office Professional Plus 2013 26-04-2014 19:46:10 PROPLUS 26-04-2014 20:04:57 Installed Microsoft Office Professional Plus 2013 26-04-2014 20:05:20 PROPLUS 26-04-2014 21:06:45 Installed Microsoft Office Professional Plus 2013 26-04-2014 21:07:30 PROPLUS 27-04-2014 18:03:33 Removed Java(TM) 6 Update 22 27-04-2014 18:04:31 Removed Java(TM) 6 Update 22 (64-bit) 28-04-2014 18:51:27 Windows Modules Installer 28-04-2014 19:10:06 Installed Java 7 Update 55 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1414D482-1CAC-41E4-949C-182C2E30BFA1} - System32\Tasks\{00906BCA-FAE0-4F88-AECA-EEA75DC69419} => Firefox.exe Task: {28E4527C-1710-404E-8FA8-D5D5D9FAC471} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-28] (Adobe Systems Incorporated) Task: {2EE7C66A-7782-4511-8287-C53F8BB67AF6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-03] (Google Inc.) Task: {398C2296-55F8-47CF-9518-7482685BC52F} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-11-16] (Sony Corporation) Task: {3DCCF04C-DF4E-4C31-8EE5-678F22811BCE} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2584018587-2600382852-1638487148-1001 Task: {696A6324-2441-4B15-BFDD-1A452E2F5551} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient Task: {70804D32-3257-488A-95B0-1EABC80DF1CF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {7614E6F6-FDDB-45F1-9BC4-50B24E717CEA} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation) Task: {7A8B6C87-68E4-4A7C-998F-9EDBE9B5FAD9} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {91E6593D-5A0D-4CCB-B258-E405C5334726} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2011-03-30] (Sony Corporation) Task: {939625EF-BBF1-4868-98FF-9EF17A4F60DC} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation) Task: {A287311A-BA85-42DA-A358-CB9BC9F6557A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {AA031AFF-A2A3-4C4A-9352-4DF21675B572} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {B49E9995-72E2-4494-9E00-050C60E3BE64} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {B9CE3BFF-60AA-4864-B8CC-3DCC7617BB73} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-11-16] (Sony Corporation) Task: {C2353867-8BDC-4400-AC5C-F437D6A1D056} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-03] (Google Inc.) Task: {E5ACFD57-43B8-4BBC-A31E-3E6F47BA3087} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {FB5D8298-85B2-4DB2-B6FD-E45A161CFB20} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-30 19:07 - 2013-05-14 11:50 - 00140936 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2011-08-08 06:43 - 2011-02-25 17:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll 2011-08-08 06:43 - 2011-02-25 17:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll 2013-08-06 08:38 - 2013-08-05 14:47 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2011-09-27 08:23 - 2011-09-27 08:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-09-27 08:22 - 2011-09-27 08:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-07-20 20:25 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-07-20 20:25 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-07-20 20:25 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-07-20 20:25 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-07-20 20:25 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2011-08-08 05:57 - 2011-03-05 16:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2013-01-18 13:39 - 2013-01-18 13:39 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9a6476e0725c79a5e8787d0d2f83c458\IsdiInterop.ni.dll 2011-08-08 05:42 - 2010-09-13 18:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2014-03-31 11:56 - 2014-03-31 11:56 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2011-02-18 11:18 - 2011-02-18 11:18 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll 2014-04-28 21:15 - 2014-04-28 21:15 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/28/2014 09:18:58 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Dropbox.exe, Version: 2.4.11.0, Zeitstempel: 0x527d91e4 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x1e122e2e ID des fehlerhaften Prozesses: 0x128c Startzeit der fehlerhaften Anwendung: 0xDropbox.exe0 Pfad der fehlerhaften Anwendung: Dropbox.exe1 Pfad des fehlerhaften Moduls: Dropbox.exe2 Berichtskennung: Dropbox.exe3 Error: (04/28/2014 09:16:19 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 28.0.0.5186 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1580 Startzeit: 01cf63152acd1455 Endzeit: 94 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: 90050ab7-cf09-11e3-82f3-78843cf2681d Error: (04/28/2014 09:05:11 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 06:39:17 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 11:14:49 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 10:15:05 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 08:08:03 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:34:02 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:33:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/27/2014 11:33:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (04/28/2014 08:40:02 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 06:38:48 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 00:09:13 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 11:46:02 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 11:30:16 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 11:14:21 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 10:14:58 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 07:34:51 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 06:57:41 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (04/28/2014 06:57:31 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Microsoft Office Sessions: ========================= Error: (04/28/2014 09:18:58 PM) (Source: Application Error)(User: ) Description: Dropbox.exe2.4.11.0527d91e4unknown0.0.0.000000000c00000051e122e2e128c01cf631504c3a2c7C:\Users\Lena\AppData\Roaming\Dropbox\bin\Dropbox.exeunknownf1e849b6-cf09-11e3-82f3-78843cf2681d Error: (04/28/2014 09:16:19 PM) (Source: Application Hang)(User: ) Description: firefox.exe28.0.0.5186158001cf63152acd145594C:\Program Files (x86)\Mozilla Firefox\firefox.exe90050ab7-cf09-11e3-82f3-78843cf2681d Error: (04/28/2014 09:05:11 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 06:39:17 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 11:14:49 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 10:15:05 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/28/2014 08:08:03 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (04/27/2014 11:34:02 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:33:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe Error: (04/27/2014 11:33:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Lena\Downloads\esetsmartinstaller_deu.exe ==================== Memory info =========================== Percentage of memory in use: 46% Total physical RAM: 4077.86 MB Available physical RAM: 2191.13 MB Total Pagefile: 8153.9 MB Available Pagefile: 5893.02 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:451.77 GB) (Free:370.48 GB) NTFS Drive e: (Office2013 Pro Pl. DE x32 RZUWb) (CDROM) (Total:0.71 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 68A796D5) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
28.04.2014, 20:34 | #26 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Es war fast die letzte.... Danke für die prima Mitarbeit bisher...Melde mich dann morgen nochmal...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
29.04.2014, 16:45 | #27 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Gibts jetzt noch Probleme mit Deinem Rechner? Oder hast Du noch Fragen? NEIN? Schritt 1 Combofix.exe in uninstall.exe umbenennen und starten. Combofix wird sich evtl. updaten und dann alle Reste von sich selbst entfernen. Dann lade Dir bitte DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. >>clean<< Wir haben es geschafft! Die Logs sehen für mich im Moment sauber aus. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen. Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. Epilog: Tipps, Dos & Don'ts Aktualität von System und Software Das Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind. Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für die Browser , Java , Flash-Player und PDF-Reader , denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-Software Eine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine infizierte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons als Empfehlung gibt:
(Un-)Sicheres Verhalten im Internet Nebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine Hinweise Abschließend noch ein paar grundsätzliche Bemerkungen:
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
30.04.2014, 08:17 | #28 |
| Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Hallo Jürgen, vielen lieben Dank für deine Hilfe!! Ohne die wäre ich vollkommen aufgeschmissen gewesen! Nun funktioniert alles wieder einwandfrei Ein Traum^^ |
30.04.2014, 09:32 | #29 |
/// TB-Ausbilder /// Anleitungs-Guru | Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 Gerne! Das freut mich, wenn wieder alles geht. Alles Gute....
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
Themen zu Firewall kann nicht aktiviert/deaktiviert werden. Fehlercode 0x80070424 |
0x8007042, anschluss, dateien, deaktivieren, fehler, fehlercode, firewall, folge, foren, funktioniert, funktioniert nicht, funktioniert nicht mehr, hallo zusammen, hilfe!, iso-datei, laptop, malwarebytes, microsoft, nicht mehr, office, problem, probleme, rechner, setup, temp, virus, öffnet |