|
Plagegeister aller Art und deren Bekämpfung: Install_11968\sense.exe Windows 7 x64Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
05.06.2014, 17:52 | #1 |
| Install_11968\sense.exe Windows 7 x64 hallo ich scheine mir einen Virus/Trojaner eingefangen zu haben. PC bleibt stecken und ist sehr langsam. Regelmäßig öffnet sich ein Fenster, dass sense.exe nicht installiert werden konnte. norton meldet sich dann auch und berichtet, dass er einen Trojaner erfolgreich gebannt hat. Nach kurzer Zeit beginnt es von vorne. |
05.06.2014, 17:54 | #2 |
| Install_11968\sense.exe Windows 7 x64Hallo und willkommen an Board, wescat Mein Name ist Machiavelli und werde bei Deinem Malware Problemen behilflich sein. Falls Du Dich im abgesicherten Modus befindest, würde ich Dir raten, alle Anweisungen von mir auszudrucken, um besseren Überblick auf die Gesamtsituation zu bekommen. Ich bin hier im Malwareteam und daher ist es mir möglich, Dir zu helfen. Damit eine Bereinigung ermöglicht werden kann, musst Du ein paar Regeln/Tipps beachten:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
05.06.2014, 18:26 | #3 |
| Install_11968\sense.exe Windows 7 x64FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014 Ran by Catharina (administrator) on CATHARINA-VAIOL on 05-06-2014 17:53:52 Running from C:\Users\Catharina\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe ( ) C:\Windows\System32\lxdocoms.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Dropbox, Inc.) C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\SnippingTool.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Buhl Data Service GmbH) C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\MG.exe () C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe () C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe () C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe () C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe () C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\prevhost.exe (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe () C:\Windows\System32\spool\drivers\x64\3\ssy3cpi.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (TerraTec Electronic GmbH) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16395880 2009-11-02] (NVIDIA Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8317472 2009-11-09] (Realtek Semiconductor) HKLM\...\Run: [lxdomon.exe] => C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] () HKLM\...\Run: [lxdoamon] => C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] () HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] () HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de) HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.) HKLM-x32\...\Run: [lxdomon.exe] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] () HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [599328 2010-03-24] (Sony Corporation) HKLM-x32\...\Run: [lxdoamon] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] () HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [208424 2013-10-17] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X] HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [GoogleChromeAutoLaunch_B4CDF8F4E62911CE9A125DF4A43B236A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Facebook Update] => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-09-12] (Facebook Inc.) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe () Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://home.1und1.de HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie SearchScopes: HKCU - DefaultScope {47405742-4DD4-4C8C-97BB-E066DCCC5E61} URL = hxxp://go.web.de/suchbox/google?q={searchTerms} SearchScopes: HKCU - {11CC72E1-2D10-49F4-B49E-92CD470BCE21} URL = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search SearchScopes: HKCU - {13BCC6B8-59D7-43B9-9DDB-62AE5C0AB724} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms} SearchScopes: HKCU - {1AE2289A-8F2D-43A7-9AB6-92415D2AC556} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms} SearchScopes: HKCU - {349713D0-30F6-4262-AA35-D8971B8C53F4} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms} SearchScopes: HKCU - {47405742-4DD4-4C8C-97BB-E066DCCC5E61} URL = hxxp://go.web.de/suchbox/google?q={searchTerms} SearchScopes: HKCU - {5BEC5B5A-3495-4CA2-8451-041981BD0C4A} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms} SearchScopes: HKCU - {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = hxxp://badoo.com/startpage/?source=bsb&q={searchTerms} SearchScopes: HKCU - {B7796824-4748-432D-997F-77C593BAB177} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^DE&apn_uid=DECA78BD-BBC2-461B-95B7-E21C736F662B&apn_sauid=7478988E-426D-4FE2-9A92-13FCA0E47904 SearchScopes: HKCU - {B89582FF-E4DA-4293-9936-4580DD265265} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms} SearchScopes: HKCU - {CAE19DBB-56F6-460B-B95F-96DB9A035F40} URL = hxxp://wa.ui-portal.de/1und1/1und1/s?produkte.browser.link.ebaysuche&s_brand=1und1&t_link=ebaysuche&ns_type=clickin&ns_url=hxxp://rover.ebay.com/rover/1/707-52222-30040-8/4?mpre=hxxp://shop.ebay.de/?_sacat=See-All-Categories&_nkw={searchTerms} SearchScopes: HKCU - {FACB6060-7CA1-42A9-B786-E863873E6336} URL = hxxp://de.shopping.com/?linkin_id=8056363 BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Shopper Pro - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro64.dll (Goobzo Ltd.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: No Name - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} - No File BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: Asz.Citavi.IEPicker.IEPickerButton - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Shopper Pro - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll (Goobzo Ltd.) BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll () BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default FF SelectedSearchEngine: Ask.com FF Homepage: about:home FF Homepage: hxxp://start.iminent.com/?appId=0D3E7F63-F430-4D65-A1A5-E23277F9AF55 FF SelectedSearchEngine: StartWeb FF Homepage: user_pref("browser.startup.homepage", ""); FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", ""); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Catharina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Catharina\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Catharina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF user.js: detected! => C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\badoo.xml FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\iminent.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\2020Player_IKEA@2020Technologies.com [2011-07-29] FF Extension: Shopper-Pro - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [2014-06-04] FF Extension: Facebook Chat History Manager - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\fbchathistory@firechm.com.xpi [2013-04-02] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2013-12-22] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ [] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2013-11-27] Chrome: ======= CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC CHR StartupUrls: "hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC" CHR Extension: (Floorplanner) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2014-01-06] CHR Extension: (Bejeweled) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2014-01-06] CHR Extension: (Turn Off the Lights) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2014-01-06] CHR Extension: (Gliffy-Diagramme) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmicilclplefnflapjmnngmkkkkpfad [2014-01-06] CHR Extension: (Strawberry Pal Regelkalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmeafmbadejchdjffdbdjdkcgfmlhjmh [2014-01-06] CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-01-06] CHR Extension: (Photo Zoom für Facebook) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhapiedbmffnpkahkcjdjpikmodjipmd [2014-01-06] CHR Extension: (CinemaxX Trailer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dopcgojamofpmhidpadjjfilkiiehjea [2014-01-06] CHR Extension: (Sketch Toy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednofnkligfbacmlfggaccfhpkfopojb [2014-01-06] CHR Extension: (Chromebleed) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeoekjnjgppnaegdjbcafdggilajhpic [2014-04-10] CHR Extension: (Daily Calculators) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepfjbflaeefhecfkalmechpbdmklahp [2014-01-06] CHR Extension: (Pixlr-o-matic) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj [2014-01-06] CHR Extension: (Google Kalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-01-06] CHR Extension: (Autodesk ForceEffect) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekbaidcchahkpedbhdenlmleimihkcim [2014-01-06] CHR Extension: (Anwendungen iPhone en Förderung) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekckfmbgohljpbplohgkeoepmieffaef [2014-01-06] CHR Extension: (Silver Bird) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\encaiiljifbdbjlphpgpiimidegddhic [2014-01-06] CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2014-01-06] CHR Extension: (MindMap) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdaeohpmcenmffofpikllphdhlkkocfa [2014-01-06] CHR Extension: (Sketch Assistenten) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgcipaapohgnempegffkhmhbdloaoec [2014-01-06] CHR Extension: (Magisto) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmngbmfdgknokcefmkbjlcjabdklnlk [2014-01-06] CHR Extension: („Pin it“-Button) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-01-06] CHR Extension: (PDF Mergy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgecghmkcdefnknohcimkoemhaofpoha [2014-01-06] CHR Extension: (This Exquisite Forest) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\illikembakcokcfifcbkneafjjjnckkd [2014-01-06] CHR Extension: (Facebook Profil Finder) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imejfidcafbhpnppakocbdjbeifkgaga [2014-01-06] CHR Extension: (Dropbox) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-01-06] CHR Extension: (Clearly) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2014-01-06] CHR Extension: (Google Formulare) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhknlonaankphkkbnmjdlpehkinifeeg [2014-01-06] CHR Extension: (Eingabe-Test - KeyHero) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-01-06] CHR Extension: (Autodesk Homestyler) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2014-01-06] CHR Extension: (eBay-Erweiterung für Google Chrome™) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2014-01-06] CHR Extension: (Little Alchemy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2014-01-06] CHR Extension: (SPIEGEL ONLINE Extension) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcmhmkhlpcieakngfbhgjkdpgibbmboc [2014-01-06] CHR Extension: (Numerics Calculator & Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2014-01-06] CHR Extension: (Konjugation Vatefaireconjuguer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnpmoecabagognommankobjfmdfdppgp [2014-01-06] CHR Extension: (Der Planer der Räume) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-01-06] CHR Extension: (Video Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjjnhgakghmggnimjkldjmmpabhnhne [2014-01-06] CHR Extension: (Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2014-01-06] CHR Extension: (Calculator) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkgoipeflibinmadcecedifdonakgalk [2014-01-06] CHR Extension: (Spanish 2 English!) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmkabhkheikmcfieenfbfhikpigjldi [2014-01-06] CHR Extension: (Save to Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2014-01-06] CHR Extension: (Google Wallet) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25] CHR Extension: (Reversi) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\odhjkapjdlmmadkepnmlkpadnnnnoebm [2014-01-06] CHR Extension: (Google Quick Scroll) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2014-01-06] CHR Extension: (Goodgame Big Farm) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdjgjhkolgmkjjddmnjejjphhkdjdhc [2014-01-06] CHR Extension: (Spring Mahjong) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohmgpjbkliggjliakneoaedilbaihhl [2014-01-06] CHR Extension: (Spreadshirt Designer für Google Drive) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oomgjmhhemldplodpialfbafcidjaghm [2014-01-06] CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2014-02-08] CHR Extension: (Evernote Web Clipper) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-06] CHR Extension: (Marqueed Screenshots) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkbfakcphdokdnbdhlndlpcehebmplab [2014-03-18] CHR Extension: (Audio Cutter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimnkafgoiilijmlbnfoafihjjijbfp [2014-01-06] CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-22] (Garmin Ltd or its subsidiaries) R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [49664 2013-10-08] (Haufe-Lexware GmbH & Co. KG) R2 lxdo_device; C:\Windows\system32\lxdocoms.exe [1039360 2007-09-20] ( ) R2 lxdo_device; C:\Windows\SysWOW64\lxdocoms.exe [589824 2007-09-20] ( ) R2 MSSQL$ACCUCHEK360; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation) S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions) S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions) R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [239616 2012-09-18] (Samsung Electronics Co., Ltd.) S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation) S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation) R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346880 2014-05-12] (ShopperPro) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-07] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-20] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140604.002\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation) S4 LMIRfsClientNP; No ImagePath R3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-04] (DiBcom SA) R3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-04] (DiBcom S.A.) R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140604.039\ENG64.SYS [126040 2014-05-06] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140604.039\EX64.SYS [2099288 2014-05-06] (Symantec Corporation) R3 NW1950; C:\Windows\system32\drivers\NW1950.sys [25080 2009-10-23] () S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [41856 2014-05-12] () R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation) R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-05 17:53 - 2014-06-05 17:55 - 00039096 _____ () C:\Users\Catharina\Downloads\FRST.txt 2014-06-05 17:49 - 2014-06-05 17:54 - 00000000 ____D () C:\FRST 2014-06-05 17:38 - 2014-06-05 17:39 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe 2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip 2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport 2014-06-04 17:17 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc 2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 17:15 - 2014-06-04 17:15 - 00004532 _____ () C:\Windows\System32\Tasks\ShopperPro 2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 2014-06-04 17:14 - 2014-06-04 17:15 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe 2014-06-04 17:14 - 2014-06-04 17:15 - 00000000 ____D () C:\Program Files (x86)\ShopperPro 2014-06-04 17:14 - 2014-06-04 17:14 - 00003590 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google 2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83} 2014-06-04 16:15 - 2014-06-04 17:26 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar 2014-06-04 16:14 - 2014-06-04 16:50 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog 2014-06-04 16:14 - 2014-06-04 16:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\IminentToolbar 2014-06-04 16:13 - 2014-06-04 16:50 - 00000000 ____D () C:\Program Files (x86)\Iminent 2014-06-04 16:12 - 2014-06-04 16:24 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv 2014-06-04 15:58 - 2014-06-04 16:10 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv 2014-06-04 15:54 - 2014-06-04 17:23 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO 2014-06-04 15:54 - 2014-06-04 17:22 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper 2014-06-04 15:53 - 2014-06-04 17:26 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro 2014-06-04 15:53 - 2014-06-04 17:19 - 00004078 _____ () C:\Windows\System32\Tasks\Installer_sense 2014-06-04 15:53 - 2014-06-04 17:15 - 00000000 ____D () C:\ProgramData\ShopperPro 2014-06-04 15:53 - 2014-06-04 15:53 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro 2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport 2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe 2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod 2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files\iTunes 2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods 2014-05-21 15:46 - 2014-05-21 18:07 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls 2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt 2014-05-15 03:18 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 03:18 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 03:18 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 03:18 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 03:18 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 03:18 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-14 16:28 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 16:28 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-14 16:27 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 16:27 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 16:27 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 16:27 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 16:27 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 16:27 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 16:27 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 16:27 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 16:27 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 16:27 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 16:27 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-14 16:27 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 16:26 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 16:26 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 16:26 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 16:26 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 16:26 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 16:26 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 16:26 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-14 16:26 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-14 16:26 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-07 03:05 - 2014-05-15 03:41 - 00000000 ___SD () C:\Windows\system32\CompatTel ==================== One Month Modified Files and Folders ======= 2014-06-05 17:57 - 2010-05-14 12:00 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Temp 2014-06-05 17:56 - 2010-06-02 21:59 - 00000000 ____D () C:\Users\Catharina\Documents\Outlook-Dateien 2014-06-05 17:55 - 2014-06-05 17:53 - 00039096 _____ () C:\Users\Catharina\Downloads\FRST.txt 2014-06-05 17:54 - 2014-06-05 17:49 - 00000000 ____D () C:\FRST 2014-06-05 17:45 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-05 17:45 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-05 17:39 - 2014-06-05 17:38 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe 2014-06-05 17:38 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-06-05 17:31 - 2009-12-20 04:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-05 17:23 - 2012-04-12 09:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-05 17:09 - 2013-12-02 00:36 - 00000000 ____D () C:\Users\Catharina\Documents\Scan 2014-06-05 15:50 - 2011-12-19 23:34 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job 2014-06-05 15:50 - 2011-12-19 23:34 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job 2014-06-05 11:53 - 2010-05-14 12:03 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{872AFF91-85D3-4336-B789-768301523E02} 2014-06-05 10:03 - 2013-12-02 00:25 - 00000099 _____ () C:\Users\Public\LMDebug.log 2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe 2014-06-05 05:44 - 2010-05-14 11:59 - 02051970 _____ () C:\Windows\WindowsUpdate.log 2014-06-04 23:45 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Dropbox 2014-06-04 23:31 - 2009-12-20 04:43 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-04 20:32 - 2010-11-07 16:31 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Skype 2014-06-04 18:59 - 2010-07-05 14:05 - 00000000 ___RD () C:\Users\Catharina\Documents\My Dropbox 2014-06-04 18:58 - 2014-05-03 08:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\DropboxMaster 2014-06-04 18:58 - 2012-03-29 08:58 - 00000000 ____D () C:\Users\Catharina\AppData\Local\ADD8F28E-876C-4338-9012-223367612529.aplzod 2014-06-04 18:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-04 18:52 - 2009-07-14 06:51 - 00084484 _____ () C:\Windows\setupact.log 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip 2014-06-04 17:58 - 2012-04-12 09:27 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-04 17:58 - 2012-04-12 09:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 17:58 - 2011-06-20 14:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-04 17:26 - 2014-06-04 16:15 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar 2014-06-04 17:26 - 2014-06-04 15:53 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro 2014-06-04 17:26 - 2009-12-08 20:38 - 02026232 _____ () C:\Windows\PFRO.log 2014-06-04 17:23 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO 2014-06-04 17:22 - 2014-06-04 15:54 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-04 17:19 - 2014-06-04 15:53 - 00004078 _____ () C:\Windows\System32\Tasks\Installer_sense 2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport 2014-06-04 17:18 - 2014-06-04 17:17 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc 2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 17:15 - 2014-06-04 17:15 - 00004532 _____ () C:\Windows\System32\Tasks\ShopperPro 2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 2014-06-04 17:15 - 2014-06-04 17:14 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe 2014-06-04 17:15 - 2014-06-04 17:14 - 00000000 ____D () C:\Program Files (x86)\ShopperPro 2014-06-04 17:15 - 2014-06-04 15:53 - 00000000 ____D () C:\ProgramData\ShopperPro 2014-06-04 17:14 - 2014-06-04 17:14 - 00003590 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd 2014-06-04 17:01 - 2010-11-27 12:13 - 00000000 ____D () C:\Users\Catharina\AppData\Local\CrashDumps 2014-06-04 17:00 - 2010-05-14 13:15 - 00000000 ____D () C:\ProgramData\Lexware 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google 2014-06-04 16:50 - 2014-06-04 16:14 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog 2014-06-04 16:50 - 2014-06-04 16:13 - 00000000 ____D () C:\Program Files (x86)\Iminent 2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83} 2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-06-04 16:24 - 2014-06-04 16:12 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv 2014-06-04 16:14 - 2014-06-04 16:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\IminentToolbar 2014-06-04 16:10 - 2014-06-04 15:58 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv 2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper 2014-06-04 15:53 - 2014-06-04 15:53 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro 2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport 2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe 2014-06-02 16:57 - 2014-01-31 16:49 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\apsec 2014-06-02 16:57 - 2010-07-28 19:09 - 00000000 ____D () C:\Users\Catharina\Documents\dakota_s 2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-06-02 15:49 - 2010-11-07 18:18 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64 2014-06-02 15:45 - 2013-11-27 07:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 Premier Edition 2014-06-02 15:45 - 2013-06-29 11:03 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk 2014-06-02 15:27 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-02 15:26 - 2010-07-05 14:05 - 00001036 _____ () C:\Users\Catharina\Desktop\Dropbox.lnk 2014-06-02 15:26 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files\iTunes 2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod 2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods 2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ____D () C:\ProgramData\Skype 2014-05-21 18:07 - 2014-05-21 15:46 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls 2014-05-20 12:42 - 2011-06-20 19:01 - 00000000 ____D () C:\Users\Catharina\Documents\Sarah Brand 2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt 2014-05-15 22:20 - 2011-06-21 08:11 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-05-15 08:30 - 2010-12-23 14:52 - 00000000 ____D () C:\Users\Catharina\Documents\Mein Steuer-Sparbuch Heute 2014-05-15 08:26 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 04:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-15 03:41 - 2014-05-07 03:05 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 03:20 - 2009-12-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-15 03:15 - 2013-08-15 03:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 03:06 - 2010-05-18 09:01 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-09 20:55 - 2009-12-20 13:35 - 00750280 _____ () C:\Windows\system32\perfh007.dat 2014-05-09 20:55 - 2009-12-20 13:35 - 00168914 _____ () C:\Windows\system32\perfc007.dat 2014-05-09 20:55 - 2009-07-14 07:13 - 01763416 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-09 08:14 - 2014-05-14 16:27 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-14 16:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-07 11:52 - 2013-01-02 11:10 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-05-06 23:26 - 2009-12-20 04:43 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-06 23:26 - 2009-12-20 04:43 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-06 06:40 - 2014-05-15 03:18 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-15 03:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-15 03:18 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-15 03:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-15 03:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-15 03:18 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\Catharina\fbchathistory.dat C:\Users\Catharina\jagex_cl_runescape_LIVE.dat C:\Users\Catharina\jagex_cl_runescape_LIVE1.dat C:\Users\Catharina\jagex_cl_runescape_LIVE2.dat C:\Users\Catharina\jagex_runescape_preferences.dat C:\Users\Catharina\jagex_runescape_preferences2.dat Some content of TEMP: ==================== C:\Users\Catharina\AppData\Local\Temp\cabex.dll C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfrzj_0.dll C:\Users\Catharina\AppData\Local\Temp\OptimizerPro.exe C:\Users\Catharina\AppData\Local\Temp\PartnerInstallerYTAi.exe C:\Users\Catharina\AppData\Local\Temp\tu17p84.exe C:\Users\Catharina\AppData\Local\Temp\unelevate.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-06-03 03:08 ==================== End Of Log ============================ |
05.06.2014, 18:27 | #4 |
| Install_11968\sense.exe Windows 7 x64Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014 Ran by Catharina at 2014-06-05 17:57:54 Running from C:\Users\Catharina\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton 360 Premier Edition (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) ACCU-CHEK 360 (x32 Version: 0.9.26 - Roche) Hidden ACCU-CHEK 360 Continua Manager (HKLM-x32\...\InstallShield_{4EEF9985-417C-4892-B63F-747F8F09F20F}) (Version: 0.9.26 - Roche) ACCU-CHEK 360° (HKLM-x32\...\InstallShield_{81395935-58B5-4E55-AF3E-6C97390FA01A}) (Version: 2.0.0 - Roche Diagnostics Corporation) ACCU-CHEK 360° (x32 Version: 2.0.0 - Roche Diagnostics Corporation) Hidden ADAC Auto 2011 (HKLM-x32\...\{147D7D66-DB73-40A7-BF98-220C5454C1B1}) (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) Adobe Shockwave Player (HKLM-x32\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.) Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.98 - ArcSoft) ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.278 - ArcSoft) ArcSoft WebCam Message Board (HKLM-x32\...\{6ACF0A95-340A-46D6-B1AC-F22CDB51F475}) (Version: 1.0.1.56 - ArcSoft) AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - ) AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin) AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version: - AVM Berlin) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Borland Data Engine (HKLM-x32\...\{3AF6EF15-5841-4FF8-A3FC-5B2400AB9145}) (Version: 5.2.0 - Roche Diagnostics) Citavi 2.5 (HKLM-x32\...\Citavi) (Version: 2.5.2.0 - Academic Software Zurich) Click to Disc MergeModules x64 (Version: 1.0.14230 - Sony Corporation) Hidden Common Desktop Agent (Version: 1.62.0 - OEM) Hidden Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 2.2.1.9986 - Harman Becker Automotive Systems) dakota.ag (HKLM-x32\...\dakota.ag) (Version: 6.0 - ITSG GmbH) dakota.ag (x32 Version: 6.0 - ITSG GmbH) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft) Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.) Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation) Elevated Installer (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.3.1964 - Evernote Corp.) Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited) FormatFactory 2.70 (HKLM-x32\...\FormatFactory) (Version: 2.70 - Free Time) Franzis Führerschein Trainer (HKLM-x32\...\ffs2010_is1) (Version: 1.0 - Franzis Verlag GmbH, Poing) FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - ) Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{bd9bc494-8cd2-4ae2-92fe-6a3dda9c3ee9}) (Version: 2.2.17 - Garmin Ltd or its subsidiaries) Garmin Express (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Garmin Update Service (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version: - ) iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.) Intel(R) Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation) Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 16 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.) Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden Lexmark 9500 Series (HKLM\...\Lexmark 9500 Series) (Version: - Lexmark International, Inc.) Lexmark 9500 Series (HKLM-x32\...\Lexmark 9500 Series) (Version: - Lexmark International, Inc.) Lexware Elster (HKLM-x32\...\{9CCD2A54-3AC9-4675-82A9-71BFC32004C4}) (Version: 14.04.00.0014 - Haufe-Lexware GmbH & Co.KG) Lexware financial office 2014 (x32 Version: 18.05.00.0028 - Haufe-Lexware GmbH & Co.KG) Hidden Lexware financial office plus 2014 (HKLM-x32\...\{cceb5f5e-fa2f-4632-aa50-1dffce083c79}) (Version: 18.0.0.98 - Haufe-Lexware GmbH & Co.KG) Lexware Info Service (x32 Version: 4.01.00.0077 - Haufe-Lexware GmbH & Co.KG) Hidden Lexware Installations Dienst (x32 Version: 3.01.00.0011 - Haufe-Lexware GmbH & Co.KG) Hidden Lexware online banking (HKLM-x32\...\{7F603892-89C9-4EC4-9236-7AD4A798EA41}) (Version: 21.00.00.0039 - Haufe-Lexware GmbH & Co.KG) Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.1.0.10210 - Sony Corporation) Media Gallery (x32 Version: 1.1.0.10210 - Sony Corporation) Hidden Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft) Microsoft Office Visio 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Visio MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 Trial (HKLM-x32\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2005 Express Edition (ACCUCHEK360) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Tools Express Edition (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft SQL Server Management Objects Collection (HKLM\...\{5677B005-B609-4B5B-9F3C-132BB085D3CF}) (Version: 9.00.1399.06 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft Touch Pack for Windows 7 (HKLM-x32\...\{8FF90DB8-6DED-44A3-B182-244FEC09012F}) (Version: 1.0.40517.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation) Minicontrol 3.0.9 (HKLM-x32\...\2795-3221-8656-0055) (Version: - LucaNet AG) Minicontrol 3.1.6 (HKLM-x32\...\9356-3409-2235-7426) (Version: 3.1.6 - LucaNet AG) Miniplan 3.0.9 (HKLM-x32\...\2476-8030-0924-5048) (Version: - LucaNet AG) MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.) Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla) MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone) myphotobook.de (HKLM-x32\...\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1) (Version: 1.2.7 - myphotobook GmbH) myphotobook.de (x32 Version: 1.2.7 - myphotobook GmbH) Hidden Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.) Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation) Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation) Opera 10.60 (HKLM-x32\...\{1D2C96C3-A3F3-49E7-B839-95279DED837F}) (Version: 10.60 - Opera Software ASA) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.2.00.03250 - Sony Corporation) PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.0.00.09250 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.0.00.09250 - Sony Corporation) Hidden PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.2.00.16060 - Sony Corporation) PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.2.00.16060 - Sony Corporation) Hidden PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.0.00.10150 - Sony Corporation) PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.0.00.10150 - Sony Corporation) Hidden PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.2.00.15250 - Sony Corporation) PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.2.00.15250 - Sony Corporation) Hidden PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5973 - Realtek Semiconductor Corp.) RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - ) RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Roxio Central Audio (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Copy (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Core (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Data (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Tools (x32 Version: 3.8.0 - Roxio) Hidden Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio) Roxio Easy Media Creator Home (x32 Version: 10.3.183 - Roxio) Hidden Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung AnyWeb Print (HKLM-x32\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.75.0 - Samsung Electronics Co., Ltd.) Samsung CLX-6260 Series (HKLM-x32\...\Samsung CLX-6260 Series) (Version: 1.07 (07.01.2013) - Samsung Electronics Co., Ltd.) Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.04.21 (10.12.2012) - Samsung Electronics Co., Ltd.) Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.71.00(12.09.2013) - Samsung Electronics Co., Ltd.) Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.06.34 (04.09.2012) - Samsung Electronics Co., Ltd.) Samsung OCR Software (HKLM-x32\...\Samsung OCR Software) (Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Samsung Scan Process Machine (x32 Version: 1.00.20.03 - Samsung Electronics Co., Ltd.) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation) Shopper-Pro (HKLM-x32\...\ShopperPro) (Version: - ) SimCity 4 (HKLM-x32\...\{01339AE5-04D4-43F8-008E-13AD788DC4F7}) (Version: - ) Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd) Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation) Sony Home Network Library (x32 Version: 2.0.1.10160 - Sony Corporation) Hidden StreamTransport version: 1.1.3.0 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version: - ) sv.net (HKLM-x32\...\sv.net) (Version: 13.1 - ITSG GmbH) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - ) TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - ) Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.2.11150 - Sony Corporation) VAIO Care (x32 Version: 6.4.2.11150 - Sony Corporation) Hidden VAIO Content Metadata Intelligent Analyzing Manager (HKLM-x32\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation) VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250 - Sony Corporation) Hidden VAIO Content Metadata Intelligent Network Service Manager (HKLM-x32\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation) VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden VAIO Content Metadata Manager Settings (HKLM-x32\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation) VAIO Content Metadata Manager Settings (x32 Version: 3.6.0.09240 - Sony Corporation) Hidden VAIO Content Metadata XML Interface Library (HKLM-x32\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation) VAIO Content Metadata XML Interface Library (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden VAIO Content Monitoring Settings (x32 Version: 2.4.1.09180 - Sony Corporation) Hidden VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.2.0.09150 - Sony Corporation) Hidden VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.1.00.15050 - Sony Corporation) VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation) VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.2.0.09240 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation) VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation) VAIO Movie Story MergeModules x64 (Version: 1.0.14240 - Sony Corporation) Hidden VAIO Original Function Settings (x32 Version: 2.0.0.07010 - Sony Corporation) Hidden VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation) VAIO Personalization Manager (HKLM-x32\...\{A95187EF-BCF4-4468-B501-C0BAB976ADD1}) (Version: 2.0.0.06220 - Sony Corporation) VAIO Personalization Manager (x32 Version: 2.0.0.06220 - Sony Corporation) Hidden VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.11250 - Sony Corporation) VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.1.1.10250 - Sony Corporation) VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.0.0.06010 - Sony Corporation) VAIO Window Organizer (HKLM-x32\...\{6D320CE8-79EB-4D45-8C6D-DEF74D84B49A}) (Version: 2.0.0.08280 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.2.06030 - Sony Corporation) Vegas Movie Studio HD Platinum 10.0 (HKLM-x32\...\{40AE01BE-A290-4FFB-8DAB-C624C17DC87E}) (Version: 10.0.179 - Sony) Videora iPod Converter 5.04 (HKLM-x32\...\Videora iPod Converter) (Version: 5.04 - Red Kawa) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation) Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom) Windows Driver Package - Roche (WinUSB) PHDC (07/08/2010 1.0.0.1) (HKLM\...\3EFB02FCACC5E5822B28C77FB14D8D696391F5D7) (Version: 07/08/2010 1.0.0.1 - Roche) Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 14.0.8093.805 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.2.0 - Microsoft Corporation) Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation) WISO Mein Geld 2010 Professional (HKLM-x32\...\WISO Mein Geld 2010 Professional) (Version: - Buhl Data Service GmbH) WISO Mein Geld 2010 Professional (x32 Version: 11.01.00.0045 - Buhl Data Service GmbH) Hidden WISO Mein Geld 2014 Professional (HKLM-x32\...\WISO Mein Geld 2014 Professional) (Version: - Buhl Data Service GmbH) WISO Mein Geld 2014 Professional (x32 Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH) WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.08.8317 - Buhl Data Service GmbH) ==================== Restore Points ========================= 31-05-2014 13:10:48 Geplanter Prüfpunkt 02-06-2014 14:50:12 Removed Lexware Elster. 02-06-2014 14:54:09 Installed Lexware Elster. ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {02E42E2F-750B-41AD-BD24-378CE004BA31} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation) Task: {0342F8A1-1F8E-470A-8FF3-D556C07041D5} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {09227B91-18C7-498F-9B08-89F8C0E5C38C} - System32\Tasks\{F663F6CC-8633-4EB1-9EBB-D35793A6D4DC} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.) Task: {0E6005BE-874F-4764-90A2-CB9838F3DD29} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {37B4B864-FEA5-4298-9526-986DDA7AA254} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation) Task: {3FBD3373-8DF2-4E2A-8EA5-7B1BF22C5B28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {44EA5550-A815-4BE9-B03E-3B2AC395E186} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation) Task: {47EDDE22-E698-4FFF-8E4A-C7814D67E4A7} - System32\Tasks\Installer_sense => C:\Users\Catharina\AppData\Local\Installer\Install_16944\ytaib.exe [2014-06-04] () <==== ATTENTION Task: {4FD8B431-AE07-4555-BA2A-D2713ECFE9F2} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation) Task: {547A6082-5E08-4FE3-A7EA-0A7C89226909} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: {57DB0C18-E080-4D5D-B0B9-69496D969D75} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.) Task: {6BB2F7B3-B0E1-4D1F-91A4-AAA0B8FD63D6} - System32\Tasks\{DBB42591-4FC3-4383-A35B-B65C66E0AE67} => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe [2010-06-09] (TerraTec Electronic GmbH) Task: {6BFA0EEF-66DD-4942-9991-894C67E57604} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.) Task: {70473A5C-9235-4DA4-A51B-F2AACB4759E9} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {748B2E4D-61F9-41AE-AAA0-D79AA667095D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.) Task: {789F957C-4299-4E3A-B1F2-13EA94263726} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {85169C0D-79D7-45E7-A88C-CBA5578C6256} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.) Task: {8AD31540-EA7D-4C81-AF82-2F3D8E103064} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation) Task: {9BF3B828-103A-4AF9-B35C-9838C703B772} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.) Task: {9DEEF3DB-6FDB-44D1-887F-2258B057CE14} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation) Task: {A6478610-2EF4-4C3C-9D3B-1D638E281D0D} - System32\Tasks\ShopperProJSUpd => C:\Program Files (x86)\ShopperPro\updater.exe [2014-05-12] (Goobzo) <==== ATTENTION Task: {B1BC1A11-48D8-49DB-B91B-1FEE13925C2B} - System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 Task: {B2C54784-0AC2-45D5-98FE-C4D567DC01B2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-04] (Adobe Systems Incorporated) Task: {C6DCD793-70D4-4905-8AD8-A30A6201AB15} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe [2014-05-12] (Goobzo LTD) <==== ATTENTION Task: {CF3A5ABF-555A-4220-A669-C9133467AF91} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-25] (Sony Corporation) Task: {CFD9DC64-7BCD-40AA-8892-9D008589A84D} - System32\Tasks\Sun Microsystems-Online-Aktualisierungsprogramm => C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-20] (Sun Microsystems, Inc.) Task: {EC0371B4-51CC-4E40-8709-E5C3D8C59D0A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {FFD7821B-741F-4880-B7CE-3F3341AE8D0A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-06-27 13:06 - 2009-04-13 08:21 - 00045568 _____ () C:\Windows\System32\LXDOPMON.DLL 2010-06-27 13:06 - 2007-05-22 10:07 - 00069632 _____ () C:\Windows\System32\LXDOOEM.DLL 2010-06-27 13:06 - 2009-04-13 09:19 - 00081408 _____ () C:\Program Files (x86)\Lexmark 9500 Series\ipcmt64.dll 2010-05-21 16:17 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\redmonnt.dll 2013-12-01 23:58 - 2012-01-10 06:15 - 00034304 _____ () C:\Windows\System32\ssy3clm.dll 2010-06-27 12:56 - 2007-07-18 05:45 - 00138240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdodrpp.dll 2013-12-01 23:58 - 2012-03-16 10:29 - 00325120 _____ () C:\Windows\system32\SaMinDrv.dll 2013-06-28 13:08 - 2013-06-28 13:08 - 00091136 _____ () C:\Windows\system32\ssdevm64.dll 2012-03-09 10:58 - 2012-03-09 10:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe 2012-03-09 10:58 - 2012-03-09 10:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2013-06-29 13:47 - 2013-09-06 14:11 - 01397840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe 2010-06-20 10:16 - 2010-02-10 05:22 - 00025256 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe 2011-11-27 07:08 - 2011-02-25 18:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll 2013-12-01 23:58 - 2013-05-30 12:52 - 01371648 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ssy3cdu.dll 2013-12-01 23:58 - 2013-05-30 12:52 - 01385472 _____ () C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\X64\3\SSY3CUM.DLL 2012-12-10 11:34 - 2012-12-10 11:34 - 00661112 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe 2012-08-16 08:32 - 2012-08-16 08:32 - 00056320 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe 2013-05-30 12:52 - 2013-05-30 12:52 - 00295984 _____ () C:\windows\system32\spool\drivers\x64\3\ssy3cpi.exe 2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2009-12-20 05:23 - 2009-11-30 20:20 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2009-12-20 05:23 - 2009-11-30 20:20 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll 2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll 2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll 2014-05-21 14:22 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll 2014-05-21 14:22 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll 2013-06-29 13:42 - 2013-09-06 14:12 - 08929360 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll 2013-06-29 13:43 - 2013-09-06 14:11 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll 2013-06-29 13:43 - 2013-09-06 14:10 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll 2013-06-29 13:43 - 2013-09-06 14:10 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 03464784 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll 2013-06-29 13:43 - 2013-09-06 14:11 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 02196048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll 2013-06-29 13:42 - 2013-09-06 14:10 - 01610320 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll 2013-06-29 13:42 - 2013-09-06 14:12 - 01732176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll 2013-06-29 13:42 - 2013-09-04 23:48 - 04157520 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll 2013-06-29 13:42 - 2013-06-18 08:54 - 01041408 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll 2013-06-29 13:42 - 2013-06-18 08:54 - 00094208 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll 2013-06-29 13:42 - 2013-06-18 08:54 - 00251392 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01499728 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 04967504 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01368656 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01748048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01577552 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01146960 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01229904 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01307216 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll 2013-06-29 13:42 - 2013-09-06 14:12 - 06773328 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01249792 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01314384 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll 2014-05-21 14:22 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll 2014-05-21 14:22 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll 2014-05-21 14:22 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll 2014-06-04 18:57 - 2014-06-04 18:57 - 00043008 _____ () C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfrzj_0.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Catharina\AppData\Roaming\Dropbox\bin\libcef.dll 2010-06-20 10:16 - 2010-02-09 07:41 - 00028672 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Common.dll 2010-06-20 10:16 - 2010-02-09 07:41 - 00036864 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Core.dll 2010-06-20 10:16 - 2010-02-09 07:40 - 00057344 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\app4r.devmons.mcmdevmon.dll 2010-06-20 10:16 - 2008-06-06 06:45 - 00011776 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll 2013-09-26 13:20 - 2013-09-26 13:20 - 00176168 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll 2013-09-26 13:20 - 2013-09-26 13:20 - 00043048 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf 2013-02-14 16:46 - 2013-02-14 16:46 - 01044048 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll 2014-05-21 14:22 - 2014-05-14 01:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll 2008-05-06 10:35 - 2008-05-06 10:35 - 00028456 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\On4u3\bdrmf.dll 2013-09-16 14:36 - 2014-05-28 09:36 - 00372552 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\LetsTradeAdapter.dll 2013-09-16 14:36 - 2014-05-28 09:36 - 00021320 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\LetsTradeDB.dll 2013-09-16 14:36 - 2014-05-28 09:36 - 00046408 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\EPaymentAdapter.dll 2013-09-16 14:36 - 2014-05-28 09:36 - 00356168 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\ExternalAPIAdapter.dll 2013-09-16 14:36 - 2014-05-28 09:36 - 00275272 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\ServerAdapter.XmlSerializers.dll 2013-09-16 14:36 - 2014-05-26 10:15 - 01394312 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\DDBAC.Net.FinTS.dll 2012-01-05 18:25 - 2014-03-11 09:05 - 00073544 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\Buhl.BuhlRegelEngine.dll 2012-12-10 11:32 - 2012-12-10 11:32 - 00140800 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCEngine.dll 2012-07-10 11:39 - 2012-07-10 11:39 - 00153600 _____ () C:\Program Files (x86)\Common Files\Samsung OCR Software\wrapBSTPOCR.dll 2012-07-10 11:39 - 2012-07-10 11:39 - 03342336 _____ () C:\Program Files (x86)\Common Files\Samsung OCR Software\POCR_DLL.dll 2012-12-10 11:32 - 2012-12-10 11:32 - 00064000 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCFaxEngine.dll 2012-12-10 11:32 - 2012-12-10 11:32 - 00677376 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCSkin.dll 2012-12-10 11:30 - 2012-12-10 11:30 - 00934912 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.cjstyles 2012-12-10 11:32 - 2012-12-10 11:32 - 00505344 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCSwitch.dll 2012-12-10 11:31 - 2012-12-10 11:31 - 00342016 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCScaner.dll 2012-12-10 11:31 - 2012-12-10 11:31 - 00452096 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCScan.dll 2012-12-10 11:30 - 2012-12-10 11:30 - 00153088 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCProp.dll 2012-12-10 11:31 - 2012-12-10 11:31 - 00327680 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCEditor.dll 2012-12-10 11:32 - 2012-12-10 11:32 - 00122880 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCEdit.dll 2012-12-10 11:31 - 2012-12-10 11:31 - 00159232 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCList.dll 2012-12-10 11:30 - 2012-12-10 11:30 - 00142848 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCSave.dll 2012-12-10 11:33 - 2012-12-10 11:33 - 00103936 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCInfo.dll 2012-08-16 08:31 - 2012-08-16 08:31 - 00122368 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\lua5.dll 2012-08-16 08:32 - 2012-08-16 08:32 - 00671232 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\BitmapBuffer.dll 2012-08-16 08:31 - 2012-08-16 08:31 - 00310272 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sslog.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00079872 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Adjustment.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00167936 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_AutoCrop.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00092160 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_AutoRotate.dll 2012-08-16 08:34 - 2012-08-16 08:34 - 00072192 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BkgRemoval.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00057344 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BlankPageDetection.dll 2012-08-16 08:34 - 2012-08-16 08:34 - 00082432 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BMP.dll 2012-08-16 08:35 - 2012-08-16 08:35 - 00127488 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BookScan.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00064000 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_ColorCorrection.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00093184 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Descreen.dll 2012-08-16 08:37 - 2012-08-16 08:37 - 02172928 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_ePub.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00078336 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Filter.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00073728 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_FringeRemoval.dll 2012-08-16 08:35 - 2012-08-16 08:35 - 00340992 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_ImageStitching.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00130560 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_J2K.dll 2012-08-16 08:32 - 2012-08-16 08:32 - 00246784 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_JPEG.dll 2012-08-16 08:32 - 2012-08-16 08:32 - 00869888 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_LSSIP.dll 2012-08-16 08:38 - 2012-08-16 08:38 - 01664512 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_PDF.dll 2012-08-16 08:34 - 2012-08-16 08:34 - 00251904 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_PNG.dll 2012-08-16 08:35 - 2012-08-16 08:35 - 00161280 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Segment.dll 2012-08-16 08:35 - 2012-08-16 08:35 - 01869312 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_SF.dll 2012-08-16 08:34 - 2012-08-16 08:34 - 00740352 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_TIFF.dll 2012-08-16 08:34 - 2012-08-16 08:34 - 00049664 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Transform.dll 2012-08-16 08:36 - 2012-08-16 08:36 - 00068096 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Watermark.dll 2012-08-16 08:33 - 2012-08-16 08:33 - 00166400 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_XPS.dll 2014-05-08 13:21 - 2014-05-08 13:21 - 00057344 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_de\brdlang32.DEU 2014-06-05 09:50 - 2014-06-05 09:50 - 09496576 _____ () C:\Users\Catharina\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_rdlang32.deu 2014-05-08 13:21 - 2014-05-08 13:21 - 00305520 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll 2012-12-10 11:33 - 2012-12-10 11:33 - 00536576 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCAddin.dll 2012-12-10 11:33 - 2012-12-10 11:33 - 00614912 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCOffice.dll 2010-05-22 13:58 - 2010-03-08 11:16 - 00039936 _____ () C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\LiteZip.dll 2010-05-22 13:58 - 2010-03-08 11:16 - 00047616 _____ () C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\LiteUnzip.dll 2010-05-22 13:58 - 2010-03-08 11:16 - 00307200 _____ () C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\sqlite3.dll 2011-06-13 05:48 - 2011-06-13 05:48 - 03715584 _____ () C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\ffdshow\ffdshow.ax 2009-08-11 15:19 - 2009-08-11 15:19 - 00797184 _____ () C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\ac3filter.ax 2014-06-05 09:50 - 2014-06-05 09:50 - 00075264 _____ () C:\Users\Catharina\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_Accessibility.DEU 2014-06-05 09:50 - 2014-06-05 09:50 - 00014336 _____ () C:\Users\Catharina\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_Updater.DEU ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: MarketingTools => C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe ==================== Faulty Device Manager Devices ============= Name: LogMeIn Kernel Information Provider Description: LogMeIn Kernel Information Provider Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: LMIInfo Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (06/05/2014 05:23:29 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: N360.exe, Version: 12.11.2.9, Zeitstempel: 0x5355938e Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00068b40 ID des fehlerhaften Prozesses: 0x1648 Startzeit der fehlerhaften Anwendung: 0xN360.exe0 Pfad der fehlerhaften Anwendung: N360.exe1 Pfad des fehlerhaften Moduls: N360.exe2 Berichtskennung: N360.exe3 Error: (06/04/2014 05:00:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: loge32.exe, Version: 18.5.0.247, Zeitstempel: 0x5343d8a2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86 Ausnahmecode: 0xe06d7363 Fehleroffset: 0x0000c42d ID des fehlerhaften Prozesses: 0x110c Startzeit der fehlerhaften Anwendung: 0xloge32.exe0 Pfad der fehlerhaften Anwendung: loge32.exe1 Pfad des fehlerhaften Moduls: loge32.exe2 Berichtskennung: loge32.exe3 Error: (06/04/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 21934 Error: (06/04/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 21934 Error: (06/04/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/04/2014 11:28:11 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 20920 Error: (06/04/2014 11:28:11 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 20920 Error: (06/04/2014 11:28:11 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/04/2014 11:28:10 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 19922 Error: (06/04/2014 11:28:10 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 19922 System errors: ============= Error: (06/04/2014 07:00:36 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet. Error: (06/04/2014 06:53:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht. Error: (06/04/2014 06:53:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (06/04/2014 05:58:29 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet. Error: (06/04/2014 05:49:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht. Error: (06/04/2014 05:48:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "lxdo_device" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/04/2014 05:48:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxdo_device erreicht. Error: (06/04/2014 05:47:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (06/04/2014 05:35:20 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (06/04/2014 05:32:47 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet. Microsoft Office Sessions: ========================= Error: (06/04/2010 11:27:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/17/2010 09:21:20 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 93% Total physical RAM: 4031.18 MB Available physical RAM: 268.21 MB Total Pagefile: 8988.54 MB Available Pagefile: 738.98 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:921.47 GB) (Free:118.68 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: C95B288F) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=921 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
05.06.2014, 18:29 | #5 |
| Install_11968\sense.exe Windows 7 x64 Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4 Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan. Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.
__________________ Proud member of Unite |
06.06.2014, 20:58 | #6 |
| Install_11968\sense.exe Windows 7 x64Code:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 06/06/2014 um 20:44:11 # Aktualisiert 05/06/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Catharina - CATHARINA-VAIOL # Gestartet von : C:\Users\Catharina\Downloads\adwcleaner_3.212.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\ShopperPro Ordner Gelöscht : C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17041 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\prefs.js ] [ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\836dksbp.default\prefs.js ] -\\ Google Chrome v35.0.1916.114 [ Datei : C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht [Search Provider] : hxxp://sweetlifedemo.wordpress.com/?s={searchTerms} Gelöscht [Search Provider] : hxxp://start.iminent.com/?appId=0D3E7F63-F430-4D65-A1A5-E23277F9AF55&ref=toolbox&q={searchTerms} Gelöscht [Search Provider] : hxxp://en.softonic.com/s/{searchTerms} Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=DECA78BD-BBC2-461B-95B7-E21C736F662B&apn_ptnrs=U3&apn_sauid=7478988E-426D-4FE2-9A92-13FCA0E47904&apn_dtid=OSJ000YYDE&q={searchTerms} Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms} Gelöscht [Extension] : adpkifcfcacgmnggcbpbjbkdijciiigm ************************* AdwCleaner[R0].txt - [15092 octets] - [05/06/2014 19:54:58] AdwCleaner[R1].txt - [6074 octets] - [05/06/2014 23:28:00] AdwCleaner[R2].txt - [1532 octets] - [06/06/2014 20:40:32] AdwCleaner[S0].txt - [15306 octets] - [05/06/2014 20:01:17] AdwCleaner[S1].txt - [5723 octets] - [05/06/2014 23:45:41] AdwCleaner[S2].txt - [2040 octets] - [06/06/2014 20:44:11] ########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2100 octets] ########## Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 06.06.2014 Scan Time: 20:59:15 Logfile: mbam 0606 2136.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.06.06.04 Rootkit Database: v2014.06.02.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Catharina Scan Type: Threat Scan Result: Completed Objects Scanned: 375232 Time Elapsed: 27 min, 1 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Catharina on 06.06.2014 at 21:38:23,20 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 06.06.2014 at 21:46:47,48 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-06-2014 Ran by Catharina (administrator) on CATHARINA-VAIOL on 06-06-2014 21:52:27 Running from C:\Users\Catharina\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe ( ) C:\Windows\System32\lxdocoms.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe () C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Dropbox, Inc.) C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Farbar) C:\Users\Catharina\Downloads\FRST64(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16395880 2009-11-02] (NVIDIA Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8317472 2009-11-09] (Realtek Semiconductor) HKLM\...\Run: [lxdomon.exe] => C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] () HKLM\...\Run: [lxdoamon] => C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] () HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] () HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de) HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.) HKLM-x32\...\Run: [lxdomon.exe] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] () HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [599328 2010-03-24] (Sony Corporation) HKLM-x32\...\Run: [lxdoamon] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] () HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [208424 2013-10-17] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X] HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [GoogleChromeAutoLaunch_B4CDF8F4E62911CE9A125DF4A43B236A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Facebook Update] => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-09-12] (Facebook Inc.) HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe () Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://home.1und1.de HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie SearchScopes: HKCU - {13BCC6B8-59D7-43B9-9DDB-62AE5C0AB724} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms} SearchScopes: HKCU - {1AE2289A-8F2D-43A7-9AB6-92415D2AC556} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms} SearchScopes: HKCU - {349713D0-30F6-4262-AA35-D8971B8C53F4} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms} SearchScopes: HKCU - {47405742-4DD4-4C8C-97BB-E066DCCC5E61} URL = hxxp://go.web.de/suchbox/google?q={searchTerms} SearchScopes: HKCU - {5BEC5B5A-3495-4CA2-8451-041981BD0C4A} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms} SearchScopes: HKCU - {B89582FF-E4DA-4293-9936-4580DD265265} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms} SearchScopes: HKCU - {CAE19DBB-56F6-460B-B95F-96DB9A035F40} URL = hxxp://wa.ui-portal.de/1und1/1und1/s?produkte.browser.link.ebaysuche&s_brand=1und1&t_link=ebaysuche&ns_type=clickin&ns_url=hxxp://rover.ebay.com/rover/1/707-52222-30040-8/4?mpre=hxxp://shop.ebay.de/?_sacat=See-All-Categories&_nkw={searchTerms} SearchScopes: HKCU - {FACB6060-7CA1-42A9-B786-E863873E6336} URL = hxxp://de.shopping.com/?linkin_id=8056363 BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: No Name - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} - No File BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) BHO-x32: Asz.Citavi.IEPicker.IEPickerButton - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll () BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation) DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", ""); FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Catharina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Catharina\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Catharina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\badoo.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\2020Player_IKEA@2020Technologies.com [2011-07-29] FF Extension: Facebook Chat History Manager - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\fbchathistory@firechm.com.xpi [2013-04-02] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-22] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2013-12-22] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ [] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2013-11-27] Chrome: ======= CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC CHR StartupUrls: "hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC" CHR Extension: (Floorplanner) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2014-01-06] CHR Extension: (Bejeweled) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2014-06-06] CHR Extension: (Turn Off the Lights) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2014-01-06] CHR Extension: (Gliffy-Diagramme) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmicilclplefnflapjmnngmkkkkpfad [2014-01-06] CHR Extension: (Strawberry Pal Regelkalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmeafmbadejchdjffdbdjdkcgfmlhjmh [2014-01-06] CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-01-06] CHR Extension: (Photo Zoom für Facebook) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhapiedbmffnpkahkcjdjpikmodjipmd [2014-01-06] CHR Extension: (CinemaxX Trailer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dopcgojamofpmhidpadjjfilkiiehjea [2014-01-06] CHR Extension: (Sketch Toy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednofnkligfbacmlfggaccfhpkfopojb [2014-01-06] CHR Extension: (Chromebleed) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeoekjnjgppnaegdjbcafdggilajhpic [2014-04-10] CHR Extension: (Daily Calculators) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepfjbflaeefhecfkalmechpbdmklahp [2014-01-06] CHR Extension: (Pixlr-o-matic) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj [2014-01-06] CHR Extension: (Google Kalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-01-06] CHR Extension: (Autodesk ForceEffect) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekbaidcchahkpedbhdenlmleimihkcim [2014-01-06] CHR Extension: (Anwendungen iPhone en Förderung) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekckfmbgohljpbplohgkeoepmieffaef [2014-01-06] CHR Extension: (Silver Bird) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\encaiiljifbdbjlphpgpiimidegddhic [2014-01-06] CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2014-01-06] CHR Extension: (MindMap) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdaeohpmcenmffofpikllphdhlkkocfa [2014-01-06] CHR Extension: (Sketch Assistenten) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgcipaapohgnempegffkhmhbdloaoec [2014-01-06] CHR Extension: (Magisto) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmngbmfdgknokcefmkbjlcjabdklnlk [2014-01-06] CHR Extension: („Pin it“-Button) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-01-06] CHR Extension: (PDF Mergy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgecghmkcdefnknohcimkoemhaofpoha [2014-01-06] CHR Extension: (This Exquisite Forest) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\illikembakcokcfifcbkneafjjjnckkd [2014-01-06] CHR Extension: (Facebook Profil Finder) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imejfidcafbhpnppakocbdjbeifkgaga [2014-01-06] CHR Extension: (Dropbox) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-01-06] CHR Extension: (Clearly) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2014-01-06] CHR Extension: (Google Formulare) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhknlonaankphkkbnmjdlpehkinifeeg [2014-01-06] CHR Extension: (Eingabe-Test - KeyHero) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-01-06] CHR Extension: (Autodesk Homestyler) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2014-01-06] CHR Extension: (eBay-Erweiterung für Google Chrome™) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2014-01-06] CHR Extension: (Little Alchemy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2014-01-06] CHR Extension: (SPIEGEL ONLINE Extension) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcmhmkhlpcieakngfbhgjkdpgibbmboc [2014-01-06] CHR Extension: (Numerics Calculator & Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2014-01-06] CHR Extension: (Konjugation Vatefaireconjuguer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnpmoecabagognommankobjfmdfdppgp [2014-01-06] CHR Extension: (Der Planer der Räume) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-01-06] CHR Extension: (Video Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjjnhgakghmggnimjkldjmmpabhnhne [2014-01-06] CHR Extension: (Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2014-01-06] CHR Extension: (Calculator) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkgoipeflibinmadcecedifdonakgalk [2014-01-06] CHR Extension: (Spanish 2 English!) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmkabhkheikmcfieenfbfhikpigjldi [2014-01-06] CHR Extension: (Save to Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2014-01-06] CHR Extension: (Google Wallet) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25] CHR Extension: (Reversi) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\odhjkapjdlmmadkepnmlkpadnnnnoebm [2014-01-06] CHR Extension: (Google Quick Scroll) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2014-01-06] CHR Extension: (Goodgame Big Farm) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdjgjhkolgmkjjddmnjejjphhkdjdhc [2014-01-06] CHR Extension: (Spring Mahjong) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohmgpjbkliggjliakneoaedilbaihhl [2014-01-06] CHR Extension: (Spreadshirt Designer für Google Drive) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oomgjmhhemldplodpialfbafcidjaghm [2014-01-06] CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2014-02-08] CHR Extension: (Evernote Web Clipper) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-06] CHR Extension: (Marqueed Screenshots) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkbfakcphdokdnbdhlndlpcehebmplab [2014-03-18] CHR Extension: (Audio Cutter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimnkafgoiilijmlbnfoafihjjijbfp [2014-01-06] CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-22] (Garmin Ltd or its subsidiaries) R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [49664 2013-10-08] (Haufe-Lexware GmbH & Co. KG) R2 lxdo_device; C:\Windows\system32\lxdocoms.exe [1039360 2007-09-20] ( ) R2 lxdo_device; C:\Windows\SysWOW64\lxdocoms.exe [589824 2007-09-20] ( ) R2 MSSQL$ACCUCHEK360; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation) S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions) S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions) R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [239616 2012-09-18] (Samsung Electronics Co., Ltd.) S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation) S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation) R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346880 2014-05-12] (ShopperPro) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-07] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-20] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140606.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation) S4 LMIRfsClientNP; No ImagePath R3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-04] (DiBcom SA) R3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-04] (DiBcom S.A.) R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140606.003\ENG64.SYS [126040 2014-05-06] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140606.003\EX64.SYS [2099288 2014-05-06] (Symantec Corporation) R3 NW1950; C:\Windows\system32\drivers\NW1950.sys [25080 2009-10-23] () S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [41856 2014-05-12] () R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation) R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-06 21:50 - 2014-06-06 21:50 - 00003234 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-06-06 21:49 - 2014-06-06 21:49 - 02072576 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64(1).exe 2014-06-06 21:46 - 2014-06-06 21:46 - 00000629 _____ () C:\Users\Catharina\Desktop\JRT.txt 2014-06-06 21:37 - 2014-06-06 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT(1).exe 2014-06-06 21:36 - 2014-06-06 21:36 - 00001069 _____ () C:\Users\Catharina\Desktop\mbam 0606 2136.txt 2014-06-06 20:48 - 2014-06-06 20:48 - 00000000 ____D () C:\ProgramData\ShopperPro 2014-06-06 20:43 - 2014-06-06 20:43 - 00001532 _____ () C:\Users\Catharina\Desktop\AdwCleaner[R2].txt 2014-06-06 20:39 - 2014-06-06 20:39 - 01333465 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.212.exe 2014-06-06 20:33 - 2014-06-06 20:33 - 00001070 _____ () C:\Users\Catharina\Desktop\mbam 0606 2033.txt 2014-06-06 14:30 - 2014-06-06 14:30 - 00024335 _____ () C:\Users\Catharina\Desktop\mbam 0606.txt 2014-06-05 23:54 - 2014-06-05 23:54 - 00005723 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S1].txt 2014-06-05 23:32 - 2014-06-05 23:32 - 00068771 _____ () C:\Users\Catharina\Desktop\FRST 2332.txt 2014-06-05 21:38 - 2014-06-05 21:38 - 00000000 ____D () C:\Windows\ERUNT 2014-06-05 21:37 - 2014-06-05 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT.exe 2014-06-05 21:35 - 2014-06-05 21:35 - 00001060 _____ () C:\Users\Catharina\Desktop\mbam.txt 2014-06-05 20:23 - 2014-06-05 20:23 - 00015306 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S0].txt 2014-06-05 20:22 - 2014-06-06 20:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-05 20:22 - 2014-06-05 20:22 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-05 20:22 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-05 20:22 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-05 19:58 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-06-05 19:54 - 2014-06-06 20:45 - 00000000 ____D () C:\AdwCleaner 2014-06-05 19:51 - 2014-06-05 19:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Catharina\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-05 19:49 - 2014-06-05 19:50 - 01327971 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.211 (1).exe 2014-06-05 18:19 - 2014-06-05 18:19 - 00067972 _____ () C:\Users\Catharina\Desktop\Addition.txt 2014-06-05 18:14 - 2014-06-05 18:14 - 00063540 _____ () C:\Users\Catharina\Desktop\FRST.txt 2014-06-05 17:57 - 2014-06-05 18:09 - 00067972 _____ () C:\Users\Catharina\Downloads\Addition.txt 2014-06-05 17:53 - 2014-06-06 21:52 - 00034153 _____ () C:\Users\Catharina\Downloads\FRST.txt 2014-06-05 17:49 - 2014-06-06 21:52 - 00000000 ____D () C:\FRST 2014-06-05 17:38 - 2014-06-05 17:39 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe 2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip 2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport 2014-06-04 17:17 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc 2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 2014-06-04 17:14 - 2014-06-04 17:15 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google 2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83} 2014-06-04 16:14 - 2014-06-04 16:50 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog 2014-06-04 16:12 - 2014-06-04 16:24 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv 2014-06-04 15:58 - 2014-06-04 16:10 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv 2014-06-04 15:54 - 2014-06-04 17:22 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper 2014-06-04 15:53 - 2014-06-04 17:26 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro 2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport 2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe 2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod 2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files\iTunes 2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods 2014-05-21 15:46 - 2014-05-21 18:07 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls 2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt 2014-05-15 03:18 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 03:18 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 03:18 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 03:18 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 03:18 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 03:18 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-14 16:28 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 16:28 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-14 16:27 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 16:27 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 16:27 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 16:27 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 16:27 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 16:27 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 16:27 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 16:27 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 16:27 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 16:27 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 16:27 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-14 16:27 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 16:26 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 16:26 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 16:26 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 16:26 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 16:26 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 16:26 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 16:26 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-14 16:26 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 16:26 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 16:26 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 16:26 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-14 16:26 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-07 03:05 - 2014-05-15 03:41 - 00000000 ___SD () C:\Windows\system32\CompatTel ==================== One Month Modified Files and Folders ======= 2014-06-06 21:52 - 2014-06-05 17:53 - 00034153 _____ () C:\Users\Catharina\Downloads\FRST.txt 2014-06-06 21:52 - 2014-06-05 17:49 - 00000000 ____D () C:\FRST 2014-06-06 21:52 - 2010-05-14 12:00 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Temp 2014-06-06 21:50 - 2014-06-06 21:50 - 00003234 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-06-06 21:50 - 2011-12-19 23:34 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job 2014-06-06 21:49 - 2014-06-06 21:49 - 02072576 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64(1).exe 2014-06-06 21:46 - 2014-06-06 21:46 - 00000629 _____ () C:\Users\Catharina\Desktop\JRT.txt 2014-06-06 21:37 - 2014-06-06 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT(1).exe 2014-06-06 21:36 - 2014-06-06 21:36 - 00001069 _____ () C:\Users\Catharina\Desktop\mbam 0606 2136.txt 2014-06-06 21:31 - 2009-12-20 04:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-06 21:23 - 2012-04-12 09:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-06 21:01 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-06 21:01 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-06 20:57 - 2010-05-14 11:59 - 01050473 _____ () C:\Windows\WindowsUpdate.log 2014-06-06 20:56 - 2014-06-05 20:22 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-06 20:56 - 2013-12-22 21:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-06 20:56 - 2012-08-19 19:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-06 20:53 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Dropbox 2014-06-06 20:52 - 2014-05-03 08:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\DropboxMaster 2014-06-06 20:52 - 2010-07-05 14:05 - 00000000 ___RD () C:\Users\Catharina\Documents\My Dropbox 2014-06-06 20:48 - 2014-06-06 20:48 - 00000000 ____D () C:\ProgramData\ShopperPro 2014-06-06 20:47 - 2009-12-20 04:43 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-06 20:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-06 20:47 - 2009-07-14 06:51 - 00084764 _____ () C:\Windows\setupact.log 2014-06-06 20:46 - 2009-12-08 20:38 - 02074186 _____ () C:\Windows\PFRO.log 2014-06-06 20:45 - 2014-06-05 19:54 - 00000000 ____D () C:\AdwCleaner 2014-06-06 20:43 - 2014-06-06 20:43 - 00001532 _____ () C:\Users\Catharina\Desktop\AdwCleaner[R2].txt 2014-06-06 20:39 - 2014-06-06 20:39 - 01333465 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.212.exe 2014-06-06 20:33 - 2014-06-06 20:33 - 00001070 _____ () C:\Users\Catharina\Desktop\mbam 0606 2033.txt 2014-06-06 20:30 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-06-06 18:34 - 2010-05-14 12:03 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{872AFF91-85D3-4336-B789-768301523E02} 2014-06-06 15:50 - 2011-12-19 23:34 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job 2014-06-06 14:32 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-06-06 14:30 - 2014-06-06 14:30 - 00024335 _____ () C:\Users\Catharina\Desktop\mbam 0606.txt 2014-06-06 13:19 - 2010-06-02 21:59 - 00000000 ____D () C:\Users\Catharina\Documents\Outlook-Dateien 2014-06-06 12:40 - 2012-03-29 08:58 - 00000000 ____D () C:\Users\Catharina\AppData\Local\ADD8F28E-876C-4338-9012-223367612529.aplzod 2014-06-05 23:54 - 2014-06-05 23:54 - 00005723 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S1].txt 2014-06-05 23:48 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-06-05 23:32 - 2014-06-05 23:32 - 00068771 _____ () C:\Users\Catharina\Desktop\FRST 2332.txt 2014-06-05 21:38 - 2014-06-05 21:38 - 00000000 ____D () C:\Windows\ERUNT 2014-06-05 21:37 - 2014-06-05 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT.exe 2014-06-05 21:35 - 2014-06-05 21:35 - 00001060 _____ () C:\Users\Catharina\Desktop\mbam.txt 2014-06-05 20:23 - 2014-06-05 20:23 - 00015306 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S0].txt 2014-06-05 20:22 - 2014-06-05 20:22 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-05 20:22 - 2010-07-06 10:14 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-05 19:52 - 2014-06-05 19:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Catharina\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-05 19:50 - 2014-06-05 19:49 - 01327971 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.211 (1).exe 2014-06-05 18:19 - 2014-06-05 18:19 - 00067972 _____ () C:\Users\Catharina\Desktop\Addition.txt 2014-06-05 18:14 - 2014-06-05 18:14 - 00063540 _____ () C:\Users\Catharina\Desktop\FRST.txt 2014-06-05 18:09 - 2014-06-05 17:57 - 00067972 _____ () C:\Users\Catharina\Downloads\Addition.txt 2014-06-05 17:39 - 2014-06-05 17:38 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe 2014-06-05 17:09 - 2013-12-02 00:36 - 00000000 ____D () C:\Users\Catharina\Documents\Scan 2014-06-05 10:03 - 2013-12-02 00:25 - 00000099 _____ () C:\Users\Public\LMDebug.log 2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe 2014-06-04 20:32 - 2010-11-07 16:31 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Skype 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip 2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip 2014-06-04 17:58 - 2012-04-12 09:27 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-04 17:58 - 2012-04-12 09:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-06-04 17:58 - 2011-06-20 14:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-04 17:26 - 2014-06-04 15:53 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro 2014-06-04 17:22 - 2014-06-04 15:54 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport 2014-06-04 17:18 - 2014-06-04 17:17 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc 2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 2014-06-04 17:15 - 2014-06-04 17:14 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe 2014-06-04 17:01 - 2010-11-27 12:13 - 00000000 ____D () C:\Users\Catharina\AppData\Local\CrashDumps 2014-06-04 17:00 - 2010-05-14 13:15 - 00000000 ____D () C:\ProgramData\Lexware 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google 2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google 2014-06-04 16:50 - 2014-06-04 16:14 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog 2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83} 2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-06-04 16:24 - 2014-06-04 16:12 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv 2014-06-04 16:10 - 2014-06-04 15:58 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv 2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper 2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport 2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport 2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe 2014-06-02 16:57 - 2014-01-31 16:49 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\apsec 2014-06-02 16:57 - 2010-07-28 19:09 - 00000000 ____D () C:\Users\Catharina\Documents\dakota_s 2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360 2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-06-02 15:49 - 2010-11-07 18:18 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64 2014-06-02 15:45 - 2013-11-27 07:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 Premier Edition 2014-06-02 15:45 - 2013-06-29 11:03 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk 2014-06-02 15:27 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-02 15:26 - 2010-07-05 14:05 - 00001036 _____ () C:\Users\Catharina\Desktop\Dropbox.lnk 2014-06-02 15:26 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files\iTunes 2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod 2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods 2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ____D () C:\ProgramData\Skype 2014-05-21 18:07 - 2014-05-21 15:46 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls 2014-05-20 12:42 - 2011-06-20 19:01 - 00000000 ____D () C:\Users\Catharina\Documents\Sarah Brand 2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt 2014-05-15 22:20 - 2011-06-21 08:11 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-05-15 08:30 - 2010-12-23 14:52 - 00000000 ____D () C:\Users\Catharina\Documents\Mein Steuer-Sparbuch Heute 2014-05-15 08:26 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 04:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-15 03:41 - 2014-05-07 03:05 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 03:20 - 2009-12-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-15 03:15 - 2013-08-15 03:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 03:06 - 2010-05-18 09:01 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-12 07:26 - 2014-06-05 20:22 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-12 07:26 - 2014-06-05 20:22 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-12 07:25 - 2010-07-06 10:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-09 20:55 - 2009-12-20 13:35 - 00750280 _____ () C:\Windows\system32\perfh007.dat 2014-05-09 20:55 - 2009-12-20 13:35 - 00168914 _____ () C:\Windows\system32\perfc007.dat 2014-05-09 20:55 - 2009-07-14 07:13 - 01763416 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-09 08:14 - 2014-05-14 16:27 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-14 16:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-07 11:52 - 2013-01-02 11:10 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk Files to move or delete: ==================== C:\ProgramData\hash.dat C:\Users\Catharina\fbchathistory.dat C:\Users\Catharina\jagex_cl_runescape_LIVE.dat C:\Users\Catharina\jagex_cl_runescape_LIVE1.dat C:\Users\Catharina\jagex_cl_runescape_LIVE2.dat C:\Users\Catharina\jagex_runescape_preferences.dat C:\Users\Catharina\jagex_runescape_preferences2.dat Some content of TEMP: ==================== C:\Users\Catharina\AppData\Local\Temp\cabex.dll C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpefvrwf.dll C:\Users\Catharina\AppData\Local\Temp\OptimizerPro.exe C:\Users\Catharina\AppData\Local\Temp\PartnerInstallerYTAi.exe C:\Users\Catharina\AppData\Local\Temp\Quarantine.exe C:\Users\Catharina\AppData\Local\Temp\tu17p84.exe C:\Users\Catharina\AppData\Local\Temp\unelevate.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-06-03 03:08 ==================== End Of Log ============================ --- --- --- |
06.06.2014, 20:59 | #7 |
| Install_11968\sense.exe Windows 7 x64Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-06-2014 Ran by Catharina at 2014-06-06 21:53:13 Running from C:\Users\Catharina\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton 360 Premier Edition (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) ACCU-CHEK 360 (x32 Version: 0.9.26 - Roche) Hidden ACCU-CHEK 360 Continua Manager (HKLM-x32\...\InstallShield_{4EEF9985-417C-4892-B63F-747F8F09F20F}) (Version: 0.9.26 - Roche) ACCU-CHEK 360° (HKLM-x32\...\InstallShield_{81395935-58B5-4E55-AF3E-6C97390FA01A}) (Version: 2.0.0 - Roche Diagnostics Corporation) ACCU-CHEK 360° (x32 Version: 2.0.0 - Roche Diagnostics Corporation) Hidden ADAC Auto 2011 (HKLM-x32\...\{147D7D66-DB73-40A7-BF98-220C5454C1B1}) (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) Adobe Shockwave Player (HKLM-x32\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.) Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.98 - ArcSoft) ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.278 - ArcSoft) ArcSoft WebCam Message Board (HKLM-x32\...\{6ACF0A95-340A-46D6-B1AC-F22CDB51F475}) (Version: 1.0.1.56 - ArcSoft) AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - ) AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin) AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version: - AVM Berlin) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Borland Data Engine (HKLM-x32\...\{3AF6EF15-5841-4FF8-A3FC-5B2400AB9145}) (Version: 5.2.0 - Roche Diagnostics) Citavi 2.5 (HKLM-x32\...\Citavi) (Version: 2.5.2.0 - Academic Software Zurich) Click to Disc MergeModules x64 (Version: 1.0.14230 - Sony Corporation) Hidden Common Desktop Agent (Version: 1.62.0 - OEM) Hidden Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 2.2.1.9986 - Harman Becker Automotive Systems) dakota.ag (HKLM-x32\...\dakota.ag) (Version: 6.0 - ITSG GmbH) dakota.ag (x32 Version: 6.0 - ITSG GmbH) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft) Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.) Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation) Elevated Installer (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.3.1964 - Evernote Corp.) Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited) FormatFactory 2.70 (HKLM-x32\...\FormatFactory) (Version: 2.70 - Free Time) Franzis Führerschein Trainer (HKLM-x32\...\ffs2010_is1) (Version: 1.0 - Franzis Verlag GmbH, Poing) FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - ) Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{bd9bc494-8cd2-4ae2-92fe-6a3dda9c3ee9}) (Version: 2.2.17 - Garmin Ltd or its subsidiaries) Garmin Express (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Garmin Update Service (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version: - ) iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.) Intel(R) Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation) Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 16 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.) Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden Lexmark 9500 Series (HKLM\...\Lexmark 9500 Series) (Version: - Lexmark International, Inc.) Lexmark 9500 Series (HKLM-x32\...\Lexmark 9500 Series) (Version: - Lexmark International, Inc.) Lexware Elster (HKLM-x32\...\{9CCD2A54-3AC9-4675-82A9-71BFC32004C4}) (Version: 14.04.00.0014 - Haufe-Lexware GmbH & Co.KG) Lexware financial office 2014 (x32 Version: 18.05.00.0028 - Haufe-Lexware GmbH & Co.KG) Hidden Lexware financial office plus 2014 (HKLM-x32\...\{cceb5f5e-fa2f-4632-aa50-1dffce083c79}) (Version: 18.0.0.98 - Haufe-Lexware GmbH & Co.KG) Lexware Info Service (x32 Version: 4.01.00.0077 - Haufe-Lexware GmbH & Co.KG) Hidden Lexware Installations Dienst (x32 Version: 3.01.00.0011 - Haufe-Lexware GmbH & Co.KG) Hidden Lexware online banking (HKLM-x32\...\{7F603892-89C9-4EC4-9236-7AD4A798EA41}) (Version: 21.00.00.0039 - Haufe-Lexware GmbH & Co.KG) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.1.0.10210 - Sony Corporation) Media Gallery (x32 Version: 1.1.0.10210 - Sony Corporation) Hidden Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version: - Microsoft) Microsoft Office Visio 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Visio MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Visio Professional 2007 Trial (HKLM-x32\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2005 Express Edition (ACCUCHEK360) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Tools Express Edition (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft SQL Server Management Objects Collection (HKLM\...\{5677B005-B609-4B5B-9F3C-132BB085D3CF}) (Version: 9.00.1399.06 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft Touch Pack for Windows 7 (HKLM-x32\...\{8FF90DB8-6DED-44A3-B182-244FEC09012F}) (Version: 1.0.40517.00 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation) Minicontrol 3.0.9 (HKLM-x32\...\2795-3221-8656-0055) (Version: - LucaNet AG) Minicontrol 3.1.6 (HKLM-x32\...\9356-3409-2235-7426) (Version: 3.1.6 - LucaNet AG) Miniplan 3.0.9 (HKLM-x32\...\2476-8030-0924-5048) (Version: - LucaNet AG) MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.) Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla) MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone) myphotobook.de (HKLM-x32\...\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1) (Version: 1.2.7 - myphotobook GmbH) myphotobook.de (x32 Version: 1.2.7 - myphotobook GmbH) Hidden Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.) Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation) Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation) Opera 10.60 (HKLM-x32\...\{1D2C96C3-A3F3-49E7-B839-95279DED837F}) (Version: 10.60 - Opera Software ASA) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.2.00.03250 - Sony Corporation) PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.0.00.09250 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.0.00.09250 - Sony Corporation) Hidden PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.2.00.16060 - Sony Corporation) PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.2.00.16060 - Sony Corporation) Hidden PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.0.00.10150 - Sony Corporation) PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.0.00.10150 - Sony Corporation) Hidden PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.2.00.15250 - Sony Corporation) PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.2.00.15250 - Sony Corporation) Hidden PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5973 - Realtek Semiconductor Corp.) RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - ) RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Roxio Central Audio (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Copy (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Core (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Data (x32 Version: 3.8.0 - Roxio) Hidden Roxio Central Tools (x32 Version: 3.8.0 - Roxio) Hidden Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio) Roxio Easy Media Creator Home (x32 Version: 10.3.183 - Roxio) Hidden Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung AnyWeb Print (HKLM-x32\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.75.0 - Samsung Electronics Co., Ltd.) Samsung CLX-6260 Series (HKLM-x32\...\Samsung CLX-6260 Series) (Version: 1.07 (07.01.2013) - Samsung Electronics Co., Ltd.) Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.04.21 (10.12.2012) - Samsung Electronics Co., Ltd.) Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.71.00(12.09.2013) - Samsung Electronics Co., Ltd.) Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.06.34 (04.09.2012) - Samsung Electronics Co., Ltd.) Samsung OCR Software (HKLM-x32\...\Samsung OCR Software) (Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Samsung Scan Process Machine (x32 Version: 1.00.20.03 - Samsung Electronics Co., Ltd.) Hidden Sense (HKLM-x32\...\Sense) (Version: 1.34.5.12 - Object Browser) <==== ATTENTION Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation) Shopper-Pro (HKLM-x32\...\ShopperPro) (Version: - ) SimCity 4 (HKLM-x32\...\{01339AE5-04D4-43F8-008E-13AD788DC4F7}) (Version: - ) Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd) Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation) Sony Home Network Library (x32 Version: 2.0.1.10160 - Sony Corporation) Hidden StreamTransport version: 1.1.3.0 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version: - ) sv.net (HKLM-x32\...\sv.net) (Version: 13.1 - ITSG GmbH) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - ) TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - ) Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.2.11150 - Sony Corporation) VAIO Care (x32 Version: 6.4.2.11150 - Sony Corporation) Hidden VAIO Content Metadata Intelligent Analyzing Manager (HKLM-x32\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation) VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250 - Sony Corporation) Hidden VAIO Content Metadata Intelligent Network Service Manager (HKLM-x32\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation) VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden VAIO Content Metadata Manager Settings (HKLM-x32\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation) VAIO Content Metadata Manager Settings (x32 Version: 3.6.0.09240 - Sony Corporation) Hidden VAIO Content Metadata XML Interface Library (HKLM-x32\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation) VAIO Content Metadata XML Interface Library (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden VAIO Content Monitoring Settings (x32 Version: 2.4.1.09180 - Sony Corporation) Hidden VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.2.0.09150 - Sony Corporation) Hidden VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.1.00.15050 - Sony Corporation) VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation) VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.2.0.09240 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation) VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation) VAIO Movie Story MergeModules x64 (Version: 1.0.14240 - Sony Corporation) Hidden VAIO Original Function Settings (x32 Version: 2.0.0.07010 - Sony Corporation) Hidden VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation) VAIO Personalization Manager (HKLM-x32\...\{A95187EF-BCF4-4468-B501-C0BAB976ADD1}) (Version: 2.0.0.06220 - Sony Corporation) VAIO Personalization Manager (x32 Version: 2.0.0.06220 - Sony Corporation) Hidden VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.11250 - Sony Corporation) VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.1.1.10250 - Sony Corporation) VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.0.0.06010 - Sony Corporation) VAIO Window Organizer (HKLM-x32\...\{6D320CE8-79EB-4D45-8C6D-DEF74D84B49A}) (Version: 2.0.0.08280 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.2.06030 - Sony Corporation) Vegas Movie Studio HD Platinum 10.0 (HKLM-x32\...\{40AE01BE-A290-4FFB-8DAB-C624C17DC87E}) (Version: 10.0.179 - Sony) Videora iPod Converter 5.04 (HKLM-x32\...\Videora iPod Converter) (Version: 5.04 - Red Kawa) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation) Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom) Windows Driver Package - Roche (WinUSB) PHDC (07/08/2010 1.0.0.1) (HKLM\...\3EFB02FCACC5E5822B28C77FB14D8D696391F5D7) (Version: 07/08/2010 1.0.0.1 - Roche) Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 14.0.8093.805 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.2.0 - Microsoft Corporation) Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation) WISO Mein Geld 2010 Professional (HKLM-x32\...\WISO Mein Geld 2010 Professional) (Version: - Buhl Data Service GmbH) WISO Mein Geld 2010 Professional (x32 Version: 11.01.00.0045 - Buhl Data Service GmbH) Hidden WISO Mein Geld 2014 Professional (HKLM-x32\...\WISO Mein Geld 2014 Professional) (Version: - Buhl Data Service GmbH) WISO Mein Geld 2014 Professional (x32 Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH) WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.08.8317 - Buhl Data Service GmbH) ==================== Restore Points ========================= 31-05-2014 13:10:48 Geplanter Prüfpunkt 02-06-2014 14:50:12 Removed Lexware Elster. 02-06-2014 14:54:09 Installed Lexware Elster. ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {02E42E2F-750B-41AD-BD24-378CE004BA31} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation) Task: {0342F8A1-1F8E-470A-8FF3-D556C07041D5} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {03A7CA6C-905E-44C1-BE2B-32863A074FCA} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation) Task: {09227B91-18C7-498F-9B08-89F8C0E5C38C} - System32\Tasks\{F663F6CC-8633-4EB1-9EBB-D35793A6D4DC} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.) Task: {0E6005BE-874F-4764-90A2-CB9838F3DD29} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {1C535675-D82D-4172-9E6F-DE5BC6538BA9} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION Task: {259AF3B4-63E2-4701-8ED3-67CB0B0EC95A} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-3 No Task File <==== ATTENTION Task: {37B4B864-FEA5-4298-9526-986DDA7AA254} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation) Task: {3A5ED20D-FA3E-413F-BE2E-8602B23740B2} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION Task: {3FBD3373-8DF2-4E2A-8EA5-7B1BF22C5B28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {44EA5550-A815-4BE9-B03E-3B2AC395E186} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation) Task: {547A6082-5E08-4FE3-A7EA-0A7C89226909} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: {57DB0C18-E080-4D5D-B0B9-69496D969D75} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.) Task: {6445432C-EB58-463A-B5D2-5C554CFD1C6C} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-4 No Task File <==== ATTENTION Task: {6BB2F7B3-B0E1-4D1F-91A4-AAA0B8FD63D6} - System32\Tasks\{DBB42591-4FC3-4383-A35B-B65C66E0AE67} => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe [2010-06-09] (TerraTec Electronic GmbH) Task: {6BFA0EEF-66DD-4942-9991-894C67E57604} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.) Task: {70473A5C-9235-4DA4-A51B-F2AACB4759E9} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {748B2E4D-61F9-41AE-AAA0-D79AA667095D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.) Task: {789F957C-4299-4E3A-B1F2-13EA94263726} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {82C5E62C-8F05-40C4-9837-31DB3CFE32AA} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-1 No Task File <==== ATTENTION Task: {85169C0D-79D7-45E7-A88C-CBA5578C6256} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.) Task: {8AD31540-EA7D-4C81-AF82-2F3D8E103064} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation) Task: {9BF3B828-103A-4AF9-B35C-9838C703B772} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.) Task: {9DEEF3DB-6FDB-44D1-887F-2258B057CE14} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation) Task: {9F6E4B62-A3CB-4045-B913-9AD242681A24} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-5 No Task File <==== ATTENTION Task: {A6478610-2EF4-4C3C-9D3B-1D638E281D0D} - \ShopperProJSUpd No Task File <==== ATTENTION Task: {AFCAD846-BA49-4690-8D23-AB623017C36C} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-7 No Task File <==== ATTENTION Task: {B1BC1A11-48D8-49DB-B91B-1FEE13925C2B} - System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 Task: {B2C54784-0AC2-45D5-98FE-C4D567DC01B2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-04] (Adobe Systems Incorporated) Task: {C6DCD793-70D4-4905-8AD8-A30A6201AB15} - \ShopperPro No Task File <==== ATTENTION Task: {CF3A5ABF-555A-4220-A669-C9133467AF91} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-25] (Sony Corporation) Task: {CFD9DC64-7BCD-40AA-8892-9D008589A84D} - System32\Tasks\Sun Microsystems-Online-Aktualisierungsprogramm => C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-20] (Sun Microsystems, Inc.) Task: {D0F3D942-63F4-4999-8F95-D1CAD0CE3C7A} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-2 No Task File <==== ATTENTION Task: {E2420E96-8924-495B-B686-87DE1E37140B} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-6 No Task File <==== ATTENTION Task: {EC0371B4-51CC-4E40-8709-E5C3D8C59D0A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {FFD7821B-741F-4880-B7CE-3F3341AE8D0A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-06-27 13:06 - 2009-04-13 08:21 - 00045568 _____ () C:\Windows\System32\LXDOPMON.DLL 2010-06-27 13:06 - 2007-05-22 10:07 - 00069632 _____ () C:\Windows\System32\LXDOOEM.DLL 2010-06-27 13:06 - 2009-04-13 09:19 - 00081408 _____ () C:\Program Files (x86)\Lexmark 9500 Series\ipcmt64.dll 2010-05-21 16:17 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\redmonnt.dll 2013-12-01 23:58 - 2012-01-10 06:15 - 00034304 _____ () C:\Windows\System32\ssy3clm.dll 2010-06-27 12:56 - 2007-07-18 05:45 - 00138240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdodrpp.dll 2013-12-01 23:58 - 2012-03-16 10:29 - 00325120 _____ () C:\Windows\system32\SaMinDrv.dll 2013-06-28 13:08 - 2013-06-28 13:08 - 00091136 _____ () C:\Windows\system32\ssdevm64.dll 2012-03-09 10:58 - 2012-03-09 10:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe 2012-03-09 10:58 - 2012-03-09 10:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2010-06-20 10:16 - 2010-02-10 05:22 - 00025256 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe 2013-06-29 13:47 - 2013-09-06 14:11 - 01397840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe 2011-11-27 07:08 - 2011-02-25 18:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll 2011-11-27 07:08 - 2011-02-25 18:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2009-12-20 05:23 - 2009-11-30 20:20 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2009-12-20 05:23 - 2009-11-30 20:20 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll 2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll 2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll 2010-06-20 10:16 - 2010-02-09 07:41 - 00028672 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Common.dll 2010-06-20 10:16 - 2010-02-09 07:41 - 00036864 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Core.dll 2010-06-20 10:16 - 2010-02-09 07:40 - 00057344 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\app4r.devmons.mcmdevmon.dll 2010-06-20 10:16 - 2008-06-06 06:45 - 00011776 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll 2013-09-26 13:20 - 2013-09-26 13:20 - 00176168 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll 2013-09-26 13:20 - 2013-09-26 13:20 - 00043048 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll 2013-06-29 13:42 - 2013-09-06 14:12 - 08929360 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll 2013-06-29 13:43 - 2013-09-06 14:11 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll 2013-06-29 13:43 - 2013-09-06 14:10 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll 2013-06-29 13:43 - 2013-09-06 14:10 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 03464784 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll 2013-06-29 13:43 - 2013-09-06 14:11 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 02196048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll 2013-06-29 13:42 - 2013-09-06 14:10 - 01610320 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll 2013-06-29 13:42 - 2013-09-06 14:12 - 01732176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll 2013-06-29 13:42 - 2013-09-04 23:48 - 04157520 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll 2013-06-29 13:42 - 2013-06-18 08:54 - 01041408 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll 2013-06-29 13:42 - 2013-06-18 08:54 - 00094208 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll 2013-06-29 13:42 - 2013-06-18 08:54 - 00251392 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01499728 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 04967504 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01368656 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01748048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01577552 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01146960 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01229904 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01307216 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll 2013-06-29 13:42 - 2013-09-06 14:12 - 06773328 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01249792 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll 2013-06-29 13:42 - 2013-09-06 14:11 - 01314384 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll 2014-06-06 20:50 - 2014-06-06 20:51 - 00043008 _____ () C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpefvrwf.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Catharina\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-22 21:37 - 2014-06-06 20:56 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-05-14 13:23 - 2014-06-04 17:58 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:56E2E879 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: MarketingTools => C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe ==================== Faulty Device Manager Devices ============= Name: LogMeIn Kernel Information Provider Description: LogMeIn Kernel Information Provider Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: LMIInfo Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= Error: (06/04/2010 11:27:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/17/2010 09:21:20 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 56% Total physical RAM: 4031.18 MB Available physical RAM: 1768.51 MB Total Pagefile: 8060.54 MB Available Pagefile: 5584.95 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:921.47 GB) (Free:117.63 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: C95B288F) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=921 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
07.06.2014, 10:39 | #8 |
| Install_11968\sense.exe Windows 7 x64 Schritt 1: FRST Fix Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter BHO: No Name - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No File FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/GENUINE - disabled No File 2014-06-06 20:48 - 2014-06-06 20:48 - 00000000 ____D () C:\ProgramData\ShopperPro C:\ProgramData\hash.dat C:\Users\Catharina\fbchathistory.dat C:\Users\Catharina\jagex_cl_runescape_LIVE.dat C:\Users\Catharina\jagex_cl_runescape_LIVE1.dat C:\Users\Catharina\jagex_cl_runescape_LIVE2.dat C:\Users\Catharina\jagex_runescape_preferences.dat C:\Users\Catharina\jagex_runescape_preferences2.dat C:\Users\Catharina\AppData\Local\Temp\cabex.dll C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpefvrwf.dll C:\Users\Catharina\AppData\Local\Temp\OptimizerPro.exe C:\Users\Catharina\AppData\Local\Temp\PartnerInstallerYTAi.exe C:\Users\Catharina\AppData\Local\Temp\Quarantine.exe C:\Users\Catharina\AppData\Local\Temp\tu17p84.exe C:\Users\Catharina\AppData\Local\Temp\unelevate.exe Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2: FRST Scan Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan. Schritt 3: ESET ESET Online Scanner
Schritt 4: Frage Wie läuft Dein PC?
__________________ Proud member of Unite |
12.06.2014, 18:41 | #9 |
| Install_11968\sense.exe Windows 7 x64 Noch da?
__________________ Proud member of Unite |
15.06.2014, 18:52 | #10 |
| Install_11968\sense.exe Windows 7 x64 Durch Mangel von Rückmeldung streiche ich dieses Thema aus meiner Watchliste. Falls Du weiter Hilfe benötigst, schick mir einfach eine private Nachricht.
__________________ Proud member of Unite |
Themen zu Install_11968\sense.exe Windows 7 x64 |
beginnt, bleibt stecken, eingefangen, erfolgreich, fenster, gebannt, gefangen, gen, install, installier, installiert, kurzer, melde, meldet, nicht installiert, schei, sense.exe, stecken, virus/trojaner, windows, windows 7, windows 7 x64, öffnet |