|
Plagegeister aller Art und deren Bekämpfung: Suspicious.cloud.9 verhindert https-SeitenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.06.2014, 12:38 | #1 |
| Suspicious.cloud.9 verhindert https-Seiten Liebe Community, ich habe mich soeben hier angemeldet, da ich diesmal nicht mehr alleine zurecht komme. Bisher habe ich es immer durch das Lesen hier geschafft, Probleme und auch Trojaner zu beseitigen, bin aber nur interessierter User, leider kein Experte. Problem: Seit gestern Früh verweigerten alle Browser (Internet Explorer, Google Chrome, Mozilla Firefox, Opera) die Durchführung von https-Seiten. Avira fand nichts, AdwCleaner war nicht erfolgreich in der Beseitigung. Norton meldete zwei Funde von suspicious.cloud.9 und hat die angeblich auch beseitigt. Die Logfiles existieren leider nicht mehr, da ich heute den Laptop neu aufgesetzt habe (PC auffrischen). Das Problem besteht leider immer noch, ich kann nun nicht einmal mein Windows registrieren (Product Key vorhanden, aber erfordert ja https-Seite!). Viele Downloads, die ihr empfehlt, kann ich ebenso wenig durchführen. Ich nutze Windows 8.1 und war immer sehr sorgfältig mit den Updates. Da mein Smartphone ebenso betroffen ist, denke ich, dass sich das Virus durch den Google Account übertragen hat. Was kann ich tun? Zweit-Computer ist leider nicht vorhanden... |
13.06.2014, 13:16 | #2 |
/// the machine /// TB-Ausbilder | Suspicious.cloud.9 verhindert https-Seiten hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
13.06.2014, 13:24 | #3 |
| Suspicious.cloud.9 verhindert https-Seiten Genau das hatte ich stundenlang erfolglos versucht (==> Filepony lässt sich öffnen, stellt Download bereit, danach aber wieder: "Kann nicht angezeigt werden), musste nun mit viel Bauchschmerzen auf einen dubiösen Server ausweichen, hatte aber Glück. Hier nun also das File (mit vielen Errors, da Windows nicht registriert!):
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-03-2014 Ran by Preciosa at 2014-06-13 14:14:46 Running from C:\Users\Preciosa\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} ==================== Installed Programs ====================== Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 11 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated) Bitcasa version 0.9.20.4135 (HKLM\...\{EDA09459-AD7D-4434-BA0C-647F6703EA12}_is1) (Version: 0.9.20.4135 - Bitcasa Inc.) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.) CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.) CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.6 - Samsung Electronics CO.,LTD.) Elements 11 Organizer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.) Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Help Desk (HKLM\...\{22B32087-797D-4A1B-AFA7-072C87580ADC}) (Version: 1.0.9 - Samsung Electronics CO., LTD.) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36843 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2963 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden Norton Internet Security (HKLM-x32\...\NIS) (Version: 20.3.0.36 - Symantec Corporation) Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA) Phone Screen Sharing (HKLM-x32\...\{DF02C515-40B5-45AC-A601-5DC69D03885C}) (Version: 1.0.0.1 - RSUPPORT) Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Plants vs. Zombies (HKLM-x32\...\Plants vs. Zombies) (Version: - PopCap Games) PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Raccolta foto (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.4.907.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6818 - Realtek Semiconductor Corp.) Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.9.6 - Samsung Electronics CO., LTD.) S Agent (Version: 1.1.40 - Samsung Electronics CO., LTD.) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.16.0 - SAMSUNG Electronics Co., Ltd.) Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.) Side Sync (HKLM-x32\...\{34BEB782-66B1-4772-8E3E-71B758BA848B}) (Version: 1.0.2 - Samsung Electronics CO., LTD.) Support Center (HKLM\...\{5422229D-6131-404C-8107-9B3F87EF65BB}) (Version: 2.1.90 - Samsung Electronics CO., LTD.) Support Center FAQ (x32 Version: 1.0.9 - Samsung Electronics CO., LTD.) Hidden SW Update (HKLM-x32\...\{43C711D9-67C9-4793-80D4-E957D638D531}) (Version: 2.1.14 - Samsung Electronics CO., LTD.) User Guide (HKLM-x32\...\{029A9E80-E460-4108-8825-3A449EC9A26A}) (Version: 1.2.00 - Samsung Electronics CO., LTD.) Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden ==================== Restore Points ========================= ==================== Hosts content: ========================== 2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {1AE6E271-F1BE-4587-AB77-17406076944D} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-09-13] (Intel Corporation) Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {26C7384C-2CB4-4A7D-852D-BA7F0FF6760B} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\WSCStub.exe [2013-02-14] (Symantec Corporation) Task: {31AFDA1E-8F14-459E-A145-38A29C2D27D5} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\SymErr.exe [2013-01-25] (Symantec Corporation) Task: {3B77F310-0704-48DE-AE50-9219D84E140A} - System32\Tasks\Microsoft\Windows\SysResetDelayedCleanup => Rundll32.exe ResetEng.dll,RjvDelayedCleanupEntryPoint Task: {541EFCEC-97AC-4798-A889-148992A2BB32} - System32\Tasks\SideSyncAutoRun => C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe [2013-03-09] (Samsung Electronics CO., LTD.) Task: {737D72A0-A539-4688-8C1C-C9860CA9D894} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2013-03-12] (SEC) Task: {9246EA83-3997-4269-872A-6A60FCBDB9E3} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-02-26] (Samsung Electronics CO., LTD.) Task: {92EA1FE4-EA84-4361-8732-D847C4DD5532} - System32\Tasks\Microsoft\WINRE\WinRE-Repair => C:\windows\System32\reagentc.exe [2012-10-24] (Microsoft Corporation) Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {AB96B97B-39C2-46A2-876A-EEB6AE199033} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup => C:\WINDOWS\system32\dism.exe [2012-07-26] (Microsoft Corporation) Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {CD11AF42-F93F-4A8F-9695-C0A4CF8FF49C} - System32\Tasks\Opera scheduled Autoupdate 1402660006 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software) Task: {E56013A4-8B9A-4314-BB24-9BFC0EE14FA4} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2013-02-01] (Samsung Electronics CO., LTD.) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {EF061B38-C9FF-4B47-9EE4-92EC5BDA9A54} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-09-13] (Intel Corporation) Task: {F4D03190-9CAC-47B5-A60E-4487F2A91985} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\SymErr.exe [2013-01-25] (Symantec Corporation) Task: {F8E9F306-F34A-402E-A5B7-FB560F72E779} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup ==================== Loaded Modules (whitelisted) ============= 2013-02-01 03:52 - 2013-02-01 03:52 - 00085040 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe 2013-01-24 17:09 - 2013-01-24 17:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-01-24 17:05 - 2013-01-24 17:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2013-01-24 17:12 - 2013-01-24 17:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2013-01-16 07:27 - 2013-01-16 07:27 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-02-26 09:56 - 2013-02-26 09:56 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll 2012-09-13 10:24 - 2012-09-13 10:24 - 00119808 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe 2014-06-13 13:46 - 2014-05-27 12:00 - 01396344 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe 2013-02-01 03:52 - 2013-02-01 03:52 - 00029232 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 01106480 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00111152 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00027184 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00111152 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00060976 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll 2013-02-01 03:52 - 2013-02-01 03:52 - 00103472 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll 2013-05-16 09:04 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll 2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll 2013-03-09 21:58 - 2013-03-09 21:58 - 00192048 _____ () C:\Program Files (x86)\Samsung\Side Sync\SideSyncNetworkFramework.dll 2013-05-16 09:12 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.3.0.36\wincfi39.dll 2013-05-16 06:45 - 2013-01-14 20:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-05-16 09:12 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\wincfi39.dll 2011-08-15 13:12 - 2011-08-15 13:12 - 02603520 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtCore4.dll 2012-09-13 09:14 - 2012-09-13 09:14 - 00015872 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\featureController.dll 2011-08-15 13:12 - 2011-08-15 13:12 - 01006592 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtNetwork4.dll 2011-08-15 13:15 - 2011-08-15 13:15 - 00382464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtXml4.dll 2011-08-17 09:41 - 2011-08-17 09:41 - 00400384 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\sqlite3.dll 2011-08-17 09:48 - 2011-08-17 09:48 - 00322048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\log4cplus.dll 2011-08-17 09:48 - 2011-08-17 09:48 - 00195584 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\libgsoap.dll 2011-08-15 12:23 - 2011-08-15 12:23 - 00062464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\zlib1.dll 2012-09-13 09:13 - 2012-09-13 09:13 - 00473088 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\DeviceProfile.dll 2012-09-13 09:23 - 2012-09-13 09:23 - 00499552 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\plugin\PServerPlugin.dll 2012-09-13 09:12 - 2012-09-13 09:12 - 00013824 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\eventsSender.dll 2011-07-19 09:05 - 2011-07-19 09:05 - 14978048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtWebKit4.dll 2011-08-15 13:17 - 2011-08-15 13:17 - 09224704 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtGui4.dll 2011-07-19 09:04 - 2011-07-19 09:04 - 00317952 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\phonon4.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Preciosa\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/13/2014 02:12:10 PM) (Source: Application Hang) (User: ) Description: Programm Explorer.EXE, Version 6.2.9200.16433 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 9fc Startzeit: 01cf86f5ad4816be Endzeit: 0 Anwendungspfad: C:\WINDOWS\Explorer.EXE Berichts-ID: ecf777e4-f2f3-11e3-be81-1867b099c193 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (06/13/2014 01:57:10 PM) (Source: Software Protection Platform Service) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0x80072EFD Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service) (User: ) Description: Lizenzerwerb-Fehlerdetails. hr=0x80072EFD Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service) (User: ) Description: Lizenzerwerb-Fehlerdetails. hr=0x80072EFD Error: (06/13/2014 00:54:11 PM) (Source: Software Protection Platform Service) (User: ) Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode: hr=0x80072EFD Befehlszeilenargumente: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service) (User: ) Description: Lizenzerwerb-Fehlerdetails. hr=0x80072EFD Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service) (User: ) Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac System errors: ============= Error: (06/13/2014 00:50:35 PM) (Source: DCOM) (User: PINKY) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (06/13/2014 00:50:35 PM) (Source: DCOM) (User: PINKY) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (06/13/2014 11:28:35 AM) (Source: DCOM) (User: PINKY) Description: Microsoft.WindowsLive.Platform.Service.RemoteProcess Microsoft Office Sessions: ========================= Error: (06/13/2014 02:12:10 PM) (Source: Application Hang)(User: ) Description: Explorer.EXE6.2.9200.164339fc01cf86f5ad4816be0C:\WINDOWS\Explorer.EXEecf777e4-f2f3-11e3-be81-1867b099c193 Error: (06/13/2014 01:57:10 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFDRuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD00010001(0x00000000, 13:57:08:744 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM) 00020001(0x00000000, 13:57:08:746) 00030001(0x00000000, 13:57:08:747 - https://activation.sls.microsoft.com) 00030002(0x00000000, 13:57:08:747 - 0) 00040001(0x00000000, 13:57:08:747 - https://activation.sls.microsoft.com) 00040002(0x00000000, 13:57:08:753 - 1, <NULL>, <NULL>, <NULL>) 00050002(0x80072F94, 13:57:08:754 - 0, 1) 00040006(0x00000001, 13:57:08:754 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>) 00020005(0x00000000, 13:57:08:754 - 0) 00020008(0x80072EFD, 13:57:09:944 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken" Content-Type: text/xml; charset=utf-8 , <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>MfU9DrlQERtktfhO/bdFZtdV5M3naA64a78durO7Wsl2Zajj6u+Yh0VLaGh/1HaTQVLEQRvI+2LawZSc4qXaIetVbVI8EcMVBH1L9tJib0GLjwA+lKlZyfa/QoKFNp5Zh//szOF70e+d+eSua1mJyt0KUbO+8HBPC3t2nTbxo/2ogAatId+DBQsJ6EoOJcmzclqs5scatc4WOYmQkSuG+ojXcsBXyjVzIZ2KJP325JXhpix4LYyh9ICxZmp8JlksIij9VUiNDYkanGGlJ9ugf+ZyrvcT7dO9As6D3DUUUGndVLChPEUzAUej1/rReJI2mdZCftw3U3pndI0r06le3Otz1V2alX+ow5Uvc+nknDxvZ+fiPdDil2nCs6Sox2T/CdhFarZ3n1HAUessbWNzA7SokpP2VjZTADvtesqT4g+hoes/cW2KD97dvKl8sGCfHt1qySYZpoK900j9oeSZiKNttSpsgJZZ7SgDJiZJ84U3fdFANohk5ZDI+fKKW4mwGdK4w7C3oMYnqVc6JA26vcKbb1cnI45GJ5n4oQBxnWbHiCEJxY9zQFlRfqURxIEbxnVdqQnx4Kvmx59N8wX1za0MQOSSyDzuVjBD5VHCz5H2C5r7hAjZe7iu86FbCRrelxNgdm6P5LHg38di5eeEGrJjP/itSKEOfs0L/2V18u6ft6rJCZyAszilEoGjr/iU/f+liTCRpGT4ggxlu50WDReLq5c1rqhaR8XWMho+2nSmAW+Uy3RhV06+rhKViFMvafLYP3LLEqxhuoqymSRVOpQ28UzVAPSG03Zk2/nppGIeG/2F6NO/ttzCzRn5jkkn1HHuJ9k2Jbd/ZSE0qgPHKF+rMqXoDYsuFhR24cuNydt8niMT8hqodDXHJSl+L7C6ftiAougGzH37zeNzxBoNNtAg7oSZeh8l5o0VKGMIcT2E0Gbil66dqf66yDiWNGgkcwx/Qj6/e5QgoS923QNrchMW/s8AkKK7KUTnya2z4a7rZpw0IjOy2CZCrwbvd4gY+PcUnVt1bw8fX+PYQEEH2sf8ciNvd3FlE96wI8WW2PbCnA9Pq/44qq8as0VOgHURPrz3+XU2cMNJwc4/fSj3ZnOWfQhiXi/5TpMfibVVOMUsb8kdfsslZhSrRWEwYQPMP4gJ+o8/wDhGGovVtzOmUZ/2/keV6abnIfni7nJdqvO01i7rKpIVWRtY8ERYIxm1wFC9E+pUwZwAzVa+3mYH0XfwjKfSgYbWKK9fhITX+l2Omj3CJgNZQ8x2WhF/v6DIsTdhYuqNkZcOF6pgTCoa+YtRkPtQJpgNKV/0FcS7zk2tuT4AuO6sQwbw4uJSUKH8vfH3sKIgLJxvY2TYP6Rnlbj25YqhJUxiXY+MAGUOTPNuxGCLqeVb5Oo+837Qo9RnWELEs01ogncevpphg4c6viKcK8z6F1Nu65lGGLnunZC/R1xNHbIAjW7Z6UzgvuAORtdPiUGaKfCnZORgEnefrRHUO7240rpmX/QKzMsMvVa1ivDbpnk3RJhV3paCT/9gj/I5x6o7oF3Ncg4nrCTElnsa2xpXxwP3DDNoXW5Vp8b2qvq3vPhjmwGq2PpUT+pvBa49WV/rORKEEsoaGvRSiPb/+FAuyYFkNUg7I6nYHv92UDP173OECV5+AeldRu388JReYQDzKzBmvGL6xV4TWe0Hv3OLI7dLjeFSKXFlVqRx5mahTRsoZWrBu6m3BpwoILbtpJG1mh309jbZDy+wyySeEMW6qXRjiDCd9fk8n8ApUuS0vgah/NgnOPFMqopVkY0fYY34wV2AHTqjnLjdttbi1ltbhxe1UcgnOiWmnysRQHQo6Z9Z03R+ofg9CBo0KmXGjgEssK52yqnyR336bP+wNWJioIGyhNuHYWNMRSddlyIsDY1Yi33MrdV+lBAmmBv/VcF8w+/DKfhUZrC1nFoeSbzDMUuvrpJ/w4NZHrq46cUq3nROJsF+MZroEXDknsakCOvVFF8Til7KnoJu82OO3XVAQ5E1GpBHT/lmgznNhOfFyAKhK5SsG8YKcxEyAIMwHnt4Npd09HUciCdcEa6GgdnNtTFY/hIFV3P9kMvPv/iT8DoRzOv1f+Gyi4DTI2EJfRmr/k8tVmTwE5Kl+PScKwgFxajoUqCgQYvV/CYiUbuwZzfh7VCV46qBo8hQr/b8wTeGxyTS5wwAunDQuB4EgkTdV1ajKJRzXgoHAURRh13Xo/vQb/Tdj/SBgUPCvR9P/nAQajv03f1eq71lpVllY5DMJQl7ZPZqyicJ2npZSZtUSKEWImgsKzq52qTpxVzquq/U0BFBTmpPgPb8LIjn12z0qVT77wR0Nac51bfI21KcmEegk2NwPC9FlT9roKGN+MGUOwVX9+NvnonQBjzJGBwpFZ09uB5U3i3jmArwDguNG88OnUThp49w3EczTMFxaZaGmazcEGk/PVN6DO8LCYU3GppA5m87Bm1oLD/qMtEuK11yFjHYsNgXsNEYSG0ZpROF+0Ec33YPxlXddrlMbjy/j1pgfz8n5wa3//JmTkxNTi7IrTxC1QdozChFaE+tv2vx8AO8AC5IZsYpBhDMXZDLZ/3RgdCG/ukEaHxREpJN2P+jMXSCid4XXHPm3JkxwhFgpTkz1FoKLqBiw3jqnJnal03B4MUt0NZHkmuM/1czJwjYJwJfLtcyodgKy5lqIxtCBoZ8AS2mgivXU1s3zokalH9XCnPMtS6XiEkdfWa9juEOq9mnDu1fla50umg+2T3MbhVIXNQVD7K06MZ0yvmdHGf+SfW0SvCy/07B00w5GmHF36hntpNMRiHiIR5EOHWk0Xgaib+dYkrvnFqWjKgSEfNLnepN3YpDfwE50ptNSl/YU3envGo00BYlnl+xV/CvbmRTRIVTqU3Kl5W89dIaVcV3S4MdlLs9r+gQEmbo8tYmYgbze7gEovbji/Tv6RiaESKkuueaTsPWoK9GZWJXquc2x9OKbUQxheUapbaJNsSGb/zKSc5AL3MwPbDZoGIFqopEcLWDvefGAb74S0gz/bfU2fdDwQxligOyU2HcCMmzE0KdTuxbK/nHCgVD7z7fI5aA81EivQCXoDi6fTHZkUVDg6w6sVLgkoX61XnSMJ15umXFtuMlEknTAgRr4YNycENCf1ecOhs0iaiq3VtHFmt+pIHnVld4yW5st5MFzHkqx1yl+1t9ODiQ7CNtdW4jGkiUyYuCyQ3CiYNDR/4j8YK9RvWzdXurHuYevgBylr3ffb1Vk0L4l59gtyWiT88SKrok/LJ4KBNxhayFWugz0mnw4hl6EX2had16a6VHPZnHA/bS+yKxAJv2EDJ6gnG58y8VExzh54UwU50NoR/71sCDFoHIG56nxh+XrXx3bzJqG7kC2VZGApH9v1EXc0772oCF0RcsgyXyzTLHrqyg6iL/8Qi+T4HaoIPAIbdVkJUCC0Dz+a3iAvb4qIwXCsYSKcF3MuFFifU7xCa33P6/Fir8YpT6EtUZesCYOFaSKRIbGVlK51KYRWMjnq5upMXApU95aKaUgigxOGZ64HMhvcTgkszQBcAHimJN1/Zl8yQQsq/Wm6zewfg4PWYsWD3+eLuSF9KvSqMK9CtYTYNduSpMd8VEczb0aGo84usMNZN81TBF7I8Fq6v8pr3EOPKHojLoJWvbAgg5f22Bv1zSH7k1jVCGzwBOEGxSIRusxzbAN5GnwahvkosbcfmDxqCYZ6WgEMRAxfdrr5rFDwPKmV5hB2U4TsI9CKztxmuNmXfoeRmU6FXoJAbvicNgpI/aaVLWnEejVGydzBPUhrdGqKTYl5XvMCLxiVT5WktAojGwvVQ4rw8nse2s4lPjxp62PRh4vaDTRML/eJlQoMU2HGh5vKwnFPw/wrWsOylD8F54qNMaOmyOlrFMWRa+Wg/eAROOCokt1xFReTps8SphafU+JbvEHNfkffWmHzhjRFJWENX7u6bVKX9YrlV8RNdzWn1S/ZmbfjfPBZ7+y3q3ZsWdjIu090ZmyUQc+oK+PWb+eawERh+BWDDE/lm1919if1PDL8wr6ASVoolQ8lqmWfw76m1efz2O6Psm/Jcy8lGGZI/nbA05gqSmYrVK6wMk3xYa2B1YouFfQ7GsgZkd75O25fpRAg4zQ3gh3hskRIDB+qZvtlwzdcz2azRSvWpNKjdBPOzSYdR0lUR3nsEUlNEYfLTG21K2hvLljOmOSwdLkg5fzgw8Q32RCsLxM2JKvf0yJgKRVdhXqiWbWRQ6/mKgGyv+6F7FCN8lhKenoe0NbjmwWJE5nZZBJYenFDLAkjZwm+0E9rQamwWfAeVuxS4WKqg16lb//aT5unQqi8gBQo855Y8UrlyP+BY6loKqChBtcK1RyNlTV9B14OpbX5eyx0eGh9JdCjX3RCneJAzteJCsONErDZM/K7SVu5ZMY3lHMVg86J5+5fuSuj/ut5RK9UA6LISqxOG29fHCR/651hZ8KUi4e5No9L9Q0qxm/ZJiob8RxjWavSaxiucdEbooqzUZVorL3BFGj4WroatyNw1uBS+x2X9ElupxmF/9KMqNL+80Ri5EQ9UH7VMLaaiPXxC3ajtfLimui5pbzK1F1AqmL8zbO4JcRujbvN/CBZiqfvKycYHW4qWrN6TLQAExVr/6L1fcn5qwgvgPAnSSFh222Jm3Pybo1ue0SJ6l215kbckzW0e1tfSI1+7Bse7OBQMvziJP5Ku8evfNZawnooYTincQN6ej2y/P0hqfdB/Rx/j4VDxJ6nVutTv61VfGMUqPfmE4hpaqN0NJYRT9ImKtPH7Xo6+5zZWYD485pVYtmHMJ5sVj/uL4Jd99fMQKW+q016lMv4bE4XFuiCkIzzeMHsb432z8IU/wIXpyffihf/sug6xsZ2V1FHQnAsZ1RyUqY10sb9MLCyi0IHkLfSYFbSZzuBjmvd9NKT9igRUxD9JrNwzwAAk73exiq/CZH9gLCi5DgYojuKgDVH2tUHXVzpq3LqW7j58woTug4LDNuJNrlaoTryhfS4l2mQPA7BpyFYh+J6NXJdpHaMIJeHk6JNcVShCIYJZj3Cus1GnpIRASmdhntmv2+N4FBN04BMjtlyGeMTTtmGvQL5SFaGTwqKuvwaakH9v7iNrNIqBXVzp8ei4NWj0BQJp7J0ApxuZPyKLwWGfcn4GhbmbGW3mZ3GBfz1mFqDbWyXMb/rb3t0JpPx/luUNMNdPC/OqkJ7bRm9s+oobSzaCjP5zLzmr+Rx7UVJnbS3RWM818UMMiZydWlqm3q+/JIocb6Mdn+X4j2IQQOAhLdU6bmCfTKvWvYcHzwwqsm0SFF/zx2U1tX+ZUsNuLkGRYhGOzu2rfr7Hl4GbAW40mwA2Im8wTQj6tbGsNGwoOVtY852ftawXiAYF7ahiARAkAIBy5TqCiJL+j76cu7rLBnmc602ahS+rouBaxYt8a0lRVb+IB6z7u5a9785+15aSqkLXZXCbQhYsSdjjsaYGyjo5op2J0l8xdTLbCj2uBO81KTJuQKbC0QvY7Y1KBoH/MdN29Q+Un+l4ao/qQ2LeOlQgFVysS0qm60s74nhyFBRacbxa/MoMLRrAdnzc9fh+ZQVA6+HGxLutOwTAlo0pCAuwbMzxXYQ1kHU5ecbmToia7iV4HJMw94hjMuKFDb1nJN/mTh6RspALHDkDgumr0sAHeq14iWq15X1iM0G9xQcqwal9KeUBircSoH+/EDs4l76zQQd34Om8ZET+vUIhNMsakntxQrSmCFvIJ5u+pq8ntEthGNX3N3l3SpX0Cozy/59vvVyEvizTG6EnNi8XXqNM8MfMNlGgoGpL8L11POwGEXRhqQBEMm+IhYhcml/uL0s15oO82Nv8X2qKrUKTXvLtrdlQ5zCThNX01KHKNMzKKnt1JQhAvaJBVRdeZbB+VwP1W8K2X7BBlzFGukFWKZRw9VT58Oma/3DhLdr5FVcbokPODmDIIoX8CF07e40TkyYiYz789hfGSEEyK52auU1THcjEFHG9ukBvEGrJae745Y9/GJWkJsTtugp2DFUwCkIPQHVQ8xpfCeeP7u5a6IgDtiPSPhmDKpiYOTPkThA0LihUOwPWDGDjliFm0XWgfbnRj8DP8Rb/hyQdPPe4xh+rRllER1QDiBfzqZMWBU54vtXCLT4bTVW1sZOgaf2Vlcxbyoh1t/JdjAnEmSIJxUfvfOBfyl4CsHPMFod9vnXAHBJ4omnXwf9xNeg74zwNIvxnEDqWKT070+MyUj8d8op9FmlSv2hRQJvwj1VxhCG5SnMfIoQw1A0NBJ/yQ497kwcuxdv6Jj0WhkVJWj2THq0+i8rFfujlUz2i3ifc9MghlOKsrQquyyIZ9vQ0epaKBupU+ZikZHtf9jSzHfw5HN6PMBXO0PG/E221JjB3oJxaCKHm6bB6c7QRy+FtZbmWHLrfdNwRXRWScWEe+yqZs/xfxq8Ci+xkgavqrA0uSA7tnC1dyKGbSQ960qbgzZehaY9yxssJTpUeaNwFeDM8lx2+FwAHvkzWMAcnkrnbQgwrt9YDB6if6J+wNbMXoh736X4GkA3JMKmpLmGn9wV0Q+/LweFFH9+Gms5O/sZZ3yjwjO7JYBXtMrFcNkxpsY0dTbLSX2O8NEfGWI3mKcsLpWuWFE2v6LPVbCw3o/53IlDbG8CcIa9KiYijjD/d6D1b5Z1/35ODSjtHj7/jiK+9C44dybib6I3pR2tcRmGgUxK0pxBcRAv9zd2LMDo2i9diGHTc7LPuLf0qQAQKL4d6aYfqdpo+wMdtwEisV9/yD9m1aIwRQkRqx+ebz7nEc6nG7P2ZXTKDvzj9THXuw/P0maPKOxN+7nCY8BZqnPswwpcFyBKOvBHDZDpM19sVsyeA3DgWqd1k0/lKsk4aImO27x1VpxHrdjRXys01I5v9vR62zlI1R3b2otaFx4tX7FNVNpSzZF3XwMgTT2WnA/Xz2o0wJoslYOpywIVzs9iGpMi2yD4bK+N9HgqAfxRyjPRDiYXmMErkD+nB7CaLCP5V4BiaFx0bDH49AAGRuog93hySagW2Ou0A7f8nFae1H6On5hAtWFOrMHwiamwwtFxNleilG5HxpgFOCRCwNTpYvAR3wb7crfTTn4xybHUOc77gf3SFlqP87IDOFgff2igFXgE4FAhB//+gHJuGSQoRtrHmT6ATga17UtnJKYHFSg+9r5pcLSslrrJasm1QgREbVtYOzvhoTodRLRXpjeA2Do3AFPXWEdhE7eBBBuGgmgABHJ1UL3GvlaLOhFVGWQK5uEO3utMVY5bH45p7WcMsWsPz7BB30YGiTYfv7LqDQcrwWL5rBqEONWkLEOf+8qqZcRYuOisjhnplFYq6KPlMVTbkVv2h+2mnqsW1SuvREQBDvUj0Uf/myJi7sIKKa2aPYijFaKwqT1YnP/lX1hSR1fBH0yeZ7DrH3oiiTvmnxwxm0V+mkLqI0o6IwEDP6A5o0Q83PALbcEISbJ5uwKpEMcwgVaGQEeOIgs5GSFUt3DBkoUvS8AWYlQChzXogYxpvn7xzvjuaji3TYyyiZYA/BVqqOvIy4zpdxNsQljcgqpaUGMXC0YoYU8Cbv56KbZ5g+CCY5yN+00DkjIYoxqMVqlI45efm+XDrokgW6wtEdxP8BVYFzoak0lV4Rl3Ftv6KCtgUY6Vu/v4wAQrg9m9F89gR6d9YCDOcK4ZR49TAOzkbPnBFShs4CwD7WjMQadOGQkcPVbnO94Dl3HhUGabsj8MIYIHk1idF6jarQM2gNLBuucmIC0a+gqN1dhuOvqv0GL7/yCL9tJIun3CeEng2Q75+WlSouVKErVhTd7VCKzXsreWXDTXtmq8f/cgLks6l3vq7BO7WGkemX4LMfnC9ie54bLX9Hod6Zi8TgdOZpEHUYm3J4w2mgvXQipSbsukBg6O23ku8lVXtUPAA49KNi9VnEPI4/6EPsCXV+Rv1/jphZryheNPRkzSPDbdZ5rATBdvEDUOqUCGlA3/VwYqaRsBYOHV+OpvgQUe4c+OMEcJHMws4g6HRueq47vNc929HbCvzAKfCKwyN8pk1INZ6/10PXVndONW4/O5eCQICkPCNO+J6EdE47BmO/5eeyeaskpWsfu+cbbMntIrwrDNo9R7ukcwUHyXHEeA4DHfgupt54MGk3FNU580dv3su7aoPfK1UanNq9TV0cyeUpA+5fWpVGo+RO6Y/ZKefj/Ftx+L708bWKUA8SygiriB51VkIM5DMBOiCQqE8wLHWFJMVJdcXKfsN3ooLO36rN5DqlZrZcnqEMVS7tKnYB9XRJpZ1W/e6LIxk259EUPFkx7ZQ7yTGT5Lmtnv3tI2oIBBeIb/nf0+1o8DfPUAqH7i9NDf3XrZ8PL9hUijiQ5CGGCttu04iVO0nLyf4LHmguayIEIUeDcm49c8xLdfCKE69MlLS1k102VPY4aandb/oz4zHsUJgRinpak6IajOOBYrG6aaZD/Ev8X/bvBDkzYWHb3PHQ7YjSRQo43TZNCtEXlfxOipUGGA7SFKVzA+abKP4ayS/a1WEjnHk5syVWJlq+SkFPnpq+i0rz2c7+0qO9bUENiK9scwMDOB11eLhZ4tAfr27dHll1H9Eiy0W9QcZTV9fGwbpUtPOTHhDxM/h4hmwcQbEVghYFXlpMnU/7Hie97zZ3+p0ik48ic6aw4heaKLCPhb5+7573aW5nVY5cNqkRk5PE37DICUhltsNn9Fw0QK3ChWKgYiyTmjn/foD58SINKFcydbmGZSDTX6mD5q8XRqGOShh13aGosDQmDuTAH3kK3zbofp8+/GKf8xvB00AiL0RiaQIFo3P8IdBZeIJNZiGqeOuP16gJZsl5zappR08tbSBz+IZeAv8a1/JgmBs0ryMeoa4F3uoy49FVnIjXBkwX2uiTzXWiznquns6GKuuwjcnJluKEYlHFLGKVuu91VzFClfj9V4fKnQcVr0kfIypSeE035M5xWSIJA/f4mibxlepGxMmgaEw9GPnvZG/GhKp5ReDrkeVenqn2tyyXMf/ed3S2XDo+xuGYgyQ6ov9rGwjzhqEcHTgIHZhJTZAgXkzMIGRN8B82obeHMmYtFGSxwmyLZvw3+qI6CZJP4zyuFgtAg8oZm2YpBhfS3cCV09nzs97RcGoL5kOq0ftftme9zBNQuF5LhbmRlgtPKDqM1mH87b4taE9+8HKfFNJ0iukDD83Aec0dequ3s+vZf1jXB6HVwDJeOzAolHpgVGpKKa2GagIZNlePYUBmbLd2kwq7W8eSOfbeYrSLU7YjMdKw3hT5LNgFccdp6/vU8XYjy/193DD1/kCSDaxMWieV6CrrIfDLuvjjDN7IFeGinaN8kUOLAjHH8p5hFugYpdPe7VvZfCcYshowHik0WwSENOKGy5L9DZ+kRXwts84LC4Rgjh0K9/v8MsYlOp5NhnuPbb/pz1imVL5AiQh4TGbW5jQiGw7nqXnTEAi2ZhXtpJ1a1QS0582a2wAtwdOczDg3SMxaELZ8BFo2mkz5Rf+R6KVgVLREPy0WXNi9nBefDCfrVqIYyzhOp3Bqa/YEUHQpu8o9BzVJ0gLSDy1cn6YI0Oha56uVcb7H/NU6KKEC37TUItKXNN3yiuHaiBh6Z4wQJ00+AJdcx4aWF1SoSzF2aGTYzMFa3s7dCslGmvE+X+Rm46z5T9B4y/adJIWMOXZcQiJdt8OZAJ9GFeSjOGGWMrE7MiCMj6MEBse7VSQmCFaeEVPtFMEOJra9GDIljPszWI28QjtEtDVmFjjhi7voBzfH2qrIeFwlx/I9p6mj5fC4pK05ruhqf6PxTWmVMhsIT2cbDSUatJSDR0djyr93PPflk0OW1Gb5p2epYJrpbePTczY+xjLLK6uxn5pwhXbXJ/h5HkLZyB6+Mnn3FSItzqgTwcIFa/d9o84PxgcVTNGTmQ4xJ0zCM2EYU5OIBhVMG/vhlI9vT5WF7b3lPHocJRg8IjvEk8yD7XekAqzX/HQpZDsonQSXOzTIyBT/mNG/kRPCNJJIUtgwjLnpWRP9epfI0lwOR/8T6EavkqJ45TmVEot4BC0LAmjgAsbb6Z40CB4OxcSvLoAVK+Cr/3y19srYDP14NssZYEoXYt2gvhudHbRz9GMwa4fitBFI+Jly3c8f7zbDQ+4955Xyhminiy1wZBmTZxkTuKh6EHCv2ymvTIMRrwse63keyi9KjHCNV8oqBXTzf9EFOuznoh+1QYMJuirVVZNCrE1+R2Hj6DOOFWf2pQHcEsJCwEwi0sX7NibFtGvnuWjnqLFE8EBTpgcgm1oCVecLWRaAdN86KlCBgzxyOstQea6XByLH9+ecKbT7DUrTgXpuQnFTabTZ1Kyg2dOTwu7Iy0N0SSBFjoqw8KNMNTg6oszfr7q0wp7ULYJbi98RPbArrF9tAFOLJFi31Zf3rQq6MUcUUPlO1B/+tXtcj/S369GrLTMPyHblqPKTU3leFfrZhO4QI9GSsfKIIFmpcHqWCbgxHpdzdVGwBAXO2ZmNB+98AQoTBLddV46EChpE7KTnfIjlEM4nehypKK7KgDtaUS100S26p4nIg1W0qSo/SARBLQ6IvluNyW7PcFU4nLNtN6Odbb5N+vg+pu32oayS47k8M91GOJqitOCJ71yaZaqvIPVVRR8kW3U2HDm5uwgrO8YhJIWi8xcIlLBCL47qNuHmS5n2K1DGZhA6SjL90cio1ceB9PSbqKPjCUjMBuAzkSqbEe3oHsl6oGzJwMTYNeTnX6E3G8QMI3oyBKJXtBMBOFnyWrRFRwD/n52StVZTYXbd0ExXCnKldrA33V+qS4wBflRUhvbfjTlneeeYBltugax6dwnU2yoyqcf7F7RJE0DD978ga+4+lmeD9qnZxEnmOUdH9dF3K11uBXnvYR822sEF4UyVyF3ZU5Va5IC1oYnL40XfYyk9fm3mv9wrzQ7qgXvyVyWgOre2JT2ikE7AMekC1rQo5Q69Ci8KN2sWJmFKUoK/R9DJo0aaPWOuUlYNYi2RUgzC6rNt4qJftUf8eHc800eVthsDBFFHSIHfqqu5sdW/4S/ioL+Mq7KRa3/Jk8Aw0jCd7xFElFNyDCaqGouW6o6fbpq1igoG7xShioI7dwmb4TXOVQlxlCmNYL+DfzhP5U1OqtvvKpyMcSFvOdFP+WvXrqL8iJ5seQRSXeuuIRVJCkQp9SUIuLDAVeaw0Alz7pGdrX3w1zEvzrQPU0Ob8UoGKso1dkFogz5ZTUMFf/lrdkEeE93PI1l02ujl9zUIPZ71CZ9vIHlqaSef9yLQwq2wruuvXDjOTmwz2kPF7xrXytw1Pbl2hevDujZy9h5cXb1jcTx9PyyIwdfDVJAl4lqttcNz9XTLEfE6sNFXFUrz+X2uize9zuz1lsZ6djb5ZRofaTwUhDy4S3IBO2VungCcYHXXPj8zXGL9o0HW+SLr9FkWFRYn27M3x3XUiEKmwhd2dyZtlH8eeP5cYxknvuWuqZXKayHmW2MXOa1P3J244UfWQJsmvCJEEp47DlE08FWCMwjphSV8dCNHrbreJ4hJjdAhZtm+UVdkMH27UcSYp6HF1BsiljVZtvL9pkbuxs6vAI5JxP3eDePMkp+Jw59KmYr1vNgq285/CuzdqnYY+Uo2+xNFuQahKygqtYzJAROjeOa0JO1Jndul5niFgbLjEKfppTf4Z+nYJAvq8kjBdppUyOskoaK4092Dua8v1u+3Gi/8mjCLD7BMbNCfWoY+KZu2k1M1aNa75+5TGCc6gSX6cDw9f8rlDj5ISwHBfqbz4QW9CV7hPxedA+vsSCJgxgOM7dPV992BibH9+xvqExDE254LpR2CKQ56dkREpdj0Jm8/gyVN01lYTwSq3GMKbR0Fsyg+4dIkp7ZlvDGWJPCmHT4mKRptAyxwLhYMzgRR3OKbavCr9yHrakXa3jUmWPdc5hMlro8wGU9etTCkGZEkeLE5owXo5eH18lsNL16TXkoXxyqrKTfHyMs6JV0aRJxJmeyLgUMAy/+cDQVmyhc3fdTI4VzRWCREmNQizMfzDa7gWvBoqdcYBnJQ18q3BLBeA2BGt5LAefpE+I55RlzRYukRdl7WnOrfNw8JmVTZ8NSoeSMbGRL+2O6q0nDWy4+b4mtn6qVPrAU9Y+Zs4YrS8RtLfeD1x81Z+GkamBg3C8tldBnAtzRefH+QRWMfyJ0t43OariyJRPZayWYrUX9WftBeRglCBLLX1HLqOCwfnnE4D0CGlGXTON/bsK4FM3gf+Z82jTnND1VOqtaFhnTPLA+mvoMHtSLz1JxE7TksnQY4q675J6hoQ0bxQrXNgBi268m+TrFhTdLVolexgPxQMZ5FxcCMqx5xiIsYrplO7MZ/2jhtnwjVHdY9o24gn/DHgLUmNOG/2dZ79w3Ou1Thq2HdNfZztWYL0lfP3IpJZJsaqbmGv8+SxeliqbHPUO1psZYjfSQ+0I90mpSXPk6Bj0u9CvfenLmFTcev+tcnRGM51kSHMbgNYzjLJxUIwnBSHFGTWoG8Gmy/x6bXj9dFz/lfwLp0KvRcvOyDOPPt+SC9YoblFKeslKncZ+aWapNuE8BRlAZL+tJr3Qs2LJEQTsdkGHcigOgAyC0XCwT07pdN1+NHxPSU1a60qUuHtiYt7IyyUR1clt+3MsoawEp7rqa2krNDsqbxlyVX9OEHHg/2JZrWWkNErggXOmfurxqpGZZ2JxLWf4CoQb3rNsHVl/JOQiL8Jao0zcQvCTrhdt88E5HU/EQNNIp+clsFBKgYfn8Zk/YZE4tNnGPp8NCIEl/ndFyDScNSld49Kry/nAnaPA7WuP3YEH0Ce/bU7QIkUAzTe+A0dt87foSrHa6PbG9ymscCBNrHYq00LTUCTqXn5K+LnZ3oswx6177L6Zcql4Rer7jEa6+lP1hDO+kaaiOSKT8leIWwANyCboLPBVNx2H5BWLzFju1154f/fj+JwcXGXr3oLzQpEp7KMor+cUOvscy2o0bMuUwEw98JwOa2Y3cbgtahRBTMVcB17wEwsMuRzwXvQ5x5zGcOkc3DTQTZdDv/PjcoBZs55oHnlVncXyJEtNIMvBbIHdQ5zb4Ye+3YUZ694rnah/eTA4HDe7Tv76m1YudgtnBgY9/37NYF5w/jz3cRXy/8GAcBtUYNl70hFhKavKP90sqyA8F9RP99PQu32AGj2o9L70ocFlixIWzHdnTNvM5V9SfaGBmN5NnUOPk3xoSb14z7CAU7fnNsTT5NOQI4EZBAwS/mWkfudDzBdH1NHJ3QKMB8M91DCve59OCxn0rbE0q5RZQkjcZDjbPwy1krJdp94H4la1vCPK5OJMmV8tc3qnBH+jCOP9IXT/34G2lyTP7R9D7DJXsW6hHZ2iZRj79LGFPiWI5kZ8FVwDLxmY/b0LLd5KuDV3ZfeF+f74VKG3PMxRB7VgTU82320szKu9dE/wjZI+62dzG/v40wclBMM13+lZy0HgcmLQkIm1tmZfgbJnWeWYPnbvSfmb1bmjzDziWN3A30dODTgX4D1s/CtWB6apPF6YV1VYz8rltUjXMwSdoUjahZPMCJxChjxfw9PSXaOIOgTFfS+o76Kyc9XV/DNkalBTjV0e1HRtkRiMSLPu5P9qo45w7Q7+16buBp2eEp8BejO8ln1gLxI1CaKgNtmK2zh0e4Gj4WPBPDvaxmEya+g43qU6iP+1qq0nfUtYCN1mQIGLYGzO8RFnN4AHvV+uNRodudp0Kz2OvpdmEWOWGa//gHjKKFzZ80vYe++1qlbNCus3cyGCchFMLj3j5GrWL7R2AAs7cAezWF6xFeXniuWORqb1cBM/QdCmNaEKLNI3wLErUXB3DvN8g6ptwkyicmH0AKUDDIV6jOiWs/p/oLiZnwxR2gfrcAbvDmjYLzSwmKx0R2KruIXonVDAuKAo2imXiCDMd85PG3dQWPpevTjVtNG+5w5+UGmYNfW+OerY3EP4cqJ7LDhcc3OCHF+MKLD8jGOsaqg/oue/yeObqTZ3dwGloMzS4sPcnXl/5YUvWB/Z/0+4QmEzb6EiTEzQe0CCtMBUfKqa8DrCFkm8atS1Q0nSjWKeRRdhCKwjcLBQTHr35hgrJ8Lu5InkQv8Jy4FmiPqSsDua5xCE9RZSus0CiRWUk0d4dfEGB6fiMWvdraQPAaHldzX5E6EAubaAAPHt/1HoX1JaTeR2n/zxPEZQ+LUN54RoG9bvOnfFdaud+LxCFZj9dgfjyRX+XtOGucOQuqI1tFdSxjBl1gatHLrvy8hb57SgYvy1vB4nwstxdPNLWeWNKIP1mkZQ==</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[16]"><TokenEntry><Name>SessionKey</Name><Value>hG6GmXQ4XpCP4rWqTD4xXd3JlFWPGFHrVw1F6V6jy5rlgk+P53ZLKmqMH3GTmHViXH2jEpSFSGo+e3Rv52Jtsl4cC10QI79WRYNrRtykiPwgQFxdvCdjZ5/enppQLu6RR1hKbCSsNUtid0aDBmIa74fqMeTA5unHa6lZ0ip41TiZhECZFlnUXUHEM53zQk8RtxvTjPtfeU5MnnyizbrLXYNKOWYVFlgl9jR9uIo2qnnUiwAhX5p5SYm7CR3xWuWzHIROLnyXXyyR6VJ5dwPDrH1ZPNtZln7GEQlYBfaReHYOvsuhOofORfpkDJFiaut8yTFzxYjMojzuda94nSmyIg==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>18iocqsgX9avz5YUZg4pxqpFHrOXW/3iwSyuBK0f4OE=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>NgRT8Giayl27f4+HemVmipDZii8waH3upqn0Rgb1G47BuE3PsNRJIhvuanpO81vGl1jNvfI3wlQJzqUrhXDLS+1q3YqiPGqVTSA5MXAI0lU=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>hwHt5lN6MP7eTDRhDhaqk13EdWAkykKYBsB+xBF9ZXk=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>18iocqsgX9avz5YUZg4pxkK4zNPPqhC3amAAVfV5Z68=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>IPh38bcgJ41TST99gnYSGQ9e1JdZ1SQ9oLVv1r/fw5OczhFZ4B2LZl73Mqhc3ljFKBMv1CqoH8UYZmn617pfr5byVtpT7MMAzKlerzFQ1ok=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>WZDi8jKiHZMtD1Ga0thxDeWXXyQf+711h49BRLLqdXI=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>WZDi8jKiHZMtD1Ga0thxDRB3nP3jWs5+l5ZW+n3osNg=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>Vm8RKe+gTJEUt9La/mX8Sg==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>Vm8RKe+gTJEUt9La/mX8Sg==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>bMyt/e7EZY8kBkh/1eDOKikhRyqbTdmF87rs/RqkBMhxicKrfK2xHySxAvwTHcYLBqTMhfDmOcEjjLUlw5MCaA==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>ohgddpTZxOhWY+LGHsc7n7D6l71lMz9ZKsu0HHSsdV/eqR6kZ4acJmSgLyKXbfnXQsAHY3PWLPbwNFLtHYEfyA==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>/y2yYCLuXFTxQ0Y0th+nE7RGBYIeWHguutENgYqA0aw=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>/y2yYCLuXFTxQ0Y0th+nE7RGBYIeWHguutENgYqA0aw=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>aK1eeyqAYK+NPfAmlkpxmXT1fRaj1OB0TrmJpPHRG9VhuhjMP1JwdsTGeoOwLzAj</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>aK1eeyqAYK+NPfAmlkpxmXT1fRaj1OB0TrmJpPHRG9VhuhjMP1JwdsTGeoOwLzAj</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>) 00010002(0x80072EFD, 13:57:09:959 - <NULL>) 00010003(0x80072EFD, 13:57:09:959) Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD00010001(0x00000000, 13:57:07:205 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM) 00020001(0x00000000, 13:57:07:207) 00030001(0x00000000, 13:57:07:209 - https://activation.sls.microsoft.com) 00030002(0x00000000, 13:57:07:209 - 0) 00040001(0x00000000, 13:57:07:209 - https://activation.sls.microsoft.com) 00040002(0x00000000, 13:57:07:213 - 1, <NULL>, <NULL>, <NULL>) 00050002(0x80072F94, 13:57:07:214 - 0, 1) 00040006(0x00000001, 13:57:07:214 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>) 00020005(0x00000000, 13:57:07:214 - 0) 00020008(0x80072EFD, 13:57:08:452 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken" Content-Type: text/xml; charset=utf-8 , <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[16]"><TokenEntry><Name>SessionKey</Name><Value>cn56rgOcAi11OHvN4TBfdGwFJYqk2sBfR8bMlbICEFPIyuqo2z9Ou/hlM1G4m0VqS8JFvVFar+HKCYhwP8lCm1WUEg+shrmdKUbpzPDzU3a+J1lsND8B4gmktRu6/G6x48k8bjwg0SAunehJymhlXG49vey7Zs80DZwuTcuxvdYIODFuVepZKXm6qXHWARrfzDp4VUhfrvx8MkwwranFtSbc+O38LOeH63H2V4TqnFUFLZ3mDPqNlnyFav6y2haHm5pf3umgFY0swigtWfHHo+jGPdqu2H4kdtiEptbxSPL6/Gvher3OFXcFLizdGdFfJ+7GVTd/wyeBGvCwnt8qnQ==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>zetsuUhjFDKH7EKQHqwgSI04U/fXXAc8ZHDQnhiDb3U=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>1YgauoEp2i2mYQ/OEjRGPRcubvfeDzncSS9MYncRe7b+pYOfNsFkOcvsuS3vzMzrARzV72AD1y3SQegfJUjMA+aQEfFgwnbqADUoNMC1+mA=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>WNuDBr1mUsBEmw5mWFYQ2kV+uhIGGZ+WGUoLa1arILU=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>zetsuUhjFDKH7EKQHqwgSIzGEw+4v5JK7vKgjckL/fE=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>c/OC633NBB6K+Ny71nFZ1vHPam2fr+6/EOFjbBiv05nY/ZLgxdQ+PweToUkqt9ncbZlN/BkWK1fOsktd3i6imdvgqOGPA+UEdmrFv8agSiM=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>Ns3rMRrEb984PtYSmkCRBViMrU7JCLZcp1l467JqQw8=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>Ns3rMRrEb984PtYSmkCRBXNkL9KcjQdXc1HdYr1PazU=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>1MPqt7hgRviPhlnCgK3drw==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>1MPqt7hgRviPhlnCgK3drw==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>srWRYHZucMIU8/c/cuclK/7G+o8mZOvdXleDUlK+8b/XxXmP19jwdpdAO6Pj320AY/GBNwOoImTx4pq9swNJlQ==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>Lzzgy5XAQcjQwkTbWF/rcIumkLVAvhmUPjC29YNFJN10Ar4zYbagtwbgG5Y0doS0dtGPTTb2L2JEhvjZ/tDMCA==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>4jQMmV0qYHvjzD/02SETJT1JOkgDLEBO1NcdjAj62Jk=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>4jQMmV0qYHvjzD/02SETJT1JOkgDLEBO1NcdjAj62Jk=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>ueA6+9oe2XXd2XL12kPtLKOoO/jQYOB9ZLVE2MF6ivuRSlWU64paec6Obz4mrSFN</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>ueA6+9oe2XXd2XL12kPtLKOoO/jQYOB9ZLVE2MF6ivuRSlWU64paec6Obz4mrSFN</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>) 00010002(0x80072EFD, 13:57:08:470 - <NULL>) 00010003(0x80072EFD, 13:57:08:470) Error: (06/13/2014 00:54:11 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFDRuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD00010001(0x00000000, 12:54:10:897 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM) 00020001(0x00000000, 12:54:10:897) 00030001(0x00000000, 12:54:10:897 - https://activation.sls.microsoft.com) 00030002(0x00000000, 12:54:10:897 - 0) 00040001(0x00000000, 12:54:10:897 - https://activation.sls.microsoft.com) 00040002(0x00000000, 12:54:10:897 - 1, <NULL>, <NULL>, <NULL>) 00050002(0x80072F94, 12:54:10:913 - 0, 1) 00040006(0x00000001, 12:54:10:913 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>) 00020005(0x00000000, 12:54:10:913 - 0) 00020008(0x80072EFD, 12:54:10:913 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken" Content-Type: text/xml; charset=utf-8 , <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>Yn8+mpNYU1QJsp7/YUDAZLRprZei9DdmygVmpNY6YuED4QCbkOYp8PBAUHCH19PLVkCRsydOrqZFqZKDh7uwQFnJj3MwDMZq2tajQ78JPqbcNcAsu3mWJLp9PUqSc83hIuj4SrHW5P2zeNdTesR8OO+ePER6RjUuAOS1HfxrADWk2hJU+vvyMXgRMEKOWrYW5SmBe2swtNKmkxwajgTI6++L+Yuo/kkYxnjUZBty4ayZBHsIMwNcdDRoMwJbO0aaf+Ul6x82NxR0JNGlb9ZYS27tLo8GcHy6qFyYNR6Rg8ISnOc99rjBY1+Gjm8mu4DUQShN1yuAk0F5ZtxELwk/fILLrAj4LVS2LwecTcDzYT5IVQXqyN91hf2A0aM8EiP+XO1mPMvNSlT7IfH+y8xe3r+ZpZSFlw+l/sUfDxfWnneC3tXbzJ0kr5ltk4/Vdrsop9fx0JaLV/Kt4VmSXxTKsNG950bgW2hMlzQQEaQfNEVbzPxq3/gc6BgkOULm9yaFWcshNZTh4t9Hr3tbSMMgV2TYs7oljTE3QbC2Ekzm9r9q76VB3Z54GSfww01H/yK9ykRNmm6IacJJ9tqFKxpUCS2Y3VyBt1aV0wqRTWgBHeCGkbl2uOpuudh2RnasFiLjsyc6NeraZ4alxnWMSfoegaIE/uWz4S4gHkxPpjKK8jai7Q+4LojKnx1FIYldcsrZOYztZWXRzwX/27j+TObp4gi/0wwdy2ntnCVNn2XOH5MZGnW6BVPNIOQJq2VN6ogpwBCT4PBLv9l+Pa/OwkhTnalaArP+RWkPT16qx/kO2vJzLXvOkCaNk/NHEBOg/+FoQ6933eyTW9GJ2BF8WPArLBDE6Sz8q5YFrMQJRW8KwmZoAk82EChtLYX2o3cLfA6R+A/a3pswMP6eHpTY+ZNH0XetZzjv/nt9vrD4Npcdh4VpqOzMnmH3IJlin09af2a/R6AUUi49nkyJYuPrkpoH1w24tXKBb+9peQn4LGAwV7TgioRDvRFuFNuCTI2Qko4N32L1ramBxKOiM86vny1z8SY7c3YvkEt/r5WHYf4MtiuqTYWCMSIEBBpoykno50zbKmGCDB7G1a+bjPZytIva0k7y6vzSTQX8wt6YhVFWV9WOmFe+sNQz/7AzzG7TGhu9lQk/6OIIufAWFZqz1J/sllXcWSKu03O46or/jmOgp++M2Egg0tKFQS+E0mO4+gdN4GCGLMQ+4tUPdCN+cwBjuB6TspNxWPUlEe7LbiOdKZnr6LZ6cELSZ+mfegH5j68KgGz/quJjLKOFKcpMT+e2pivfm+lLKvOqGd/REuT6b9y85cyxBRwsPZqzpO8OwgKXGd87uqLt96JsVpWZQElriRUURi01yBV6Lw6h+HUTSs/V0jiiXi3dLiWs5KWuRoEf1QNUSLru26td0PDoe/MGV6xOpS9MUd5hM9towxHKTqyzNysFF+12uJvVREui91+HpkjO/qSTyLPoZmjzRgy2xx+rqY9Ij0uD7AzXEKUik9HW4B3d33rwlzpljZkIZWWZ/e1UHokAMHWj0rm9+Ax/SjsEwDDghhBCsnHFkbxbkrHbYpShnpBU/whnjUnbCwqBpGH9aFpvVgXYM6hINt1JkR+WdrbVMTdGFf8/fK5JuS3/hqlIdaZO760a6peq/of+swSiDRzPG+34i+RRQHUTVsj0nL2jY0wbr+q81lq94Yo1SANuXnqJdzqY4nyyr6Qe7mLU/DoRfQcVPMBwE3p7bSuTbuYaIKPHuqudmQArYTn44qm01QRsDXVKT3N+9Lme0/k7qhmVDk7ydnENF2JfktDguFyHcb5bvbgm9cgRg2ZcK698zQvQ7goa34lGrc82BH9f9yYQdcNBrL49bz08UcVMk2PX7xOjoW2gPw+yc7ro1xxkb2NVGy5IcoIrqBwFUlwHNJpw0bgb6R1wBVYdhvQdPVr49kWyjTvJX85SU78TvmjzxBK7UakZxvHvOntpgWo390zsWl9Ocly35n1P1gVtswKfLR/IfklXsBT691oNVhowwuR82+a1UFdj/4a2Rgs0s06d3d9hvaR6VqQISps3MeMU/cfzHKnwwh51QCuWRhXHzS8HMNh61l2BmeMEh9YuNYwl3f42D+J6ysQ+DH2STKSD4tnluqaCXdDBAPiCnk7AdTsj95d4qkeT0TvjBrKqMzRoLnsgp55BoAX7SJz+a2AeTca3J6ltWnldBW+DRCzhazYg7fO6hmjqv2zc6OLDkxAZHKVoxTgu2S7arhV39gU/GKt/uLWJ0kSl68yvOxhHIfs67o9HP0ocJ9SrZ54mDvR/o1C6xlluvkcyMl/z/4Ply0aDGGHEDypNoAB72Hl/+Fgeggg+CFQYTXfn5k6wIgJ9dEL3kI+D2muDye89yEdiGZOMniKaCLSz5Xbuxe1YNP9oROOqss/UitFLx1XK8idJCnmD0CfxpDwfIY9tqkqI5vWrpY+9qwGhNHo7LK7grTElgQ0kRC50WL/DioB2bypocFM7URaxNCv+9ubJFMfNbeLRaUK7OTSSm3H16Xgqlb4C3ZrbadOB2cDjmv/WGCh7ulbTbyIPCSIFzDaS+HSJNEy72XYH3oMvFZM5ooBvCfaANHrPqPILHG+RTtMusdSXhdbe3D2woimKeAiY86cU5gW343ZUWUqmdcJq9UcakS/1jkmgcR4Bd+3bKGedpWbwLvJB1+jr25Jigd0+KPclU8Mp+7AEIICtUG1io5wzM3Qd0BIoc9wvakxJUr6rWkWgnVI7iTON9H/E++z36nv2Rs6BfqDxubfzmZYiP6NrF93FY4y/xyh5vD1yvz5zsh9zrUj5gv8A2mU+sl7CWErWok7VGK34aR8l6Ge40PUrVuGnZBkAfROx8HrTsnkqDTvx6nX7POJOUuXZ74IVSd5VpFVwAvGbGJkQQa039dr0qwGGXgVKFnxrjL3cEw19uhF3Yj8bMaL7haxEuRGa1uKk6uQmSwtT8RHSi4KRgedB7k3/cnsHIiJRYiPz5vu908Q34F7z2Y7/CSbU3L8/9OhrQch8hfXF4BS3k5zfyrCVnkVYVS+7qWoxzzB7ed92zT/Pj/5dxJMq/wKrwzZXKiobEnMSvvb6mG1RFRDurWoB6lvWLcFpwNyWBhTiqzTlhsuSWH4a7GKaSbwhhBSsIELr0jEDuHrlYZMLCcNJASifqy/ZE+9V8GLxgkAmi7kMjv1NYFmp8ThCmTri+O1nfCyS1sCLEqYVEqfdY57tX7ea2LVv9vr/ZuffQ3h2jvvA8ioAA768fV+oSernq3zR26g4JLQpUuOnQjzGToK8McUcfpDpGm3wPZuG0Ja0GXrvqZWu42/7LuKBixZ2Hw+MkfeQ00skhX3Its2r8B5VP3gWHJE8HwZpVG8eiBmyefuTronD1wtQ8aiHN2ijqB7HDd2ke7GWkPg2PvZtBLJoDrkxB1l9mF4ICMr6ZsBDU25uJl9MuZ5nJ6CviSIEyXdNFIEIn9ChPJli8cSpFWmpHvThEz2bwjCW0gmI7mevdFs+OfL+0vnhAnk84vXDaAJPp1d3R1ciiX2mDkOZS1g8kvFFivClqWt7MbtC4pKZ42/TbnejkyFuz0hYWBW7MmDeULyeM+RhOFKlilhbNF8fNzNKndyOHT7jrQDxKkFuXrKdqAEPWKBaEkVEsu6CAyGWjLjwfiTAsmMxAkhdMkTlIvFF8XFRt9WhK6ksL6OoAnAh0dBBJbOoshKXosRjdOwgu7hNxEoMHFYcM0Er7UY6ptqHyEdqnEFQgtuNtdOxhuvRij3Tkg7EfpAaOPm2xYFRwthW+EdQg5w/leXIGu3+lokuw3MOalu/+8ZSA56bvocuB4FO8yM+x3TOJDv7gT+mFUwwiZR1JoulecWptY37/2AYMgtXEoly6puq08OQtxVCHYDDkuImY8BSFSHdLl0A0msFbnTHxNW/ScI52TyQQb8fg7uGd/stcWvWsZrCaZJ+yyYtPMQ4gLKiBYdavIbNQ6HeUVUxfcaa0Nt4/+lmtlIxg17epuS7cQqVNHDJGPM0omIaoTNYBxeOZ5C4iWtLgSCmhvrZlCLlYTLEe7P9FpzUcWSVRU/D8ZeyJ6G/9ZrpXgSoN1XIFzoRnsXlYOQHOAkt2Ca4KP2t8wvO0KMeiyplNS5WcNQzvzhTtHlhKAT8vS0GfR+V+XXM+iPsD+36XupbqAjLKQCv1o0ZA8kjVbHQVKJ6C3qbBVqaasaYqukcYnMZhSj3gYGTJNHR1NLjpBuAfk3RkeYvCdpGAPOvquAmaez1Byxu7deZsixVTzw8gmkr6ScN4S3w8HgI3AnK6jpMRCHEApQGq6e138S0nL3Kuuyy8mSNY8b3eWSL+Izm1/PypRF6VEJFaNcgI+hI3zi0jLm/0Mn2kFwnlo2PLR/8AWtPVsBeYo6jWJq263wDfM5Xb499pp+59W6FGdILUkCgXljvTYzu6Ku9p8fEUQY9o8AXCGBOPXM8D1D+A9jyy2EmEfA8bIK6OfS6kAN7GAHLQdh7nUOhMSDcD9m9tGuFu4C2XmrqDNtgeqXxHU4aINruhFcHBUpI7aNdYK5dEnTDcT9nry/Oc/Upf7JAaZFzxnoDJhUoS6Th5/yxFZYuroGYdcUqYls5mWvLQ/DFdQnEps2CZB9Gahv17tTkQtvu0KD57kUvSfm9wWjCLfrLZknjN7fntMhzLMsHtg1z3waCSpWpvwhQspsCVqZTEhB46U3EXkxTHng4NDRm8zRn4rkAlBlEzz7dD+1khVWp7z+CxaMoFXmwexDIw6UuNB8p4LEndPiWNkgci/6nk5+EL/9YMzyaTsDHzMJcXw499+NFuN2KLOOxkmN448tIxvZKW91RcfoRmeaLUqabaz7WzZ+0OwKk7QeZzPzXcVDvCzXdO2Uk6dUR6sCzBSUrM6E1l0/oVBlUw8JDw1FDIQvLnNBEspVYL949obXqMQgsrFmLUYL3uYVeZt9oF5sMKcckLrZCCLGHRfnSVMijW8m7DeOQwU3POR1V57+r7xmoV3olKypaY1z4czyDhvk2X4W0v1OZbfTwIrQWms2b8ioLbTmgnK4i5JxvIvt/yUZo9zs2TnSu6KcIYntCUwV/YwMEnyGpAEdb+XPfgMZsTr2bZhCw/uGa+BDYlj2JTOl0sYRDeW9+z2ByXabz5YX1m4kOdhGoVs0LM+kc+jelvl7DRmSbVaspZ9nd0gWdeQFpCATWiyPmIJiTORR9UidEDjDR/JzkckQjgEapDSXV2nDubSKNdTZvO+lzXZ5Jh/p0XRRPp1CYHeNXYDsX9FK2yDqUSuAhJeGiyMd39s3+0LXM6npp2Bac/eJaF+AoYcMXBLO1xGUpszuv2qdy6EWLY+HvbX7XsPE5JXnYii0x/RqYbXb93h5dxeQrSMjkz+LnODCF9VhwCz+sY+dxOd3dt86HlCaOEMe4EiVWnEBodZ/GTnELISE5Fwij/Jq4YnlxATwSp/MSI5dDN4mGysZFSHVSBZiI/BxkR09pyubvMvPGQrRnWvDZCJW20zNK05dBb7jK0m5AJt20mrvexbEZlQry2CXeXaenbuWDpRx1ZheJqIyYeo7v+HSqbrKXqzXt4W90W0vkOn2LirEFwhxIm1NblqBCN8sO164Eg8N14E0uBH6ink0omwOq3KJ0o5RrJDda19cWjnoUSWelBnvcbuWtItAznDYZEwZqjatbReIdPX8HNTZaRcdhlBZGIpv0X+fzDZEIdL9UjROBi+Ml+JtJQY6YvSJsq7j/y6QZva7IoP4PfhKcburZ03BTBekvrqdoe41etGbHFNC22VmHyQZg7PF82lhY31SmNthNgcurVIHTTHP76V9UAQJvh9r8wILNtWd6WGSWBNssgwASHTWil2XyD0USMjo0RBHko8XkTfGdJjzoqzDwZFJZxfvSsYUv0NkXzdpxUyi+/VZ27m5sJW0WJ440bWC+IZad2xPisjCZ1RMisCYaaaDyfUakRJNLEt8JUF8fW/IK4O3oq5PGy1RQSIf7Z+SusjtJLItIEX1JZLgdadSsPwxi/vRrzcjFvFH9vGsea/dvydM83QJlDyDuEkumdjrduN0T7OEpaJfXurCjvkFgHUVwZLXfXrc0lgXXF0Io3/OefOcmJD2RoQ7WFduHePE9iLDBUnRDet95uz+KoFh8SW57wWmFnSeKI5eUC8XnKJsDPuPu5U55gRKmHJ8Pzbb77dAV+OqNcIdNuzUUDdcAmqw1WrFgDSucZYvzPg9hQaK/dbzmeH656KiVuC5AbzIJGqfEwZjVaNYVhtozJ2cU4/8BKVCviGxsq31aWiol3toFjaD7tvyjL8ZJaPEf4OS5338wvN2wRY/Atyd1CI0RadFkT1mi0/B38ruLqpqngeA5tU8RCxisAUoFA0gje9NDZuOSIhOvwtKzJ/ucDk2HSbEyfscOYtpCRkht1uaN2k6qdPF/N1i4bDRmNOFJQa6Yx2wt/+iM8yTSxD5mK7ew5/T3jhjlTkyw05sPD86Ddj5aZh4NeGEAT4HTrc3rSzUEJJAM0RoMQ64yjlS6tt2aAQhOoYm/fkEAGMr/5ziMlRDJlXRyF8kjY3F+NgXtkXwT/icrLucMobxa2Yywtm9AnO4zeSX3M11MNBw81JhbaIU/eg/EIuI4uKioPz68KSwmAo8+1us4XFZoNAJzRbsOqXWFfFdwFrlKEL82NvyYjzkr/cBKrVUl8L70Tj3tqzSpuwPulPv+3sHQH5CwFa3dL10+l+JXFUP9pv4+/zYZGvtVbeYGgFIB3V9tMXpvZsx1H2O9+TeJCEQmvCJvoOhjzD9H6olO8T8FA+yJFgZ7FIYxCCLwydg3NfKDZRwFQ4SoP/sEH8qExemK/ZI8+7Elipi7iQAWZP33XC6J5bmuM2s0tSERMfhnwdyVbkq7zx+XOT8Va9xRcrc7ReLOt5uSS8gI+CIEY4uw4OGr8IGnxl3r6Zyam6g1OHaxXC1wBRMfmZ3oxcB5qvchpM24XAOQrNEXAsGAkvV63GUHBI9uElf5BSURmoMltc4p9U6/Pv08mGmLM+AxBUCcSBYNfOUIwp8m1YnjWKy9SuVvDaBoW+IGLMtEy/b7IGFSQqs0ZS/S4DZx7am97+nkU8nHXa37d396nlb9BxI7J8SEI1KqQP0bSoApjQP3B2ZEh9Vtq9t+mIgOQdjObLkrYBlYXhwvouNV4Wg4Jm45Cu0D/L0nsRt7mTHFlHxH1ktfjAzBviGtmfczQk2iLKEEJEAwCGDfkm67n7lHFZS9aMoADP378EJZ6BICXuCvb1LFjbRR+Qtx0KPZTe2dxtQEYaefizJ9U6b7pf1kOJWOhJaOgFFvTVsy4Wn6Twl/nA1ow3v/WTRXWBfXJeVdf2YzTxD4CARPcVLGC92bFPdRg7G/eeevEqFYfmQouvxMy03sDfvVLTfAmahlRIeOH3WJLUEM1IhK3A+2oXtdClCR3bFKn4db8K6STlor4kJgLTB/hE+CM4GV0m0eQPKJJn8tHaG3X9JwVxb6BHdUF5ezVMiUlbzHVxTIOERarRcV2ClkvVgDAtkClHSkxhyy1h60yO/Xd/9rlo1B1qTCskxeKYl0TMek6NVjdnBCoOGHpA7m0109m+Ef2LOAcwYvqDelImq2oFVPDN3bBHcE5DjmzTenI4+hA2Ap6eUmb+cxUsMU12lg6DeL4zzJTr9ZPOW8rvP4NkWz5fwJ9mXCbMDm5/YlOe40KibVRZruqb9JBxi1IZ5IaGq1tvn8wGor9UfwlqMo/8PY5ADgj9If5WTBs97mVCJn7HPM7osgvCRNvWcF0IJlA/d76dbRvOTeIoi172NPp38V2lJiHNdwcjeq6iawDoR3y9CKJ2ImweojDIJBjqGLTSW180bVPzvLn1UgZoMDi1M3U6qEn/L/eCwJBf5zABHiosqaEYXi08UIfrPcgdebjZVWcoWEOR2TfL7S7bFnUiNS5pSUvf5wIyL/o65HoyOU6ysCdiMfH1ERiDkXy2YV90eZ+nYnSYLthNMztDPBLs86busjYDiuo9TyJqBEUZqjzxXaDZqMwis4/nrQSYLoAjdoN6O94anDGqQx/mHf6TLsQj1wVHu3NuQIr8SgvKDmxBNKIVPK65BTcYIB//nutXTk2G1FIMfmWU+59jMaxrbd5DD/JcQZXeY6F3HIglKTUZGDoFDmL3nIKpgD2M4tUwtyMZ5RRpNIJWUgoBmpyw/nZk0u0L1B7dcNW1LtuXcnopyOEBnCXw5aTQp0ggTFsG9yJzoXyz5XWeeNC+v4wALmXGYoDMABa+HWpYJBPWZzMyxbmMme4y/uPhMaDIH4jt1WMlXrAT7ctnt5bNkHMGfLk+DrjO78QC8TZSb0JvFKTw3Kw7HMfj7pemAvaEbUqOHSTh1S1Xb2Cq6MoJ19GvrP8U9oTRLNF956gwzTclXLB8//TGTzEPx++vZe1T/23T52iQ3PuYujG605a6dH6XAYPOKNVyg+bBlgvvTIMp4ZWShP3veYiGKMSyjI/DmHPRcUbj36N7q5XRQkwjfTyxX9i3h43JONWKOh5zkEIDEFqgL4KkxNm8oeGNGOiX2Gq2/qrJ2l9J8EwuSN/VgQTx0d1TrWissaTIa/g9akQhxFr13HRl47SiG66H7StyNXjlj0R+XUzkITnneLeTD7E45DD7HWylT+qvHEyVVlAWfJlZWbT9Glp+bkhD377qItmx/SD/LA/c1M802fm+evhAYdpE1S7Cm95XwhXM+XjKcBQK6G5xpmx2kXmxqIUfEERWsoqjgY82G/zOO29Rs+dGP+BM7JLt5c2HBFfkLsJ0FYTZZydqaf7wdLftO26zMWDJ0bU5b/WbwoO9tvx977Opwq915RvLSUKvWRxRdW//K5xZ1Bmp92cG1kwROlaQHZQ+yzzgS2JNP4plJLsFhGAaMGYSHOJ4QFyDzpePO8SuIK34frlsUSwb8CRZydaN4kyWibzADBjNRN2FIjAUIJ8HlTOZkkhBE+/OYUSn6b5Kxbnog4nqzFwamSPkJS4NIxAiMHSbkbfCy614acMbvd5F/WMu85eZy2YywziLRulUKg97l0KR0O7i1zsQRyOhVoC/tGu0JphaHvSCgNiX1PEZ5dMLp4JlcOygZMdwmJcDEr7VUAAs/C9DO1kROleJ2YypWCsaNW86FRpoze69n2Nex0qnTf+Ju3fXEJa8y3KeWv4uBTNQAGoZmUhOdru57hyXbvACIXK7IEN7E4KMgzn2TonItp3sPHmdkHZWJSE58X8kM7AvxS3QlZMYG0U4s+YMRPK/8jeG+jGsu3918uM6lF94ZaRvMzUimXX7gOojpE9S+wADlB18TQlO2nYGnI+CwQrr/6n97w05s+r/qTv+u+1JGAi4Qz4X+hMM8I3i3bKRa8Xhq4tKLw5YjmsenIT1A2A99kps8btZ61pzWIMOeazYCQErRGeXEHBqubbnHtIRK45ydTwoGK895o4KLspOZ7RyiUXgE7ZIp6M26f7mJ3WAu/m8KSIHoEMw+Cy2DXWL2T9OvRHSvGT4XEKaRzRAsuMcDaX9eHsUF5gby7BOQb7VRUgvhxXv9AoatxChILFbXlUA9VIanKK9D72R64jRhcZmP27gS9NQUvxpANURjA60Pd7AkktUit0riXR+CeQd5B+Lo+x6v+79jBpLPlc8NuMz0RmyvS1Yo0S8LrbPV9uOMuZls6wcMPIeS49wNGcKbtCY1ACf21om9/jy9U9eyAugi66zigI3Zvm0kZu456uQvdGr0lOcRgqkIbDQnTs0wLW1DX3WLFIcjaSg2tIjdrMakCBAmbGGJ5koapVe/W/QHuyC+49dvgbUf05BEw9wOZu96FGYGju6DNnx9W6mLxvzSaVPvTlQyOXNs+ffnc2khDCVtmt1IdWdhtj3ZlyWZCzoGUogycHixmLUdwnWXS378sA7nGo7Usq5ObDOeG9YV11JSInWWNdZzmry/tE7xTFLpC1Ig5RKraTDlL9eliqLj8xnNo+HCnm/NiLNeE1Z5sTvVOUF7GD6UZv4hp7kvtGfEZT/LXtUhoA2058+Q/YspN8mqFDgdVkF9A5rdKXK2leDoiwYw1yTrwTAKSFzqDUlzJPTHaTLMSgZKwefo4+N1723Jyy4Ja1Jw7NNZH83ACNkAixLbEfF21C87PjY3eH4yGHljJDj1C7iRhDkiMr4MNPFofQ5oAuo9qUQDlFtoLuEYEDg6wKtTPmN7Tzy86mAIpudQlnL0DHOM3M+Zc3dULKUomcsQLxl4d7HPPSHKj1zMLrvFzy0vccdRZwai0vCpTRgITJJ8oGDo8v9wLwErhYO9Q2c/ESQKBotGIFh8Ek5Bz762ACMFLC4mgN8471RDRdfy9Ce2e5gATATmtItcQOrsMD7GZ/L6DbaJH9tofYMqd7Yjtx8N01GWdtEvPPucN+FljzC4MEQkDSndznqCWvufjSQolwrelvt4fOsHvQbeLmudQk/+S+Z0ULmkuVQL/smOkdW8pebnrBe37pWd5MWvqN4aVPJITuvo/+d1D++Bod9pthDwFkXXHEbG2BhAjOprSVMPigMGH7EMXd8oP7FPIkiosz7T4OKvbz7Abgv1Bd2WpHBiNeifpe2LSZnT0MkMPCTCoUwFCgkRpX6YL5+gwyTmddXhSJrCtYb96z0lhewmgzYblTB3TJyeEyHrAPEvZtpqtMn5FX2S+scOqsFPRcZJT2HeOH68CMfnyUuzmBj4xDOdenRrR9Dw5upNnsPL/QzQu8upIo1eFjhNtL7aYUUGcs853Bic/0vH7/5UwwYbln4pKpNz7oPvi4ybXRNBakVtYMquuWLfOJbxVwpPaM+B3yj2/HSWFeTHF/KcD4fVt7UouNKFCqiiURD2XGytyOFY5X2j/rF61CVd51k2zsbYs+dC1H5Z5T/AIgT+AP6wKl3lm2wjXBCXe0hRgUE4k0K0BCrL1G3M7q+WR5eqCa71jni/rA0eAe5yGCE5LtrID5aTgcHIc0cHQYtnckOEGa0J27ZfbdjHXQCWOfc1TnRkM/nRabWW+Y34BEnI1W72PGxkL6KpFj3Xbr8muThPHIP/rK9ndd8d038pWpKLAv3oijKY37a9JFpBGQj64KnGQPxGaaxz41YAIHYyjf3eA8M0px9feaP3ZogwRtX6OZKncZsdj4RX0a76qfHqDabbjpaTUskL8N5l5PAZ2lr8s9IROV/PEqQo5KFKZvqBdfJBR7/u+hsQCVuGYUt7xUIWWoB9zD6jia6VM4g358x3UEt11HN2+cpLVUG2N4/10N4U/mUpG6H+fKthmxYVLTghsPhAXUYyf2lrztEeB2jlQbG7faB25+xNO7ZxItChWtFgdWgdlwlp9GKhvyd7lLNF2dxzGwS2UPxuMgPfEy7xyYySyZhvZq/AVxCJ7CDKLHbwqWiBPl2wlzYQD/0HIxAAhebMRyrHwnmBtQfwqHkhUo6OXcBIyhozwmE0c14mJuGrhxhvyI2CZB4Z9igW7p+Qu9r+dc7WrN7lpfv4d4HApVUknTWSJuXMp4qkUgFqG6g6++v3gUH04eOm/NT8JWQyQxBrACWbmpx0oZYOBmyoDaYRB6VrfDnHAnPxxGoaIacIGE6PCUmrslKf0YEQlbg4Zl7ITbE1eWCO9sKM4VRmNnalCaQvzpFcms+VgiNXDKwHSZbtxjYAd/YO5uM2yVUTpNtsqI2T1MmNyNz3DC1/SkzaRqTuQSAEtMYYKpm2kf7a9ithtYHecbRSBX8F0Q1s7E4urXjy/qjuLmmzSCUoaUpeMa9HGQPbvLZrSOlFCCkfXhCAzgu8MIbcma8wdqTtqQ5UJwSCAH5uqWPoHcI0DTsIAChlIaKe3UslbjKvHvRiD/+n10S7xw/y9LGCEPOxco1IAASGRoiRCEHuLx6goON1pPMQrD6dJXnMWs0SXOqlVZMm4oVdrjoUJLQpP61X03oTRw/1nkbOJ1UXuHe1m6tWgXZBQijLBPcScqYhdvA/R4pQtGL5I5YB+L9WiWWKd6mmTrFY05fZo0CsNqUYQON4+Hb7rvTldcZiYw73SQFoCdXodNmvzTyWmk8OJtCDn3Dta583d6zsnPyNDMYU1rgLTsSyehjKwV5YdlU4aTRaD1eoL7clhoXqU1MqXsLWDw6XpKvSg9M66fdT3WwqzteXesC3Q0jJaS/PMKmlj+5a9ibheFwpLxtStiWI3T5AKXL4JXqr05OEUWL0H0b7t0OvW0lt3fAKs1K4sidN2aoIkVV+UO/qEXt0a9I5wb/jZMZbrkfb6VMxF7ahVL+64nnXnMMi4MksCEdOoEZ+HfnyUALQnkKhSSXdawQwwotX8z0nEKmR9uzBhFbC0Gw7VPyjM6FFwR57ZFfwAK9dKuj5A1tCywuzI8GS6Ps6neMy6eY3nbz6Ve7amE0182Hn9roHyDjEJv7Zae7iY4RTq3dLNriKr4NT3VWb4MsY3sHqkRtsT3jFiQZelqdrmuzIyHxRqlJgp5XsTumUseVeOlU7+wfax3VeiYLlpBQMtrjnI64fqbZzqzK9OaHrpEfMk009uhYdx9jOeS5EhWJrtktiEX7+BW7mzf/N1Aqp8d4BdurRlq20L7EfJMKl+euB9rM+zNPJt2+rNUU0/DUZ72ADFcts5uhJjZrNCfcN7oldOgCI7XtTMUVnYKmAyOYy678w0U7ElvGpu3BQ0L3P2nvOxiFqJVbZd9YoRSRxwQ3+oYj4MKUaI8z83SjXf6RRIqUgQGTyxkzOZh62LQZOy2m5xP5eMyk2zB1N4nLC4WaVGgPOoEDQ1MqWw/WQabQnviNepwKYe+V8CIb0lh2u14ri+/st6IyMnGaqaYg5Y+qfHsG3lA8doy7ylI1DelgmibS9jdVWL27E+A0R/1auq5T2eL/GJtiIiU29tWFokcMAyTkGwvLqEVYVIvvBjQqFJZ7pW3I/Ig+Mk6B25KyzQ+M2EnGcSIOot3Cz12Hefx/Mlz49fSAZWuGwbC8LV1FcwWwN0183mq1LkhJ5u00WX6XlrsDJ822h0jK/bcl/hvyATOIznXhP2wAyhEGlN0o9k7pLC64IO1NeDhADPLynihjY9Ddl/Zive7vKwaa1XrH94Eci75KnayD6SjU1G3V/jEDAciPuJWRQvTAAWAlSc8WJGw0TFqxOBDCgqIb2Beo/NhrKYYTV4QaNgaqBIQNtJPmAfYOcg/ADxOexXRZNVjb2K6ZxUEJrTSxbDtc3RQgdI6DdgqN5g+QTmn1fR/1TtG+ZNdeySW/vp1dCQxVJE9jEPUrLoQQZQ1bd3SJzbQReS4c5bnqEY3S/BUxJ7Q9a+t54RuEGzDFVzxK5j4SE/tmWP6XYU+vI1pVTgD56KCT2J7NYtnDvatnHVGvsm4U9zDkcjUixmWELdvGsWcF1/p4SJh6cmYsllvbq2U3Iqqg7r1/uyGU98wNMQVtG9UjP8Yr/shlMYS640xAtsmnY8AI58rYwIc0bSCSNnCyDyxNmWt5MOmfTZAihjo3FbGf/nih2ExGtzmekJeK9vH5UDND6sk5dKoMuYLQTDMQfRTlCy9L9r3PreNO7ZrdWRnesjc13eyj4dtY465ueuBW2bcVGCIgp38HceqpyM9T/FbhRX0TzyREvnlx9xxNPSpRh5Z5pd8wq1atuDhQcCZVeaeEdswr/rDFQVEqj7bSKfmVjLKEhziSg5fxD7oyv7qrL6MajWteYui4mrVavrBFdmXDppZthmLyQ24fACBgF1UJZmd85BdpShMaCq9FqlgQeoWnyw9lt6TNYfnlJdiFftnSAvLqTGTaS96e6Ga4j7F4feMJOtjCIvfQquTNU8GD25MuteHwAt48BzUJQ8iikO6InJf2yHX2yDO0WWJo3nkkcPJ7m8VzhUYC9IEvXvDmEO5cU768FwquLkWo/4jgBysR6GdVjTdFHtZOancUIuXWYhuWwi3aTyLFwTAKixdjD2Y2z5myLh5srXR5t5fYb7obP16qI0a2kTTsWMEMIzb+1rfNvvbfQIfcb9NNYK9Owm7VY8taHRaGV20JrYl5eKCbRozywGST6ukC8dTP8/uLVUSdYUyCTfRtOW/LB6lmqKF0AaXezTiYXqF0frynl6Kv+W5KymYmyl5BCBrdtyQGLFzHZgJ+RSr8DHi0r7OaiNrFdEcLG9kdX9E7CrIR8+lAyFo5mqd6o3AR9fJn2o9dYHk35Q1DqFX+zAEnohjrJrk3BQXvsUtnkAYWTbJF5wZDxnKangcwW1Wqbbgajd/8C7Plgoyq7EWLlmIQrfwKiIe7aPNYq+T/Lo9rKnXwKz5oRFsAUfkWlJ8wUyfQ==</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[16]"><TokenEntry><Name>SessionKey</Name><Value>st2l6cKMaPx2THYyw+GKHjY93tVJ2J20AM12j16ibFm0yfCmKY0TqfaVMlzlCZg1gSvHB6eAsvn9xcL3e6EfDTVs8Yt2rCVIUCtMtU3UcJt+LkpQ/IswEZgiPOKi0MlPu1ODfJ5N/Gm0DEl5GlXTNLf0+CbT3/SeK/k6DckH4xfiuofEDSX8PllME7HmotqNa1z6lweJGfr+vgGmzwYkdPXzg58LI9oUmskRWOKqoiD6q7w2XfEhI5QCgv45zLUehRoKnDobvzAhX+9gWfDKxDoS+DlvV+5lBd3DHKM2+GFacxwVTuwNb8ifE57esfUg1RZe294qEcoD4teZSM5IaQ==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>Y+YPGDJoWCCj8QaJ7ePLFdxxxDw7B5PCrHO2eX+WXls=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>s+DXDcbBN9CMgsCtcK7nG03mFZ7MXDSSUzXRsrNay/5tCxrGpHj72NMGLvV6fmQUjHVHSjyZ72Yu5EV2nREU5Sywhwg7zJbDWJ3OxNuMpIs=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>bIv9RoPrWK6/ytb9GQiNkeLejgHgA0EvkIr7Hj75k2U=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>Y+YPGDJoWCCj8QaJ7ePLFf0GaIC/WKsUDdRotGcdbmY=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>XIwNAVcZa6LivjPesyq/ieY+SlYe9RdG8qKxi5/I6FgLf/am1arZrTdB1W656RHfrygQpP+ieX6NzQx401M8HpMnv4cEkPodHH4XEIy5zkA=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>dv5LxMHQ6wg0NlhMaqUoRiDQ/sOM7vDdyhWk9WIKe9A=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>dv5LxMHQ6wg0NlhMaqUoRhd2Sc+WTmzlea7FgovjCv8=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>rPSzbphPB8TtwIHSy/tN+g==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>rPSzbphPB8TtwIHSy/tN+g==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>pz/s6GHFD6BISZEnH1CbHybXttUD3kYRReeR2nxtLeIKRvAkP58nq9EwSQUdYwClUSni+9N+TtF7NUIyPA9Wsg==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>JOPWW+l6bWuxigEPxrnCeikPDxpHkAi9vIrmMUyzUatZyWNovxmflVrkAzrmOmJ07YLzwv0+Vuy2ttqTxAEtqw==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>agYhvS4zZF2+Hz7HZyh9KHFrDB8S186DyqqAkdW4ebc=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>agYhvS4zZF2+Hz7HZyh9KHFrDB8S186DyqqAkdW4ebc=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>tr3tRFh4lE1wdT1kGpMBMvQvPnq4CO7UeGIHV1HL2qKgTejp9ybT3HpRIqo6Y7OB</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>tr3tRFh4lE1wdT1kGpMBMvQvPnq4CO7UeGIHV1HL2qKgTejp9ybT3HpRIqo6Y7OB</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>) 00010002(0x80072EFD, 12:54:10:928 - <NULL>) 00010003(0x80072EFD, 12:54:10:928) Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service)(User: ) Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac ==================== Memory info =========================== Percentage of memory in use: 32% Total physical RAM: 3969.93 MB Available physical RAM: 2689.7 MB Total Pagefile: 7553.93 MB Available Pagefile: 6145.86 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:440.42 GB) (Free:359.91 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: DD49C7C1) Partition: GPT Partition Type. ==================== End Of Log ============================ Geändert von Preciosa (13.06.2014 um 13:27 Uhr) Grund: Genauere Erklärung |
14.06.2014, 12:55 | #4 |
/// the machine /// TB-Ausbilder | Suspicious.cloud.9 verhindert https-Seiten Da fehlt noch die FRST.txt
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.06.2014, 14:40 | #5 |
| Suspicious.cloud.9 verhindert https-Seiten Es tut mir furchtbar Leid, dass ich die vergessen habe! FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2014 (ATTENTION: ====> FRST version is 101 days old and could be outdated) Ran by Preciosa (administrator) on PINKY on 13-06-2014 14:13:45 Running from C:\Users\Preciosa\Downloads Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe (Intel Corporation) C:\windows\system32\igfxext.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated) HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [4365824 2012-12-27] (Bitcasa, Inc) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-07] (Samsung Electronics Co., Ltd.) HKLM-x32\...\RunOnce: [SymSilent] - "C:\Program Files (x86)\SymSilent\SymSilent.exe" /service /_spawn [925584 2014-06-13] (Symantec Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-24] ( (Atheros Communications)) SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation) ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com SearchScopes: HKLM - DefaultScope {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKLM - {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKLM-x32 - DefaultScope {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKLM-x32 - {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS SearchScopes: HKCU - DefaultScope {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL (Symantec Corporation) Tcpip\Parameters: [DhcpNameServer] 5.175.194.40 8.8.8.8 ==================== Services (Whitelisted) ================= R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-24] (Qualcomm Atheros Commnucations) R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1594416 2013-02-01] (Samsung Electronics CO., LTD.) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation) R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe [144520 2012-12-23] (Symantec Corporation) R2 SWUpdateService; C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2921520 2013-04-09] (Samsung Electronics CO., LTD.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros) ==================== Drivers (Whitelisted) ==================== R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130107.001\BHDrvx64.sys [1384608 2012-11-19] (Symantec Corporation) R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [222952 2013-01-24] (Qualcomm Atheros) R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation) R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1403000.024\ccSetx64.sys [168096 2012-11-15] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-13] (Symantec Corporation) U3 EraserUtilDrv11313; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11313.sys [142128 2014-06-13] (Symantec Corporation) R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130113.001\IDSVia64.sys [513184 2012-11-15] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20140612.024\ENG64.SYS [126040 2014-06-13] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20140612.024\EX64.SYS [2099288 2014-06-13] (Symantec Corporation) R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation) R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider) R3 SRTSP; C:\Windows\system32\drivers\NISx64\1403000.024\SRTSP64.SYS [796248 2013-01-28] (Symantec Corporation) R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1403000.024\SRTSPX64.SYS [36952 2013-01-28] (Symantec Corporation) R3 SymDS; C:\Windows\system32\drivers\NISx64\1403000.024\SYMDS64.SYS [493656 2013-01-21] (Symantec Corporation) R3 SymEFA; C:\Windows\system32\drivers\NISx64\1403000.024\SYMEFA64.SYS [1139800 2013-01-30] (Symantec Corporation) S0 SymELAM; C:\Windows\System32\drivers\NISx64\1403000.024\SymELAM.sys [23448 2012-11-15] (Symantec Corporation) R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-05-16] (Symantec Corporation) R3 SymIRON; C:\Windows\system32\drivers\NISx64\1403000.024\Ironx64.SYS [224416 2012-11-15] (Symantec Corporation) R3 SymNetS; C:\Windows\system32\drivers\NISx64\1403000.024\SYMNETS.SYS [432800 2013-01-30] (Symantec Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-13 14:13 - 2014-06-13 14:13 - 00012113 _____ () C:\Users\Preciosa\Downloads\FRST.txt 2014-06-13 14:13 - 2014-06-13 14:13 - 00000000 ____D () C:\FRST 2014-06-13 14:12 - 2014-06-13 14:12 - 02156544 _____ (Farbar) C:\Users\Preciosa\Downloads\frst64.exe 2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Opera Software 2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Opera Software 2014-06-13 13:46 - 2014-06-13 13:46 - 00003840 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1402660006 2014-06-13 13:46 - 2014-06-13 13:46 - 00001133 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-06-13 13:46 - 2014-06-13 13:46 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-13 13:45 - 2014-06-13 13:46 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup (1).exe 2014-06-13 13:14 - 2014-06-13 13:14 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Macromedia 2014-06-13 12:53 - 2014-06-13 12:53 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros.lnk 2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros (2).lnk 2014-06-13 12:03 - 2014-06-13 12:03 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-06-13 12:03 - 2014-06-13 12:03 - 00000000 ____D () C:\Windows.old 2014-06-13 11:35 - 2014-06-13 11:45 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2966991898-3599612516-2177771990-1001 2014-06-13 11:32 - 2014-06-13 11:32 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\bitcasa 2014-06-13 11:31 - 2014-06-13 11:31 - 00000000 ____D () C:\$WINDOWS.~BT 2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Power2Go8 2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\BMExplorer 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Atheros 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Adobe 2014-06-13 11:25 - 2014-06-13 12:28 - 00032600 _____ () C:\WINDOWS\DPINST.LOG 2014-06-13 11:25 - 2014-06-13 11:25 - 00001442 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-13 11:25 - 2014-06-13 11:25 - 00001202 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk 2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Adobe 2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Samsung 2014-06-13 11:21 - 2013-02-27 11:01 - 132678241 _____ () C:\WINDOWS\[0407]SamsungStory01_ger.scr 2014-06-13 11:20 - 2014-06-13 11:20 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\VirtualStore 2014-06-13 11:16 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Packages 2014-06-13 11:16 - 2014-06-13 11:17 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security 2014-06-13 11:16 - 2014-06-13 11:16 - 00000000 _____ () C:\WINDOWS\system32\Drivers\144D_SAMSUNG_na_300E5EV_P07R.mrk 2014-06-13 11:14 - 2014-06-13 11:14 - 00000020 ___SH () C:\Users\Preciosa\ntuser.ini 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-06-13 11:07 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa 2014-06-13 11:07 - 2014-06-13 11:09 - 00017148 _____ () C:\WINDOWS\diagwrn.xml 2014-06-13 11:07 - 2014-06-13 11:09 - 00017148 _____ () C:\WINDOWS\diagerr.xml 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Vorlagen 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Startmenü 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Netzwerkumgebung 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Lokale Einstellungen 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Eigene Dateien 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Druckumgebung 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Musik 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Bilder 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Verlauf 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Anwendungsdaten 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Anwendungsdaten 2014-06-13 11:07 - 2013-05-16 08:21 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-06-13 11:07 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-13 11:07 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-06-13 11:07 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-06-13 10:22 - 2014-06-13 11:31 - 00000000 ___HD () C:\$SysReset 2014-06-13 01:39 - 2014-06-13 01:39 - 00000120 ___RH () C:\Users\Preciosa\Downloads\Stinger.opt 2014-06-13 01:30 - 2014-06-13 01:36 - 240202472 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV_21.1.0.18_SYMTB_TMD_MRFTT_819_10129.exe 2014-06-13 01:27 - 2014-06-13 01:34 - 00000844 _____ () C:\Users\Preciosa\Downloads\Stinger_13062014_012727.html 2014-06-13 01:24 - 2014-06-13 01:24 - 12314472 _____ (McAfee Inc) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager [1].exe 2014-06-13 01:23 - 2014-06-13 01:23 - 00719128 _____ ( ) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager.exe 2014-06-13 01:06 - 2014-06-13 01:06 - 00011868 _____ () C:\Users\Preciosa\Documents\Scan Results.140613-0106.txt 2014-06-13 00:09 - 2014-06-13 00:10 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup.exe 2014-06-12 22:31 - 2014-06-12 22:42 - 42402488 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV-ESD-21.3.0-GE.exe 2014-06-12 22:08 - 2014-06-12 22:12 - 94714880 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast_free_antivirus_setup2018 (1).exe 2014-06-12 21:54 - 2014-06-12 21:55 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153.exe 2014-06-12 21:54 - 2014-06-12 21:55 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153 (1).exe 2014-06-12 20:35 - 2014-06-12 20:35 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HijackThis.exe 2014-06-12 20:09 - 2014-06-12 20:09 - 19480992 _____ (SUPERAntiSpyware) C:\Users\Preciosa\Downloads\SUPERAntiSpyware.exe 2014-06-12 20:06 - 2014-06-12 20:06 - 00012253 _____ () C:\Users\Preciosa\Downloads\hijackthis.log 2014-06-12 20:04 - 2014-06-12 20:04 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HiJackThis204.exe 2014-06-12 20:02 - 2014-06-12 20:21 - 03180502 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup (1).exe 2014-06-12 19:43 - 2014-06-12 20:02 - 02852518 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup.exe 2014-06-12 19:14 - 2014-06-12 19:14 - 01707144 _____ () C:\Users\Preciosa\Downloads\Adaware_Installer11.2.5952.0.exe 2014-06-12 19:12 - 2014-06-12 19:19 - 04487240 _____ (AVG Technologies) C:\Users\Preciosa\Downloads\avg_avct_stb_all_2014_4592.exe 2014-06-12 19:07 - 2014-06-12 19:07 - 00000000 ____D () C:\Users\Preciosa\Documents\ProcAlyzer Dumps 2014-06-12 18:42 - 2014-06-12 18:52 - 00003592 _____ () C:\Users\Preciosa\Desktop\Nmc_2014-06-12_18-42-34.log 2014-06-12 18:39 - 2014-06-12 18:42 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Preciosa\Downloads\spybot-2.3.exe 2014-06-12 18:33 - 2014-06-12 18:40 - 334943320 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware_Cleaner.exe 2014-06-12 18:09 - 2014-06-12 18:16 - 312761032 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware208_Cleaner.exe 2014-06-12 17:06 - 2014-06-12 17:07 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k (1).com 2014-06-12 17:06 - 2014-06-12 17:06 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k.com 2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212.exe 2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212 (1).exe 2014-06-12 16:58 - 2014-06-12 16:58 - 02953520 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast-browser-cleanup_9.0.0.224.exe 2014-06-11 22:39 - 2014-06-11 22:39 - 00000000 _____ () C:\Users\Preciosa\Downloads\Number of results 2014-06-01 01:38 - 2014-06-01 01:38 - 00531312 _____ () C:\Users\Preciosa\Downloads\HDvid-codec-Chrome (2).exe ==================== One Month Modified Files and Folders ======= 2014-06-13 14:13 - 2014-06-13 14:13 - 00012113 _____ () C:\Users\Preciosa\Downloads\FRST.txt 2014-06-13 14:13 - 2014-06-13 14:13 - 00000000 ____D () C:\FRST 2014-06-13 14:12 - 2014-06-13 14:12 - 02156544 _____ (Farbar) C:\Users\Preciosa\Downloads\frst64.exe 2014-06-13 14:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-06-13 13:58 - 2013-05-16 06:50 - 00739234 _____ () C:\WINDOWS\WindowsUpdate.log 2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Opera Software 2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Opera Software 2014-06-13 13:46 - 2014-06-13 13:46 - 00003840 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1402660006 2014-06-13 13:46 - 2014-06-13 13:46 - 00001133 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-06-13 13:46 - 2014-06-13 13:46 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-13 13:46 - 2014-06-13 13:45 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup (1).exe 2014-06-13 13:41 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-06-13 13:14 - 2014-06-13 13:14 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Macromedia 2014-06-13 13:00 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP 2014-06-13 12:56 - 2013-05-16 21:49 - 00780976 _____ () C:\WINDOWS\system32\perfh010.dat 2014-06-13 12:56 - 2013-05-16 21:49 - 00152608 _____ () C:\WINDOWS\system32\perfc010.dat 2014-06-13 12:56 - 2013-05-16 21:39 - 00753134 _____ () C:\WINDOWS\system32\perfh007.dat 2014-06-13 12:56 - 2013-05-16 21:39 - 00155826 _____ () C:\WINDOWS\system32\perfc007.dat 2014-06-13 12:56 - 2013-05-16 21:29 - 00790022 _____ () C:\WINDOWS\system32\perfh00C.dat 2014-06-13 12:56 - 2013-05-16 21:29 - 00155084 _____ () C:\WINDOWS\system32\perfc00C.dat 2014-06-13 12:56 - 2012-07-26 09:28 - 03624158 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-06-13 12:55 - 2013-05-16 09:14 - 00000000 ____D () C:\ProgramData\WinClon 2014-06-13 12:53 - 2014-06-13 12:53 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-06-13 12:52 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-06-13 12:51 - 2013-05-16 08:26 - 03293656 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-06-13 12:50 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros.lnk 2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros (2).lnk 2014-06-13 12:28 - 2014-06-13 11:25 - 00032600 _____ () C:\WINDOWS\DPINST.LOG 2014-06-13 12:03 - 2014-06-13 12:03 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-06-13 12:03 - 2014-06-13 12:03 - 00000000 ____D () C:\Windows.old 2014-06-13 12:03 - 2012-07-26 10:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-06-13 11:45 - 2014-06-13 11:35 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2966991898-3599612516-2177771990-1001 2014-06-13 11:32 - 2014-06-13 11:32 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\bitcasa 2014-06-13 11:31 - 2014-06-13 11:31 - 00000000 ____D () C:\$WINDOWS.~BT 2014-06-13 11:31 - 2014-06-13 10:22 - 00000000 ___HD () C:\$SysReset 2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Power2Go8 2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\BMExplorer 2014-06-13 11:27 - 2013-05-16 09:32 - 00000000 ____D () C:\ProgramData\Atheros 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Atheros 2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Adobe 2014-06-13 11:26 - 2014-06-13 11:07 - 00000000 ____D () C:\Users\Preciosa 2014-06-13 11:25 - 2014-06-13 11:25 - 00001442 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-13 11:25 - 2014-06-13 11:25 - 00001202 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk 2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Adobe 2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Samsung 2014-06-13 11:25 - 2014-06-13 11:16 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Packages 2014-06-13 11:25 - 2013-05-16 21:11 - 00000000 ____D () C:\WINDOWS\MSetup 2014-06-13 11:23 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\rescache 2014-06-13 11:20 - 2014-06-13 11:20 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\VirtualStore 2014-06-13 11:19 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\WinStore 2014-06-13 11:17 - 2014-06-13 11:16 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security 2014-06-13 11:16 - 2014-06-13 11:16 - 00000000 _____ () C:\WINDOWS\system32\Drivers\144D_SAMSUNG_na_300E5EV_P07R.mrk 2014-06-13 11:16 - 2013-05-16 09:12 - 00000000 ____D () C:\ProgramData\Norton 2014-06-13 11:16 - 2013-05-16 08:52 - 00000000 ____D () C:\ProgramData\Samsung 2014-06-13 11:16 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-06-13 11:15 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-06-13 11:14 - 2014-06-13 11:14 - 00000020 ___SH () C:\Users\Preciosa\ntuser.ini 2014-06-13 11:14 - 2012-08-06 00:07 - 00000000 ___DC () C:\WINDOWS\Panther 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-06-13 11:10 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows NT 2014-06-13 11:10 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default 2014-06-13 11:09 - 2014-06-13 11:07 - 00017148 _____ () C:\WINDOWS\diagwrn.xml 2014-06-13 11:09 - 2014-06-13 11:07 - 00017148 _____ () C:\WINDOWS\diagerr.xml 2014-06-13 11:09 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries 2014-06-13 11:09 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-06-13 11:09 - 2012-07-26 09:21 - 00024107 _____ () C:\WINDOWS\setupact.log 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Vorlagen 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Startmenü 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Netzwerkumgebung 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Lokale Einstellungen 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Eigene Dateien 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Druckumgebung 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Musik 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Bilder 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Verlauf 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Anwendungsdaten 2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Anwendungsdaten 2014-06-13 10:27 - 2014-03-23 16:26 - 00000000 __RDO () C:\Users\Preciosa\SkyDrive 2014-06-13 01:39 - 2014-06-13 01:39 - 00000120 ___RH () C:\Users\Preciosa\Downloads\Stinger.opt 2014-06-13 01:36 - 2014-06-13 01:30 - 240202472 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV_21.1.0.18_SYMTB_TMD_MRFTT_819_10129.exe 2014-06-13 01:34 - 2014-06-13 01:27 - 00000844 _____ () C:\Users\Preciosa\Downloads\Stinger_13062014_012727.html 2014-06-13 01:24 - 2014-06-13 01:24 - 12314472 _____ (McAfee Inc) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager [1].exe 2014-06-13 01:23 - 2014-06-13 01:23 - 00719128 _____ ( ) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager.exe 2014-06-13 01:06 - 2014-06-13 01:06 - 00011868 _____ () C:\Users\Preciosa\Documents\Scan Results.140613-0106.txt 2014-06-13 00:10 - 2014-06-13 00:09 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup.exe 2014-06-12 22:42 - 2014-06-12 22:31 - 42402488 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV-ESD-21.3.0-GE.exe 2014-06-12 22:12 - 2014-06-12 22:08 - 94714880 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast_free_antivirus_setup2018 (1).exe 2014-06-12 21:55 - 2014-06-12 21:54 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153.exe 2014-06-12 21:55 - 2014-06-12 21:54 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153 (1).exe 2014-06-12 20:35 - 2014-06-12 20:35 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HijackThis.exe 2014-06-12 20:21 - 2014-06-12 20:02 - 03180502 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup (1).exe 2014-06-12 20:09 - 2014-06-12 20:09 - 19480992 _____ (SUPERAntiSpyware) C:\Users\Preciosa\Downloads\SUPERAntiSpyware.exe 2014-06-12 20:06 - 2014-06-12 20:06 - 00012253 _____ () C:\Users\Preciosa\Downloads\hijackthis.log 2014-06-12 20:04 - 2014-06-12 20:04 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HiJackThis204.exe 2014-06-12 20:02 - 2014-06-12 19:43 - 02852518 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup.exe 2014-06-12 19:19 - 2014-06-12 19:12 - 04487240 _____ (AVG Technologies) C:\Users\Preciosa\Downloads\avg_avct_stb_all_2014_4592.exe 2014-06-12 19:14 - 2014-06-12 19:14 - 01707144 _____ () C:\Users\Preciosa\Downloads\Adaware_Installer11.2.5952.0.exe 2014-06-12 19:07 - 2014-06-12 19:07 - 00000000 ____D () C:\Users\Preciosa\Documents\ProcAlyzer Dumps 2014-06-12 18:52 - 2014-06-12 18:42 - 00003592 _____ () C:\Users\Preciosa\Desktop\Nmc_2014-06-12_18-42-34.log 2014-06-12 18:42 - 2014-06-12 18:39 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Preciosa\Downloads\spybot-2.3.exe 2014-06-12 18:40 - 2014-06-12 18:33 - 334943320 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware_Cleaner.exe 2014-06-12 18:17 - 2013-11-18 03:41 - 00000000 ____D () C:\AdwCleaner 2014-06-12 18:16 - 2014-06-12 18:09 - 312761032 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware208_Cleaner.exe 2014-06-12 17:07 - 2014-06-12 17:06 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k (1).com 2014-06-12 17:06 - 2014-06-12 17:06 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k.com 2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212.exe 2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212 (1).exe 2014-06-12 16:58 - 2014-06-12 16:58 - 02953520 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast-browser-cleanup_9.0.0.224.exe 2014-06-12 15:43 - 2013-11-16 12:16 - 00000000 __RHD () C:\MSOCache 2014-06-12 14:26 - 2013-11-08 20:45 - 00000000 ____D () C:\Users\Preciosa\Documents\Bluetooth Folder 2014-06-11 22:39 - 2014-06-11 22:39 - 00000000 _____ () C:\Users\Preciosa\Downloads\Number of results 2014-06-01 01:38 - 2014-06-01 01:38 - 00531312 _____ () C:\Users\Preciosa\Downloads\HDvid-codec-Chrome (2).exe Files to move or delete: ==================== C:\ProgramData\MakeMarkerFile.exe C:\Users\EasySurvey\EasySurvey.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2012-08-05 23:07 ==================== End Of Log ============================ --- --- --- [/CODE] Das Problem mit den https-Seiten konnte ich zwischenzeitlich umgehen, indem ich eine Fake-DNS eingegeben habe: 8.8.8.8. 8.8.4.4. Somit ist mein Windows wieder registriert. Nach wie vor aber bekomme ich die Meldung "Verbindung zu Windows SmartScreen ist derzeit nicht möglich. Auch ein Update auf Windows 8.1 ist unmöglich. Die Installation wird vorbereitet, danach lädt aber nichts. Ein komplettes Deinstallieren von Norton hat keine Veränderung gebracht... Vielen Dank für die Hilfe! |
15.06.2014, 06:15 | #6 |
/// the machine /// TB-Ausbilder | Suspicious.cloud.9 verhindert https-Seiten hi, Scan mit Combofix
__________________ --> Suspicious.cloud.9 verhindert https-Seiten |
15.06.2014, 12:28 | #7 |
| Suspicious.cloud.9 verhindert https-SeitenCode:
ATTFilter ComboFix 14-06-13.01 - Preciosa 15.06.2014 13:14:13.1.2 - x64 Microsoft Windows 8 6.2.9200.0.1252.49.1031.18.3970.2738 [GMT 2:00] ausgeführt von:: c:\users\Preciosa\Desktop\ComboFix.exe AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . ((((((((((((((((((((((( Dateien erstellt von 2014-05-15 bis 2014-06-15 )))))))))))))))))))))))))))))) . . 2014-06-15 11:22 . 2014-06-15 11:22 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-06-15 11:22 . 2014-06-15 11:22 -------- d-----w- c:\users\Administrator\AppData\Local\temp 2014-06-15 10:35 . 2014-04-30 14:20 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B8C2BE-85E2-4BEE-B94C-FFD2283F6046}\mpengine.dll 2014-06-14 23:17 . 2014-03-28 08:23 19759104 ----a-w- c:\windows\system32\shell32.dll 2014-06-14 23:16 . 2014-05-03 05:47 3246592 ----a-w- c:\windows\system32\rdpcorets.dll 2014-06-14 23:16 . 2014-05-03 03:34 235520 ----a-w- c:\windows\system32\rdpudd.dll 2014-06-14 23:15 . 2014-04-23 09:50 1031560 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{07304D5C-EDB8-4C63-B7C8-AB28CDF4DA72}\gapaengine.dll 2014-06-14 21:57 . 2014-06-14 22:00 -------- d-----r- c:\windows\BrowserChoice 2014-06-14 21:51 . 2012-11-26 02:15 16114176 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll 2014-06-14 21:51 . 2012-11-26 02:14 15541248 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll 2014-06-14 21:35 . 2012-10-12 05:39 82944 ----a-w- c:\windows\SysWow64\dskquota.dll 2014-06-14 21:35 . 2012-10-12 06:13 109568 ----a-w- c:\windows\system32\dskquota.dll 2014-06-14 21:35 . 2012-10-24 04:54 396008 ----a-w- c:\windows\system32\hal.dll 2014-06-14 21:20 . 2012-11-20 05:17 1184256 ----a-w- c:\windows\system32\Display.dll 2014-06-14 21:20 . 2012-11-20 05:24 1164800 ----a-w- c:\windows\SysWow64\Display.dll 2014-06-14 21:20 . 2012-11-20 05:02 6656 ----a-w- c:\windows\SysWow64\KBDKURD.DLL 2014-06-14 21:20 . 2012-11-20 04:59 7168 ----a-w- c:\windows\system32\KBDKURD.DLL 2014-06-14 20:40 . 2013-08-16 05:22 4917760 ----a-w- c:\windows\system32\sppsvc.exe 2014-06-14 20:39 . 2013-07-08 22:46 543744 ----a-w- c:\windows\system32\wwanmm.dll 2014-06-14 20:38 . 2013-06-01 09:21 106496 ----a-w- c:\windows\system32\samlib.dll 2014-06-14 20:02 . 2014-06-14 20:02 -------- d-----w- c:\program files (x86)\MyFree Codec 2014-06-14 19:57 . 2014-06-14 19:57 -------- d-----w- c:\program files (x86)\MarkAny 2014-06-14 19:52 . 2013-09-04 03:11 576512 ----a-w- c:\windows\system32\drivers\afd.sys 2014-06-14 19:51 . 2013-10-19 05:45 62976 ----a-w- c:\windows\system32\imagehlp.dll 2014-06-14 19:51 . 2013-10-19 04:04 59392 ----a-w- c:\windows\SysWow64\imagehlp.dll 2014-06-14 19:51 . 2013-07-06 00:15 652288 ----a-w- c:\windows\system32\comctl32.dll 2014-06-14 19:51 . 2013-07-04 02:13 541696 ----a-w- c:\windows\SysWow64\comctl32.dll 2014-06-14 19:51 . 2013-12-09 00:45 523776 ----a-w- c:\windows\SysWow64\vbscript.dll 2014-06-14 19:51 . 2013-12-08 23:59 600064 ----a-w- c:\windows\system32\vbscript.dll 2014-06-14 19:51 . 2013-06-22 05:45 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2014-06-14 19:51 . 2013-06-22 05:45 54488 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2014-06-14 19:51 . 2013-07-01 22:14 25600 ----a-w- c:\windows\system32\drivers\usbprint.sys 2014-06-14 19:50 . 2013-07-05 22:02 99328 ----a-w- c:\windows\system32\drivers\usbcir.sys 2014-06-14 19:50 . 2013-07-05 22:01 210560 ----a-w- c:\windows\system32\drivers\usbvideo.sys 2014-06-14 19:20 . 2014-01-20 03:00 270496 ------w- c:\windows\system32\MpSigStub.exe 2014-06-14 19:17 . 2014-04-03 11:19 328024 ----a-w- c:\windows\system32\drivers\Classpnp.sys 2014-06-14 19:17 . 2014-04-03 03:44 619008 ----a-w- c:\windows\system32\drivers\srv2.sys 2014-06-14 19:17 . 2014-03-24 23:42 305152 ----a-w- c:\windows\SysWow64\wusa.exe 2014-06-14 19:17 . 2014-03-24 22:56 309760 ----a-w- c:\windows\system32\wusa.exe 2014-06-14 19:17 . 2014-04-19 09:39 628024 ----a-w- c:\windows\system32\NotificationUI.exe 2014-06-14 19:15 . 2013-10-31 05:56 915968 ----a-w- c:\windows\system32\MPSSVC.dll 2014-06-14 19:15 . 2013-10-31 05:56 758784 ----a-w- c:\windows\system32\FirewallAPI.dll 2014-06-14 19:15 . 2013-10-31 04:01 550400 ----a-w- c:\windows\SysWow64\FirewallAPI.dll 2014-06-14 19:15 . 2013-10-31 03:42 74752 ----a-w- c:\windows\system32\drivers\mpsdrv.sys 2014-06-14 19:15 . 2013-10-13 20:49 100696 ----a-w- c:\windows\system32\drivers\disk.sys 2014-06-14 19:15 . 2013-08-27 05:21 227840 ----a-w- c:\windows\system32\WebClnt.dll 2014-06-14 19:15 . 2013-08-27 05:19 104448 ----a-w- c:\windows\system32\davclnt.dll 2014-06-14 19:15 . 2013-08-26 22:29 199168 ----a-w- c:\windows\SysWow64\WebClnt.dll 2014-06-14 19:15 . 2013-08-26 22:28 86016 ----a-w- c:\windows\SysWow64\davclnt.dll 2014-06-14 19:13 . 2014-03-01 09:47 1258496 ----a-w- c:\windows\system32\kernel32.dll 2014-06-14 19:13 . 2014-02-26 23:18 370688 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2014-06-14 19:13 . 2014-02-26 23:18 215040 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2014-06-14 19:13 . 2014-03-01 09:47 1120768 ----a-w- c:\windows\system32\gpedit.dll 2014-06-14 19:13 . 2013-11-25 23:17 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys 2014-06-14 19:13 . 2014-03-01 08:07 1075200 ----a-w- c:\windows\SysWow64\gpedit.dll 2014-06-14 19:13 . 2014-02-26 23:18 247808 ----a-w- c:\windows\system32\drivers\srvnet.sys 2014-06-14 19:13 . 2014-02-15 04:15 78336 ----a-w- c:\windows\system32\drivers\IPMIDrv.sys 2014-06-14 19:13 . 2013-06-29 03:08 32768 ----a-w- c:\windows\system32\drivers\hidparse.sys 2014-06-14 19:13 . 2013-05-04 04:48 27648 ----a-w- c:\windows\system32\drivers\hidusb.sys 2014-06-14 17:43 . 2013-10-01 23:37 1569280 ----a-w- c:\windows\SysWow64\crypt32.dll 2014-06-14 17:43 . 2013-10-01 23:26 1890816 ----a-w- c:\windows\system32\crypt32.dll 2014-06-14 17:42 . 2013-05-23 23:02 1314816 ----a-w- c:\windows\system32\rpcrt4.dll 2014-06-14 17:42 . 2013-05-23 22:25 694272 ----a-w- c:\windows\SysWow64\rpcrt4.dll 2014-06-14 16:37 . 2014-05-03 06:34 6974808 ----a-w- c:\windows\system32\ntoskrnl.exe 2014-06-14 16:37 . 2014-05-03 06:33 1824808 ----a-w- c:\windows\system32\ntdll.dll 2014-06-14 16:37 . 2014-05-03 04:51 1408976 ----a-w- c:\windows\SysWow64\ntdll.dll 2014-06-14 16:37 . 2014-05-01 22:37 1023488 ----a-w- c:\windows\system32\localspl.dll 2014-06-14 16:37 . 2014-04-29 22:32 126464 ----a-w- c:\windows\system32\Robocopy.exe 2014-06-14 16:37 . 2014-04-29 22:32 106496 ----a-w- c:\windows\SysWow64\Robocopy.exe 2014-06-14 16:37 . 2014-04-23 23:51 566784 ----a-w- c:\windows\SysWow64\WSShared.dll 2014-06-14 16:37 . 2014-04-23 23:51 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-14 16:37 . 2014-04-23 23:38 693760 ----a-w- c:\windows\system32\WSShared.dll 2014-06-14 16:37 . 2014-02-08 04:34 71168 ----a-w- c:\windows\system32\drivers\hdaudbus.sys 2014-06-14 16:37 . 2014-01-31 00:48 143872 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.dll 2014-06-14 16:37 . 2014-04-23 23:38 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-06-14 16:12 . 2014-06-14 16:18 -------- d-----w- c:\windows\system32\MRT 2014-06-14 15:59 . 2014-02-08 04:34 4036608 ----a-w- c:\windows\system32\win32k.sys 2014-06-14 15:41 . 2014-06-12 12:49 61112 ----a-w- c:\windows\system32\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64.sys 2014-06-14 15:40 . 2014-06-14 15:40 -------- d-----w- c:\programdata\Atheros 2014-06-14 15:30 . 2014-05-24 02:47 1084928 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2014-06-14 15:30 . 2014-05-24 02:46 148992 ----a-w- c:\program files\Internet Explorer\jsdebuggeride.dll 2014-06-14 15:30 . 2014-05-24 02:46 19290112 ----a-w- c:\windows\system32\mshtml.dll 2014-06-14 15:30 . 2014-05-24 02:46 3958784 ----a-w- c:\windows\system32\jscript9.dll 2014-06-14 15:30 . 2014-05-24 02:46 2650112 ----a-w- c:\windows\system32\iertutil.dll 2014-06-14 15:30 . 2014-05-24 01:25 2862080 ----a-w- c:\windows\SysWow64\jscript9.dll 2014-06-14 15:30 . 2014-05-24 01:25 108032 ----a-w- c:\program files (x86)\Internet Explorer\jsdebuggeride.dll 2014-06-14 15:04 . 2014-06-14 15:07 -------- d-----w- c:\program files\Common Files\QCA_Bluetooth 2014-06-14 15:03 . 2014-06-14 15:05 -------- d-----w- c:\program files (x86)\Bluetooth Suite 2014-06-14 14:36 . 2014-06-14 15:40 -------- d-----w- c:\program files (x86)\ScanTack 2014-06-14 14:35 . 2014-06-14 14:35 -------- d-----w- c:\program files (x86)\predm 2014-06-14 14:31 . 2014-04-29 22:32 1301504 ----a-w- c:\windows\system32\gdi32.dll 2014-06-14 14:31 . 2014-04-29 22:22 1023488 ----a-w- c:\windows\SysWow64\gdi32.dll 2014-06-14 13:40 . 2013-04-23 22:56 1255936 ----a-w- c:\windows\system32\certutil.exe 2014-06-14 13:40 . 2013-04-23 23:13 1013248 ----a-w- c:\windows\SysWow64\certutil.exe 2014-06-14 13:40 . 2013-04-23 23:12 109056 ----a-w- c:\windows\SysWow64\cryptnet.dll 2014-06-14 13:40 . 2013-04-23 22:55 141312 ----a-w- c:\windows\system32\cryptnet.dll 2014-06-14 13:02 . 2014-06-14 13:02 -------- d-----w- c:\program files (x86)\SchoenerFernsehen 2014-06-14 13:02 . 2014-04-25 12:49 20312 ----a-w- c:\windows\system32\roboot64.exe 2014-06-14 13:01 . 2014-06-14 13:01 50784 ----a-w- c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin 2014-06-14 13:01 . 2014-06-14 13:01 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin 2014-06-14 12:24 . 2013-03-02 08:23 375808 ----a-w- c:\windows\SysWow64\ReAgent.dll 2014-06-14 12:24 . 2013-03-02 02:44 1011200 ----a-w- c:\windows\system32\reseteng.dll 2014-06-14 12:24 . 2013-05-26 23:17 35328 ----a-w- c:\windows\SysWow64\atmlib.dll 2014-06-14 12:24 . 2013-05-26 22:59 46080 ----a-w- c:\windows\system32\atmlib.dll 2014-06-14 12:24 . 2013-05-25 03:15 362496 ----a-w- c:\windows\system32\atmfd.dll 2014-06-14 12:24 . 2013-05-25 02:32 300032 ----a-w- c:\windows\SysWow64\atmfd.dll 2014-06-14 12:11 . 2013-07-01 01:42 79192 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-06-14 12:11 . 2013-07-01 01:42 623448 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-06-14 12:11 . 2013-07-01 01:42 498008 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-06-14 12:11 . 2013-07-01 01:42 21848 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-06-14 12:11 . 2013-06-29 03:07 32256 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2014-06-14 12:11 . 2013-06-29 03:06 120832 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-06-14 12:07 . 2014-06-14 12:07 -------- d-----w- c:\program files (x86)\Microsoft Silverlight 2014-06-13 20:17 . 2013-02-02 05:41 1437184 ----a-w- c:\windows\SysWow64\GdiPlus.dll 2014-06-13 20:17 . 2013-02-02 05:31 1690624 ----a-w- c:\windows\system32\GdiPlus.dll 2014-06-13 20:17 . 2013-04-11 22:30 1421312 ----a-w- c:\windows\SysWow64\DWrite.dll 2014-06-13 20:17 . 2013-04-11 22:22 1838080 ----a-w- c:\windows\system32\DWrite.dll 2014-06-13 20:06 . 2013-03-06 07:10 112872 ----a-w- c:\windows\system32\consent.exe 2014-06-13 20:06 . 2013-03-06 06:29 70144 ----a-w- c:\windows\system32\appinfo.dll 2014-06-13 20:04 . 2013-05-15 02:25 888320 ----a-w- c:\windows\system32\autochk.exe 2014-06-13 20:04 . 2013-05-15 02:25 542208 ----a-w- c:\windows\system32\untfs.dll 2014-06-13 20:04 . 2013-05-15 02:24 793088 ----a-w- c:\windows\SysWow64\autochk.exe 2014-06-13 20:04 . 2013-05-15 02:24 482816 ----a-w- c:\windows\SysWow64\untfs.dll 2014-06-13 20:04 . 2013-12-04 23:43 583680 ----a-w- c:\windows\system32\msdrm.dll 2014-06-13 20:04 . 2013-12-04 23:37 451072 ----a-w- c:\windows\SysWow64\msdrm.dll . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-06-13 13:56 . 2012-07-26 08:13 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2014-05-31 05:16 . 2013-05-16 06:25 703992 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-05-31 05:16 . 2013-05-16 06:25 105464 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-04-25 15:17 . 2014-04-25 15:17 82888 ----a-w- c:\windows\SysWow64\mfcm110.dll 2014-04-25 15:17 . 2014-04-25 15:17 82888 ----a-w- c:\windows\SysWow64\mfcm110u.dll 2014-04-25 15:17 . 2014-04-25 15:17 4446152 ----a-w- c:\windows\SysWow64\mfc110u.dll 2014-04-25 15:17 . 2014-04-25 15:17 4411848 ----a-w- c:\windows\SysWow64\mfc110.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{d332cff8-358e-4c9e-8af3-a08872ef22c1}] 2014-06-14 14:11 249632 ----a-w- c:\program files (x86)\ScanTack\BE26E637-FAB9-405F-9542-D1136AF8C4DC.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2014-06-13 12:56 220632 ----a-w- c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2014-06-13 12:56 220632 ----a-w- c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2014-06-13 12:56 220632 ----a-w- c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay] @="{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}" [HKEY_CLASSES_ROOT\CLSID\{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}] 2012-08-06 03:41 158224 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-08-06 03:41 158224 ----a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "pgcchelper"="c:\users\Preciosa\AppData\Local\pgcchelper\pgcchelper.exe" [2013-08-21 465920] "Quick Starter"="c:\program files (x86)\Samsung\Quick Starter\Quick Starter.exe" [2014-04-29 2358064] "KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-05-28 1563440] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-08-15 97392] "CLMLServer_For_P2G8"="c:\program files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" [2012-06-08 111120] "CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2012-07-12 491120] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-04-04 35736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712] "KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2014-05-28 310064] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "EnableUIADesktopToggle"= 0 (0x0) "EnableCursorSuppression"= 1 (0x1) "ConsentPromptBehaviorUser"= 3 (0x3) "DisableCAD"= 1 (0x1) . R2 SWUpdateService;SW Update Service;c:\programdata\Samsung\SW Update Service\SWMAgent.exe;c:\programdata\Samsung\SW Update Service\SWMAgent.exe [x] R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x] S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x] S1 {9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64;{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64;c:\windows\system32\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64.sys;c:\windows\SYSNATIVE\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64.sys [x] S1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys;c:\windows\SYSNATIVE\drivers\cbfs3.sys [x] S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x] S2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [x] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x] S2 Easy Launcher;Easy Launcher;c:\program files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe;c:\program files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [x] S2 ETDService;Elan Service;c:\program files\Elantech\ETDService.exe;c:\program files\Elantech\ETDService.exe [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x] S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x] S2 OfficeSvc;Microsoft Office-Dienst;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 Update ScanTack;Update ScanTack;c:\program files (x86)\ScanTack\updateScanTack.exe;c:\program files (x86)\ScanTack\updateScanTack.exe [x] S2 Util ScanTack;Util ScanTack;c:\program files (x86)\ScanTack\bin\utilScanTack.exe;c:\program files (x86)\ScanTack\bin\utilScanTack.exe [x] S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x] S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x] S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x] S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x] S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\System32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x] S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\System32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x] S3 BTATH_HID;Bluetooth HID Device;c:\windows\system32\DRIVERS\btath_hid.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hid.sys [x] S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x] S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\System32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x] S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x] S3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x] S3 ETD;Samsung PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x] S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 RadioHIDMini;Radio HID Mini-driver;c:\windows\System32\drivers\RadioHIDMini.sys;c:\windows\SYSNATIVE\drivers\RadioHIDMini.sys [x] S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-06-13 13:05 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-13 12:54] . 2014-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-13 12:54] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2014-06-13 12:56 244696 ----a-w- c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2014-06-13 12:56 244696 ----a-w- c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2014-06-13 12:56 244696 ----a-w- c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2014-06-13 12:48 2324576 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2014-06-13 12:48 2324576 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2014-06-13 12:48 2324576 ----a-w- c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay] @="{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}" [HKEY_CLASSES_ROOT\CLSID\{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}] 2012-08-06 03:42 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BitcasaIconOverlay] @="{A6975448-A999-49BB-B3E4-7730CF6A82C0}" [HKEY_CLASSES_ROOT\CLSID\{A6975448-A999-49BB-B3E4-7730CF6A82C0}] 2012-12-27 07:58 570880 ----a-w- c:\program files\Bitcasa\ExplorerMenu.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BitcasaProgressOverlay] @="{6FB8D52A-0064-45B2-B687-F596FEAD09C2}" [HKEY_CLASSES_ROOT\CLSID\{6FB8D52A-0064-45B2-B687-F596FEAD09C2}] 2012-12-27 07:58 570880 ----a-w- c:\program files\Bitcasa\ExplorerMenu.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-08-06 03:42 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-12-12 13263072] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-01-04 1260256] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608] "Bitcasa"="c:\program files\Bitcasa\Bitcasa.exe" [2012-12-27 4365824] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-03-17 172016] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-03-17 399856] "Persistence"="c:\windows\system32\igfxpers.exe" [2013-03-17 442352] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = https://www.google.at/ mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 5.175.194.40 8.8.8.8 TCP: Interfaces\{B33A6BFF-C613-4F0B-AC85-3816CCF1C98A}: NameServer = 8.8.8.8,8.8.4.4 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) Wow6432Node-HKLM-Run-fst_it_141 - (no file) Wow6432Node-HKLM-Run-t4pc_en_5 - (no file) Toolbar-Locked - (no file) HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) @SACL=(02 0000) . Zeit der Fertigstellung: 2014-06-15 13:25:37 ComboFix-quarantined-files.txt 2014-06-15 11:25 . Vor Suchlauf: 12 Verzeichnis(se), 400*240*533*504 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 400*389*210*112 Bytes frei . - - End Of File - - 5160B6BE57FF46A26D34D4E8FEE746E0 5FB38429D5D77768867C76DCBDB35194 |
16.06.2014, 07:33 | #8 |
/// the machine /// TB-Ausbilder | Suspicious.cloud.9 verhindert https-Seiten Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Suspicious.cloud.9 verhindert https-Seiten |
account, angeblich, angemeldet, avira, beseitigen, browser, explorer, firefox, google, google account, heute, https, internet, internet explorer, laptop, logfiles, mozilla, neu, nicht mehr, nichts, norton, opera, probleme, smartphone, suspicious.cloud.9, trojaner, verhindert, virus, windows |