![]() |
|
Plagegeister aller Art und deren Bekämpfung: Weiterleitung auf "dundown.com" mit Aufforderung auf Java UpdateWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() ![]() | ![]() Weiterleitung auf "dundown.com" mit Aufforderung auf Java Update Hallo, mein System ist relativ neu und ab und zu öffnet sich beim Starten von Chrome automatisch die seltsame Seite hxxp://www.dundown.com/DE/index.php?dv1=12061048&dv2=&dv3=&dv4=TP-DE&sec_id=qWJ8vBQjIEzEzreaqZipDn7pCZO6Y3RmIaRLz9NR7aXd7cCUC0MRNawrPAV0qZ7dfAXdNkN3PM%EB%EB&marketing_fid=MTQwMjg2NjA4NS0zNDIyNjM4N2QyYjY4MjUzNjNiNWIxN GI4ODBlZDljYQ== mit der Aufforderung, dass ein Java Update gibt und ich diese natürlich runterladen und installieren soll......... Habe eine schnelle Systemprüfung mit Antivir gemacht und Spyboot durchlaufen lassen, ohne Erfolg. Hier der FRST und Addition Bericht: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-06-2014 Ran by Burak (administrator) on BURAK-PC on 15-06-2014 23:04:44 Running from C:\Users\Burak\Downloads Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (AMD) C:\Windows\System32\atieclxx.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) F:\SETUP.EXE (Microsoft Corporation) C:\Users\Burak\AppData\Local\Temp\ose00000.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\regedit.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-03] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-20514535-3617857650-617038049-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566984 2014-04-25] (Safer-Networking Ltd.) HKU\S-1-5-21-20514535-3617857650-617038049-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-20514535-3617857650-617038049-1001\...\MountPoints2: F - F:\SETUP.EXE HKU\S-1-5-21-20514535-3617857650-617038049-1001\...\MountPoints2: {91e13ae9-e3fb-11e3-a764-00241d891bde} - G:\MotoCastSetup.exe -a HKU\S-1-5-21-20514535-3617857650-617038049-1001\...\MountPoints2: {ca486480-d346-11e3-9a3c-806e6f6e6963} - "E:\Install Navigator.exe" HKU\S-1-5-21-20514535-3617857650-617038049-1001\...\MountPoints2: {e5ecedf2-d772-11e3-ad3e-00241d891bde} - G:\HTC_Sync_Manager_PC.exe BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x88AA57215867CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) Chrome: ======= CHR HomePage: hxxp://www.google.com CHR StartupUrls: "hxxp://www.google.com/" CHR Extension: (Google Docs) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-04] CHR Extension: (Google Drive) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-04] CHR Extension: (WOT) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-06-07] CHR Extension: (YouTube) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-04] CHR Extension: (Google-Suche) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-04] CHR Extension: (ZenMate) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-06-01] CHR Extension: (AdBlock) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-04] CHR Extension: (Google Wallet) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-04] CHR Extension: (Google Mail) - C:\Users\Burak\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-04] ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed] R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-03] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-03] (Avira Operations GmbH & Co. KG) S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed] S4 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-11-29] (CyberLink) S4 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-11-29] (CyberLink) S4 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-18] (Nero AG) R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed] R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed] R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.) S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG) S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated) R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation) R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-05-04] (Duplex Secure Ltd.) R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [32456 2013-11-29] (CyberLink Corp.) U3 av560qu8; C:\Windows\System32\Drivers\av560qu8.sys [0 ] (Microsoft Corporation) S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-15 23:04 - 2014-06-15 23:04 - 02081280 _____ (Farbar) C:\Users\Burak\Downloads\FRST64.exe 2014-06-15 23:04 - 2014-06-15 23:04 - 00013187 _____ () C:\Users\Burak\Downloads\FRST.txt 2014-06-15 23:04 - 2014-06-15 23:04 - 00000000 ____D () C:\FRST 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\Users\Burak\AppData\Local\Microsoft Help 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-06-15 22:45 - 2014-06-15 22:45 - 00000000 __RHD () C:\MSOCache 2014-06-15 15:36 - 2014-06-15 15:36 - 00040960 _____ () C:\Users\Burak\Downloads\tftp2.exe 2014-06-13 20:51 - 2014-06-13 20:51 - 618808555 _____ () C:\Windows\MEMORY.DMP 2014-06-13 20:51 - 2014-06-13 20:51 - 00275560 _____ () C:\Windows\Minidump\061314-25677-01.dmp 2014-06-13 20:51 - 2014-06-13 20:51 - 00000000 ____D () C:\Windows\Minidump 2014-06-13 18:45 - 2014-06-15 19:09 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\TS3Client 2014-06-13 18:45 - 2014-06-13 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-06-13 18:45 - 2014-06-13 18:45 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-06-13 17:44 - 2009-06-10 23:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140613-174418.backup 2014-06-13 17:43 - 2009-06-10 23:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140613-174345.backup 2014-06-11 22:11 - 2014-06-11 22:11 - 00000000 __SHD () C:\Users\Burak\AppData\Local\EmieUserList 2014-06-11 22:11 - 2014-06-11 22:11 - 00000000 __SHD () C:\Users\Burak\AppData\Local\EmieSiteList 2014-06-11 22:10 - 2014-06-11 22:10 - 00000000 _____ () C:\Users\Burak\Sti_Trace.log 2014-06-11 22:09 - 2014-06-11 22:09 - 00000254 _____ () C:\Windows\Brpfx04a.ini 2014-06-11 22:09 - 2014-06-11 22:09 - 00000093 _____ () C:\Windows\brpcfx.ini 2014-06-11 22:09 - 2014-06-11 22:09 - 00000050 _____ () C:\Windows\system32\BRIDF10A.DAT 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Users\Burak\Downloads\wlan_wiz 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\InstallShield 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\ProgramData\Brother 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Program Files (x86)\Browny02 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Program Files (x86)\Brother 2014-06-11 22:09 - 2010-03-08 13:50 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2014-06-11 22:09 - 2010-02-09 17:11 - 00217088 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll 2014-06-11 22:09 - 2010-02-05 11:42 - 00180224 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2014-06-11 22:09 - 2008-10-17 20:04 - 00179712 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5b.dll 2014-06-11 22:09 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2014-06-11 22:09 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2014-06-11 22:09 - 2003-11-28 18:57 - 00000000 _____ () C:\Windows\brdfxspd.dat 2014-06-11 22:03 - 2014-06-11 22:03 - 00006888 _____ () C:\Windows\DPINST.LOG 2014-06-10 20:07 - 2014-06-10 20:07 - 00000000 ____D () C:\Users\Burak\Documents\ProcAlyzer Dumps 2014-06-10 20:06 - 2009-06-10 23:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140610-200638.backup 2014-06-10 20:01 - 2014-06-10 20:44 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-06-10 20:01 - 2014-06-10 20:04 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-06-10 20:01 - 2014-06-10 20:01 - 00001387 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2014-06-10 20:01 - 2014-06-10 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2014-06-10 20:01 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2014-06-09 20:42 - 2014-06-09 20:42 - 00000928 _____ () C:\Users\Public\Desktop\Guild Wars 2.lnk 2014-06-09 20:42 - 2014-06-09 20:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 2014-06-09 20:42 - 2014-06-09 20:42 - 00000000 ____D () C:\Program Files (x86)\Guild Wars 2 2014-06-09 20:41 - 2014-06-09 20:41 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\Guild Wars 2 2014-06-07 22:14 - 2014-06-07 22:14 - 00000000 ____D () C:\Users\Burak\Desktop\LOLPBE 2014-06-07 20:28 - 2014-06-15 19:12 - 00000896 _____ () C:\Windows\setupact.log 2014-06-07 20:28 - 2014-06-07 20:28 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-05 21:52 - 2014-06-07 20:24 - 00000000 ____D () C:\Program Files (x86)\PDFCreator 2014-06-05 21:52 - 2014-06-05 21:52 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\pdfforge 2014-06-05 21:52 - 2014-06-05 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2014-06-05 21:52 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX 2014-06-05 21:52 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX 2014-06-05 21:52 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX 2014-06-05 21:52 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll 2014-06-05 21:52 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL 2014-06-05 21:52 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL 2014-06-05 21:52 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL 2014-06-05 21:52 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL 2014-05-29 17:52 - 2013-12-28 02:02 - 00000000 ____D () C:\Users\Burak\Downloads\WISO.Steuer.2014-iND 2014-05-25 20:15 - 2014-05-25 20:15 - 00003486 _____ () C:\Windows\System32\Tasks\Motorola Device Manager Update 2014-05-25 20:15 - 2014-05-25 20:15 - 00003468 _____ () C:\Windows\System32\Tasks\Motorola Device Manager Engine 2014-05-25 20:15 - 2014-05-25 20:15 - 00003294 _____ () C:\Windows\System32\Tasks\Motorola Device Manager Initial Update 2014-05-25 20:15 - 2014-05-25 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Device Manager 2014-05-25 20:15 - 2014-05-25 20:15 - 00000000 ____D () C:\Program Files\Motorola Mobility LLC 2014-05-25 19:58 - 2014-05-25 19:58 - 00000000 ____D () C:\Users\Burak\Documents\Podcast 2014-05-25 19:52 - 2014-05-25 20:21 - 00000243 _____ () C:\Users\Burak\Documents\Sofa.txt 2014-05-25 19:45 - 2014-05-25 19:57 - 00000000 ____D () C:\Users\Burak\.gstreamer-0.10 2014-05-25 19:45 - 2014-05-25 19:45 - 00003450 _____ () C:\Windows\System32\Tasks\MotoCast Update 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\Users\Burak\AppData\Local\Motorola 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\ProgramData\Nero 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\ProgramData\Motorola 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link 2014-05-25 19:44 - 2014-05-25 20:27 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\MotoCast 2014-05-25 19:44 - 2014-05-25 20:15 - 00000000 ____D () C:\Program Files (x86)\Motorola Mobility 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\Motorola Mobility 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\Motorola 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Mobility 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files (x86)\Motorola 2014-05-25 13:57 - 2014-05-29 17:56 - 00000000 ____D () C:\Users\Burak\Downloads\DarkS.II_M2 ==================== One Month Modified Files and Folders ======= 2014-06-15 23:04 - 2014-06-15 23:04 - 02081280 _____ (Farbar) C:\Users\Burak\Downloads\FRST64.exe 2014-06-15 23:04 - 2014-06-15 23:04 - 00013187 _____ () C:\Users\Burak\Downloads\FRST.txt 2014-06-15 23:04 - 2014-06-15 23:04 - 00000000 ____D () C:\FRST 2014-06-15 23:04 - 2014-05-04 06:49 - 00000000 ____D () C:\Users\Burak\AppData\Local\Temp 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\Users\Burak\AppData\Local\Microsoft Help 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-06-15 22:46 - 2014-06-15 22:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-06-15 22:46 - 2014-05-04 07:07 - 00058864 _____ () C:\Users\Burak\AppData\Local\GDIPFONTCACHEV1.DAT 2014-06-15 22:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-06-15 22:45 - 2014-06-15 22:45 - 00000000 __RHD () C:\MSOCache 2014-06-15 22:44 - 2014-05-04 16:48 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\DAEMON Tools Lite 2014-06-15 22:44 - 2014-05-04 16:47 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-06-15 22:37 - 2014-05-09 14:23 - 00000000 ____D () C:\Temp 2014-06-15 22:37 - 2014-05-04 07:18 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-15 22:34 - 2014-05-04 07:18 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-15 22:22 - 2014-05-09 14:22 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\vlc 2014-06-15 22:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-06-15 21:03 - 2014-05-04 06:50 - 01106523 _____ () C:\Windows\WindowsUpdate.log 2014-06-15 19:56 - 2014-05-11 13:10 - 00000000 ____D () C:\Users\Burak\AppData\Local\PMB Files 2014-06-15 19:56 - 2014-05-11 13:10 - 00000000 ____D () C:\ProgramData\PMB Files 2014-06-15 19:17 - 2011-04-12 09:43 - 00760964 _____ () C:\Windows\system32\perfh007.dat 2014-06-15 19:17 - 2011-04-12 09:43 - 00172386 _____ () C:\Windows\system32\perfc007.dat 2014-06-15 19:17 - 2009-07-14 07:13 - 01769044 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-15 19:17 - 2009-07-14 06:45 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-15 19:17 - 2009-07-14 06:45 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-15 19:12 - 2014-06-07 20:28 - 00000896 _____ () C:\Windows\setupact.log 2014-06-15 19:12 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-06-15 19:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-15 19:09 - 2014-06-13 18:45 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\TS3Client 2014-06-15 18:03 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-06-15 15:36 - 2014-06-15 15:36 - 00040960 _____ () C:\Users\Burak\Downloads\tftp2.exe 2014-06-15 14:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-14 21:03 - 2014-05-04 15:24 - 00000000 ____D () C:\Users\Burak\Documents\Visual Studio 2013 2014-06-13 21:25 - 2014-05-04 13:52 - 00000000 ___RD () C:\Users\Burak\Desktop\ProgZZ 2014-06-13 20:51 - 2014-06-13 20:51 - 618808555 _____ () C:\Windows\MEMORY.DMP 2014-06-13 20:51 - 2014-06-13 20:51 - 00275560 _____ () C:\Windows\Minidump\061314-25677-01.dmp 2014-06-13 20:51 - 2014-06-13 20:51 - 00000000 ____D () C:\Windows\Minidump 2014-06-13 18:45 - 2014-06-13 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-06-13 18:45 - 2014-06-13 18:45 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-06-11 22:11 - 2014-06-11 22:11 - 00000000 __SHD () C:\Users\Burak\AppData\Local\EmieUserList 2014-06-11 22:11 - 2014-06-11 22:11 - 00000000 __SHD () C:\Users\Burak\AppData\Local\EmieSiteList 2014-06-11 22:10 - 2014-06-11 22:10 - 00000000 _____ () C:\Users\Burak\Sti_Trace.log 2014-06-11 22:10 - 2014-05-04 06:49 - 00000000 ____D () C:\Users\Burak 2014-06-11 22:09 - 2014-06-11 22:09 - 00000254 _____ () C:\Windows\Brpfx04a.ini 2014-06-11 22:09 - 2014-06-11 22:09 - 00000093 _____ () C:\Windows\brpcfx.ini 2014-06-11 22:09 - 2014-06-11 22:09 - 00000050 _____ () C:\Windows\system32\BRIDF10A.DAT 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Users\Burak\Downloads\wlan_wiz 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\InstallShield 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\ProgramData\Brother 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Program Files (x86)\Browny02 2014-06-11 22:09 - 2014-06-11 22:09 - 00000000 ____D () C:\Program Files (x86)\Brother 2014-06-11 22:09 - 2014-05-04 14:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-06-11 22:03 - 2014-06-11 22:03 - 00006888 _____ () C:\Windows\DPINST.LOG 2014-06-10 20:44 - 2014-06-10 20:01 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-06-10 20:07 - 2014-06-10 20:07 - 00000000 ____D () C:\Users\Burak\Documents\ProcAlyzer Dumps 2014-06-10 20:04 - 2014-06-10 20:01 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-06-10 20:01 - 2014-06-10 20:01 - 00001387 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2014-06-10 20:01 - 2014-06-10 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2014-06-09 20:42 - 2014-06-09 20:42 - 00000928 _____ () C:\Users\Public\Desktop\Guild Wars 2.lnk 2014-06-09 20:42 - 2014-06-09 20:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 2014-06-09 20:42 - 2014-06-09 20:42 - 00000000 ____D () C:\Program Files (x86)\Guild Wars 2 2014-06-09 20:41 - 2014-06-09 20:41 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\Guild Wars 2 2014-06-07 22:14 - 2014-06-07 22:14 - 00000000 ____D () C:\Users\Burak\Desktop\LOLPBE 2014-06-07 20:28 - 2014-06-07 20:28 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-07 20:24 - 2014-06-05 21:52 - 00000000 ____D () C:\Program Files (x86)\PDFCreator 2014-06-05 21:52 - 2014-06-05 21:52 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\pdfforge 2014-06-05 21:52 - 2014-06-05 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2014-06-03 17:30 - 2014-05-04 13:51 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-06-03 17:30 - 2014-05-04 13:51 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-05-29 17:56 - 2014-05-25 13:57 - 00000000 ____D () C:\Users\Burak\Downloads\DarkS.II_M2 2014-05-25 20:27 - 2014-05-25 19:44 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\MotoCast 2014-05-25 20:21 - 2014-05-25 19:52 - 00000243 _____ () C:\Users\Burak\Documents\Sofa.txt 2014-05-25 20:15 - 2014-05-25 20:15 - 00003486 _____ () C:\Windows\System32\Tasks\Motorola Device Manager Update 2014-05-25 20:15 - 2014-05-25 20:15 - 00003468 _____ () C:\Windows\System32\Tasks\Motorola Device Manager Engine 2014-05-25 20:15 - 2014-05-25 20:15 - 00003294 _____ () C:\Windows\System32\Tasks\Motorola Device Manager Initial Update 2014-05-25 20:15 - 2014-05-25 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Device Manager 2014-05-25 20:15 - 2014-05-25 20:15 - 00000000 ____D () C:\Program Files\Motorola Mobility LLC 2014-05-25 20:15 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files (x86)\Motorola Mobility 2014-05-25 19:58 - 2014-05-25 19:58 - 00000000 ____D () C:\Users\Burak\Documents\Podcast 2014-05-25 19:57 - 2014-05-25 19:45 - 00000000 ____D () C:\Users\Burak\.gstreamer-0.10 2014-05-25 19:57 - 2014-05-09 14:24 - 00000000 ____D () C:\Users\Burak\AppData\Local\HTC MediaHub 2014-05-25 19:45 - 2014-05-25 19:45 - 00003450 _____ () C:\Windows\System32\Tasks\MotoCast Update 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\Users\Burak\AppData\Local\Motorola 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\ProgramData\Nero 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\ProgramData\Motorola 2014-05-25 19:45 - 2014-05-25 19:45 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\Motorola Mobility 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Users\Burak\AppData\Roaming\Motorola 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Mobility 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-05-25 19:44 - 2014-05-25 19:44 - 00000000 ____D () C:\Program Files (x86)\Motorola Some content of TEMP: ==================== C:\Users\Burak\AppData\Local\Temp\avgnt.exe C:\Users\Burak\AppData\Local\Temp\ose00000.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-08 13:38 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-06-2014 Ran by Burak at 2014-06-15 23:05:05 Running from C:\Users\Burak\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Fuel (Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden AMD Steady Video Plug-In (Version: 2.07.0000 - AMD) Hidden AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira) Axife Mouse Recorder DEMO 5.01 (HKLM-x32\...\Axife Mouse Recorder DEMO_is1) (Version: - Axife Software) Brother MFL-Pro Suite MFC-J415W (HKLM-x32\...\{FB83EAC4-E3F6-4666-B45B-44522F2344B6}) (Version: 2.0.0.0 - Brother Industries, Ltd.) Build Tools - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Buildtools-Sprachressourcen - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden Buildtools-Sprachressourcen - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform) CyberLink PowerDVD 13 (HKLM-x32\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.3520.58 - CyberLink Corp.) CyberLink PowerDVD 13 (x32 Version: 13.0.3520.58 - CyberLink Corp.) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC) Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation) Erforderliche Komponenten für SSDT (HKLM-x32\...\{3FF082A7-A5DE-4BDA-B56A-1D2BEFD617A3}) (Version: 11.1.3000.0 - Microsoft Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.10.0.001 - HTC Corporation) HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.0.52.0 - HTC) IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{21B0F482-5EF9-45DA-8840-340AFE705A6C}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft C++ REST SDK for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.1 (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.1 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.1 Sprachpaket - DEU) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.1 Sprachpaket - DEU (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio Express 2013 for Windows Desktop (x32 Version: 2.7.40911.287 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{F09DEB00-9F41-4BC9-BA81-9F131B12B3D5}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{D4E30517-FE6F-491E-942F-AE10E1B18F38}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{B4EDAE03-DB34-4DD0-BA7E-2ED80DEA50B1}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{269A8DF6-BBDA-441F-932B-233F9B746D72}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{EC75BD20-F9CA-4E77-825F-ABD77E95BE91}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{0BF65908-D137-4A9E-B7C9-78F32F74F6FD}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{93945D16-4C3D-433E-B7E4-3D0D86B284C8}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{6F173435-3F19-4043-BA3D-A46AA8472859}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL-Sprachdienst (HKLM-x32\...\{1D812D86-D8EF-41AC-A518-BA12E1913747}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (12.0.30919.1) (HKLM-x32\...\{7CC03C58-3471-43D2-A251-EC9AE225E772}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM-x32\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft Team Foundation Server 2013 Object Model (x64) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Team Foundation Server 2013-Objektmodell Sprachpaket (x64) - DEU (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ x64 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ x86 Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 32bit Compilers - DEU Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Core Libraries (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86-x64 Compilers (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio 2013 Express Prerequisites x64 - DEU (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio 2013 Shell (Minimum) (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio 2013 Shell-(Mindest)-Ressourcen (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio 2013 Team Explorer Sprachpaket - DEU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio 2013-Vorbereitung (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio Express 2013 for Windows Desktop (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (HKLM-x32\...\{31e4d2a5-b246-4c2d-a7fb-aee157c26b02}) (Version: 12.0.21005.13 - Microsoft Corporation) Microsoft Visual Studio Express 2013 für Windows Desktop - DEU (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2013 XAML UI Designer Core (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2013 XAML UI Designer deu Resources (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM-x32\...\{43341417-7882-4F34-8390-53DFD00F6C0F}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (HKLM\...\{24440413-490E-41CA-BD33-0B30FD3EBE3A}) (Version: 11.1.3366.16 - Microsoft Corporation) MotoCast (HKLM-x32\...\{5401CEE8-3C2D-4835-A802-213306537FF4}) (Version: 2.0.31 - Motorola Mobility) Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.4.5 - Motorola Mobility) Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden MOTOROLA MEDIA LINK (x32 Version: 1.9.0002.0 - Motorola) Hidden Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6 - Notepad++ Team) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.3.39 - Safer-Networking Ltd.) Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) Windows Software Development Kit (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden Windows Software Development Kit (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.29989 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.100.25984 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden Windows XP Targeting with C++ (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 11-06-2014 20:09:18 Installiert Brother Software Suite 11-06-2014 20:09:38 Gerätetreiber-Paketinstallation: Brother Drucker 14-06-2014 19:25:51 Windows Modules Installer 15-06-2014 20:45:44 Installed Microsoft Office Professional Plus 2013 15-06-2014 20:45:50 PROPLUS ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0435B2C2-CD51-4984-AD9E-0AB37B550FAB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-04] (Google Inc.) Task: {1331D6DC-D029-4415-BDC3-C31CE77CBB37} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-04] (Google Inc.) Task: {19B6ECDF-6223-49FC-B81B-89C730102658} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] () Task: {A0873FAF-2781-4878-9E95-9CDE31D4AAEF} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] () Task: {CFA30274-2247-48F8-A60F-EAB8274F7247} - System32\Tasks\MotoCast Update => C:\Program Files (x86)\Motorola Mobility\MotoCast\LiveUpdate\MotoCastUpdate.exe [2012-07-24] () Task: {D38ABF06-21EF-411D-A54E-890518B42FDD} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] () Task: {FD5BEA86-B27A-4BCC-8086-BE4133970A69} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 2012-06-18 17:24 - 2012-06-18 17:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll 2014-04-17 22:29 - 2014-04-17 22:29 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2013-10-31 17:05 - 2013-10-31 17:05 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll 2014-06-10 20:01 - 2014-04-25 14:11 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-06-10 20:01 - 2014-04-25 14:11 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2014-06-10 20:01 - 2014-04-25 14:11 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2014-06-10 20:01 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2014-06-10 20:01 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-06-14 21:36 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll 2014-06-14 21:36 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll 2014-06-14 21:36 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll 2014-06-14 21:36 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll 2014-06-14 21:36 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll 2014-06-14 21:36 - 2014-06-05 15:58 - 14612296 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: CyberLink PowerDVD 13 Media Server Monitor Service => 2 MSCONFIG\Services: CyberLink PowerDVD 13 Media Server Service => 2 MSCONFIG\Services: DeviceMonitorService => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: HTCMonitorService => 2 MSCONFIG\Services: Motorola Device Manager => 2 MSCONFIG\Services: PST Service => 2 MSCONFIG\startupfolder: C:^Users^Burak^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk => C:\Windows\pss\Samsung Magician.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: BrStsMon00 => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN MSCONFIG\startupreg: ControlCenter3 => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: MotoCast => "C:\Program Files (x86)\Motorola Mobility\MotoCast\MotoLauncher.lnk" MSCONFIG\startupreg: PowerDVD13Agent => "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe" MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/15/2014 10:47:04 PM) (Source: MsiInstaller) (EventID: 11920) (User: Burak-PC) Description: Produkt: Microsoft Office Shared MUI (German) 2013 -- Fehler 1920. Der Dienst 'Windows-Dienst für Schriftartencache' (FontCache) konnte nicht gestartet werden. Stellen Sie sicher, dass Sie über ausreichende Berechtigungen zum Starten von Systemdiensten verfügen. Error: (06/15/2014 07:13:38 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2014 02:27:13 PM) (Source: SideBySide) (EventID: 81) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1". Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert. Error: (06/15/2014 02:27:13 PM) (Source: SideBySide) (EventID: 81) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1". Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert. Error: (06/15/2014 01:46:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2014 00:42:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2014 00:19:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/14/2014 08:34:09 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/14/2014 00:18:58 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2014 11:06:16 PM) (Source: SideBySide) (EventID: 81) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1". Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert. System errors: ============= Error: (06/15/2014 11:01:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1079 Error: (06/15/2014 11:00:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 11:00:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:57:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:56:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:55:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:55:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:54:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:51:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (06/15/2014 10:49:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Dienst für Schriftartencache" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Microsoft Office Sessions: ========================= Error: (06/15/2014 10:47:04 PM) (Source: MsiInstaller) (EventID: 11920) (User: Burak-PC) Description: Produkt: Microsoft Office Shared MUI (German) 2013 -- Fehler 1920. Der Dienst 'Windows-Dienst für Schriftartencache' (FontCache) konnte nicht gestartet werden. Stellen Sie sicher, dass Sie über ausreichende Berechtigungen zum Starten von Systemdiensten verfügen.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (06/15/2014 07:13:38 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2014 02:27:13 PM) (Source: SideBySide) (EventID: 81) (User: ) Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNamec:\program files (x86)\spybot - search & destroy 2\Updates\Extracts\SDWSCSvc.exe Error: (06/15/2014 02:27:13 PM) (Source: SideBySide) (EventID: 81) (User: ) Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNamec:\program files (x86)\spybot - search & destroy 2\SDWSCSvc.exe Error: (06/15/2014 01:46:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2014 00:42:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/15/2014 00:19:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/14/2014 08:34:09 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/14/2014 00:18:58 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2014 11:06:16 PM) (Source: SideBySide) (EventID: 81) (User: ) Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNamec:\program files (x86)\spybot - search & destroy 2\Updates\Extracts\SDWSCSvc.exe ==================== Memory info =========================== Percentage of memory in use: 26% Total physical RAM: 8189.49 MB Available physical RAM: 5994.39 MB Total Pagefile: 16377.16 MB Available Pagefile: 13558.82 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:232.79 GB) (Free:142.65 GB) NTFS Drive d: (Data) (Fixed) (Total:596.17 GB) (Free:596.03 GB) NTFS Drive f: (15.0.4569.1506) (CDROM) (Total:0.87 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 30AE30AD) Partition 1: (Not Active) - (Size=596 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 6FBE9300) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Weiterleitung auf "dundown.com" mit Aufforderung auf Java Update |
.com, android/mobserv.a, association, avira, branding, einstellung, google, homepage, installation, mobogenie, mobogenie entfernen, realtek, safer networking, seltsame seite, services.exe, software, svchost.exe, win32/bundled.toolbar.ask.d, win32/domaiq.bb, win32/downloadsponsor.a, win32/elex.ad, win32/mobogenie.a, win32/thinknice.b, windows |