![]() |
|
Log-Analyse und Auswertung: Windows Sicherheitscenter lässt sich nicht mehr aktivieren, Malwarebytes funktioniert nichtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows Sicherheitscenter lässt sich nicht mehr aktivieren, Malwarebytes funktioniert nicht Hi! Ich habe mir glaube ich schon wieder was eingefangen... ![]() Nämlich das hier: "Die Datei 'C:\ProgramData\EkyiyBujze\EkyiyBujze.dat' enthielt einen Virus oder unerwünschtes Programm 'TR/Crypt.ZPACK.77680' [trojan]. Durchgeführte Aktion(en): Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '519b8d76.qua' verschoben! Der Registrierungseintrag <HKEY_USERS\S-1-5-21-1235139973-2671818785-655692419-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\EkyiyBujze> wurde erfolgreich repariert." Kurz danach meldete mir das Windows Sicherheitscenter das es deaktiviert sei. Ich versucht es wieder zu aktivieren, das funktionierte aber nicht. Auch ein Malwarebytes scan war unmöglich, hier gab es bereits bei der installation einen runtime error. Das Programm lässt sich so nicht starten. Habe es dann mit FRST versucht. Hier das logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-06-2014 Ran by Laura (administrator) on LAURA-PC on 16-06-2014 01:00:24 Running from C:\Users\Laura\Desktop Platform: Windows 7 Home Premium (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros Commnucations) C:\Program Files\Bluetooth Suite\AdminService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Atheros Communications) C:\Program Files\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Secunia) C:\Program Files\Secunia\PSI\psia.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (eInstruction Corporation) C:\Program Files\eInstruction\Device Manager\Launch.exe (Secunia) C:\Program Files\Secunia\PSI\psi_tray.exe (Dropbox, Inc.) C:\Users\Laura\AppData\Roaming\Dropbox\bin\Dropbox.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-23] (Intel Corporation) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1565992 2009-09-17] (Synaptics Incorporated) HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Bluetooth Suite\BtvStack.exe [474272 2010-07-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files\Bluetooth Suite\AthBtTray.exe [298144 2010-07-29] (Atheros Commnucations) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-10-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-04-23] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1423904 2010-04-23] (Realtek Semiconductor) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKU\S-1-5-21-1235139973-2671818785-655692419-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-1235139973-2671818785-655692419-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-1235139973-2671818785-655692419-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21445248 2014-05-08] (Skype Technologies S.A.) HKU\S-1-5-21-1235139973-2671818785-655692419-1000\...\Run: [Facebook Update] => C:\Users\Laura\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-30] (Facebook Inc.) HKU\S-1-5-21-1235139973-2671818785-655692419-1000\...\Run: [EkyiyBujze] => regsvr32.exe " Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\eInstruction Device Manager.lnk ShortcutTarget: eInstruction Device Manager.lnk -> C:\Program Files\eInstruction\Device Manager\Launch.exe (eInstruction Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Laura\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\explorer.lnk ShortcutTarget: explorer.lnk -> C:\ProgramData\B0D5394ADDBF3970D50A11AB831DB215\0qmrg4j.cpp (Mozilla Foundation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x73156749CA09CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - iexplore.exe BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\vg5xa0kc.default FF Homepage: https://my.screenname.aol.com/_cqr/login/login.psp?sitedomain=sns.webmail.aol.com&lang=de&seamless=novl&offerId=webmail-de-de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Laura\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\vg5xa0kc.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-13] FF Extension: QuickJava - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\vg5xa0kc.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-03-29] FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [56480 2010-07-29] (Atheros Commnucations) [File not signed] S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] () [File not signed] R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) S2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) S2 Winmgmt; C:\ProgramData\B0D5394ADDBF3970D50A11AB831DB215\0qmrg4j.cpp [127861 2014-06-16] (Mozilla Foundation) [File not signed] ==================== Drivers (Whitelisted) ==================== S3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [34976 2010-07-29] (Atheros) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-04-29] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-04-29] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-02] (Avira Operations GmbH & Co. KG) S3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [255648 2010-07-29] (Atheros) R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [24736 2010-07-29] (Atheros) S3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [175776 2010-07-29] (Atheros) S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [45728 2010-07-29] (Atheros) S3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [141088 2010-07-29] (Atheros) R3 intelkmd; C:\Windows\System32\DRIVERS\igdpmd32.sys [8750592 2010-10-21] (Intel Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-12-06] (Secunia) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-13] (Avira GmbH) R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25984 2009-12-12] (The OpenVPN Project) S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-16 01:00 - 2014-06-16 01:00 - 01072640 _____ (Farbar) C:\Users\Laura\Desktop\FRST.exe 2014-06-16 01:00 - 2014-06-16 01:00 - 00013707 _____ () C:\Users\Laura\Desktop\FRST.txt 2014-06-16 00:50 - 2014-06-16 00:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Laura\Desktop\HiJackThis204.exe 2014-06-16 00:48 - 2014-06-16 00:48 - 03503224 _____ (McAfee, Inc.) C:\Users\Laura\Downloads\SecurityScan_Release_CB-DL-Manager [1].exe 2014-06-16 00:44 - 2014-06-16 00:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-16 00:44 - 2014-06-16 00:44 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-06-16 00:44 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-16 00:44 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-16 00:44 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-16 00:42 - 2014-06-16 00:42 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Laura\Desktop\mbam-setup-2.0.2.1012.exe 2014-06-16 00:39 - 2014-06-16 00:40 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Laura\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-16 00:31 - 2014-06-16 00:31 - 00000000 ____D () C:\ProgramData\EkyiyBujze 2014-06-16 00:30 - 2014-06-16 01:00 - 00014631 _____ () C:\ProgramData\RUNDLL32.EXE-4168-F.txt 2014-06-16 00:15 - 2014-06-16 00:15 - 00000000 ____D () C:\ProgramData\B0D5394ADDBF3970D50A11AB831DB215 2014-06-14 00:31 - 2014-06-14 22:56 - 00001360 _____ () C:\Windows\SecuniaPackage.log 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\Program Files\iTunes 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\Program Files\iPod 2014-06-04 18:51 - 2014-06-04 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2014-06-04 18:51 - 2014-06-04 18:51 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-06-04 18:50 - 2014-06-04 18:50 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-06-02 21:25 - 2014-06-02 21:25 - 00000000 ___RD () C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-05-24 22:09 - 2014-05-24 22:09 - 00148088 _____ () C:\Windows\Minidump\052414-20919-01.dmp 2014-05-20 14:14 - 2014-05-20 14:14 - 00148088 _____ () C:\Windows\Minidump\052014-16879-01.dmp 2014-05-18 16:52 - 2014-05-20 15:14 - 06356561 _____ () C:\Users\Laura\Documents\vegetationsprofil.pptx ==================== One Month Modified Files and Folders ======= 2014-06-16 01:00 - 2014-06-16 01:00 - 01072640 _____ (Farbar) C:\Users\Laura\Desktop\FRST.exe 2014-06-16 01:00 - 2014-06-16 01:00 - 00013707 _____ () C:\Users\Laura\Desktop\FRST.txt 2014-06-16 01:00 - 2014-06-16 00:30 - 00014631 _____ () C:\ProgramData\RUNDLL32.EXE-4168-F.txt 2014-06-16 01:00 - 2014-05-12 22:24 - 00000000 ____D () C:\FRST 2014-06-16 01:00 - 2013-02-13 01:23 - 00000000 ____D () C:\Users\Laura\AppData\Local\Temp 2014-06-16 00:54 - 2013-03-17 19:34 - 00000000 ____D () C:\Users\Laura\AppData\Local\CrashDumps 2014-06-16 00:50 - 2014-06-16 00:50 - 00388608 _____ (Trend Micro Inc.) C:\Users\Laura\Desktop\HiJackThis204.exe 2014-06-16 00:50 - 2013-02-13 01:23 - 00000000 ____D () C:\Users\Laura\AppData\Local\VirtualStore 2014-06-16 00:48 - 2014-06-16 00:48 - 03503224 _____ (McAfee, Inc.) C:\Users\Laura\Downloads\SecurityScan_Release_CB-DL-Manager [1].exe 2014-06-16 00:48 - 2013-02-23 20:39 - 00000000 ____D () C:\Users\Laura\AppData\Roaming\Skype 2014-06-16 00:44 - 2014-06-16 00:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-16 00:44 - 2014-06-16 00:44 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-06-16 00:42 - 2014-06-16 00:42 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Laura\Desktop\mbam-setup-2.0.2.1012.exe 2014-06-16 00:40 - 2014-06-16 00:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Laura\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-16 00:34 - 2009-07-14 06:34 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-16 00:34 - 2009-07-14 06:34 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-16 00:32 - 2013-02-12 21:56 - 01560263 _____ () C:\Windows\WindowsUpdate.log 2014-06-16 00:31 - 2014-06-16 00:31 - 00000000 ____D () C:\ProgramData\EkyiyBujze 2014-06-16 00:30 - 2014-05-03 20:51 - 00000000 ____D () C:\Users\Laura\AppData\Roaming\DropboxMaster 2014-06-16 00:30 - 2013-06-10 13:08 - 00000000 ___RD () C:\Users\Laura\Dropbox 2014-06-16 00:30 - 2013-06-10 13:06 - 00000000 ____D () C:\Users\Laura\AppData\Roaming\Dropbox 2014-06-16 00:27 - 2013-06-10 20:05 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2014-06-16 00:27 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-16 00:26 - 2009-07-14 06:39 - 00083462 _____ () C:\Windows\setupact.log 2014-06-16 00:19 - 2013-02-13 11:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-16 00:15 - 2014-06-16 00:15 - 00000000 ____D () C:\ProgramData\B0D5394ADDBF3970D50A11AB831DB215 2014-06-15 23:17 - 2013-02-13 11:15 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-14 23:41 - 2013-02-27 10:39 - 00000000 ____D () C:\Users\Laura\Documents\Literaturwissenschaft 2014-06-14 23:13 - 2013-03-13 17:23 - 00000000 ____D () C:\Users\Laura\AppData\Roaming\vlc 2014-06-14 23:13 - 2013-02-27 10:40 - 00000000 ____D () C:\Users\Laura\Documents\Oral Exam 2014-06-14 23:08 - 2014-02-10 17:10 - 00000000 ____D () C:\Users\Laura\Documents\Gedichte 2014-06-14 22:56 - 2014-06-14 00:31 - 00001360 _____ () C:\Windows\SecuniaPackage.log 2014-06-14 22:56 - 2014-05-11 12:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-14 22:56 - 2013-02-13 11:15 - 00001045 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-14 22:09 - 2014-04-30 19:04 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1235139973-2671818785-655692419-1000UA.job 2014-06-14 00:32 - 2013-02-13 11:26 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-06-14 00:32 - 2013-02-13 11:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-06-13 01:16 - 2013-08-14 23:08 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-13 01:16 - 2013-02-13 11:44 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-13 01:14 - 2013-02-19 13:54 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-12 11:18 - 2013-02-12 22:05 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-11 20:48 - 2014-04-30 19:04 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1235139973-2671818785-655692419-1000Core.job 2014-06-10 21:22 - 2013-09-17 19:52 - 00000000 ____D () C:\Users\Laura\Documents\Referendariat 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\Program Files\iTunes 2014-06-04 19:06 - 2014-06-04 19:06 - 00000000 ____D () C:\Program Files\iPod 2014-06-04 19:06 - 2013-09-09 15:45 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-06-04 18:51 - 2014-06-04 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2014-06-04 18:51 - 2014-06-04 18:51 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-06-04 18:51 - 2013-07-29 23:43 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-06-04 18:50 - 2014-06-04 18:50 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-06-04 18:50 - 2014-03-07 17:38 - 00000000 ___RD () C:\Program Files\Skype 2014-06-04 18:50 - 2013-02-23 20:39 - 00000000 ____D () C:\ProgramData\Skype 2014-06-02 21:25 - 2014-06-02 21:25 - 00000000 ___RD () C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-06-02 17:40 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-06-01 16:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles 2014-05-28 18:42 - 2013-06-10 13:06 - 00000000 ____D () C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-05-24 22:09 - 2014-05-24 22:09 - 00148088 _____ () C:\Windows\Minidump\052414-20919-01.dmp 2014-05-24 22:09 - 2013-03-24 00:25 - 280610272 _____ () C:\Windows\MEMORY.DMP 2014-05-24 22:09 - 2013-03-24 00:25 - 00000000 ____D () C:\Windows\Minidump 2014-05-20 15:14 - 2014-05-18 16:52 - 06356561 _____ () C:\Users\Laura\Documents\vegetationsprofil.pptx 2014-05-20 14:14 - 2014-05-20 14:14 - 00148088 _____ () C:\Windows\Minidump\052014-16879-01.dmp Some content of TEMP: ==================== C:\Users\Laura\AppData\Local\Temp\576D98D6227E5F2175763198576E814B.exe C:\Users\Laura\AppData\Local\Temp\avgnt.exe C:\Users\Laura\AppData\Local\Temp\bhb.dll C:\Users\Laura\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprg5cja.dll C:\Users\Laura\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-09 13:35 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:15-06-2014 Ran by Laura at 2014-06-16 01:01:10 Running from C:\Users\Laura\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) Adobe Flash Player 14 ActiveX (HKLM\...\{1F5E5F2E-5E61-431D-B796-58CCC6B68E28}) (Version: 14.0.0.125 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM\...\{C4B32291-F7B2-4BEC-BA4D-4195676A08CC}) (Version: 14.0.0.125 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.23 - Atheros Communications Inc.) ATI Catalyst Install Manager (HKLM\...\{7849B77A-3769-7B88-9596-5F2826B30C3F}) (Version: 3.0.778.0 - ATI Technologies, Inc.) Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira) Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 3.0.1.60 - ) Bluetooth Win7 Suite (HKLM\...\{101A497C-7EF6-4001-834D-E5FA1C70FEFA}) (Version: 7.02.000.6 - Atheros Communications) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) Cambridge English Pronouncing Dictionary - 18th Edition (HKLM\...\NSIS_cepd) (Version: - ) Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (Version: 2010.1021.531.7998 - ATI) Hidden Catalyst Control Center InstallProxy (Version: 2010.1021.531.7998 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (Version: 2010.1021.531.7998 - ATI) Hidden CCC Help Chinese Standard (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Chinese Traditional (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Czech (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Danish (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Dutch (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help English (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Finnish (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help French (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help German (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Greek (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Hungarian (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Italian (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Japanese (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Korean (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Norwegian (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Polish (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Portuguese (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Russian (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Spanish (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Swedish (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Thai (Version: 2010.1021.0530.7998 - ATI) Hidden CCC Help Turkish (Version: 2010.1021.0530.7998 - ATI) Hidden ccc-core-static (Version: 2010.1021.531.7998 - Ihr Firmenname) Hidden ccc-utility (Version: 2010.1021.531.7998 - ATI) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{CA75CBF9-B078-47CB-ABA3-74EFD4FC9A43}) (Version: - Microsoft) DeviceManager (HKLM\...\DeviceManager) (Version: 7.1.134.71814 - eInstruction) Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.) Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited) Free YouTube Download version 3.2.18.1128 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.18.1128 - DVDVideoSoft Ltd.) Google+ Auto Backup (HKLM\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) iCloud (HKLM\...\{00A61104-74B5-4056-AD00-4397EF4FB141}) (Version: 3.1.0.40 - Apple Inc.) Intel PROSet Wireless (Version: - ) Hidden Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{CCAFF072-4DDB-4846-963D-15F02A8E9472}) (Version: 13.00.0000 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.6.1001 - Intel Corporation) iTunes (HKLM\...\{0718A90E-93AA-49AF-A4FE-0165ACD91DF0}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) Mystery of Mortlake Mansion (HKLM\...\BFG-Mystery of Mortlake Mansion) (Version: - ) OpenVPN 2.1.1 (HKLM\...\OpenVPN) (Version: 2.1.1 - ) Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.) PX Profile Update (Version: 1.00.1. - AMD) Hidden RCT3 Soaked (HKLM\...\{EA926717-CE5A-4CB4-AB21-9E6E9565A458}) (Version: 1.00.000 - ) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6096 - Realtek Semiconductor Corp.) RollerCoaster Tycoon 3 (HKLM\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - ) Secunia PSI (3.0.0.9016) (HKLM\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version: - Microsoft) Hidden Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated) Timon & Pumbaa's Jungle Games (HKLM\...\Timon & Pumbaa's Jungle Games_is1) (Version: - GameFabrique) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN) WorkSpace (HKLM\...\{4EEA8A8A-6532-4A3E-8B00-DCC090FE902E}) (Version: 9.2.97.71415 - eInstruction) ==================== Restore Points ========================= Could not list Restore Points. Check "winmgmt" service or repair WMI. ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1E7B52C1-F511-4E17-AF06-F705B6EDCC0E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1235139973-2671818785-655692419-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe Task: {216B673C-B5A9-433A-884F-E183E89780E7} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1235139973-2671818785-655692419-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe Task: {31DFA380-FBB3-46E1-B4F5-25A5B7A1B113} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1235139973-2671818785-655692419-1000UA => C:\Users\Laura\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-30] (Facebook Inc.) Task: {324B3412-BD0D-4ACA-AA22-D0B4E0D6DF31} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-14] (Adobe Systems Incorporated) Task: {4CE9891A-B3AF-4110-8693-88E7890FA025} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1235139973-2671818785-655692419-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe Task: {911A4548-1814-43C1-8839-13A7538923BA} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1235139973-2671818785-655692419-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe Task: {986C4B49-D001-4B69-A8D4-E46F69B10AE3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {C79E9720-0D23-4DBA-8858-B1A53E281858} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1235139973-2671818785-655692419-1000Core => C:\Users\Laura\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-30] (Facebook Inc.) Task: {E049ADEA-B396-44A2-9BF4-26D99E08C9B2} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1235139973-2671818785-655692419-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1235139973-2671818785-655692419-1000Core.job => C:\Users\Laura\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1235139973-2671818785-655692419-1000UA.job => C:\Users\Laura\AppData\Local\Facebook\Update\FacebookUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll 2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll 2014-02-19 20:31 - 2011-11-09 19:17 - 00225280 _____ () C:\Program Files\eInstruction\Device Manager\STTubeDevice30.dll 2014-02-19 20:31 - 2013-03-22 14:27 - 00304640 _____ () C:\Program Files\eInstruction\Device Manager\NativeSupport.dll 2014-02-19 20:31 - 2010-12-10 13:04 - 00098304 _____ () C:\Program Files\eInstruction\Device Manager\jspWin.dll 2014-06-16 00:29 - 2014-06-16 00:29 - 00043008 _____ () c:\users\laura\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprg5cja.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Laura\AppData\Roaming\Dropbox\bin\libcef.dll 2010-08-26 16:45 - 2010-08-26 16:45 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-10-21 06:30 - 2010-10-21 06:30 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-05-11 12:49 - 2014-06-06 06:38 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2014-06-14 00:32 - 2014-06-14 00:32 - 17024688 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:7ADB695A ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= Could not list Devices. Check "winmgmt" service or repair WMI. ==================== Event log errors: ========================= Application errors: ================== Error: (06/16/2014 00:54:53 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x12c4 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:54:31 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x1078 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:45:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x16cc Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:41:28 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x1514 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:41:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0xcf4 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:38:33 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x588 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:38:11 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.500, Zeitstempel: 0x533d8de2 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x16d8 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (06/16/2014 00:27:33 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbamservice.exe, Version: 2.1.9.0, Zeitstempel: 0x530619b7 Name des fehlerhaften Moduls: mbamservice.exe, Version: 2.1.9.0, Zeitstempel: 0x530619b7 Ausnahmecode: 0x40000015 Fehleroffset: 0x0007d28a ID des fehlerhaften Prozesses: 0xd20 Startzeit der fehlerhaften Anwendung: 0xmbamservice.exe0 Pfad der fehlerhaften Anwendung: mbamservice.exe1 Pfad des fehlerhaften Moduls: mbamservice.exe2 Berichtskennung: mbamservice.exe3 Error: (06/16/2014 00:27:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbamscheduler.exe, Version: 2.0.23.0, Zeitstempel: 0x52f2947e Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x77c Startzeit der fehlerhaften Anwendung: 0xmbamscheduler.exe0 Pfad der fehlerhaften Anwendung: mbamscheduler.exe1 Pfad des fehlerhaften Moduls: mbamscheduler.exe2 Berichtskennung: mbamscheduler.exe3 Error: (06/16/2014 00:19:17 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbamservice.exe, Version: 2.1.9.0, Zeitstempel: 0x530619b7 Name des fehlerhaften Moduls: mbamservice.exe, Version: 2.1.9.0, Zeitstempel: 0x530619b7 Ausnahmecode: 0x40000015 Fehleroffset: 0x0007d28a ID des fehlerhaften Prozesses: 0xd4c Startzeit der fehlerhaften Anwendung: 0xmbamservice.exe0 Pfad der fehlerhaften Anwendung: mbamservice.exe1 Pfad des fehlerhaften Moduls: mbamservice.exe2 Berichtskennung: mbamservice.exe3 System errors: ============= Error: (06/16/2014 01:05:36 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:05:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:04:36 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:04:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:03:36 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:03:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:02:35 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:02:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:01:35 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Error: (06/16/2014 01:01:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde mit folgendem Fehler beendet: %%126 Microsoft Office Sessions: ========================= Error: (06/16/2014 00:54:53 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd12c401cf88ecd1f5cf5cC:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll0fb52edc-f4e0-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:54:31 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd107801cf88ecc3cb0c04C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll02ba8b87-f4e0-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:45:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd16cc01cf88eb85dfa7c6C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dllc4896aae-f4de-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:41:28 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd151401cf88eaf2331458C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll2fff6c58-f4de-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:41:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdcf401cf88eae950eeb7C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll28e58a46-f4de-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:38:33 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd58801cf88ea8984d38aC:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dllc74fa4e4-f4dd-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:38:11 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.500533d8de2MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd16d801cf88ea7c56ea43C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dllba8dec83-f4dd-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:27:33 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbamservice.exe2.1.9.0530619b7mbamservice.exe2.1.9.0530619b7400000150007d28ad2001cf88e8f68c1173C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exeC:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe3e462e2a-f4dc-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:27:16 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbamscheduler.exe2.0.23.052f2947eMSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd77c01cf88e8ed3c6d64C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll33e6943f-f4dc-11e3-bcdf-60eb696c53b3 Error: (06/16/2014 00:19:17 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbamservice.exe2.1.9.0530619b7mbamservice.exe2.1.9.0530619b7400000150007d28ad4c01cf88e7cea741eeC:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exeC:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe1657754a-f4db-11e3-9fe6-60eb696c53b3 CodeIntegrity Errors: =================================== Date: 2014-06-16 00:27:29.274 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-16 00:19:17.747 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-15 23:23:28.329 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-14 21:13:22.624 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-14 00:25:28.553 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-12 22:53:56.379 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-12 10:57:58.283 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-11 09:31:20.893 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-10 16:11:48.196 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-09 13:13:13.294 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 2870.69 MB Available physical RAM: 1599.57 MB Total Pagefile: 5739.65 MB Available Pagefile: 4083.79 MB Total Virtual: 2047.88 MB Available Virtual: 1913.99 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:698.54 GB) (Free:586.87 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: AACB90F1) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=699 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Windows Sicherheitscenter lässt sich nicht mehr aktivieren, Malwarebytes funktioniert nicht |
antivir, antivirus, association, bonjour, branding, device driver, dvdvideosoft ltd., firefox, flash player, hijackthis, homepage, iexplore.exe, jungle, programm, realtek, security, super, svchost.exe, system, tr/crypt.zpack.77680, win32/bundled.toolbar.ask, win32/bundled.toolbar.ask.d, win32/toolbar.zugo, win32/wajam.f, windows |