| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: "Avira wird durch eine Gruppenrichtlinie blockiert"Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
26.06.2014, 23:37
| #31 |
 |  "Avira wird durch eine Gruppenrichtlinie blockiert" ich versuchs dann maaal  sag dir dann morgen Bescheid Naaacht !  |
|
26.06.2014, 23:38
| #32 |
| /// TB-Ausbilder /// Anleitungs-Guru  | "Avira wird durch eine Gruppenrichtlinie blockiert" OK...Gute Nacht!
__________________
__________________ |
|
27.06.2014, 12:27
| #33 |
| | "Avira wird durch eine Gruppenrichtlinie blockiert" der scan ist endlich vorbeeeei haha
__________________Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=a5a5b5578bcc4948b663d36f4544ae47
# engine=18903
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-06-27 10:26:02
# local_time=2014-06-27 12:26:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 135407 148416940 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 26525696 155495953 0 0
# scanned=127845
# found=49
# cleaned=0
# scan_time=47316
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir"
sh=C7C0F42A23562AA6DCCD60326FD8CC2AA41B5448 ft=1 fh=c053642cee9f3def vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SupTab\DpInterface32.dll.vir"
sh=9DC13DB9C123270C2356ED410128E11D5ADF7C6E ft=1 fh=023ab782f0a9b07d vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SupTab.dll.vir"
sh=56659F7FF1F1FA7906A77228E315F65F38BCEF73 ft=1 fh=0ff759dfc352fd03 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir"
sh=FFC8C0F5F61304C9FB8C8AE8F84363FD4B303ECC ft=1 fh=a070018d0efef5d2 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.29.0.520_0\APISupport\APISupport.dll.vir"
sh=FADE4553CF63ABD446132E31C7F927AC9D191F5D ft=1 fh=cfebcaa46fcaed43 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.29.0.520_0\nativeMessaging\TBMessagingHost.exe.vir"
sh=6324A1B6DDC60ED6DBF3FD7D5E0D8ED87A69D1DC ft=1 fh=94b7f1c67327f691 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.29.0.520_0\plugins\ChromeApiPlugin.dll.vir"
sh=37824D4B366B35F9C84237C48E66DF9687EEDEC6 ft=1 fh=c570259d3a36278d vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\Plugins\npConduitFirefoxPlugin.dll.vir"
sh=7B039B89BF4F1052102DC990DE981F298F181B14 ft=1 fh=189b440ac0fdf9bc vn="Win32/PSW.Papras.DC Trojaner" ac=I fn="C:\FRST\Quarantine\C\ProgramData\EwpiSvono\EwpiSvono.dat"
sh=2A88FC6509FDC3B22587F6E97AC12F70E4F75DC8 ft=1 fh=86e0df17c19558fd vn="Variante von Win32/Bundled.Toolbar.Ask.E potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\APNSetup.exe"
sh=408E55A7D2D56C02EF844CA63C1EA8D440D1F8B2 ft=1 fh=cf5f3ba9cab9d1c3 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll"
sh=EC5913DE16698FF281FE1F1108602BD300AFDA91 ft=1 fh=400322602d09beb6 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\ServiceLocator.exe"
sh=4E3A9EF57C71B5829AC8CD185CBED27AF6610C13 ft=1 fh=83a0e01ca2b69786 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\SO.dll"
sh=698FB11D2C5D96C744D8602AD22309F10509063A ft=1 fh=c3312308a781a9fa vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\toolbar.dll"
sh=0111559B94F5572B6777EBE3E85CB9F9C94BC85B ft=1 fh=76e883fd9357c7a4 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\Toolbar.exe"
sh=BB237CE0031AFF6ABD4E3626D7C6AE3D6ABEDB5A ft=1 fh=2522929e49563be6 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\ToolbarPS.dll"
sh=6CDE6B1DD298CA47510EB79334AE149F60FEFFCE ft=1 fh=0241d1e8e3e9ed03 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll"
sh=F2CFD9E6717ED73F51E976B3957C81DD518C5603 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.10.0_AVIRA-V7.msi"
sh=01EF1A2420765129D2F26E0530725B5F71D8BB96 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.2.2_AVIRA-V7.msi"
sh=F4B0FF4B42F223CF8338684906BCFFAD9AA2710E ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.6.0_AVIRA-V7.msi"
sh=0AB7E14045C76206A8733C6E4D36220A58C85A77 ft=1 fh=9f671b8e7a289dd3 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe"
sh=408E55A7D2D56C02EF844CA63C1EA8D440D1F8B2 ft=1 fh=cf5f3ba9cab9d1c3 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll"
sh=EC5913DE16698FF281FE1F1108602BD300AFDA91 ft=1 fh=400322602d09beb6 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe"
sh=4E3A9EF57C71B5829AC8CD185CBED27AF6610C13 ft=1 fh=83a0e01ca2b69786 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll"
sh=698FB11D2C5D96C744D8602AD22309F10509063A ft=1 fh=c3312308a781a9fa vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll"
sh=0111559B94F5572B6777EBE3E85CB9F9C94BC85B ft=1 fh=76e883fd9357c7a4 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe"
sh=BB237CE0031AFF6ABD4E3626D7C6AE3D6ABEDB5A ft=1 fh=2522929e49563be6 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll"
sh=9C835C702D070F54C59E36FED31696261FEBFDA3 ft=1 fh=29643e02259e76bc vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll"
sh=B27AA1F8303815E20CE148744957CB3726BCDE96 ft=1 fh=e7bb97c341e31fcc vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe"
sh=6CDE6B1DD298CA47510EB79334AE149F60FEFFCE ft=1 fh=0241d1e8e3e9ed03 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll"
sh=84987AF48F5107F84A12BB7418C0A7A2106906B0 ft=1 fh=6e62188c597b6ea7 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll"
sh=75A9BFE798ADFBFDFA8E0155A242E69ACD396E53 ft=1 fh=7e8b040c1a60dd55 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\vntldr.exe"
sh=4B553651EF610C0614F8393D6C25ABA0A8F09ECA ft=1 fh=92ef1bb072edf568 vn="Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung" ac=I fn="C:\Program Files\Avira\AntiVir Desktop\offercast_avirav7_.exe"
sh=81C2C3354F11ECE49D7667538CEFE9F2B2395319 ft=1 fh=cca4b3788ffc60aa vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files\Common Files\DVDVideoSoft\AskTB\ApnIC.dll"
sh=99DD33D629341F95D9853B1E63FCE454EC654560 ft=1 fh=08803d4e54260720 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files\Common Files\DVDVideoSoft\AskTB\ApnToolbarInstaller.exe"
sh=1D821D41C70D680FB496DFACE747B025C1CCE97F ft=1 fh=1e43c52facbea9b2 vn="Variante von Win32/DomaIQ.BB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000"
sh=37381F388BAE1EDBAC14E32FF3277F224AF74188 ft=1 fh=bc860133a238d9e1 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Users\admin\Downloads\avira_free_antivirus_de12001125.exe"
sh=35987E8A8AA932982D9CF0EA6DF502087644448E ft=1 fh=d82ceaa6d24562da vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\admin\Downloads\FreeYouTubeDownload.exe"
sh=846D95D63EDE9508EFC7CEEE1D145D7CE62988C3 ft=1 fh=ec23a4ae3310ce50 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\admin\Downloads\FreeYouTubeToMP3Converter(1).exe"
sh=7568B5EAC77999757C396FCAE5CF5CA2F350F0C4 ft=1 fh=877954751a9f8b60 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\admin\Downloads\FreeYouTubeToMP3Converter(2).exe"
sh=250AD920C538EBAC63102E368FB642EE33AD0593 ft=1 fh=8e020e8f8829bf65 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\admin\Downloads\FreeYouTubeToMP3Converter.exe"
sh=ADF1B98262EA25B6417F774D0A27F6F5FF69E3F0 ft=1 fh=6479540831fb8cef vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\admin\Downloads\OpenOffice - CHIP-Downloader.exe"
sh=1C5244967D8907B676C6CBCEEE6BD9F90F10CC6B ft=1 fh=51b3b1bbaa02ab32 vn="Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung" ac=I fn="C:\Users\admin\Downloads\PhotoScape_V3.6.2.exe"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ApnIC[1].0"
sh=E44D062204C9698F5C95651F2E424D37A31F5B15 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-AVIRA-V7[1].7z"
sh=A9B44B47329DFDC56F86EDA59429593DF39B5A54 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-AVIRA-V7[2].7z"
sh=1F69FB9BC4F314CBEC9BECEBA3F5C393006A7C57 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-AVIRA-V7[3].7z"
sh=40E49124AD0B55A25F947333CA88E9D0BC30A7E3 ft=1 fh=e26ad988592b2af9 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XZ5BNK7Y\ApnIC[1].0"
|
|
27.06.2014, 12:44
| #34 |
| /// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Ok und nochmal frische FRST-Logs bitte dann sind wir hoffentlich durch...  Schritt 1   Bitte starte FRST erneut, markiere auch die checkbox  und drücke auf Scan. Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ Gruß deeprybka  Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
27.06.2014, 14:46
| #35 |
| | "Avira wird durch eine Gruppenrichtlinie blockiert" FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by admin (administrator) on ADMIN-PC on 27-06-2014 14:02:11
Running from C:\Users\admin\Downloads
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(Sony) C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
() C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
() C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Logitech, Inc.) C:\Users\admin\AppData\Local\Logitech® Webcam-Software\Logishrd\LU2.0\LULnchr.exe
(Logitech, Inc.) C:\Users\admin\AppData\Local\Logitech® Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Development Co. L.P.) C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\OneClick.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
() C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [1706096 2010-10-27] (VIA)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-04] (Avira Operations GmbH & Co. KG)
HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-05-18] (Microsoft Corporation)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Google Update] => C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-08] (Google Inc.)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk
ShortcutTarget: AML Device Install.lnk -> C:\Program Files\AMD AVT\bin\kdbsync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x69F67AF84008CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=BDCF6DAE-E76B-45DD-A68C-D329956164D9&apn_sauid=72DB5C68-BBFE-414A-89E2-DA441947410A
SearchScopes: HKCU - {E7DFEC4F-1E56-43FC-879E-21F642BE1D8A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050&SSPV=IEOB05
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default
FF Homepage: hxxp://msn.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-11]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-09]
Chrome:
=======
CHR HomePage:
CHR Plugin: (Shockwave Flash) - C:\Users\admin\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.5) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\admin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-09-20]
CHR Extension: (Skype Click to Call) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-03-24]
CHR Extension: (Google Wallet) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-20]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-02-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-04] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
S3 npggsvc; C:\Windows\system32\GameMon.des [3975544 2012-05-09] (INCA Internet Co., Ltd.) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1740600 2013-08-30] (TuneUp Software)
S2 HPSLPSVC; C:\Users\admin\AppData\Local\Temp\7zS6B90\hpslpsvc32.dll [X]
==================== Drivers (Whitelisted) ====================
R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2006-11-02] (Microsoft Corporation)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-23] (Avira GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1149552 2010-10-25] (VIA Technologies, Inc.)
S3 catchme; \??\C:\Users\admin\AppData\Local\Temp\catchme.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-26 23:06 - 2014-06-26 23:06 - 00000000 ____D () C:\Program Files\ESET
2014-06-26 23:05 - 2014-06-26 23:05 - 02347384 _____ (ESET) C:\Users\admin\Downloads\esetsmartinstaller_deu.exe
2014-06-26 01:34 - 2014-06-26 01:34 - 00121222 _____ () C:\Users\admin\Downloads\HitmanPro_20140626_0134.log
2014-06-26 01:28 - 2014-06-26 01:34 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-26 01:28 - 2014-06-26 01:28 - 10274632 _____ (SurfRight B.V.) C:\Users\admin\Downloads\HitmanPro.exe
2014-06-26 01:01 - 2014-06-26 01:24 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-06-26 01:01 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-26 01:01 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-26 01:01 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-26 01:00 - 2014-06-26 01:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-26 00:49 - 2014-06-26 01:21 - 00000000 ____D () C:\ProgramData\EwpiSvono
2014-06-26 00:30 - 2014-06-26 00:58 - 00000000 ____D () C:\AdwCleaner
2014-06-26 00:30 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-06-26 00:29 - 2014-06-26 00:29 - 01342659 _____ () C:\Users\admin\Downloads\adwcleaner_3.213.exe
2014-06-26 00:22 - 2014-06-26 00:22 - 00015850 _____ () C:\ComboFix.txt
2014-06-25 23:58 - 2014-06-26 00:22 - 00000000 ____D () C:\Qoobox
2014-06-25 23:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-25 23:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-25 23:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-25 23:57 - 2014-06-26 00:20 - 00000000 ____D () C:\Windows\erdnt
2014-06-25 23:57 - 2014-06-25 23:57 - 05211571 ____R (Swearware) C:\Users\admin\Downloads\ComboFix.exe
2014-06-25 23:41 - 2014-06-25 23:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{186F2A27-6EF0-4FF8-9017-830AF6D5FE66}
2014-06-25 23:20 - 2014-06-25 23:20 - 00031594 _____ () C:\Users\admin\Downloads\Addition.txt
2014-06-25 23:18 - 2014-06-27 14:02 - 00017723 _____ () C:\Users\admin\Downloads\FRST.txt
2014-06-25 23:18 - 2014-06-27 14:02 - 00000000 ____D () C:\FRST
2014-06-25 23:18 - 2014-06-25 23:18 - 01073152 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-06-25 22:43 - 2014-06-25 22:44 - 00458833 _____ () C:\Users\admin\Downloads\kavremvr 2014-06-25 22-43-10 (pid 1952).log
2014-06-25 22:42 - 2014-06-25 22:42 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\admin\Downloads\kavremover.exe
2014-06-25 22:14 - 2014-06-25 22:20 - 173838160 _____ () C:\Users\admin\Downloads\New_PC_Studio_1.5.1.10064_2.exe
2014-06-25 11:40 - 2014-06-25 11:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{3EED6AA6-D524-4F07-A23E-4860E5EAE0FA}
2014-06-24 21:52 - 2014-06-24 21:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{EE0CC8EC-9A35-44BC-B3D4-099B1864FB9A}
2014-06-24 09:50 - 2014-06-24 09:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{53206F07-D646-4DA0-9417-B9741DC90340}
2014-06-24 00:07 - 2014-06-25 17:09 - 00020927 _____ () C:\Users\admin\Desktop\Bewerbung.odt
2014-06-23 20:48 - 2014-06-24 00:08 - 00000000 ____D () C:\Users\admin\Desktop\2014-06 (Jun)
2014-06-23 19:46 - 2014-06-23 19:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{16242B02-12BA-43F0-BE0D-423B07CD5790}
2014-06-22 11:44 - 2014-06-22 23:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{88AE844F-1371-4F20-9393-856F2B3D8B9D}
2014-06-21 15:29 - 2014-06-21 15:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{BFBB4C36-F3DB-47C7-AC18-3D5D4F33022E}
2014-06-20 23:06 - 2014-06-20 23:06 - 00000000 ____D () C:\Users\admin\AppData\Local\{5D338E0B-BF39-42C7-9C9E-DC5EF7E11EB8}
2014-06-18 18:07 - 2014-06-18 18:07 - 00000000 ____D () C:\Users\admin\AppData\Local\{949F82E3-9F21-4106-9CB9-63F221468110}
2014-06-18 16:55 - 2014-06-18 16:55 - 00000000 ____D () C:\Users\admin\AppData\Local\{638A86CE-1FF7-4B83-B9CA-B36829E18C4E}
2014-06-17 11:59 - 2014-06-17 11:59 - 00000000 ____D () C:\Users\admin\AppData\Local\{FEA4FC39-13F6-45A9-BE92-9440A4CCEBA8}
2014-06-16 23:50 - 2014-06-16 23:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{E3405660-900F-48FE-A6BF-EE7E5EAD42BC}
2014-06-16 11:49 - 2014-06-16 11:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{4873065B-A4D8-4FC7-9F47-4B235BFF68BA}
2014-06-15 12:03 - 2014-06-15 12:03 - 00000000 ____D () C:\Users\admin\AppData\Local\{8D34C924-5103-43C3-845E-85DA0FCF1DE9}
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\admin\AppData\Local\{10937928-55C7-4757-866C-9C474354BC6B}
2014-06-13 21:50 - 2014-06-13 21:50 - 00052894 _____ () C:\Users\admin\Downloads\Dein Lebenslauf als PDF.zip
2014-06-13 19:22 - 2014-06-13 19:22 - 00000000 ____D () C:\Users\admin\Downloads\Originals
2014-06-13 19:20 - 2014-06-23 20:49 - 00006144 ____H () C:\Users\admin\Downloads\photothumb.db
2014-06-13 19:07 - 2014-06-17 20:50 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Windows Live Writer
2014-06-13 19:07 - 2014-06-13 19:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live Writer
2014-06-13 15:43 - 2014-06-13 15:44 - 00000000 ____D () C:\Users\admin\AppData\Local\{EFAE5DE0-F23D-488B-85F3-47370B533003}
2014-06-13 00:20 - 2014-06-13 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{301053BA-6CD3-4FA6-A086-052FB9A23B01}
2014-06-12 12:18 - 2014-06-12 12:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{1BF72EF0-3F48-4E5B-A4B4-6F9157DFC8BC}
2014-06-11 18:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 18:58 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 18:58 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 18:58 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 18:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 18:58 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 18:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 18:58 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 18:58 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 18:58 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 18:58 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 18:58 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 18:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 18:58 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 18:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 18:58 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 18:58 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 18:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 18:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 18:58 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 18:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 18:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 18:58 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-11 18:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 18:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 18:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 18:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 18:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 18:57 - 2014-05-08 11:06 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 18:57 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 18:57 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 18:57 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 18:57 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 18:57 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 18:57 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 18:57 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 18:33 - 2014-06-11 18:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-11 17:29 - 2014-06-11 17:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{570C1815-1684-4688-9D60-2AB1FCA1E52D}
2014-06-10 11:22 - 2014-06-10 23:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{A1EFE083-120B-478A-9D69-737FCD1764F5}
2014-06-09 20:24 - 2014-06-09 20:25 - 00000000 ____D () C:\Users\admin\AppData\Local\{22EADCD1-4D9E-4FDA-9DAC-DC2A6DC935CE}
2014-06-09 00:24 - 2014-06-09 00:25 - 00000000 ____D () C:\Users\admin\AppData\Local\{4CD33A4B-9A86-4AA9-A6A7-CC8611CB999D}
2014-06-08 12:23 - 2014-06-08 12:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{5ED21193-B9EA-477D-A7AC-8CBB3892C1B8}
2014-06-07 20:32 - 2014-06-07 20:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{1D38EC89-E9C7-4702-A4CD-DB2BB0D7AD14}
2014-06-06 12:33 - 2014-06-06 12:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{3F2984A0-D386-4C60-8003-19BBAFA0CB64}
2014-06-06 00:18 - 2014-06-06 00:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{7E55463D-B596-43E5-BEA7-B47DE940FB88}
2014-06-05 12:17 - 2014-06-05 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{CB1B5164-E548-42E0-8DD0-40545A9E28B1}
2014-06-05 00:17 - 2014-06-05 00:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{0BD0F7D6-C3FB-4ACE-9775-4B5296AC115D}
2014-06-04 12:16 - 2014-06-04 12:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{1B122807-7725-4D6B-955D-28B48ED5E356}
2014-06-03 12:14 - 2014-06-04 00:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{55B730A7-3FB8-4374-9002-12B26B186768}
2014-06-03 00:14 - 2014-06-03 00:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{8077B01F-A0B5-4708-9B04-8796367F3465}
2014-06-02 12:12 - 2014-06-02 12:13 - 00000000 ____D () C:\Users\admin\AppData\Local\{BBA74DDF-37FF-420D-8798-6D388996A694}
2014-06-01 11:52 - 2014-06-01 23:53 - 00000000 ____D () C:\Users\admin\AppData\Local\{3475AF7E-6E24-471E-8F9E-585BBF1B86B3}
2014-05-31 23:54 - 2014-05-31 23:55 - 59782173 _____ () C:\Users\admin\Downloads\Pokemon HeartGold.zip
2014-05-31 23:53 - 2014-06-01 00:04 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Opera Software
2014-05-31 23:53 - 2014-06-01 00:04 - 00000000 ____D () C:\Users\admin\AppData\Local\Opera Software
2014-05-31 23:52 - 2014-06-01 00:04 - 00000000 ____D () C:\Program Files\Opera
2014-05-31 23:51 - 2014-05-31 23:51 - 05250247 _____ () C:\Users\admin\Downloads\Pokemon FireRed.zip
2014-05-31 23:34 - 2014-05-31 23:34 - 00000000 ____D () C:\ProgramData\TEMP
2014-05-31 22:50 - 2014-05-31 22:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{AF090ECC-4319-438E-AD73-03F802547607}
2014-05-30 12:50 - 2014-05-31 00:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{A021ECFB-2079-4A1C-860B-85328AFF7AB0}
2014-05-30 11:56 - 2014-05-30 11:56 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-29 12:48 - 2014-05-30 00:49 - 00000000 ____D () C:\Users\admin\AppData\Local\{122B6BC9-CC46-4187-AE50-527B28905EE4}
2014-05-28 20:40 - 2014-06-04 20:38 - 00000000 ____D () C:\Users\admin\Desktop\PokeMMO-Client
2014-05-28 20:20 - 2014-05-28 20:21 - 00000000 ____D () C:\Users\admin\AppData\Local\{1A827180-D793-473F-9AD2-A1D63B7DA69C}
2014-05-28 00:19 - 2014-05-28 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{255B0D89-94EA-4A5F-B006-88B3F77AF1F3}
==================== One Month Modified Files and Folders =======
2014-06-27 14:02 - 2014-06-25 23:18 - 00017723 _____ () C:\Users\admin\Downloads\FRST.txt
2014-06-27 14:02 - 2014-06-25 23:18 - 00000000 ____D () C:\FRST
2014-06-27 13:07 - 2012-09-08 00:14 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job
2014-06-27 13:07 - 2012-04-10 22:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-27 11:12 - 2012-05-12 13:55 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job
2014-06-27 11:01 - 2012-03-09 20:29 - 01979739 _____ () C:\Windows\WindowsUpdate.log
2014-06-27 00:07 - 2012-09-08 00:14 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job
2014-06-26 23:08 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-26 23:08 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-26 23:06 - 2014-06-26 23:06 - 00000000 ____D () C:\Program Files\ESET
2014-06-26 23:06 - 2012-03-09 20:53 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-26 23:05 - 2014-06-26 23:05 - 02347384 _____ (ESET) C:\Users\admin\Downloads\esetsmartinstaller_deu.exe
2014-06-26 23:00 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-26 23:00 - 2009-07-14 06:39 - 00092997 _____ () C:\Windows\setupact.log
2014-06-26 01:42 - 2012-03-10 17:35 - 00627532 _____ () C:\Windows\PFRO.log
2014-06-26 01:34 - 2014-06-26 01:34 - 00121222 _____ () C:\Users\admin\Downloads\HitmanPro_20140626_0134.log
2014-06-26 01:34 - 2014-06-26 01:28 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-26 01:28 - 2014-06-26 01:28 - 10274632 _____ (SurfRight B.V.) C:\Users\admin\Downloads\HitmanPro.exe
2014-06-26 01:24 - 2014-06-26 01:01 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-26 01:21 - 2014-06-26 00:49 - 00000000 ____D () C:\ProgramData\EwpiSvono
2014-06-26 01:21 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-06-26 01:00 - 2014-06-26 01:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-26 00:58 - 2014-06-26 00:30 - 00000000 ____D () C:\AdwCleaner
2014-06-26 00:31 - 2012-03-13 22:38 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-06-26 00:29 - 2014-06-26 00:29 - 01342659 _____ () C:\Users\admin\Downloads\adwcleaner_3.213.exe
2014-06-26 00:22 - 2014-06-26 00:22 - 00015850 _____ () C:\ComboFix.txt
2014-06-26 00:22 - 2014-06-25 23:58 - 00000000 ____D () C:\Qoobox
2014-06-26 00:22 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-06-26 00:20 - 2014-06-25 23:57 - 00000000 ____D () C:\Windows\erdnt
2014-06-26 00:16 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-06-25 23:57 - 2014-06-25 23:57 - 05211571 ____R (Swearware) C:\Users\admin\Downloads\ComboFix.exe
2014-06-25 23:41 - 2014-06-25 23:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{186F2A27-6EF0-4FF8-9017-830AF6D5FE66}
2014-06-25 23:20 - 2014-06-25 23:20 - 00031594 _____ () C:\Users\admin\Downloads\Addition.txt
2014-06-25 23:18 - 2014-06-25 23:18 - 01073152 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-06-25 22:50 - 2012-03-25 22:03 - 00000000 ____D () C:\Users\admin\AppData\Local\CrashDumps
2014-06-25 22:44 - 2014-06-25 22:43 - 00458833 _____ () C:\Users\admin\Downloads\kavremvr 2014-06-25 22-43-10 (pid 1952).log
2014-06-25 22:42 - 2014-06-25 22:42 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\admin\Downloads\kavremover.exe
2014-06-25 22:32 - 2009-07-14 04:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-06-25 22:20 - 2014-06-25 22:14 - 173838160 _____ () C:\Users\admin\Downloads\New_PC_Studio_1.5.1.10064_2.exe
2014-06-25 22:18 - 2012-03-09 20:39 - 00000000 ____D () C:\Users\admin
2014-06-25 22:17 - 2012-03-13 22:36 - 00000000 ____D () C:\Users\admin\Desktop\HUONG
2014-06-25 17:09 - 2014-06-24 00:07 - 00020927 _____ () C:\Users\admin\Desktop\Bewerbung.odt
2014-06-25 14:12 - 2012-05-12 13:55 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job
2014-06-25 11:41 - 2014-06-25 11:40 - 00000000 ____D () C:\Users\admin\AppData\Local\{3EED6AA6-D524-4F07-A23E-4860E5EAE0FA}
2014-06-24 22:09 - 2012-08-08 13:39 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype
2014-06-24 21:52 - 2014-06-24 21:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{EE0CC8EC-9A35-44BC-B3D4-099B1864FB9A}
2014-06-24 16:22 - 2012-07-05 23:19 - 00498794 _____ () C:\Windows\DPINST.LOG
2014-06-24 16:22 - 2012-07-05 23:19 - 00001972 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-06-24 16:22 - 2012-07-05 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-06-24 16:22 - 2012-03-10 17:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-24 09:50 - 2014-06-24 09:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{53206F07-D646-4DA0-9417-B9741DC90340}
2014-06-24 00:08 - 2014-06-23 20:48 - 00000000 ____D () C:\Users\admin\Desktop\2014-06 (Jun)
2014-06-23 20:49 - 2014-06-13 19:20 - 00006144 ____H () C:\Users\admin\Downloads\photothumb.db
2014-06-23 20:49 - 2012-09-08 12:57 - 00071680 ____H () C:\Users\admin\Desktop\photothumb.db
2014-06-23 19:46 - 2014-06-23 19:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{16242B02-12BA-43F0-BE0D-423B07CD5790}
2014-06-22 23:46 - 2014-06-22 11:44 - 00000000 ____D () C:\Users\admin\AppData\Local\{88AE844F-1371-4F20-9393-856F2B3D8B9D}
2014-06-21 15:29 - 2014-06-21 15:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{BFBB4C36-F3DB-47C7-AC18-3D5D4F33022E}
2014-06-20 23:06 - 2014-06-20 23:06 - 00000000 ____D () C:\Users\admin\AppData\Local\{5D338E0B-BF39-42C7-9C9E-DC5EF7E11EB8}
2014-06-18 18:08 - 2012-03-13 19:53 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live
2014-06-18 18:07 - 2014-06-18 18:07 - 00000000 ____D () C:\Users\admin\AppData\Local\{949F82E3-9F21-4106-9CB9-63F221468110}
2014-06-18 16:55 - 2014-06-18 16:55 - 00000000 ____D () C:\Users\admin\AppData\Local\{638A86CE-1FF7-4B83-B9CA-B36829E18C4E}
2014-06-17 20:50 - 2014-06-13 19:07 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Windows Live Writer
2014-06-17 11:59 - 2014-06-17 11:59 - 00000000 ____D () C:\Users\admin\AppData\Local\{FEA4FC39-13F6-45A9-BE92-9440A4CCEBA8}
2014-06-16 23:50 - 2014-06-16 23:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{E3405660-900F-48FE-A6BF-EE7E5EAD42BC}
2014-06-16 11:50 - 2014-06-16 11:49 - 00000000 ____D () C:\Users\admin\AppData\Local\{4873065B-A4D8-4FC7-9F47-4B235BFF68BA}
2014-06-15 12:03 - 2014-06-15 12:03 - 00000000 ____D () C:\Users\admin\AppData\Local\{8D34C924-5103-43C3-845E-85DA0FCF1DE9}
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\admin\AppData\Local\{10937928-55C7-4757-866C-9C474354BC6B}
2014-06-13 21:50 - 2014-06-13 21:50 - 00052894 _____ () C:\Users\admin\Downloads\Dein Lebenslauf als PDF.zip
2014-06-13 21:02 - 2012-09-08 00:15 - 00002322 _____ () C:\Users\admin\Desktop\Google Chrome.lnk
2014-06-13 19:22 - 2014-06-13 19:22 - 00000000 ____D () C:\Users\admin\Downloads\Originals
2014-06-13 19:08 - 2014-06-13 19:07 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live Writer
2014-06-13 15:44 - 2014-06-13 15:43 - 00000000 ____D () C:\Users\admin\AppData\Local\{EFAE5DE0-F23D-488B-85F3-47370B533003}
2014-06-13 00:20 - 2014-06-13 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{301053BA-6CD3-4FA6-A086-052FB9A23B01}
2014-06-12 19:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-12 12:19 - 2014-06-12 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{1BF72EF0-3F48-4E5B-A4B4-6F9157DFC8BC}
2014-06-12 12:15 - 2012-04-26 19:00 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-12 01:16 - 2013-08-14 23:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 01:15 - 2012-07-07 20:26 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 18:33 - 2014-06-11 18:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-11 17:29 - 2014-06-11 17:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{570C1815-1684-4688-9D60-2AB1FCA1E52D}
2014-06-10 23:23 - 2014-06-10 11:22 - 00000000 ____D () C:\Users\admin\AppData\Local\{A1EFE083-120B-478A-9D69-737FCD1764F5}
2014-06-09 20:25 - 2014-06-09 20:24 - 00000000 ____D () C:\Users\admin\AppData\Local\{22EADCD1-4D9E-4FDA-9DAC-DC2A6DC935CE}
2014-06-09 00:25 - 2014-06-09 00:24 - 00000000 ____D () C:\Users\admin\AppData\Local\{4CD33A4B-9A86-4AA9-A6A7-CC8611CB999D}
2014-06-08 12:23 - 2014-06-08 12:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{5ED21193-B9EA-477D-A7AC-8CBB3892C1B8}
2014-06-07 20:33 - 2014-06-07 20:32 - 00000000 ____D () C:\Users\admin\AppData\Local\{1D38EC89-E9C7-4702-A4CD-DB2BB0D7AD14}
2014-06-06 12:33 - 2014-06-06 12:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{3F2984A0-D386-4C60-8003-19BBAFA0CB64}
2014-06-06 00:18 - 2014-06-06 00:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{7E55463D-B596-43E5-BEA7-B47DE940FB88}
2014-06-05 12:18 - 2014-06-05 12:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{CB1B5164-E548-42E0-8DD0-40545A9E28B1}
2014-06-05 00:17 - 2014-06-05 00:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{0BD0F7D6-C3FB-4ACE-9775-4B5296AC115D}
2014-06-04 20:38 - 2014-05-28 20:40 - 00000000 ____D () C:\Users\admin\Desktop\PokeMMO-Client
2014-06-04 13:40 - 2013-08-24 12:16 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-04 13:40 - 2013-08-24 12:16 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-04 12:16 - 2014-06-04 12:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{1B122807-7725-4D6B-955D-28B48ED5E356}
2014-06-04 00:16 - 2014-06-03 12:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{55B730A7-3FB8-4374-9002-12B26B186768}
2014-06-03 00:14 - 2014-06-03 00:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{8077B01F-A0B5-4708-9B04-8796367F3465}
2014-06-02 12:13 - 2014-06-02 12:12 - 00000000 ____D () C:\Users\admin\AppData\Local\{BBA74DDF-37FF-420D-8798-6D388996A694}
2014-06-01 23:53 - 2014-06-01 11:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{3475AF7E-6E24-471E-8F9E-585BBF1B86B3}
2014-06-01 00:04 - 2014-05-31 23:53 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Opera Software
2014-06-01 00:04 - 2014-05-31 23:53 - 00000000 ____D () C:\Users\admin\AppData\Local\Opera Software
2014-06-01 00:04 - 2014-05-31 23:52 - 00000000 ____D () C:\Program Files\Opera
2014-05-31 23:55 - 2014-05-31 23:54 - 59782173 _____ () C:\Users\admin\Downloads\Pokemon HeartGold.zip
2014-05-31 23:51 - 2014-05-31 23:51 - 05250247 _____ () C:\Users\admin\Downloads\Pokemon FireRed.zip
2014-05-31 23:34 - 2014-05-31 23:34 - 00000000 ____D () C:\ProgramData\TEMP
2014-05-31 23:33 - 2012-04-03 18:46 - 00000000 ____D () C:\Users\admin\AppData\Local\Microsoft Games
2014-05-31 22:50 - 2014-05-31 22:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{AF090ECC-4319-438E-AD73-03F802547607}
2014-05-31 00:52 - 2014-05-30 12:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{A021ECFB-2079-4A1C-860B-85328AFF7AB0}
2014-05-30 11:56 - 2014-05-30 11:56 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-30 11:56 - 2012-08-08 13:39 - 00000000 ___RD () C:\Program Files\Skype
2014-05-30 11:56 - 2012-08-08 13:39 - 00000000 ____D () C:\ProgramData\Skype
2014-05-30 11:18 - 2014-06-11 18:58 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:02 - 2014-06-11 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 11:02 - 2014-06-11 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 10:44 - 2014-06-11 18:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 10:43 - 2014-06-11 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 10:42 - 2014-06-11 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-11 18:58 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 10:34 - 2014-06-11 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 10:33 - 2014-06-11 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 10:30 - 2014-06-11 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 10:28 - 2014-06-11 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 10:28 - 2014-06-11 18:58 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 10:27 - 2014-06-11 18:58 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 10:21 - 2014-06-11 18:58 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 10:16 - 2014-06-11 18:58 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:10 - 2014-06-11 18:58 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-11 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:04 - 2014-06-11 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 18:58 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 09:57 - 2014-06-11 18:58 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 09:56 - 2014-06-11 18:58 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 09:54 - 2014-06-11 18:58 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 09:50 - 2014-06-11 18:58 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-11 18:58 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 09:40 - 2014-06-11 18:58 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:21 - 2014-06-11 18:58 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:15 - 2014-06-11 18:58 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:13 - 2014-06-11 18:58 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 00:49 - 2014-05-29 12:48 - 00000000 ____D () C:\Users\admin\AppData\Local\{122B6BC9-CC46-4187-AE50-527B28905EE4}
2014-05-28 20:21 - 2014-05-28 20:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{1A827180-D793-473F-9AD2-A1D63B7DA69C}
2014-05-28 00:20 - 2014-05-28 00:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{255B0D89-94EA-4A5F-B006-88B3F77AF1F3}
Some content of TEMP:
====================
C:\Users\admin\AppData\Local\temp\avgnt.exe
C:\Users\admin\AppData\Local\temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-18 22:19
==================== End Of Log ============================
--- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:25-06-2014
Ran by admin at 2014-06-27 14:03:31
Running from C:\Users\admin\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
Adobe AIR (Version: 1.0.8.4990 - Adobe Systems Inc.) Hidden
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 2.00.0001 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.898.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{C4100721-2D71-CC80-8877-0A7855B6EEFB}) (Version: 3.0.868.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.70214.2220 - Advanced Micro Devices, Inc.) Hidden
ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4487 - APN, LLC)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (Version: 2012.0214.2218.39913 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
Copy (Version: 130.0.428.000 - Hewlett-Packard) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 130.0.465.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (Version: 130.0.365.000 - Hewlett-Packard) Hidden
Elsword_DE (HKLM\...\Elsword_DE_is1) (Version: - )
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
F4200 (Version: 130.0.365.000 - Hewlett-Packard) Hidden
Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Free Audio CD Burner version 1.4.8 (HKLM\...\Free Audio CD Burner_is1) (Version: - DVDVideoSoft Limited.)
Free YouTube Download version 3.1.37.918 (HKLM\...\Free YouTube Download_is1) (Version: 3.1.37.918 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.13.925 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.13.925 - DVDVideoSoft Ltd.)
Google Chrome (HKCU\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden
Java Auto Updater (Version: 2.1.6.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 7 Update 5 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217005FF}) (Version: 7.0.50 - Oracle)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.31 - Logitech Inc.)
LWS Facebook (Version: 13.31.1038.0 - Logitech) Hidden
LWS Gallery (Version: 13.31.1038.0 - Logitech) Hidden
LWS Help_main (Version: 13.31.1044.0 - Logitech) Hidden
LWS Launcher (Version: 13.31.1038.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.31.1038.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Media Go (HKLM\...\{362AB21A-E2C4-40CE-81C2-8C4D62B0635A}) (Version: 2.4.256 - Sony)
Media Go Video Playback Engine 1.116.109.02030 (HKLM\...\{54215B8A-6212-8DB8-39B4-98EE2BB98BD1}) (Version: 1.116.109.02030 - Sony)
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
Platform (Version: 1.34 - VIA Technologies, Inc.) Hidden
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0009 - Realtek)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype Click to Call (HKLM\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SmartWebPrinting (Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.211 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.211 - Sony)
Status (Version: 130.0.469.000 - Hewlett-Packard) Hidden
Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (Version: 130.0.422.000 - Hewlett-Packard) Hidden
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.89 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM\...\TuneUp Utilities 2014) (Version: 14.0.1000.89 - TuneUp Software)
TuneUp Utilities 2014 (Version: 14.0.1000.89 - TuneUp Software) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - )
UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden
VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Restore Points =========================
18-06-2014 15:11:39 Sony PC Companion
25-06-2014 21:58:14 ComboFix created restore point
25-06-2014 23:34:07 Prüfpunkt von HitmanPro
==================== Hosts content: ==========================
2009-07-14 04:04 - 2014-06-26 00:16 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {018230F2-5D11-43A1-9A51-76FA8FF48BC0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {0A179964-1EF9-4B62-AED2-85E8B451F2EF} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA => C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-17] (Facebook Inc.)
Task: {2FA9F294-38CC-460D-B185-D1712D4ECB41} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core => C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-08] (Google Inc.)
Task: {61C9533C-A5A8-4C69-856F-827F9C3507D1} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08] (Hewlett-Packard)
Task: {82C778DE-26A7-4C0D-9BF6-2494C569478B} - System32\Tasks\Google Updater and Installer => C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-08] (Google Inc.)
Task: {83264D8B-8132-4C15-AEA6-90F200DCC147} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core => C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-17] (Facebook Inc.)
Task: {DE300EED-CB94-400C-B0B7-6EBE6CA68E3B} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17] (Sun Microsystems, Inc.)
Task: {E12AD530-7E84-4CF7-BA94-53CB2AB82F8F} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2014\OneClick.exe [2013-08-30] (TuneUp Software)
Task: {EB2C763D-C12D-42BD-BDAA-3ADEFE8C25BB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA => C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-08] (Google Inc.)
Task: {FCBF433A-16B6-42B7-AD83-48B23BC97863} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job => C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job => C:\Users\admin\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job => C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job => C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-08-30 09:51 - 2013-08-30 09:51 - 00501560 _____ () C:\Program Files\TuneUp Utilities 2014\avgreplibx.dll
2012-03-10 17:30 - 2010-10-27 08:56 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
2012-03-10 17:30 - 2010-10-27 08:56 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
2012-03-10 17:30 - 2010-10-27 08:57 - 00100976 ____R () C:\Program Files\VIA\VIAudioi\VDeck\VMicApi.dll
2012-03-10 17:30 - 2010-10-27 08:57 - 64663664 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 02145304 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 07956504 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00342552 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00029208 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00128536 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2012-07-05 23:19 - 2012-04-30 11:57 - 00039936 _____ () C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll
2012-07-05 23:19 - 2013-09-13 11:02 - 00208896 _____ () C:\Program Files\Sony\Sony PC Companion\MExplorer.dll
2011-07-07 15:54 - 2011-07-07 15:54 - 00233984 _____ () C:\Program Files\Sony\Sony PC Companion\Report.dll
2013-01-09 14:11 - 2013-01-09 14:11 - 00599040 _____ () C:\Program Files\Sony\Sony PC Companion\PhoneUpdate.dll
2011-11-11 14:07 - 2011-11-11 14:07 - 00265240 _____ () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2011-11-11 14:09 - 2011-11-11 14:09 - 00336408 _____ () C:\Program Files\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
2012-07-05 23:19 - 2013-10-31 12:35 - 00070880 _____ () C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
2012-02-14 23:13 - 2012-02-14 23:13 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-06-11 18:33 - 2014-06-11 18:33 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-05-14 21:07 - 2014-05-14 21:07 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
2014-06-26 23:06 - 2014-05-23 10:56 - 00119184 _____ () C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/25/2014 10:49:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: msooh.exe, Version: 0.0.0.0, Zeitstempel: 0x539ef790
Name des fehlerhaften Moduls: msooh.exe, Version: 0.0.0.0, Zeitstempel: 0x539ef790
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007602
ID des fehlerhaften Prozesses: 0xdf8
Startzeit der fehlerhaften Anwendung: 0xmsooh.exe0
Pfad der fehlerhaften Anwendung: msooh.exe1
Pfad des fehlerhaften Moduls: msooh.exe2
Berichtskennung: msooh.exe3
Error: (06/25/2014 10:26:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 30.0.0.5269, Zeitstempel: 0x53914233
Name des fehlerhaften Moduls: mozalloc.dll, Version: 30.0.0.5269, Zeitstempel: 0x53911393
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x14a4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Error: (06/24/2014 07:58:39 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/24/2014 07:56:32 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (06/21/2014 07:52:06 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/21/2014 07:50:46 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (06/18/2014 10:21:58 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/18/2014 10:20:09 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (06/16/2014 10:18:42 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/16/2014 10:17:16 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
System errors:
=============
Error: (06/26/2014 11:02:59 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 11:01:27 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 11:01:27 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (06/26/2014 11:00:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 01:45:37 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 01:44:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 01:44:05 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (06/26/2014 01:43:35 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 01:34:16 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Error: (06/26/2014 01:23:33 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet:
%%126
Microsoft Office Sessions:
=========================
Error: (06/25/2014 10:49:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: msooh.exe0.0.0.0539ef790msooh.exe0.0.0.0539ef790c000000500007602df801cf90b703cb1e14C:\ProgramData\msooh.exeC:\ProgramData\msooh.exe42530246-fcaa-11e3-aa4e-bc5ff40be9f8
Error: (06/25/2014 10:26:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141b14a401cf90ab4a22b22aC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll06b2d934-fca7-11e3-b901-bc5ff40be9f8
Error: (06/24/2014 07:58:39 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
Error: (06/24/2014 07:56:32 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (06/21/2014 07:52:06 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
Error: (06/21/2014 07:50:46 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (06/18/2014 10:21:58 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
Error: (06/18/2014 10:20:09 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (06/16/2014 10:18:42 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Sony\sony pc companion\Drivers\DPInst64.exe
Error: (06/16/2014 10:17:16 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
==================== Memory info ===========================
Percentage of memory in use: 62%
Total physical RAM: 3255.05 MB
Available physical RAM: 1217.98 MB
Total Pagefile: 6506.34 MB
Available Pagefile: 3624.7 MB
Total Virtual: 2047.88 MB
Available Virtual: 1908.67 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.79 GB) (Free:50.81 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: F648F648)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Bis morgen ! |
|
28.06.2014, 14:44
| #36 | |
| /// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert" Hi, Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000
HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
SearchScopes: HKCU - {33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=BDCF6DAE-E76B-45DD-A68C-D329956164D9&apn_sauid=72DB5C68-BBFE-414A-89E2-DA441947410A
SearchScopes: HKCU - {E7DFEC4F-1E56-43FC-879E-21F642BE1D8A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050&SSPV=IEOB05
2014-06-26 00:49 - 2014-06-26 01:21 - 00000000 ____D () C:\ProgramData\EwpiSvono
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Unten bei den Tipps ist Java verlinkt. Hier die neueste Version installieren. Deine Version Zitat:
Ebenfalls verlinkt, Flash: Den Link mit allen Browser anklicken und die neueste Version ohne die optionalen Angebote installieren. Aufräumen: Defogger: Falls benutzt worden, Defogger nochmal starten und auf re-enable klicken. Anschließend: Schritt 1  Combofix-Deinstallation.
 Gibts jetzt noch Probleme mit Deinem Rechner? Oder hast Du noch Fragen? NEIN? Alle Logs gepostet? Ja! Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. >>clean<< Wir haben es geschafft!  Die Logs sehen für mich im Moment sauber aus.  Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. Epilog: Tipps, Dos & Don'ts  Aktualität von System und SoftwareDas Betriebsystem  Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die  automatischen Updates aktiviert sind.Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für die Browser  , Java  , Flash-Player  und PDF-Reader  , denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-SoftwareEine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine infizierte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox  einsetzen, für welchen es zwei nützliche Addons als Empfehlung gibt:
(Un-)Sicheres Verhalten im InternetNebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine HinweiseAbschließend noch ein paar grundsätzliche Bemerkungen:
__________________ --> "Avira wird durch eine Gruppenrichtlinie blockiert" |
|
28.06.2014, 15:45
| #37 |
| | "Avira wird durch eine Gruppenrichtlinie blockiert"Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:28-06-2014 02
Ran by admin at 2014-06-28 16:43:58 Run:3
Running from C:\Users\admin\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000
HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
SearchScopes: HKCU - {33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=BDCF6DAE-E76B-45DD-A68C-D329956164D9&apn_sauid=72DB5C68-BBFE-414A-89E2-DA441947410A
SearchScopes: HKCU - {E7DFEC4F-1E56-43FC-879E-21F642BE1D8A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050&SSPV=IEOB05
2014-06-26 00:49 - 2014-06-26 01:21 - 00000000 ____D () C:\ProgramData\EwpiSvono
*****************
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000 => Moved successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E7DFEC4F-1E56-43FC-879E-21F642BE1D8A}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{E7DFEC4F-1E56-43FC-879E-21F642BE1D8A}'=> Key not found.
C:\ProgramData\EwpiSvono => Moved successfully.
==== End of Fixlog ====
|
|
28.06.2014, 16:27
| #38 |
| /// TB-Ausbilder /// Anleitungs-Guru | "Avira wird durch eine Gruppenrichtlinie blockiert"Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
+ R Taste und schreibe Combofix /Uninstall in das 
Avast! Free Antivirus
Firewall. Die in Windows integrierte genügt im Normalfall völlig.
NoScript
Adblock Plus
Linear-Darstellung
