|
Plagegeister aller Art und deren Bekämpfung: Keine Verbindungen / Downloads mehr möglich - DNS Problem?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
18.07.2014, 11:40 | #1 |
| Keine Verbindungen / Downloads mehr möglich - DNS Problem? Moin, vorweg muss ich sagen, ich verfolge schon seit vielen Jahren dieses Board, grade auch um neue Dinge zu verfolgen da ich selbst lang in der IT Branche tätig (war). Ich habe nun seit gestern ein kleines Problem, ich habe nicht mehr die Möglichkeit extern (Per Software), Updates oder Downloads durchzuführen. Das ganze schien mir sofort nach einem DNA Problem oder sogar nach einer Botnet infektion. Um einige detailierte Beispiele zu geben, habe ich gut verständliche und bekannte Dinge probiert: - Das downloaden von Spielen per Steam ist nicht möglich - Das einloggen in die meisten Login Server ist nicht möglich - Das automatische downloaden von Software (zB. von Tools welche sich selbst installieren) ist bei einigen Tools nicht möglich Die Problembehandlung gibt mir folgende Fehlermeldung: Code:
ATTFilter The remote device or resource won't accept the connection Ich kann nach wie vor im Internet surfen, kann dort auch Software runterladen. Systeminfos: Windows 7, 64 Bit Ultimate auf Intel Basis Meine Internetleitung ist eine Alice o2 50k Verbindung. Es ist kein Problem mit dem Anbieter. Checkliste: - DNA Werte - Trojaner, Rootkits, Malware, Spyware und AdWare geprüft (Oberflächlich mit den gängigsten Tools.) - Anbieter kontaktiert ob es Probleme mit den Servern gibt - Nach fehlerhaften Diensten im System geschaut - Ip Konfigurationen geprüft - Router Konfigurationen geprüft - Prozesse durchgegangen, Logs von diversen Tools geprüft Ich bin ratlos, vlt. gab es ein ähnliches Problem und die Lösung liegt entweder irgendwo verzweigt, oder ist sogar einfacher als dort wo ich suche. Ich würde mich über hilfreiche Antworten sehr freuen! Vielen dank, Steve Edit: Hilfreicher Zusatz: Die Verbindung wird jedes mal auf einen Proxy zurückgesetzt. Außerdem ist mir ein Prozess von OCS aufgefallen, welcher bei jedem Downloadversuch / Verbindungsversuch eine .dat Datei erstellt im Temp Ordner. Die gefundene Datei ist definitiv der Trojaner. \\appdata\local\temp\ocs\ocs_v71b.exe Alllerdings auch nach Säuberung des Tools keine sichtbaren Erfolge was die Verbindung zu Servern angeht. Geändert von Highfish (18.07.2014 um 12:26 Uhr) |
18.07.2014, 12:47 | #2 |
/// the machine /// TB-Ausbilder | Keine Verbindungen / Downloads mehr möglich - DNS Problem? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
18.07.2014, 18:13 | #3 |
| Keine Verbindungen / Downloads mehr möglich - DNS Problem? FRST Logfile:
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01 Ran by Steven (administrator) on SWORDFISH on 18-07-2014 18:58:36 Running from F:\Downloads Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files\EslWire\service\WireHelperSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Turtle Entertainment GmbH) C:\Program Files\EslWire\wire.exe (Marx Softwareentwicklung - www.software4u.de) C:\Program Files (x86)\Software4u\iDevice Manager\Software4u.IDMLauncher.exe (Spotify Ltd) C:\Users\Steven\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\nis.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\nis.exe (Symantec Corporation) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\NPE.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe (Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.4826\Battle.net.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe (Oracle Corporation) C:\Windows\System32\java.exe (Farbar) F:\Downloads\FRST64(1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM\...\Winlogon: [Shell] [0 ] () <=== ATTENTION Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-12] (Valve Corporation) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [18642024 2013-02-28] (Skype Technologies S.A.) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\Run: [ESL Wire] => C:\Program Files\EslWire\wire.exe [3620352 2014-04-02] (Turtle Entertainment GmbH) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\Run: [iDevice Manager Launcher] => C:\Program Files (x86)\Software4u\iDevice Manager\Software4u.IDMLauncher.exe [139216 2014-03-15] (Marx Softwareentwicklung - www.software4u.de) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\Run: [Spotify Web Helper] => C:\Users\Steven\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-17] (Spotify Ltd) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\RunOnce: [*NPE] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\NPE.exe [3729920 2014-04-22] (Symantec Corporation) HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\MountPoints2: {24185def-fd6a-11e0-b7b4-806e6f6e6963} - D:\setup64.exe HKU\S-1-5-21-3388073453-1898520383-3220357028-1001\...\MountPoints2: {bb83e3d1-1c58-11e1-81d0-806e6f6e6963} - D:\Setup\setup.exe Startup: C:\Users\Steven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () ==================== Internet (Whitelisted) ==================== ProxyServer: http=127.0.0.1:8887;https=127.0.0.1:8887; HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.b1.org/?bsrc=hmior&chid=c167991 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x74EF7AF2BDE3CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={734B88BD-BB6D-42F2-9B8A-9082A501B95F}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms} BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.4.0.13\coIEPlg.dll (Symantec Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.4.0.13\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\coIEPlg.dll (Symantec Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default FF DefaultSearchEngine: Conduit Search FF SelectedSearchEngine: Conduit Search FF Homepage: google.pl FF NetworkProxy: "backup.ftp", "89.102.106.33" FF NetworkProxy: "backup.ftp_port", 3128 FF NetworkProxy: "backup.socks", "89.102.106.33" FF NetworkProxy: "backup.socks_port", 3128 FF NetworkProxy: "backup.ssl", "89.102.106.33" FF NetworkProxy: "backup.ssl_port", 3128 FF NetworkProxy: "ftp", "176.31.182.88" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "176.31.182.88" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "176.31.182.88" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "176.31.182.88" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\VLCP\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Steven\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Steven\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF user.js: detected! => C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.) FF SearchPlugin: C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\searchplugins\safesearch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Live HTTP Headers - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2012-06-28] FF Extension: DownloadHelper - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-26] FF Extension: DivX Web Player - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-02-25] FF Extension: Stealthy - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\stealthyextension@gmail.com.xpi [2012-01-13] FF Extension: 1-Click YouTube Video Downloader - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-01-21] FF Extension: Adblock Plus - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-02-12] FF Extension: Greasemonkey - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\smt3a75v.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-12-19] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-06-11] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-06-11] FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-25] FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2014-07-18] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-07-18] ==================== Services (Whitelisted) ================= S4 Apache2.2; c:\xampp\apache\bin\httpd.exe [18432 2011-09-10] (Apache Software Foundation) [File not signed] U3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-06-15] () [File not signed] S4 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-12] (BitRaider, LLC) S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-06-12] (CyberGhost S.R.L) S4 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH) R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [663056 2014-01-29] () S4 FileZilla Server; c:\xampp\FileZillaFTP\FileZillaServer.exe [630272 2011-06-07] (FileZilla Project) [File not signed] S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [File not signed] S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation) S4 mysql; c:\xampp\mysql\bin\mysqld.exe [8158720 2011-09-09] () [File not signed] S4 NetMsmqActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-09] (Microsoft Corporation) [File not signed] S4 NetPipeActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-09] (Microsoft Corporation) [File not signed] S4 NetTcpActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-09] (Microsoft Corporation) [File not signed] S4 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139680 2012-07-09] (Microsoft Corporation) [File not signed] R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\NIS.exe [276376 2014-06-27] (Symantec Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation) S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-03] () S4 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [94992 2011-11-23] (SANDBOXIE L.T.D) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation) S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 Themes; C:\Windows\system32\themeservice.dll [44544 2014-05-26] (Microsoft Corporation) [File not signed] S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R1 64891271; C:\Windows\System32\DRIVERS\64891271.sys [157712 2009-09-25] (Kaspersky Lab) R0 64891272; C:\Windows\System32\DRIVERS\64891272.sys [40464 2009-10-22] (Kaspersky Lab) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140703.001\BHDrvx64.sys [1530160 2014-07-03] (Symantec Corporation) S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-01-12] (BitRaider) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1504000.00D\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-07-18] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-07-18] (Symantec Corporation) S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH) R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [184968 2014-06-06] (<Turtle Entertainment>) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140717.001\IDSvia64.sys [525016 2014-07-17] (Symantec Corporation) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-03] (Logitech Inc.) R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140718.002\ENG64.SYS [126040 2014-07-18] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140718.002\EX64.SYS [2099288 2014-07-18] (Symantec Corporation) S3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2010-06-25] (CACE Technologies, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 s616bus; C:\Windows\System32\DRIVERS\s616bus.sys [108296 2007-04-03] (MCCI Corporation) S3 s616mdfl; C:\Windows\System32\DRIVERS\s616mdfl.sys [19720 2007-04-03] (MCCI Corporation) S3 s616mdm; C:\Windows\System32\DRIVERS\s616mdm.sys [144648 2007-04-03] (MCCI Corporation) S3 s616unic; C:\Windows\System32\DRIVERS\s616unic.sys [130312 2007-04-03] (MCCI Corporation) S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [158336 2011-11-23] (SANDBOXIE L.T.D) R0 SMR410; C:\Windows\System32\drivers\SMR410.SYS [96856 2014-07-18] (Symantec Corporation) R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1504000.00D\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1504000.00D\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NISx64\1504000.00D\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NISx64\1504000.00D\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-07-18] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1504000.00D\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1504000.00D\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S3 ALSysIO; \??\C:\Users\Steven\AppData\Local\Temp\ALSysIO64.sys [X] S3 ATICDSDr; \??\C:\Users\Steven\AppData\Local\Temp\ATICDSDr.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\1.3\temp\FairplayKD.sys [X] S3 injectDLL; \??\E:\Sicherung 15.10.2011\Alte Externe Festplatte\Quad Core Comp Backup\Progs Hacks etc\Ring0 By Steven NERO\Nero Esp\injectDLL.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-18 13:42 - 2014-07-18 13:43 - 00584940 _____ () C:\Windows\system32\Drivers\SMR410.dat 2014-07-18 13:17 - 2014-07-18 13:19 - 00000000 ____D () C:\NPE 2014-07-18 13:15 - 2014-07-18 13:43 - 00000000 ____D () C:\Users\Steven\AppData\Local\NPE 2014-07-18 13:15 - 2014-07-18 13:15 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS 2014-07-18 13:15 - 2014-07-18 13:15 - 00000000 ____D () C:\ProgramData\SMR410 2014-07-18 13:12 - 2014-07-18 13:12 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-07-18 13:04 - 2014-07-18 13:12 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-07-18 13:04 - 2014-07-18 13:12 - 00002501 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk 2014-07-18 13:04 - 2014-07-18 13:04 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2014-07-18 13:04 - 2014-07-18 13:04 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2014-07-18 13:04 - 2014-07-18 13:04 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-07-18 13:03 - 2014-07-18 13:15 - 00000000 ____D () C:\ProgramData\Norton 2014-07-18 13:03 - 2014-07-18 13:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2014-07-18 13:03 - 2014-07-18 13:12 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64 2014-07-18 13:03 - 2014-07-18 13:03 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security 2014-07-18 12:54 - 2014-07-18 12:55 - 00000000 ____D () C:\ProgramData\SecTaskMan 2014-07-18 12:53 - 2014-07-18 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager 2014-07-18 12:53 - 2014-07-18 12:53 - 00000000 ____D () C:\Program Files (x86)\Security Task Manager 2014-07-18 03:13 - 2014-07-18 03:13 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-18 03:07 - 2014-07-18 18:58 - 00000000 ____D () C:\FRST 2014-07-18 02:56 - 2014-07-18 12:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-18 02:56 - 2014-07-18 02:56 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-18 02:56 - 2014-07-18 02:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-18 02:56 - 2014-07-18 02:56 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-18 02:56 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-18 02:56 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-18 02:51 - 2014-07-18 03:12 - 00002033 _____ () C:\Users\Steven\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-07-18 02:51 - 2014-07-18 03:12 - 00001977 _____ () C:\Users\Steven\Desktop\Avira EU-Cleaner.lnk 2014-07-18 00:44 - 2014-07-18 00:44 - 00000000 ____D () C:\ProgramData\Riot Games 2014-07-12 18:31 - 2014-07-12 18:34 - 00000000 ____D () C:\Users\Steven\Desktop\polo 2014-07-09 14:52 - 2014-07-11 11:57 - 00000000 ____D () C:\Users\Steven\Desktop\mcserver 2014-07-09 14:08 - 2014-07-09 14:05 - 00675988 _____ () C:\Users\Steven\Desktop\Minecraft(1).exe 2014-06-30 01:12 - 2014-06-30 01:12 - 00000222 _____ () C:\Users\Steven\Desktop\The Stanley Parable.url 2014-06-24 00:49 - 2014-06-24 00:49 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\SimulationCraft ==================== One Month Modified Files and Folders ======= 2014-07-18 18:58 - 2014-07-18 03:07 - 00000000 ____D () C:\FRST 2014-07-18 18:57 - 2014-05-08 06:32 - 00000000 ____D () C:\Users\Steven\AppData\Local\Battle.net 2014-07-18 18:52 - 2011-10-23 13:38 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\Skype 2014-07-18 18:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2014-07-18 18:25 - 2012-04-11 20:06 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-18 17:27 - 2012-10-19 20:22 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3388073453-1898520383-3220357028-1001UA.job 2014-07-18 14:41 - 2012-12-25 16:17 - 00000000 ____D () C:\Program Files\AutoHotkey 2014-07-18 14:05 - 2011-10-23 13:34 - 01577767 _____ () C:\Windows\WindowsUpdate.log 2014-07-18 13:43 - 2014-07-18 13:42 - 00584940 _____ () C:\Windows\system32\Drivers\SMR410.dat 2014-07-18 13:43 - 2014-07-18 13:15 - 00000000 ____D () C:\Users\Steven\AppData\Local\NPE 2014-07-18 13:30 - 2011-10-23 13:57 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\TS3Client 2014-07-18 13:28 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-18 13:28 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-18 13:19 - 2014-07-18 13:17 - 00000000 ____D () C:\NPE 2014-07-18 13:19 - 2012-02-05 21:33 - 00000000 ____D () C:\Users\Steven\AppData\Local\Deployment 2014-07-18 13:18 - 2012-03-03 13:03 - 00000000 ____D () C:\Users\Steven\AppData\Local\ESL Wire Game Client 2014-07-18 13:17 - 2014-05-25 15:45 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-07-18 13:17 - 2014-01-23 15:19 - 00008029 _____ () C:\Windows\setupact.log 2014-07-18 13:17 - 2011-10-23 13:47 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-07-18 13:17 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-18 13:16 - 2014-05-05 22:09 - 00248578 _____ () C:\Windows\PFRO.log 2014-07-18 13:16 - 2011-12-30 14:35 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-07-18 13:15 - 2014-07-18 13:15 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS 2014-07-18 13:15 - 2014-07-18 13:15 - 00000000 ____D () C:\ProgramData\SMR410 2014-07-18 13:15 - 2014-07-18 13:03 - 00000000 ____D () C:\ProgramData\Norton 2014-07-18 13:12 - 2014-07-18 13:12 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-07-18 13:12 - 2014-07-18 13:04 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-07-18 13:12 - 2014-07-18 13:04 - 00002501 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk 2014-07-18 13:12 - 2014-07-18 13:03 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2014-07-18 13:12 - 2014-07-18 13:03 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64 2014-07-18 13:04 - 2014-07-18 13:04 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2014-07-18 13:04 - 2014-07-18 13:04 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2014-07-18 13:04 - 2014-07-18 13:04 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-07-18 13:03 - 2014-07-18 13:03 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security 2014-07-18 12:56 - 2014-07-18 02:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-18 12:55 - 2014-07-18 12:54 - 00000000 ____D () C:\ProgramData\SecTaskMan 2014-07-18 12:53 - 2014-07-18 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager 2014-07-18 12:53 - 2014-07-18 12:53 - 00000000 ____D () C:\Program Files (x86)\Security Task Manager 2014-07-18 12:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-18 03:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-07-18 03:13 - 2014-07-18 03:13 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-18 03:12 - 2014-07-18 02:51 - 00002033 _____ () C:\Users\Steven\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-07-18 03:12 - 2014-07-18 02:51 - 00001977 _____ () C:\Users\Steven\Desktop\Avira EU-Cleaner.lnk 2014-07-18 02:56 - 2014-07-18 02:56 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-18 02:56 - 2014-07-18 02:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-18 02:56 - 2014-07-18 02:56 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-18 02:56 - 2013-06-26 01:49 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\Malwarebytes 2014-07-18 02:56 - 2013-06-26 01:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-18 02:13 - 2011-10-23 13:41 - 00000000 ____D () C:\Users\Steven\AppData\Local\PMB Files 2014-07-18 02:13 - 2011-10-23 13:41 - 00000000 ____D () C:\ProgramData\PMB Files 2014-07-18 00:44 - 2014-07-18 00:44 - 00000000 ____D () C:\ProgramData\Riot Games 2014-07-18 00:01 - 2009-07-14 07:13 - 00876608 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-17 23:54 - 2011-10-23 13:44 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-07-17 23:32 - 2013-11-02 01:17 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\ZokanBINDER 2014-07-17 20:27 - 2012-10-19 20:22 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3388073453-1898520383-3220357028-1001Core.job 2014-07-16 16:31 - 2012-07-22 20:41 - 00000000 ____D () C:\Users\Steven\AppData\Local\ArmA 2 OA 2014-07-16 07:25 - 2012-09-03 01:16 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\.minecraft 2014-07-12 18:34 - 2014-07-12 18:31 - 00000000 ____D () C:\Users\Steven\Desktop\polo 2014-07-11 11:57 - 2014-07-09 14:52 - 00000000 ____D () C:\Users\Steven\Desktop\mcserver 2014-07-10 01:04 - 2014-05-08 06:32 - 00000000 ____D () C:\Program Files (x86)\Battle.net 2014-07-09 14:05 - 2014-07-09 14:08 - 00675988 _____ () C:\Users\Steven\Desktop\Minecraft(1).exe 2014-07-07 18:54 - 2014-05-31 02:02 - 00000823 _____ () C:\Users\Public\Desktop\ESL Wire.lnk 2014-07-06 08:29 - 2012-06-15 13:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-06 04:50 - 2013-02-22 18:10 - 00000024 _____ () C:\Users\Steven\random.dat 2014-07-06 04:49 - 2013-02-22 18:10 - 00000045 _____ () C:\Users\Steven\jagex_cl_oldschool_LIVE.dat 2014-06-30 01:21 - 2014-05-01 23:06 - 00092939 _____ () C:\Windows\DirectX.log 2014-06-30 01:12 - 2014-06-30 01:12 - 00000222 _____ () C:\Users\Steven\Desktop\The Stanley Parable.url 2014-06-30 01:12 - 2011-10-30 20:41 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-06-24 00:49 - 2014-06-24 00:49 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\SimulationCraft 2014-06-20 21:26 - 2014-04-07 14:16 - 00000000 ____D () C:\Users\Steven\AppData\Roaming\Free Download Manager Files to move or delete: ==================== C:\ProgramData\ism_0_llatsni.pad C:\Users\Steven\474NPC.dat C:\Users\Steven\jagex_cl_oldschool_LIVE.dat C:\Users\Steven\jagex_cl_runescape_LIVE.dat C:\Users\Steven\jagex_cl_runescape_LIVE1.dat C:\Users\Steven\jagex_runescape_preferences.dat C:\Users\Steven\jagex_runescape_preferences2.dat C:\Users\Steven\jagex__preferences3.dat C:\Users\Steven\models2.dat C:\Users\Steven\NebulaPk_runescape_preferences.dat C:\Users\Steven\NebulaPk_runescape_preferences2.dat C:\Users\Steven\random.dat C:\Users\Steven\random_df859cf9.dat C:\Users\Steven\random_df8963db.dat C:\Users\Steven\random_df8a819b.dat Some content of TEMP: ==================== C:\Users\Steven\AppData\Local\Temp\avgnt.exe C:\Users\Steven\AppData\Local\Temp\drm_dyndata_7380014.dll C:\Users\Steven\AppData\Local\Temp\EslWireSetup-1.17.3.8001-x64.exe C:\Users\Steven\AppData\Local\Temp\jansi-64-git-Bukkit-1.6.4-R2.0-b2918jnks.dll C:\Users\Steven\AppData\Local\Temp\jansi-64-git-Bukkit-1.7.9-R0.2-11-g3fd9db2-b3098jnks.dll C:\Users\Steven\AppData\Local\Temp\NGMDll.dll C:\Users\Steven\AppData\Local\Temp\NGMResource.dll C:\Users\Steven\AppData\Local\Temp\nv3DVStreaming.dll C:\Users\Steven\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Steven\AppData\Local\Temp\nvStereoApiI.dll C:\Users\Steven\AppData\Local\Temp\nvStInst.exe C:\Users\Steven\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll C:\Users\Steven\AppData\Local\Temp\unicows.dll C:\Users\Steven\AppData\Local\Temp\Uninstall.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe [2014-05-26 23:43] - [2010-11-21 05:24] - 2767360 ____A (Microsoft Corporation) 8E8A5AB03CFBF18A563F20A19431E20F C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 04:13 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- Addition.txt kommt sofort. Gruß Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-07-2014 01 Ran by Steven at 2014-07-18 19:06:14 Running from F:\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== 3D Pinball from Plus! for Windows 95 (HKLM-x32\...\Pinball) (Version: - ) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) AC3Filter 2.5b (HKLM-x32\...\AC3Filter_is1) (Version: 2.5b - Alexander Vigovsky) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.0.6 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.0.6 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated) Adobe Reader X (10.1.3) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.3 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.) Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc) Alternate EXE Packer 1.403 (HKLM-x32\...\Alternate EXE Packer_is1) (Version: - Alternate Tools) America's Army 3 (HKLM-x32\...\Steam App 13140) (Version: - U.S. Army) Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.14 - Google Inc.) APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - ) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Archeblade (HKLM-x32\...\Steam App 207230) (Version: - CodeBrush Games) ARMA 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive) Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.12.5.0 - Asmedia Technology) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.33 - Atheros Communications Inc.) AutoClick 1.0.7.234 (HKLM-x32\...\{3ECE8FE0-DF65-4984-A7C5-0DB62C587FA5}_is1) (Version: - Double Sigma Programming) AutoHotkey 1.1.11.01 (HKLM\...\AutoHotkey) (Version: 1.1.11.01 - Lexikos) Axence NetTools Pro 4.0 (HKLM-x32\...\Axence NetTools Pro_is1) (Version: - Axence Software, Inc.) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 3™ (HKLM-x32\...\{64BFBE7A-886C-4CA2-A9B4-0C2B5A5942BC}) (Version: 1.3.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB) BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - ) BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version: - Criterion Games) Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version: - Infinity Ward) Call of Duty(R) 2 (HKLM-x32\...\InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}) (Version: 1.00.0000 - Activision) Call of Duty(R) 2 (x32 Version: 1.00.0000 - Activision) Hidden Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center HydraVision Full (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0210.2339.42455 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0210.2339.42455 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help English (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help French (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help German (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0210.2338.42455 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0210.2338.42455 - ATI) Hidden ccc-core-static (x32 Version: 2010.0210.2339.42455 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0210.2339.42455 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 3.12 - Piriform) Cheat Engine 6.1 (HKLM-x32\...\Cheat Engine 6.1_is1) (Version: - Dark Byte) Company of Heroes (HKLM-x32\...\Steam App 4560) (Version: - Relic) Company of Heroes: Opposing Fronts (HKLM-x32\...\Steam App 9340) (Version: - Relic) Company of Heroes: Tales of Valor (HKLM-x32\...\Steam App 20540) (Version: - Relic) CopyTrans Control Center deinstallieren (HKCU\...\CopyTrans Suite) (Version: 3.003 - WindSolutions) Core Temp 1.0 RC2 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu) Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - ) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) Counter-Strike: Source Beta (HKLM-x32\...\Steam App 260) (Version: - ) CPUID CPU-Z 1.59 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) Cross Fire En (HKLM-x32\...\Cross Fire_is1) (Version: - Z8Games.com) Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version: - Crytek Studios) Cube (HKLM-x32\...\Cube) (Version: - ) Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.810 - Curse) CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version: - CyberGhost S.R.L.) CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version: - CyberGhost S.R.L.) Darksiders (HKLM-x32\...\Steam App 50620) (Version: - Vigil Games) DarksidersInstaller (HKLM-x32\...\{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}) (Version: 1.00.1000 - Ihr Firmenname) DayZ Commander (HKLM-x32\...\{0B74EC0B-2A85-4542-A167-3DE2132E7DAA}) (Version: 0.92.85 - Dotjosh Studios) Dead Space (HKLM-x32\...\Steam App 17470) (Version: - EA Redwood Shores) Debian-Installer loader (HKLM-x32\...\Debian-Installer Loader) (Version: 0.7.4.7+deb7u1 +net +pxe - The Debian Project) Desktop Live Streamer (HKLM-x32\...\{90B6DE78-F018-4479-AEAC-0FF6712356D1}) (Version: 0.9.4000 - Charnet3D) Detours Express 3.0 (HKLM-x32\...\{2C0622F2-2E68-468C-AA43-0CF81D3ACF14}) (Version: 1.0.000 - Microsoft Research) Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version: - ) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts) Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.0.38 - Electronic Arts) Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts) DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC) DJ Java Decompiler v.3.9.9.91 (HKLM-x32\...\{8AD2EA30-5049-11D4-A08E-0080AD97BBF5}) (Version: 1.7 - Copyright (c) Atanas Neshkov 2005) DogFighter (HKLM-x32\...\Steam App 42500) (Version: - ) DogFighter_Launcher version 1.0 (HKLM-x32\...\{1D67C0F6-F3DD-477F-842F-133D3B679626}_is1) (Version: 1.0 - Dark Water Studios) EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs) Encrypt Files v1.5 (HKLM-x32\...\Encrypt Files_is1) (Version: - PowTools) Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{4705DBFD-9D5E-4D23-817C-8CA7359B7BDE}) (Version: 11.1.20810.00 - Microsoft Corporation) Erforderliche Komponenten für SSDT (HKLM-x32\...\{70D065C3-77E5-45E9-A75C-EEB2E84EA869}) (Version: 11.0.2100.60 - Microsoft Corporation) ESL Wire 1.17.3 (HKLM\...\ESL Wire_is1) (Version: - Turtle Entertainment GmbH) Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited) Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.02 - Ubisoft) FileZilla Client 3.5.2 (HKLM-x32\...\FileZilla Client) (Version: 3.5.2 - FileZilla Project) FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\Firebird SQL Server D) (Version: 2.0.1.13 - MAGIX AG) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Free Download Manager 3.9.3 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG) GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - ) Geeks3D.com FurMark 1.10.6 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: - Geeks3D.com) Ghost Recon Online (EU) (HKCU\...\d8be6c3f847d7d92) (Version: 1.34.6574.3 - Ubisoft) GhostMouse (HKLM-x32\...\GhostMouse_is1) (Version: Free V3.1 - AutomaticSolution Software) GIMP 2.6.12 (HKLM\...\GIMP-2_is1) (Version: 2.6.12 - The GIMP Team) GlassFish Server Open Source Edition 3.1.2 (HKLM\...\nbi-glassfish-mod-3.1.2.23.0) (Version: - ) Google Earth (HKLM-x32\...\{28E82311-8616-11E1-BEB0-B8AC6F97B88E}) (Version: 6.2.2.6613 - Google) GR 1.2 Patch by Omega (HKLM-x32\...\{632E3B86-F090-4340-B75C-DB2CFD6E12ED}) (Version: 1.2 - Cult of Omega) Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar) Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games) Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version: - Valve) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Hex Workshop v6.6 (HKLM\...\{BAF9E4D0-F3D1-4355-B973-1384CDF1941C}) (Version: 6.6.1.5158 - BreakPoint Software) High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden HyperCam 2 (HKLM\...\HyperCam 2) (Version: 2.25.01 - Hyperionics Technology LLC) iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.) ICQ7M (HKLM-x32\...\{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}) (Version: 7.8 - ICQ) IDA Pro Free v4.9 (HKLM-x32\...\IDA Pro Free_is1) (Version: - ) iDevice Manager (HKLM-x32\...\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1) (Version: 3.4.0.0 - Marx Software) IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2405 - Intel Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 11 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217011FF}) (Version: 7.0.110 - Oracle) Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle) Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden Java SE Development Kit 7 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170050}) (Version: 1.7.0.50 - Oracle) Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle) JavaFX 2.1.1 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-211648764D10}) (Version: 2.1.1 - Oracle Corporation) JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) JavaFX 2.1.1 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-211648764D10}) (Version: 2.1.1 - Oracle Corporation) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) join.me (HKCU\...\JoinMe) (Version: 1.2.1.374 - LogMeIn, Inc.) K-Lite Codec Pack 9.9.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.9.0 - ) League of Legends (HKLM-x32\...\{918A9082-6287-4D25-9002-5E5D5E4971CB}) (Version: 1.02.0000 - Riot Games) Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) Logitech Gaming Software (Version: 8.40.83 - Logitech Inc.) Hidden Logitech Gaming Software 8.40 (HKLM\...\Logitech Gaming Software) (Version: 8.40.83 - Logitech Inc.) Magic Bullet Looks Vegas (HKLM-x32\...\Magic Bullet Looks Vegas) (Version: - ) MAGIX Music Maker for MySpace 15.0.1.8 (D) (HKLM-x32\...\MAGIX Music Maker for MySpace D) (Version: 15.0.1.8 - MAGIX AG) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Mangle-It C++ Code Obfuscator 2.2 (HKLM-x32\...\Mangle-It C++ Code Obfuscator) (Version: 2.2 - PC Sentinel Software) MediaInfo 0.7.61 (HKLM\...\MediaInfo) (Version: 0.7.61 - MediaArea.net) Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - THQ) Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft DirectX SDK (June 2010) (HKLM-x32\...\Microsoft DirectX SDK (June 2010)) (Version: 9.29.1962.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005 - Microsoft Corporation) Hidden Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.7969.0 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{AD49BD4B-6CEE-4EA2-B53E-8EB0606F1B11}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{EF18EF0F-96D3-4A6B-9600-2197F1720A15}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{6B7B7E62-9F56-4C87-8664-0E20F2CAB03B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{D4DA7C91-A59F-4C72-BAC4-DF7C76AB1CB8}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{55FABD1D-8BE6-4A1A-958D-52B15F1DFEF0}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{13C9CD03-A5FE-4F50-AC8A-17B77C38CC52}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{28C7A4BB-3966-4373-8376-C11F38290630}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft Visual C++ Compilers 2010 Standard - enu - x86 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31007 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.31010 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.31007 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.31007 - Microsoft Corporation) Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1 - Microsoft Corporation) Hidden Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation) Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM-x32\...\{4C0B27C3-3E8F-4BD2-80FF-6E9E48EBD6D8}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (HKLM\...\{64A5D39C-95CD-4B8B-B2FA-6C713133B57F}) (Version: 11.0.2100.60 - Microsoft Corporation) Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla) Mozilla Thunderbird 17.0.2 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 17.0.2 (x86 de)) (Version: 17.0.2 - Mozilla) MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden MTA:SA v1.3.1 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.1 - Multi Theft Auto) Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.659 - Electronic Arts) Nero 11 (HKLM-x32\...\{F021D637-BBDA-486B-96F0-225B62596C3B}) (Version: 11.0.11000 - Nero AG) Nero 11 Disc Menus Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Effects Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Image Samples (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 Kwik Themes Basic (x32 Version: 11.0.11200.12.0 - Nero AG) Hidden Nero 11 PiP Effects Basic (x32 Version: 11.0.11300.12.0 - Nero AG) Hidden Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden Nero BackItUp 11 (x32 Version: 6.0.16000.13.100 - Nero AG) Hidden Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG) Nero Burning ROM 11 (x32 Version: 11.0.12200.23.100 - Nero AG) Hidden Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero ControlCenter 11 (x32 Version: 11.0.12300.0.23 - Nero AG) Hidden Nero ControlCenter 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Core Components 11 (x32 Version: 11.0.15000.1.12 - Nero AG) Hidden Nero CoverDesigner 11 (x32 Version: 6.0.10800.11.100 - Nero AG) Hidden Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Express 11 (x32 Version: 11.0.11700.23.100 - Nero AG) Hidden Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero Kwik Media (x32 Version: 1.10.19300.93.100 - Nero AG) Hidden Nero Kwik Media Help (CHM) (x32 Version: 11.0.10200 - Nero AG) Hidden Nero Recode 11 (x32 Version: 5.0.13300.32.100 - Nero AG) Hidden Nero Recode 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero SoundTrax 11 (x32 Version: 5.0.10400.4.100 - Nero AG) Hidden Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden Nero Update (x32 Version: 11.0.10623.22.0 - Nero AG) Hidden Nero Video 11 (x32 Version: 8.0.14000.21.100 - Nero AG) Hidden Nero Video 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden Nero WaveEditor 11 (x32 Version: 6.0.10800.5.100 - Nero AG) Hidden Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden nero.prerequisites.msi (x32 Version: 11.0.20008 - Nero AG) Hidden NetBeans IDE 7.1.2 (HKLM\...\nbi-nb-base-7.1.2.0.0) (Version: 7.1.2 - NetBeans.org) Nexon Game Manager (HKLM-x32\...\{289AC7E0-0AEE-4a7b-913C-709D9803D23E}) (Version: - ) No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 3.0.4 - Vitalwerks Internet Solutions LLC) Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.4.0.13 - Symantec Corporation) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.8 - ) NVIDIA 3D Vision Controller Driver (x32 Version: 280.19 - NVIDIA Corporation) Hidden NVIDIA 3D Vision Controller Driver 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation) NVIDIA 3D Vision Driver 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation) NVIDIA Control Panel 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation) NVIDIA Graphics Driver 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.154.1168 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) Oracle VM VirtualBox 4.2.16 (HKLM\...\{4CC3444D-7279-4E83-984F-18E9A7B2E803}) (Version: 4.2.16 - Oracle Corporation) Origin (HKLM-x32\...\Origin) (Version: 8.6.0.357 - Electronic Arts, Inc.) Overwolf (HKLM-x32\...\{FB83467F-D8EB-43E6-8B3D-860B045C1C52}) (Version: 0.51.325 - Overwolf) Pamela RME 2.0 (HKLM-x32\...\MoodEditor) (Version: 2.0 - Scendix Software-Vertriebsges. mbH) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.3.6.0 - Pando Networks Inc.) PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden PokerTH (HKLM-x32\...\PokerTH 0.9.3) (Version: 0.9.3 - www.pokerth.net) PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.70.1 - PS3 Media Server) PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: - Jan Fiala) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) Python 3.3.2 (64-bit) (HKLM\...\{9fa9a2a6-19e4-381a-8af3-f8cf12f0dcf0}) (Version: 3.3.2150 - Python Software Foundation) QIP 2012 4.0.6715 (HKCU\...\QIP 2012) (Version: 4.0.6715 - ) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6402 - Realtek Semiconductor Corp.) Red Faction: Armageddon (HKLM-x32\...\Steam App 55110) (Version: - Volition) Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - ) Sandboxie 3.62 (64-bit) (HKLM\...\Sandboxie) (Version: 3.62 - SANDBOXIE L.T.D) Secure Download Manager (HKLM-x32\...\{AA57D6F1-6360-4397-B2D9-B21C69863D97}) (Version: 3.1.0 - Kivuto Solutions Inc.) Security Task Manager 1.8g (HKLM-x32\...\Security Task Manager) (Version: 1.8g - Neuber Software) Serious Sam: Der erste Kontakt (HKLM-x32\...\{815050E5-F545-11D4-9569-004095812ACC}) (Version: - ) Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation) SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden Six Updater (HKLM-x32\...\{AD42165D-FF3C-4975-A130-7AA2801AB5DD}) (Version: 2.09.7042 - Six Projects) Skins (x32 Version: 2010.0210.2339.42455 - ATI) Hidden Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.11.13307 - Skype Technologies S.A.) Skype™ 6.3 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.3.105 - Skype Technologies S.A.) Sniper Ghost Warrior 2 Demo (HKLM-x32\...\Steam App 34880) (Version: - City Interactive) Sony Vegas Pro 8.0 (HKLM-x32\...\{1246FF64-3035-4A92-8FE6-A968275495EB}) (Version: 8.0.179 - Sony) Source 2007 Dedicated Server (HKLM-x32\...\Steam App 310) (Version: - Valve) Source SDK (HKLM-x32\...\Steam App 211) (Version: - Valve) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 7.0.0.29 - Bioware/EA) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Steinberg Cubase 5 (HKLM-x32\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.0 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 1.0.0.1 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg HALionOne (HKLM-x32\...\{E70E7159-93B1-470D-9FBD-D8E9EF34B538}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH) Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 1.0.0.005 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 1.0.0.006 - Steinberg Media Technologies GmbH) SwiftKit (HKCU\...\SwiftKit) (Version: - ) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11.1 - TeamSpeak Systems GmbH) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer) TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp) TextDemo (HKCU\...\TextDemo) (Version: - The Java(tm) Tutorial) The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe) Tom Clancy's Rainbow Six: Vegas 2 (HKLM-x32\...\Steam App 15120) (Version: - Ubisoft) Tom Clancy's Splinter Cell Conviction (HKLM-x32\...\{6D8DDB4A-C263-40DE-BA16-AFDAD159D59A}) (Version: 1.04.000 - Ubisoft) Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - ) VirtualDJ Home FREE (HKLM-x32\...\{5E1375CB-6792-4464-8715-CC3EC83D48FA}) (Version: 7.0.5 - Atomix Productions) VLC media player 2.0.8 (HKLM-x32\...\VLC media player) (Version: 2.0.8 - VideoLAN) WarRock (HKLM-x32\...\Warrock EU) (Version: - ) Webocton - Scriptly 0.8.95.6 (HKLM-x32\...\Webocton - Scriptly_is1) (Version: 0.8.95.6 - Webocton) welcome (x32 Version: 11.0.21500.0.4 - Nero AG) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.623 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Windows Live Call (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation) Windows Live Essentials (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Live Messenger (x32 Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Software Development Kit (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584 - Microsoft Corporation) Hidden Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 4.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH) Wireshark 1.6.4 (HKLM-x32\...\Wireshark) (Version: 1.6.4 - The Wireshark developer community, hxxp://www.wireshark.org) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) x264vfw - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\x264vfw) (Version: - ) XAMPP 1.7.7 (HKLM-x32\...\xampp) (Version: - ) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Restore Points ========================= 18-07-2014 01:22:45 Removed LogMeIn Hamachi 18-07-2014 11:09:55 Removed System Requirements Lab CYRI 18-07-2014 11:33:55 Norton_Power_Eraser_20140718133352937 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2012-10-31 20:52 - 00001384 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 activate.adobe.com 127.0.0.1 activate.adobe.com:443 127.0.0.1 activate-sea.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 192.150.18.108 127.0.0.1 adobeereg.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 ereg.wip3.adobe.com 127.0.0.1 ereg.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 wip3.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 activate.adobe.com ==================== Scheduled Tasks (whitelisted) ============= Task: {02EF24F7-5BC5-41D3-BEF4-20A8BF2A983A} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\WSCStub.exe [2014-06-27] (Symantec Corporation) Task: {1565CD58-5645-41EC-B530-2020C1AE6280} - System32\Tasks\{761EDD1B-8F14-4544-9EB6-8361B93F3EFA} => C:\Users\Steven\Downloads\Css Offset Logger(1)\CSS-Logger.exe Task: {39BC99E8-FFDA-4D9A-BFC6-881D85974E3C} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {3BF08434-53EA-423E-B632-420850887C80} - System32\Tasks\{E988E7C2-8A85-4E67-9D73-61FC412E0027} => C:\Users\Steven\Downloads\173\z\Z.EXE Task: {428D9F1A-56F9-4D24-A05F-74DDE88F3E54} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {504FA39E-DDA0-4684-965F-6EEF16BFC809} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3388073453-1898520383-3220357028-1001UA => C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-19] (Facebook Inc.) Task: {79A1D729-0E08-4AB4-AFF9-FB4F3F0445BD} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {90DF63FD-4425-46F0-9468-C62DD13DA50C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated) Task: {AA6B6DE6-7AF4-45C8-AD2E-6D74A2790034} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3388073453-1898520383-3220357028-1001Core => C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-19] (Facebook Inc.) Task: {B5473B77-44A0-43BB-A3EF-D6B00D0A1754} - System32\Tasks\{49B3956A-7025-4E04-9CF7-51A23051FE51} => C:\masm32\test.exe Task: {BEBAAD5E-5F95-47B2-9634-D24FF0A802E8} - System32\Tasks\AdobeAAMUpdater-1.0-Swordfish-Steven => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) Task: {BEE055D2-2319-4DCD-8B63-0D2688267761} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.4.0.13\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {CADA8A66-66B4-4304-A179-E1ED335AFCF4} - System32\Tasks\{6202A4C9-A0FD-4995-9DC2-4D33F3F13A13} => C:\Users\Steven\Downloads\DJ Java Decompiler.exe Task: {CD145B41-3C6A-47A1-9DB2-5B6BD737C5CF} - System32\Tasks\{09B8E419-E391-415D-A2AC-B452EB962686} => F:\Sicherung 15.10.2011\Games\SCDA\SCDALauncher.exe Task: {E6D5DB17-F825-4575-A168-D382ADC53AC1} - System32\Tasks\{121BEF0F-C02B-4E0B-AAB3-18BBCBD8374A} => C:\Users\Steven\Downloads\Demo(1)\RisikoDemo.exe Task: {F368320B-AEA1-46DF-A700-5E24AF6309B4} - System32\Tasks\{B2D4D000-C4C4-4B54-959F-8781D099DEF9} => C:\Users\Steven\Desktop\Flash\AndroidFlasher\AndroidFlasher.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3388073453-1898520383-3220357028-1001Core.job => C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3388073453-1898520383-3220357028-1001UA.job => C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-01-01 21:56 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-12-30 03:59 - 2014-01-29 19:14 - 00663056 _____ () C:\Program Files\EslWire\service\WireHelperSvc.exe 2012-12-30 03:59 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\service\NocIPC64.dll 2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 02868736 _____ () C:\Program Files\EslWire\QtCore4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 10445824 _____ () C:\Program Files\EslWire\QtGui4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 14672896 _____ () C:\Program Files\EslWire\QtWebKit4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00348160 _____ () C:\Program Files\EslWire\phonon4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00503296 _____ () C:\Program Files\EslWire\QtDBus4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00454656 _____ () C:\Program Files\EslWire\QtXml4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 01277440 _____ () C:\Program Files\EslWire\QtNetwork4.dll 2012-03-03 13:02 - 2014-04-02 13:52 - 08657920 _____ () C:\Program Files\EslWire\WireCore.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00799744 _____ () C:\Program Files\EslWire\QtSql4.dll 2012-03-03 13:01 - 2014-02-06 16:38 - 00214016 _____ () C:\Program Files\EslWire\NocIPC64.dll 2012-03-03 13:02 - 2014-04-02 13:51 - 00607232 _____ () C:\Program Files\EslWire\Linesman.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00032768 _____ () C:\Program Files\EslWire\imageformats\qgif4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00237056 _____ () C:\Program Files\EslWire\imageformats\qjpeg4.dll 2012-03-03 13:01 - 2014-01-29 19:14 - 00278528 _____ () C:\Program Files\EslWire\imageformats\qmng4.dll 2012-03-03 13:01 - 2014-02-06 16:39 - 00310272 _____ () C:\Program Files\EslWire\laginspect\laginspect.dll 2011-11-13 02:16 - 2013-12-03 20:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2011-11-16 10:41 - 2011-11-16 10:41 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qgif4.dll 2011-11-16 10:41 - 2011-11-16 10:41 - 00236032 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qjpeg4.dll 2011-11-16 10:41 - 2013-08-15 22:39 - 00302056 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll 2011-11-16 10:41 - 2013-08-15 22:39 - 00320488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll 2014-01-17 01:46 - 2012-10-23 18:12 - 00488960 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\acre_win64.dll 2011-11-16 10:41 - 2013-08-15 22:39 - 00186344 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll 2011-11-16 10:41 - 2013-08-15 22:39 - 00565224 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll 2011-11-16 10:41 - 2013-08-15 22:39 - 00109544 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\ts3g15.dll 2014-07-09 15:27 - 2014-07-09 15:27 - 00017408 _____ () C:\Users\Steven\AppData\Local\Temp\jansi-64-git-Bukkit-1.7.9-R0.2-11-g3fd9db2-b3098jnks.dll 2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-11-08 22:46 - 2011-11-08 22:46 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll 2014-07-10 00:44 - 2014-07-10 00:44 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4826\libcef.dll 2014-07-10 00:44 - 2014-07-10 00:44 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4826\libglesv2.dll 2014-07-10 00:44 - 2014-07-10 00:44 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.4826\libegl.dll 2014-06-11 15:55 - 2014-06-11 15:55 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:888AFB86 AlternateDataStreams: C:\Users\Steven\Application Data:NT AlternateDataStreams: C:\Users\Steven\AppData\Roaming:NT ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: Apache2.2 => 2 MSCONFIG\Services: Bonjour Service => 2 MSCONFIG\Services: BRSptSvc => 3 MSCONFIG\Services: CGVPNCliService => 2 MSCONFIG\Services: CGVPNCliSrvc => 3 MSCONFIG\Services: EslWireHelper => 2 MSCONFIG\Services: FileZilla Server => 3 MSCONFIG\Services: FirebirdServerMAGIXInstance => 3 MSCONFIG\Services: Hamachi2Svc => 2 MSCONFIG\Services: LMIGuardianSvc => 2 MSCONFIG\Services: LMS => 2 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: mysql => 2 MSCONFIG\Services: NAUpdate => 2 MSCONFIG\Services: nvsvc => 2 MSCONFIG\Services: nvUpdatusService => 2 MSCONFIG\Services: OverwolfUpdaterService => 3 MSCONFIG\Services: SbieSvc => 2 MSCONFIG\Services: Skype C2C Service => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: Stereo Service => 2 MSCONFIG\Services: SwitchBoard => 3 MSCONFIG\Services: TeamViewer8 => 2 MSCONFIG\Services: UNS => 2 MSCONFIG\Services: WebCakeUpdater => 2 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FILSHtray.lnk => C:\Windows\pss\FILSHtray.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RocketDock.lnk => C:\Windows\pss\RocketDock.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SkinPackMenu.lnk => C:\Windows\pss\SkinPackMenu.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Steven^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^AutoClick.lnk => C:\Windows\pss\AutoClick.lnk.Startup MSCONFIG\startupfolder: C:^Users^Steven^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ctfmon.lnk => C:\Windows\pss\ctfmon.lnk.Startup MSCONFIG\startupfolder: C:^Users^Steven^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup MSCONFIG\startupfolder: C:^Users^Steven^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup MSCONFIG\startupfolder: C:^Users^Steven^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^setup_9.0.0.722_27.08.2012_12-35.lnk => C:\Windows\pss\setup_9.0.0.722_27.08.2012_12-35.lnk.Startup MSCONFIG\startupfolder: C:^Users^Steven^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Update Tool Notifier.exe => C:\Windows\pss\Update Tool Notifier.exe.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Steven\AppData\Local\Akamai\netsession_win.exe" MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: ESL Wire => "C:\Program Files\EslWire\wire.exe" --tray MSCONFIG\startupreg: Facebook Update => "C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: FILSHtray => "C:\Program Files (x86)\FILSHtray\FILSHtray.exe" MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe MSCONFIG\startupreg: Infium => "C:\Program Files (x86)\CRYPT6077\qip.exe" /autorun MSCONFIG\startupreg: Launch LCore => C:\Program Files\Logitech Gaming Software\LCore.exe /minimized MSCONFIG\startupreg: Launch LGDCore => "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE MSCONFIG\startupreg: Launch LgDeviceAgent => "C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe" MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe" MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun MSCONFIG\startupreg: Spotify => "C:\Users\Steven\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Steven\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: uTorrent => "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED MSCONFIG\startupreg: WebCake Desktop => "C:\Users\Steven\AppData\Roaming\Web Cake\WebCakeDesktop.exe" MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe" MSCONFIG\startupreg: Xvid => C:\Program Files (x86)\Xvid\CheckUpdate.exe ==================== Faulty Device Manager Devices ============= Name: TAP-Win32 Adapter V9 Description: TAP-Win32 Adapter V9 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TAP-Win32 Provider V9 Service: tap0901 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VirtualBox Host-Only Ethernet Adapter Description: VirtualBox Host-Only Ethernet Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Oracle Corporation Service: VBoxNetAdp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (07/18/2014 01:23:45 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program firefox.exe version 30.0.0.5269 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1148 Start Time: 01cfa27a56cb821b Termination Time: 15 Application Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Report Id: f5500d4d-0e6d-11e4-a844-5404a67f2c2d Error: (07/18/2014 11:27:09 AM) (Source: Google Update) (EventID: 20) (User: Swordfish) Description: Network Request Error. Error: 0x80072ee7. Http status code: 0. Url=https://www.facebook.com/omaha/update.php Trying config: source=FireFox, direct connection. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=IE, named proxy=http=127.0.0.1:8887;https=127.0.0.1:8887;, bypass=<-loopback>;smtp.1und1.de;smtp.1und1.de;localhost;127.0.0.1. trying CUP:WinHTTP. Send request returned 0x80072efd. Http status code 0. trying WinHTTP. Send request returned 0x80072efd. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=auto, wpad=1, script=. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status Error: (07/18/2014 08:27:09 AM) (Source: Google Update) (EventID: 20) (User: Swordfish) Description: Network Request Error. Error: 0x80072ee7. Http status code: 0. Url=https://www.facebook.com/omaha/update.php Trying config: source=FireFox, direct connection. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=IE, named proxy=http=127.0.0.1:8887;https=127.0.0.1:8887;, bypass=<-loopback>;smtp.1und1.de;smtp.1und1.de;localhost;127.0.0.1. trying CUP:WinHTTP. Send request returned 0x80072efd. Http status code 0. trying WinHTTP. Send request returned 0x80072efd. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=auto, wpad=1, script=. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status Error: (07/18/2014 05:27:09 AM) (Source: Google Update) (EventID: 20) (User: Swordfish) Description: Network Request Error. Error: 0x80072ee7. Http status code: 0. Url=https://www.facebook.com/omaha/update.php Trying config: source=FireFox, direct connection. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=IE, named proxy=http=127.0.0.1:8887;https=127.0.0.1:8887;, bypass=<-loopback>;smtp.1und1.de;smtp.1und1.de;localhost;127.0.0.1. trying CUP:WinHTTP. Send request returned 0x80072efd. Http status code 0. trying WinHTTP. Send request returned 0x80072efd. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=auto, wpad=1, script=. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status Error: (07/18/2014 03:22:52 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddWin32ServiceFiles: Unable to back up image of service WebCakeUpdater since QueryServiceConfig API failed System Error: The system cannot find the file specified. . Error: (07/18/2014 03:13:22 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/16/2014 07:25:51 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program javaw.exe version 7.0.250.16 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: c38 Start Time: 01cfa026829eee0c Termination Time: 242 Application Path: C:\Program Files\Java\jre7\bin\javaw.exe Report Id: a4aa4920-0ca9-11e4-a982-5404a67f2c2d Error: (07/16/2014 07:24:25 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: plugin-container.exe, version: 30.0.0.5269, time stamp: 0x53914233 Faulting module name: mozalloc.dll, version: 30.0.0.5269, time stamp: 0x53911393 Exception code: 0x80000003 Fault offset: 0x0000141b Faulting process id: 0xc58 Faulting application start time: 0xplugin-container.exe0 Faulting application path: plugin-container.exe1 Faulting module path: plugin-container.exe2 Report Id: plugin-container.exe3 Error: (07/14/2014 07:03:44 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program Explorer.EXE version 6.1.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 7e8 Start Time: 01cf98e3cb7ac64a Termination Time: 60000 Application Path: C:\Windows\Explorer.EXE Report Id: 9624a6e3-0b78-11e4-af7a-a065dbbf6b99 Error: (07/14/2014 06:21:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program WoW-64.exe version 5.4.8.18414 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 49ddc Start Time: 01cf9f79e4b1544f Termination Time: 296 Application Path: F:\World Of Warcraft\World of Warcraft\WoW-64.exe Report Id: d9c2e78d-0b72-11e4-af7a-a065dbbf6b99 System errors: ============= Error: (07/18/2014 01:19:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The CyberGhost VPN 5 Client Service service failed to start due to the following error: %%1053 Error: (07/18/2014 01:19:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the CyberGhost VPN 5 Client Service service to connect. Error: (07/18/2014 01:17:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The SQL Server (SQLEXPRESS) service failed to start due to the following error: %%1053 Error: (07/18/2014 01:17:36 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the SQL Server (SQLEXPRESS) service to connect. Error: (07/18/2014 01:15:47 PM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: The NPEService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error: (07/18/2014 03:35:12 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: The Windows Update service hung on starting. Error: (07/18/2014 03:30:10 AM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.1.19. The computer with the IP address 192.168.1.1 did not allow the name to be claimed by this computer. Error: (07/18/2014 03:29:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The CyberGhost VPN 5 Client Service service failed to start due to the following error: %%1053 Error: (07/18/2014 03:29:52 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the CyberGhost VPN 5 Client Service service to connect. Error: (07/18/2014 03:28:58 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the NVIDIA Network Service service to connect. Microsoft Office Sessions: ========================= Error: (07/18/2014 01:23:45 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: firefox.exe30.0.0.5269114801cfa27a56cb821b15C:\Program Files (x86)\Mozilla Firefox\firefox.exef5500d4d-0e6d-11e4-a844-5404a67f2c2d Error: (07/18/2014 11:27:09 AM) (Source: Google Update) (EventID: 20) (User: Swordfish) Description: Network Request Error. Error: 0x80072ee7. Http status code: 0. Url=https://www.facebook.com/omaha/update.php Trying config: source=FireFox, direct connection. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=IE, named proxy=http=127.0.0.1:8887;https=127.0.0.1:8887;, bypass=<-loopback>;smtp.1und1.de;smtp.1und1.de;localhost;127.0.0.1. trying CUP:WinHTTP. Send request returned 0x80072efd. Http status code 0. trying WinHTTP. Send request returned 0x80072efd. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=auto, wpad=1, script=. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status Error: (07/18/2014 08:27:09 AM) (Source: Google Update) (EventID: 20) (User: Swordfish) Description: Network Request Error. Error: 0x80072ee7. Http status code: 0. Url=https://www.facebook.com/omaha/update.php Trying config: source=FireFox, direct connection. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=IE, named proxy=http=127.0.0.1:8887;https=127.0.0.1:8887;, bypass=<-loopback>;smtp.1und1.de;smtp.1und1.de;localhost;127.0.0.1. trying CUP:WinHTTP. Send request returned 0x80072efd. Http status code 0. trying WinHTTP. Send request returned 0x80072efd. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=auto, wpad=1, script=. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status Error: (07/18/2014 05:27:09 AM) (Source: Google Update) (EventID: 20) (User: Swordfish) Description: Network Request Error. Error: 0x80072ee7. Http status code: 0. Url=https://www.facebook.com/omaha/update.php Trying config: source=FireFox, direct connection. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=IE, named proxy=http=127.0.0.1:8887;https=127.0.0.1:8887;, bypass=<-loopback>;smtp.1und1.de;smtp.1und1.de;localhost;127.0.0.1. trying CUP:WinHTTP. Send request returned 0x80072efd. Http status code 0. trying WinHTTP. Send request returned 0x80072efd. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status code 0. Trying config: source=auto, wpad=1, script=. trying CUP:WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying WinHTTP. Send request returned 0x80072ee7. Http status code 0. trying CUP:iexplore. Send request returned 0x80004005. Http status Error: (07/18/2014 03:22:52 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service WebCakeUpdater since QueryServiceConfig API failed System Error: The system cannot find the file specified. Error: (07/18/2014 03:13:22 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestF:\Downloads\esetsmartinstaller_deu.exe Error: (07/16/2014 07:25:51 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: javaw.exe7.0.250.16c3801cfa026829eee0c242C:\Program Files\Java\jre7\bin\javaw.exea4aa4920-0ca9-11e4-a982-5404a67f2c2d Error: (07/16/2014 07:24:25 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141bc5801cf9fc0471031a9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll732a3462-0ca9-11e4-a982-5404a67f2c2d Error: (07/14/2014 07:03:44 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Explorer.EXE6.1.7601.175147e801cf98e3cb7ac64a60000C:\Windows\Explorer.EXE9624a6e3-0b78-11e4-af7a-a065dbbf6b99 Error: (07/14/2014 06:21:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: WoW-64.exe5.4.8.1841449ddc01cf9f79e4b1544f296F:\World Of Warcraft\World of Warcraft\WoW-64.exed9c2e78d-0b72-11e4-af7a-a065dbbf6b99 CodeIntegrity Errors: =================================== Date: 2013-05-22 00:31:17.702 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 00:31:17.701 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 00:31:17.699 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 00:31:17.683 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 00:31:17.682 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2013-05-22 00:31:17.679 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Percentage of memory in use: 26% Total physical RAM: 16365.22 MB Available physical RAM: 11962.32 MB Total Pagefile: 32728.64 MB Available Pagefile: 28871.16 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:21.36 GB) NTFS Drive e: (Coding) (Fixed) (Total:97.65 GB) (Free:86.03 GB) NTFS Drive f: (Downloads) (Fixed) (Total:368.1 GB) (Free:194.5 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E83D593F) Partition 1: (Active) - (Size=98 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=368 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: CD5ECD5E) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
19.07.2014, 20:16 | #4 | |
/// the machine /// TB-Ausbilder | Keine Verbindungen / Downloads mehr möglich - DNS Problem?Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.07.2014, 01:39 | #5 |
| Keine Verbindungen / Downloads mehr möglich - DNS Problem? Ich weiß von keinem gecracktem adobe auf meinem rechner. |
28.07.2014, 18:14 | #6 | |
/// the machine /// TB-Ausbilder | Keine Verbindungen / Downloads mehr möglich - DNS Problem?Zitat:
__________________ --> Keine Verbindungen / Downloads mehr möglich - DNS Problem? |
Themen zu Keine Verbindungen / Downloads mehr möglich - DNS Problem? |
adware, automatische, bot, code, diverse, dns, einloggen, fehlermeldung, internet, internetleitung, lösung, malware, neue, nicht mehr, problem, probleme, prozesse, ratlos, remote, rootkits, router, server, software, spyware, surfen, trojaner |