| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Vawtrak.A lässt sich nicht komplett entfernen, scheint esWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
07.09.2014, 16:54
| #1 |
| /// TB-Schüler  |  Vawtrak.A lässt sich nicht komplett entfernen, scheint es Hallo, Trojaner-Board! Gestern Abend meldete sich mein Security Essentials mit dem ersten Virenfund in meinen über 25 Jahren PC-Nutzung. Ich habe Win 7 Home Pro und nutze keine Laufwerks- oder CD/DVD-Emulatoren. Woher ich das blöde Ding habe, weiß ich auch nicht wirklich und bin dementsprechend ratlos. SE stellte den Trojaner unter Quarantäne und schien ihn auch zu löschen, aber beim erneuten Komplettscan warnte es voe möglicher Infektion mit Malware, sobald es die Registry durchsuchte. Ich finde leider kein SE-Logfile, und am Ende des Checks war SE ohnehin der Meinung, alles sei sicher... Spybot befand mein System für sauber - ich hatte es im abgesicherten Modus drüberlaufen lassen. Ich stelle hier mal die Files von FRST und GMER ein: FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2014
Ran by Pet (administrator) on KAAJI on 07-09-2014 17:13:43
Running from C:\Users\Pet\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.21\AsusFanControlService.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Thorvald Natvig) C:\Program Files (x86)\Mumble\mumble.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(BioWare, A Division of Electronic Arts) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\retailclient\swtor.exe
(BioWare, A Division of Electronic Arts) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\retailclient\swtor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [391040 2014-04-17] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-548620592-360744849-4095091825-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21652064 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-548620592-360744849-4095091825-1000\...\Run: [ArowOkigi] => regsvr32.exe "C:\ProgramData\ArowOkigi\ArowOkigi.dat"
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: localhost:21320
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default
FF Homepage: about:newtab
FF NetworkProxy: "ftp", "46.105.42.92"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "46.105.42.92"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "46.105.42.92"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "46.105.42.92"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF user.js: detected! => C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\user.js
FF SearchPlugin: C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\searchplugins\privitize.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flash Video Downloader - YouTube Full HD Download - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\artur.dubovoy@gmail.com [2014-08-03]
FF Extension: DoNotTrackMe - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\donottrackplus@abine.com [2013-08-18]
FF Extension: dict.cc - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\{3160baf9-cf68-48ec-9076-faed7ce49467} [2014-08-20]
FF Extension: ChatZilla - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2014-06-25]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\adblockpopups@jessehakanen.net.xpi [2012-07-23]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\elemhidehelper@adblockplus.org.xpi [2012-07-23]
FF Extension: Facebook Disconnect - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\facebook@disconnect.me.xpi [2013-07-23]
FF Extension: Ghostery - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: Facebook Privacy Analyzer - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\fpa@informatik.tu-darmstadt.de.xpi [2014-01-17]
FF Extension: Facebook Privacy Watcher - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\fpw@informatik.tu-darmstadt.de.xpi [2013-07-23]
FF Extension: Facebook Blocker - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\info@skymeissner.com.xpi [2013-07-23]
FF Extension: Facebook Ticker Removal - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\info@technologymob.com.xpi [2013-07-23]
FF Extension: Stealthy - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\stealthyextension@gmail.com.xpi [2012-07-22]
FF Extension: Adblock Plus - C:\Users\Pet\AppData\Roaming\Mozilla\Firefox\Profiles\4t6vfdza.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-07-23]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2013-07-06]
Chrome:
=======
CHR Profile: C:\Users\Pet\AppData\Local\Google\Chrome\User Data\default
CHR Extension: (Privitize Chrome Toolbar) - C:\Users\Pet\AppData\Local\Google\Chrome\User Data\default\Extensions\dhfcbmlocifngpbjdpgnkbjmgkadkjpp [2013-06-21]
CHR HKLM-x32\...\Chrome\Extension: [dhfcbmlocifngpbjdpgnkbjmgkadkjpp] - C:\Program Files (x86)\Industriya\privitize\1.8.21.6\privitize.crx [2013-05-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] () [File not signed]
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-02-02] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.21\AsusFanControlService.exe [1478272 2012-01-13] (ASUSTeK Computer Inc.)
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160768 2011-05-27] (Intel Corporation) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-10-23] (Overwolf Ltd)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R1 MpKsl4f94c42f; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{85DE3F8F-0DDE-46E1-8990-B1D382FAD605}\MpKsl4f94c42f.sys [45352 2014-09-07] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [378368 2009-06-10] (Realtek)
S3 ALSysIO; \??\C:\Users\Pet\AppData\Local\Temp\ALSysIO64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-07 17:13 - 2014-09-07 17:15 - 00016569 _____ () C:\Users\Pet\Desktop\FRST.txt
2014-09-07 17:13 - 2014-09-07 17:13 - 00000000 ____D () C:\FRST
2014-09-07 17:12 - 2014-09-07 17:12 - 02104832 _____ (Farbar) C:\Users\Pet\Desktop\FRST64.exe
2014-09-07 17:09 - 2014-09-07 17:09 - 00380416 _____ () C:\Users\Pet\Desktop\Gmer-19357.exe
2014-09-07 00:50 - 2009-06-10 23:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140907-005056.backup
2014-09-06 23:56 - 2014-09-06 23:59 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 23:56 - 2014-09-06 23:56 - 00001391 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 23:56 - 2014-09-06 23:56 - 00001379 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 23:56 - 2014-09-06 23:56 - 00000656 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-09-06 23:56 - 2014-09-06 23:56 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-09-06 23:56 - 2014-09-06 23:56 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-09-06 23:56 - 2014-09-06 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 23:56 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-09-06 22:58 - 2014-09-06 22:58 - 00000000 ____D () C:\ProgramData\ArowOkigi
2014-09-04 19:01 - 2014-09-04 19:01 - 00011013 _____ () C:\Users\Pet\AppData\Local\recently-used.xbel
2014-08-30 18:07 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-30 18:07 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-30 18:07 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-24 01:00 - 2014-08-24 01:00 - 00001061 _____ () C:\Users\Public\Desktop\No23 Recorder.lnk
2014-08-24 01:00 - 2014-08-24 01:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-08-24 01:00 - 2014-08-24 01:00 - 00000000 ____D () C:\ProgramData\Caphyon
2014-08-24 01:00 - 2014-08-24 01:00 - 00000000 ____D () C:\Program Files (x86)\No23 Recorder
2014-08-19 07:58 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-19 07:58 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-19 07:58 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-19 07:58 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-19 07:57 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-19 07:57 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-19 07:57 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-19 07:57 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-19 07:57 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-19 07:57 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-19 07:57 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-19 07:57 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-19 07:57 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-19 07:57 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-13 12:10 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 12:10 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-13 12:10 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 12:10 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 12:10 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-13 12:10 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 12:09 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 12:09 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 12:09 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 12:09 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 12:09 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 12:09 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-13 12:09 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-13 12:09 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-13 12:09 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-13 12:09 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-13 12:09 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 12:09 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-13 12:09 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-13 12:09 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 12:08 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 12:08 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 12:08 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 12:08 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-13 12:08 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 12:08 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-13 12:08 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 12:08 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 12:08 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 12:08 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 12:08 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 12:08 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 12:08 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 12:08 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-11 12:39 - 2014-08-11 12:39 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-11 12:39 - 2014-08-11 12:39 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-11 12:39 - 2014-08-11 12:39 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-11 12:39 - 2014-08-11 12:39 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-11 12:39 - 2014-08-11 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-11 12:39 - 2014-08-11 12:39 - 00000000 ____D () C:\Program Files (x86)\Java
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-07 17:15 - 2014-09-07 17:13 - 00016569 _____ () C:\Users\Pet\Desktop\FRST.txt
2014-09-07 17:13 - 2014-09-07 17:13 - 00000000 ____D () C:\FRST
2014-09-07 17:12 - 2014-09-07 17:12 - 02104832 _____ (Farbar) C:\Users\Pet\Desktop\FRST64.exe
2014-09-07 17:09 - 2014-09-07 17:09 - 00380416 _____ () C:\Users\Pet\Desktop\Gmer-19357.exe
2014-09-07 16:59 - 2012-07-22 19:53 - 00000000 ____D () C:\Users\Pet\AppData\Roaming\Skype
2014-09-07 16:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-09-07 16:47 - 2005-01-01 01:44 - 01666171 _____ () C:\Windows\WindowsUpdate.log
2014-09-07 16:44 - 2012-07-22 18:38 - 00000000 ____D () C:\Users\Pet\AppData\Roaming\Mumble
2014-09-07 01:53 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-07 01:53 - 2009-07-14 06:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-07 01:46 - 2012-09-30 09:44 - 00000433 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-07 01:45 - 2013-05-17 13:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-07 01:45 - 2009-07-14 06:51 - 00076941 _____ () C:\Windows\setupact.log
2014-09-07 01:43 - 2012-07-23 16:51 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-06 23:59 - 2014-09-06 23:56 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-09-06 23:56 - 2014-09-06 23:56 - 00001391 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-09-06 23:56 - 2014-09-06 23:56 - 00001379 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-09-06 23:56 - 2014-09-06 23:56 - 00000656 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-09-06 23:56 - 2014-09-06 23:56 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-09-06 23:56 - 2014-09-06 23:56 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-09-06 23:56 - 2014-09-06 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-09-06 22:58 - 2014-09-06 22:58 - 00000000 ____D () C:\ProgramData\ArowOkigi
2014-09-05 07:04 - 2014-01-30 09:02 - 00000000 ___RD () C:\Users\Pet\Dropbox
2014-09-05 07:04 - 2014-01-30 09:01 - 00000000 ____D () C:\Users\Pet\AppData\Roaming\DropboxMaster
2014-09-05 07:04 - 2014-01-30 08:59 - 00000000 ____D () C:\Users\Pet\AppData\Roaming\Dropbox
2014-09-05 07:03 - 2011-04-12 09:43 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-09-05 07:03 - 2011-04-12 09:43 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-09-05 07:03 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-04 19:01 - 2014-09-04 19:01 - 00011013 _____ () C:\Users\Pet\AppData\Local\recently-used.xbel
2014-09-04 19:01 - 2012-07-22 23:51 - 00000000 ____D () C:\Users\Pet\.gimp-2.8
2014-08-30 18:14 - 2009-07-14 06:45 - 00303336 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-29 08:51 - 2013-12-09 16:09 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-08-28 23:51 - 2013-11-08 22:21 - 00000000 ___RD () C:\Users\Pet\Desktop\WIIICHTIIIG
2014-08-25 10:04 - 2014-07-12 12:20 - 00000000 ___RD () C:\Users\Pet\Desktop\Unsortiert
2014-08-24 01:00 - 2014-08-24 01:00 - 00001061 _____ () C:\Users\Public\Desktop\No23 Recorder.lnk
2014-08-24 01:00 - 2014-08-24 01:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2014-08-24 01:00 - 2014-08-24 01:00 - 00000000 ____D () C:\ProgramData\Caphyon
2014-08-24 01:00 - 2014-08-24 01:00 - 00000000 ____D () C:\Program Files (x86)\No23 Recorder
2014-08-23 04:07 - 2014-08-30 18:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-30 18:07 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-30 18:07 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-21 14:09 - 2012-07-23 18:07 - 00000000 ____D () C:\Users\Pet\AppData\Roaming\vlc
2014-08-20 18:11 - 2012-07-22 19:52 - 00000000 ____D () C:\ProgramData\Skype
2014-08-13 12:15 - 2013-07-11 11:40 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 12:13 - 2012-07-23 16:10 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 11:55 - 2012-07-22 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
2014-08-13 11:55 - 2012-07-22 18:18 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-08-11 13:00 - 2013-10-28 01:31 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-11 12:39 - 2014-08-11 12:39 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-11 12:39 - 2014-08-11 12:39 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-11 12:39 - 2014-08-11 12:39 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-11 12:39 - 2014-08-11 12:39 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-11 12:39 - 2014-08-11 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-11 12:39 - 2014-08-11 12:39 - 00000000 ____D () C:\Program Files (x86)\Java
Some content of TEMP:
====================
C:\Users\Pet\AppData\Local\Temp\_is4D0.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2012-07-21 23:53
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-09-2014
Ran by Pet at 2014-09-07 17:15:20
Running from C:\Users\Pet\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
toolbar (HKLM-x32\...\privitize) (Version: 1.8.21.6 - Industriya) <==== ATTENTION
3Planesoft Screensaver Manager 1.0 (HKLM-x32\...\3Planesoft Screensaver Manager_is1) (Version: 1.0 - 3Planesoft)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.5.502.110 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.02.28 - ASUSTeK Computer Inc.)
ASUS PC Diagnostics (HKLM-x32\...\{D709005F-D8DC-42A8-8435-5AE880ECAF82}) (Version: 1.1.9 - ASUSTeK Computer Inc.)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber)
Desktop Icon Position Saver (64-bit) (HKLM-x32\...\dips64) (Version: - )
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
EXPERTool v8.7 (HKLM-x32\...\{551D9481-9487-4D0C-9A1D-6BC3E7B6D991}_is1) (Version: 8.7.0.1 - Gainward Co. Ltd.)
Free YouTube Download version 3.2.5.628 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.5.628 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.14.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.14.1022 - DVDVideoSoft Ltd.)
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
GOG.com Planescape Torment (HKLM\...\{8f376ce2-c213-4a6c-a329-0b2a7eb2bad8}.sdb) (Version: - )
Inkscape 0.48.4 (HKLM-x32\...\Inkscape) (Version: 0.48.4 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
IZArc 4.1.6 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.1.6 - Ivan Zahariev)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Lantern 3D Screensaver 1.0 (HKLM-x32\...\Lantern 3D Screensaver_is1) (Version: 1.0 - 3Planesoft)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft LifeCam (HKLM\...\{5CE7E3F5-9803-4F32-AA89-2D8848A80109}) (Version: 3.60.253.0 - Microsoft Corporation)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)
No23 Recorder (HKLM-x32\...\No23 Recorder) (Version: 2.1.0.3 - No23)
No23 Recorder (x32 Version: 2.1.0.3 - No23) Hidden
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0213 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
OpenOffice.org 3.4 (HKLM-x32\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
Overwolf (HKLM-x32\...\{5D30F159-FFB9-458F-8A03-1747DDE499D8}) (Version: 0.45.266 - Overwolf)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.204.0 - Tracker Software Products Ltd)
Planescape Torment (HKLM-x32\...\GOGPACKPLANESCAPETORMENT_is1) (Version: 2.0.0.8 - GOG.com)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6251 - Realtek Semiconductor Corp.)
Samsung ML-2540 Series (HKLM-x32\...\Samsung ML-2540 Series) (Version: - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00.04 - Samsung Electronics Co., Ltd.)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Star Trek Online (HKLM-x32\...\Star Trek Online) (Version: - Cryptic Studios)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.11.1 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VTech Download Agent Library (x32 Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM-x32\...\VTechDownloadManager) (Version: - VTech)
VueScan (HKLM\...\VueScan) (Version: - )
WinX DVD Ripper 5.5.9 (HKLM-x32\...\WinX DVD Ripper_is1) (Version: - Digiarty Software, Inc.)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 5.0.5.16135 - Blizzard Entertainment)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pet\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-548620592-360744849-4095091825-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pet\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
==================== Restore Points =========================
20-08-2014 16:26:02 Windows Update
23-08-2014 22:59:43 No23 Recorder wird installiert
24-08-2014 12:51:50 Windows Update
28-08-2014 05:31:59 Windows Update
30-08-2014 16:07:12 Windows Update
02-09-2014 17:37:03 Windows Update
05-09-2014 18:39:49 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-09-07 00:50 - 00450709 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0572C585-070E-4895-A0FD-0D76F17B3DC1} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {07213107-EBF7-4E5C-BD28-19C9E1221231} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {13B55829-DF65-4C84-8749-2ED606A198E8} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {2B1599FB-4AA0-435D-A2EE-76934A29D165} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {4B20C1F5-1745-45CC-BA41-32B971EDD63C} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {5188F070-CC34-4E76-B2BA-3D2FBB6732C6} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {5F51FCE9-EC37-47A7-A905-E3D50A897426} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {5FB64E82-156D-49ED-B4F8-7796A86D481C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {6C6F3DAD-7D7F-43FD-80CD-4B68EDB5C977} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {753C47AE-EC5E-44B3-95A9-2C8E553F0E39} - System32\Tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary => C:\Program Files\Windows Media Player\wmpnscfg.exe
Task: {79D2BA6C-9B91-4F74-88F8-B885644FAB5E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {8E1BC935-65D0-42BA-B69E-310497F0F57A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {91EAD51F-2590-4C5D-9E8C-7571D1F52FCC} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {937482A6-7EAD-4DB8-92D3-4E1BADBCE2A7} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {AC1F5CD6-72F3-4B7C-AFA4-442E77AC9551} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {C4C35DDF-4B41-4059-B61A-616F94B9165E} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {C96ADD0F-C029-4DFC-8BBD-DE0AA9AECE32} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {CC7EB1ED-30B2-45D1-9667-0A7DB0E1E742} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {CD76D6FE-8422-49EF-BB84-B054E80FB109} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {CEE74E90-2ED5-406C-A446-38086B16412D} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {EE7B9C7D-16FE-49A5-A537-AF61A8B18F14} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FC31C657-362B-4406-AB6D-99FAE1A72CC3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Go for FilesUpdate.job => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoforFilesUpdate.job => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Microsoft_Hardware_Launch_LifeExp_exe.job => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\RunOW.job => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
==================== Loaded Modules (whitelisted) =============
2011-04-01 11:00 - 2011-04-01 11:00 - 00034304 _____ () C:\Windows\System32\ssp9mlm.dll
2013-05-17 13:01 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-05-16 19:47 - 2011-10-29 09:59 - 00918448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
2014-04-17 13:20 - 2014-04-17 12:31 - 00391040 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
2013-05-16 19:47 - 2014-09-07 01:45 - 00019456 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\PEbiosinterface32.dll
2013-05-16 19:47 - 2010-06-29 10:58 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\ATKEX.dll
2014-09-06 23:56 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-09-06 23:56 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-09-06 23:56 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-09-06 23:56 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-09-06 23:56 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2012-01-11 08:48 - 2010-06-24 03:16 - 02150400 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtCore4.dll
2012-01-11 08:48 - 2010-07-13 15:07 - 07826432 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtGui4.dll
2012-01-11 08:48 - 2010-06-02 04:29 - 00934912 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtNetwork4.dll
2012-01-11 08:48 - 2010-06-02 04:28 - 00335360 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtXml4.dll
2014-04-17 13:20 - 2014-04-17 12:31 - 09844080 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtWebKit4.dll
2012-01-11 08:48 - 2010-06-02 04:56 - 00232960 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\phonon4.dll
2012-01-11 08:48 - 2010-06-02 04:54 - 02530816 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtXmlPatterns4.dll
2012-01-11 08:48 - 2010-07-05 11:19 - 00116736 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2012-01-11 08:48 - 2010-11-11 11:24 - 00028160 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\DACommCenter.dll
2012-01-11 08:48 - 2010-06-02 07:05 - 00119808 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2014-08-09 01:08 - 2014-08-09 01:08 - 00143680 _____ () C:\Program Files (x86)\Mumble\mumble_ol.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00229184 _____ () C:\Program Files (x86)\Mumble\opus.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 03216520 _____ () C:\Program Files (x86)\Mumble\libsndfile-1.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 04448576 _____ () C:\Program Files (x86)\Mumble\libmysql.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00177472 _____ () C:\Program Files (x86)\Mumble\speex.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00082752 _____ () C:\Program Files (x86)\Mumble\celt0.0.7.0.sse2.dll
2014-08-09 01:08 - 2014-08-09 01:08 - 00098624 _____ () C:\Program Files (x86)\Mumble\celt0.0.11.0.sse2.dll
2013-09-19 19:19 - 2013-09-19 19:19 - 00019976 _____ () C:\Users\Pet\AppData\Roaming\Mumble\Plugins\sr.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00046912 _____ () C:\Program Files (x86)\Mumble\plugins\aoc.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\arma2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\bf1942.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00048960 _____ () C:\Program Files (x86)\Mumble\plugins\bf2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032064 _____ () C:\Program Files (x86)\Mumble\plugins\bf2142.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00048960 _____ () C:\Program Files (x86)\Mumble\plugins\bf3.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\bfbc2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\bfheroes.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032064 _____ () C:\Program Files (x86)\Mumble\plugins\blacklight.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00033600 _____ () C:\Program Files (x86)\Mumble\plugins\borderlands.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032064 _____ () C:\Program Files (x86)\Mumble\plugins\borderlands2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\breach.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\cod2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032576 _____ () C:\Program Files (x86)\Mumble\plugins\cod4.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\cod5.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\codmw2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\codmw2so.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032064 _____ () C:\Program Files (x86)\Mumble\plugins\cs.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00047424 _____ () C:\Program Files (x86)\Mumble\plugins\dys.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032576 _____ () C:\Program Files (x86)\Mumble\plugins\etqw.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00047424 _____ () C:\Program Files (x86)\Mumble\plugins\gmod.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00031040 _____ () C:\Program Files (x86)\Mumble\plugins\gtaiv.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032576 _____ () C:\Program Files (x86)\Mumble\plugins\gw.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00047424 _____ () C:\Program Files (x86)\Mumble\plugins\insurgency.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\jc2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032576 _____ () C:\Program Files (x86)\Mumble\plugins\l4d.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00041792 _____ () C:\Program Files (x86)\Mumble\plugins\l4d2.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00028992 _____ () C:\Program Files (x86)\Mumble\plugins\link.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032576 _____ () C:\Program Files (x86)\Mumble\plugins\lol.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00032576 _____ () C:\Program Files (x86)\Mumble\plugins\lotro.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00081216 _____ () C:\Program Files (x86)\Mumble\plugins\manual.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00033088 _____ () C:\Program Files (x86)\Mumble\plugins\sto.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\ut2004.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00030528 _____ () C:\Program Files (x86)\Mumble\plugins\ut3.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00042304 _____ () C:\Program Files (x86)\Mumble\plugins\ut99.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00034624 _____ () C:\Program Files (x86)\Mumble\plugins\wolfet.dll
2014-08-09 01:09 - 2014-08-09 01:09 - 00041792 _____ () C:\Program Files (x86)\Mumble\plugins\wow.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 00048960 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\MemoryMan.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 00257856 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\RemoteRendererClient.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 00334144 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\SpeedTreeRT.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 00071488 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\PlatformInfo.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 01648960 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\RzSDKEng.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 01624896 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\RzSDKMod.dll
2012-07-22 20:56 - 2014-08-29 01:05 - 01104704 _____ () C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\swtor\RetailClient\RemoteRenderer.dll
2014-07-29 21:36 - 2014-07-29 21:36 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/07/2014 01:46:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/07/2014 00:45:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/07/2014 00:39:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/07/2014 00:35:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/06/2014 11:21:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/05/2014 10:54:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/05/2014 07:00:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Dropbox.exe, Version: 2.8.2.0, Zeitstempel: 0x535b0c6a
Name des fehlerhaften Moduls: libcef.dll, Version: 1.1364.1352.0, Zeitstempel: 0x5213d19d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x008940a2
ID des fehlerhaften Prozesses: 0x108
Startzeit der fehlerhaften Anwendung: 0xDropbox.exe0
Pfad der fehlerhaften Anwendung: Dropbox.exe1
Pfad des fehlerhaften Moduls: Dropbox.exe2
Berichtskennung: Dropbox.exe3
Error: (09/04/2014 06:47:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mspaint.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca29
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000011fd
ID des fehlerhaften Prozesses: 0x14dc
Startzeit der fehlerhaften Anwendung: 0xmspaint.exe0
Pfad der fehlerhaften Anwendung: mspaint.exe1
Pfad des fehlerhaften Moduls: mspaint.exe2
Berichtskennung: mspaint.exe3
Error: (09/04/2014 06:47:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mspaint.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca29
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000011fd
ID des fehlerhaften Prozesses: 0xf00
Startzeit der fehlerhaften Anwendung: 0xmspaint.exe0
Pfad der fehlerhaften Anwendung: mspaint.exe1
Pfad des fehlerhaften Moduls: mspaint.exe2
Berichtskennung: mspaint.exe3
Error: (09/01/2014 05:55:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (09/07/2014 04:44:28 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "O2BOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{C4579234-06CE-47D8-A8EE-89AFF1278360}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (09/07/2014 04:43:47 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0
Error: (09/07/2014 04:43:47 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0
Error: (09/07/2014 00:43:50 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/07/2014 00:43:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/07/2014 00:43:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/07/2014 00:43:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/07/2014 00:43:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/07/2014 00:43:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/07/2014 00:43:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
Error: (09/07/2014 01:46:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/07/2014 00:45:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/07/2014 00:39:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/07/2014 00:35:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/06/2014 11:21:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/05/2014 10:54:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/05/2014 07:00:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Dropbox.exe2.8.2.0535b0c6alibcef.dll1.1364.1352.05213d19dc0000005008940a210801cfc8c64ad267b4C:\Users\Pet\AppData\Roaming\Dropbox\bin\Dropbox.exeC:\Users\Pet\AppData\Roaming\Dropbox\bin\libcef.dll961bb483-34b9-11e4-ba11-5404a6c4d8a0
Error: (09/04/2014 06:47:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mspaint.exe6.1.7600.163854a5bca29msvcrt.dll7.0.7601.177444eeb033fc000000500000000000011fd14dc01cfc85fed6508c4C:\Windows\system32\mspaint.exeC:\Windows\system32\msvcrt.dll2f78905d-3453-11e4-ba11-5404a6c4d8a0
Error: (09/04/2014 06:47:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mspaint.exe6.1.7600.163854a5bca29msvcrt.dll7.0.7601.177444eeb033fc000000500000000000011fdf0001cfc85fd6f1065aC:\Windows\system32\mspaint.exeC:\Windows\system32\msvcrt.dll18d4557e-3453-11e4-ba11-5404a6c4d8a0
Error: (09/01/2014 05:55:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2380P CPU @ 3.10GHz
Percentage of memory in use: 47%
Total physical RAM: 8174.33 MB
Available physical RAM: 4313.6 MB
Total Pagefile: 16346.84 MB
Available Pagefile: 11128.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:833.86 GB) (Free:681.52 GB) NTFS
Drive d: () (Fixed) (Total:97.56 GB) (Free:67.88 GB) NTFS
Drive e: (PONS) (CDROM) (Total:0.04 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 08E10868)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=833.9 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-09-07 17:32:05
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST1000DM003-9YN162 rev.CC4C 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Pet\AppData\Local\Temp\pxldqpow.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff800033bf000 45 bytes [00, 00, 10, 02, 4E, 74, 66, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff800033bf02f 29 bytes [00, 01, 00, 06, 00, 00, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Windows\Explorer.EXE[1764] C:\Windows\system32\kernel32.dll!CreateProcessW 0000000077420650 10 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\Explorer.EXE[1764] C:\Windows\system32\kernel32.dll!CreateProcessW + 12 000000007742065c 2 bytes [00, 00]
.text C:\Windows\Explorer.EXE[1764] C:\Windows\system32\kernel32.dll!CreateProcessA 000000007749acf0 11 bytes {JMP QWORD [RIP+0x0]}
.text C:\Windows\Explorer.EXE[1764] C:\Windows\system32\kernel32.dll!CreateProcessA + 12 000000007749acfc 2 bytes [00, 00]
.text C:\Windows\Explorer.EXE[1764] C:\Windows\system32\CRYPT32.dll!PFXImportCertStore 000007fefd877f08 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\Microsoft Security Client\msseces.exe[1800] C:\Windows\system32\kernel32.dll!CreateProcessW 0000000077420650 10 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\Microsoft Security Client\msseces.exe[1800] C:\Windows\system32\kernel32.dll!CreateProcessW + 12 000000007742065c 2 bytes [00, 00]
.text C:\Program Files\Microsoft Security Client\msseces.exe[1800] C:\Windows\system32\kernel32.dll!CreateProcessA 000000007749acf0 11 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files\Microsoft Security Client\msseces.exe[1800] C:\Windows\system32\kernel32.dll!CreateProcessA + 12 000000007749acfc 2 bytes [00, 00]
.text C:\Program Files\Microsoft Security Client\msseces.exe[1800] C:\Windows\system32\CRYPT32.dll!PFXImportCertStore 000007fefd877f08 14 bytes {JMP QWORD [RIP+0x0]}
.text C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe[2224] C:\Windows\syswow64\kernel32.dll!CreateProcessW 000000007575103d 5 bytes JMP 0000000102c69172
.text C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe[2224] C:\Windows\syswow64\kernel32.dll!CreateProcessA 0000000075751072 5 bytes JMP 0000000102c6921b
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[2240] C:\Windows\syswow64\kernel32.dll!CreateProcessW 000000007575103d 5 bytes JMP 0000000102b99172
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[2240] C:\Windows\syswow64\kernel32.dll!CreateProcessA 0000000075751072 5 bytes JMP 0000000102b9921b
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[2240] C:\Windows\syswow64\ADVAPI32.dll!CreateProcessAsUserW 00000000754ec532 5 bytes JMP 0000000102b992c0
.text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[2240] C:\Windows\syswow64\ADVAPI32.dll!CreateProcessAsUserA 0000000075522642 5 bytes JMP 0000000102b9936c
---- Threads - GMER 2.1 ----
Thread C:\Windows\Explorer.EXE [1764:2476] 0000000003bb15a4
Thread C:\Windows\Explorer.EXE [1764:2480] 0000000003bb1658
Thread C:\Windows\Explorer.EXE [1764:2484] 0000000003bb2c0c
Thread C:\Windows\Explorer.EXE [1764:2488] 0000000003ba9ca0
Thread C:\Windows\Explorer.EXE [1764:2492] 0000000003bb23d8
Thread C:\Windows\SysWOW64\regsvr32.exe [2428:2456] 00000000003efeb6
Thread C:\Windows\SysWOW64\regsvr32.exe [2428:2460] 00000000003efd7d
Thread C:\Windows\SysWOW64\regsvr32.exe [2428:2464] 00000000003e2613
Thread C:\Windows\SysWOW64\regsvr32.exe [2428:2468] 00000000003e26d2
---- EOF - GMER 2.1 ----
Egal. Ich hoffe, ich habe alles richtig gemacht und ihr könnt mir helfen. Hatte übrigens nach GMER eien dicken Bluescreen... Code:
ATTFilter Problemsignatur:
Problemereignisname: BlueScreen
Betriebsystemversion: 6.1.7601.2.1.0.768.3
Gebietsschema-ID: 1031
Zusatzinformationen zum Problem:
BCCode: 109
BCP1: A3A039D89EEE9853
BCP2: B3B7465EF16CD45D
BCP3: FFFFF88002F705C0
BCP4: 0000000000000002
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1
Dateien, die bei der Beschreibung des Problems hilfreich sind:
C:\Windows\Minidump\090714-16114-01.dmp
C:\Users\Pet\AppData\Local\Temp\WER-47751-0.sysdata.xml
Lesen Sie unsere Datenschutzbestimmungen online:
hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407
Wenn die Onlinedatenschutzbestimmungen nicht verfügbar sind, lesen Sie unsere Datenschutzbestimmungen offline:
C:\Windows\system32\de-DE\erofflps.txt
DasPet |
| Themen zu Vawtrak.A lässt sich nicht komplett entfernen, scheint es |
| backdoor.papras, bccode: 109, cd/dvd-emulatoren., conduit.search, conduit.search entfernen, cpu, defender, dvdvideosoft ltd., entfernen, fehlercode 0x5, fehlercode 0xc0000005, launch, malware, pum.hijack.startmenu, pup.optional.conduit.a, pup.optional.privitizetb.a, pup.optional.softonic.a, refresh, registry, safer networking, scan, security, system, tracker, trojan.fakems.ed, trojan.msil.injector, win32/conduit.searchprotect.n, windows |
Baum-Darstellung