| |
| |||||||
Log-Analyse und Auswertung: [Win8.1] TR/Dropper.MSIL.Gen wurde gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
08.02.2015, 18:07
| #1 |
| | ![[Win8.1] TR/Dropper.MSIL.Gen wurde gefunden - Standard](images/icons/icon1.gif){kind=icon} [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Hallo zusammen, heute habe ich eine Anfrage in Steam bekommen wo mir eine Person ein Item zum Tausch anbieten wollte und mir einen Steam-link geschickt hat, sah fast genau so aus.... war aber keiner... da war ich leider zu unachtsam  , dadurch bin ich jetzt im Besitz des Pferdes "TR/Dropper.MSIL.Gen". Könnt Ihr mir bitte helfen, meinen PC wieder sauber zu bekommen  Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Sonntag, 08. Februar 2015 17:22
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 8.1
Windowsversion : (plain) [6.2.9200]
Boot Modus : Normal gebootet
Benutzername : Christoph
Computername : CHRISTOPH-PC
Versionsinformationen:
BUILD.DAT : 14.0.7.468 91859 Bytes 24.11.2014 10:23:00
AVSCAN.EXE : 14.0.7.462 1015544 Bytes 17.12.2014 18:12:31
AVSCANRC.DLL : 14.0.7.308 64304 Bytes 18.11.2014 18:22:50
LUKE.DLL : 14.0.7.462 60664 Bytes 17.12.2014 18:12:39
AVSCPLR.DLL : 14.0.7.440 93488 Bytes 17.12.2014 18:12:31
REPAIR.DLL : 14.0.7.412 366328 Bytes 17.12.2014 18:12:30
REPAIR.RDF : 1.0.4.60 704786 Bytes 06.02.2015 16:10:29
AVREG.DLL : 14.0.7.310 264952 Bytes 18.11.2014 18:22:50
AVLODE.DLL : 14.0.7.440 561456 Bytes 17.12.2014 18:12:29
AVLODE.RDF : 14.0.4.54 78895 Bytes 05.12.2014 18:23:10
XBV00015.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00016.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00017.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00018.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00019.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00020.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00021.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00022.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00023.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00024.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00025.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00026.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00027.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00028.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00029.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00030.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00031.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00032.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00033.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00034.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00035.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00036.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00037.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00038.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00039.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00040.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00041.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00073.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00074.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00075.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00076.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00077.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00078.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00079.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00080.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00081.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00082.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00083.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00084.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00085.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00086.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00087.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00088.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00089.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00090.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00091.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00092.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00093.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00094.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00095.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00096.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00097.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00098.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00099.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00100.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00101.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00102.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00103.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00104.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00105.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00106.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00107.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00108.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00109.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00110.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00111.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00112.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00113.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00114.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00115.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00116.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00117.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00118.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00119.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00120.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00121.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00122.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00123.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00124.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00125.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00126.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00127.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00128.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00129.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00130.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00131.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00132.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00133.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00134.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00135.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00136.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00137.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00138.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00139.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00140.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00141.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00142.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00143.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00144.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00145.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00146.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00147.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00148.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00149.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00150.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00151.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00152.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00153.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00154.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00155.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00156.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00157.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00158.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00159.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00160.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00161.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00162.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00163.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00164.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00165.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00166.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00167.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00168.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00169.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00170.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00171.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00172.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00173.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00174.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00175.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00176.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00177.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00178.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00179.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00180.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00181.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00182.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00183.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00184.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00185.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00186.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00187.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00188.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00189.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00190.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00191.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00192.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00193.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00194.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00195.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00196.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00197.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00198.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00199.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00200.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00201.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00202.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00203.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00204.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00205.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00206.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00207.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00208.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00209.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00210.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00211.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00212.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00213.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00214.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00215.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00216.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00217.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00218.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00219.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00220.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00221.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00222.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00223.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00224.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00225.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00226.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00227.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00228.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00229.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00230.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00231.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00232.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00233.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00234.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00235.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00236.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00237.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00238.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00239.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00240.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00241.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00242.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00243.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00244.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00245.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00246.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00247.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00248.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00249.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00250.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00251.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00252.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00253.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00254.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00255.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:38:48
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:26:51
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 16:59:46
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 18:26:03
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 12:35:56
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 19:49:09
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 17:48:32
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 18:37:05
XBV00008.VDF : 8.11.165.192 4251136 Bytes 07.08.2014 16:19:16
XBV00009.VDF : 8.11.172.30 2094080 Bytes 15.09.2014 16:56:48
XBV00010.VDF : 8.11.178.32 1581056 Bytes 14.10.2014 17:37:00
XBV00011.VDF : 8.11.184.50 2178560 Bytes 11.11.2014 17:32:10
XBV00012.VDF : 8.11.190.32 1876992 Bytes 03.12.2014 18:23:11
XBV00013.VDF : 8.11.201.28 2973696 Bytes 14.01.2015 17:47:53
XBV00014.VDF : 8.11.206.252 2695680 Bytes 04.02.2015 17:51:04
XBV00042.VDF : 8.11.207.24 43520 Bytes 04.02.2015 16:10:28
XBV00043.VDF : 8.11.207.50 2048 Bytes 04.02.2015 16:10:28
XBV00044.VDF : 8.11.207.52 2048 Bytes 04.02.2015 16:10:28
XBV00045.VDF : 8.11.207.78 20480 Bytes 04.02.2015 16:10:28
XBV00046.VDF : 8.11.207.104 5632 Bytes 04.02.2015 16:10:28
XBV00047.VDF : 8.11.207.106 2048 Bytes 05.02.2015 16:10:28
XBV00048.VDF : 8.11.207.108 23040 Bytes 05.02.2015 16:10:28
XBV00049.VDF : 8.11.207.110 34304 Bytes 05.02.2015 16:10:28
XBV00050.VDF : 8.11.207.112 2048 Bytes 05.02.2015 16:10:28
XBV00051.VDF : 8.11.207.134 15360 Bytes 05.02.2015 16:10:28
XBV00052.VDF : 8.11.207.154 9728 Bytes 05.02.2015 16:10:28
XBV00053.VDF : 8.11.207.178 39936 Bytes 05.02.2015 16:10:28
XBV00054.VDF : 8.11.207.200 32256 Bytes 05.02.2015 16:10:28
XBV00055.VDF : 8.11.207.204 2560 Bytes 05.02.2015 16:10:28
XBV00056.VDF : 8.11.207.208 57856 Bytes 06.02.2015 16:10:28
XBV00057.VDF : 8.11.207.210 2048 Bytes 06.02.2015 16:10:28
XBV00058.VDF : 8.11.207.212 5120 Bytes 06.02.2015 16:10:28
XBV00059.VDF : 8.11.207.232 18944 Bytes 06.02.2015 16:10:28
XBV00060.VDF : 8.11.207.252 24576 Bytes 06.02.2015 16:10:28
XBV00061.VDF : 8.11.208.16 9216 Bytes 06.02.2015 16:10:28
XBV00062.VDF : 8.11.208.18 4096 Bytes 06.02.2015 16:10:28
XBV00063.VDF : 8.11.208.20 2560 Bytes 06.02.2015 16:10:28
XBV00064.VDF : 8.11.208.42 54272 Bytes 06.02.2015 22:10:17
XBV00065.VDF : 8.11.208.62 2048 Bytes 06.02.2015 22:10:17
XBV00066.VDF : 8.11.208.84 28160 Bytes 06.02.2015 10:28:36
XBV00067.VDF : 8.11.208.86 2048 Bytes 06.02.2015 10:28:36
XBV00068.VDF : 8.11.208.88 2048 Bytes 07.02.2015 10:28:37
XBV00069.VDF : 8.11.208.92 61440 Bytes 07.02.2015 10:49:10
XBV00070.VDF : 8.11.208.112 2048 Bytes 07.02.2015 10:49:10
XBV00071.VDF : 8.11.208.130 40448 Bytes 07.02.2015 10:49:10
XBV00072.VDF : 8.11.208.148 2048 Bytes 07.02.2015 10:49:10
LOCAL000.VDF : 8.11.208.148 120584704 Bytes 07.02.2015 10:49:29
Engineversion : 8.3.28.16
AEVDF.DLL : 8.3.1.6 133992 Bytes 20.08.2014 16:51:42
AESCRIPT.DLL : 8.2.2.54 550824 Bytes 06.02.2015 16:10:28
AESCN.DLL : 8.3.2.2 139456 Bytes 21.07.2014 17:32:00
AESBX.DLL : 8.2.20.24 1409224 Bytes 08.05.2014 17:39:12
AERDL.DLL : 8.2.1.16 743328 Bytes 29.10.2014 18:45:59
AEPACK.DLL : 8.4.0.58 789360 Bytes 16.01.2015 16:58:04
AEOFFICE.DLL : 8.3.1.10 351088 Bytes 16.01.2015 16:58:04
AEMOBILE.DLL : 8.1.2.0 277360 Bytes 17.12.2014 18:12:27
AEHEUR.DLL : 8.1.4.1522 8071080 Bytes 06.02.2015 16:10:28
AEHELP.DLL : 8.3.1.0 278728 Bytes 28.05.2014 18:13:12
AEGEN.DLL : 8.1.7.40 456608 Bytes 20.12.2014 14:04:29
AEEXP.DLL : 8.4.2.70 255904 Bytes 06.02.2015 16:10:28
AEEMU.DLL : 8.1.3.4 399264 Bytes 07.08.2014 16:19:13
AEDROID.DLL : 8.4.3.6 850800 Bytes 17.12.2014 18:12:27
AECORE.DLL : 8.3.4.0 243624 Bytes 17.12.2014 18:12:26
AEBB.DLL : 8.1.2.0 60448 Bytes 07.08.2014 16:19:13
AVWINLL.DLL : 14.0.7.308 25904 Bytes 18.11.2014 18:22:48
AVPREF.DLL : 14.0.7.308 52016 Bytes 18.11.2014 18:22:50
AVREP.DLL : 14.0.7.308 220976 Bytes 18.11.2014 18:22:50
AVARKT.DLL : 14.0.7.308 227632 Bytes 18.11.2014 18:22:48
AVEVTLOG.DLL : 14.0.7.440 184112 Bytes 17.12.2014 18:12:28
SQLITE3.DLL : 14.0.7.308 453936 Bytes 18.11.2014 18:22:59
AVSMTP.DLL : 14.0.7.308 79096 Bytes 18.11.2014 18:22:50
NETNT.DLL : 14.0.7.308 15152 Bytes 18.11.2014 18:22:58
RCIMAGE.DLL : 14.0.7.308 4865328 Bytes 18.11.2014 18:22:48
RCTEXT.DLL : 14.0.7.318 77048 Bytes 18.11.2014 18:22:48
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: ShlExt
Konfigurationsdatei...................: C:\Users\CHRIST~1\AppData\Local\Temp\cd4be829.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:,
Durchsuche aktive Programme...........: aus
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Beginn des Suchlaufs: Sonntag, 08. Februar 2015 17:22
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\Users\Christoph\AppData\Local\Temp\7FAF.tmp'
C:\Users\Christoph\AppData\Local\Temp\7FAF.tmp
[FUND] Ist das Trojanische Pferd TR/Dropper.MSIL.Gen
Beginne mit der Desinfektion:
C:\Users\Christoph\AppData\Local\Temp\7FAF.tmp
[FUND] Ist das Trojanische Pferd TR/Dropper.MSIL.Gen
[WARNUNG] Die Datei wurde ignoriert.
Ende des Suchlaufs: Sonntag, 08. Februar 2015 17:22
Benötigte Zeit: 00:00 Minute(n)
Der Suchlauf wurde vollständig durchgeführt.
0 Verzeichnisse wurden überprüft
1 Dateien wurden geprüft
1 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
0 Dateien ohne Befall
0 Archive wurden durchsucht
1 Warnungen
0 Hinweise
Code:
ATTFilter DEFOGGER
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:48 on 08/02/2015 (Christoph)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Christoph (administrator) on CHRISTOPH-PC on 08-02-2015 17:50:00
Running from C:\Users\Christoph\Desktop\PROGS\init
Loaded Profiles: Christoph (Available profiles: Christoph)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(D-Link Crop.) C:\Program Files (x86)\ShareCenterSync\daemon.exe
() C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Valve Corporation) H:\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(OpenOffice.org) F:\Programme\OpenOffice\program\soffice.exe
(OpenOffice.org) F:\Programme\OpenOffice\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() H:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
(Valve Corporation) H:\Steam\GameOverlayUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.)
HKLM\...\Run: [GENIE] => C:\Program Files (x86)\NETGEAR\A6200\A6200.exe [348888 2013-02-18] (NETGEAR,Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-01-23] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4509184 2012-12-27] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsInd00] => C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe [1885184 2012-12-18] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [NETGEAR USB Control Center] => C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe [4139008 2012-09-20] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [Steam] => H:\Steam\steam.exe [1942720 2015-01-23] (Valve Corporation)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [ShareCenterSync] => C:\Program Files (x86)\ShareCenterSync\ShareCenterSync.exe [1569600 2012-03-13] ()
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [GoogleChromeAutoLaunch_F90F4DEE659B937C11A81E3452105E4C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [Google Update] => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2015-02-04] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> F:\Programme\OpenOffice\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
Winsock: Catalog5-x64 07 C:\Program Files (x86)\Generic\Network Printer Wizard\NPWprint.dll [195584] (Elite Silicon Technology Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1842290086-4195455623-1572856928-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Christoph\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1842290086-4195455623-1572856928-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Christoph\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2012-12-17]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.at/
CHR Profile: C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-16]
CHR Extension: (Google Cast) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-09-29]
CHR Extension: (Google-Suche) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-16]
CHR Extension: (Avira Browserschutz) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-15]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Battlefield Play4Free) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2013-09-18]
CHR Extension: (Google Mail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-16]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-10-08] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NPWService; C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe [798720 2012-03-20] () [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-04] (Electronic Arts)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-10-31] ()
R2 ShareCenterSync; C:\Program Files (x86)\ShareCenterSync\daemon.exe [3152184 2012-03-13] (D-Link Crop.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 WNDA6200; C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe [29984 2012-09-24] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BCMH43XX; C:\Windows\system32\DRIVERS\bcmwlhigh63a.sys [2392240 2013-02-28] (Broadcom Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NetgearUDSMBus; C:\Windows\system32\drivers\NetgearUDSMBus.sys [107296 2012-08-13] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\Windows\System32\drivers\NetgearUDSTcpBus.sys [183584 2012-08-13] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\Windows\SysWOW64\drivers\NetgearUDSTcpBus.sys [153600 2012-06-15] (Windows (R) Codename Longhorn DDK provider) [File not signed]
R1 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-26] (CACE Technologies, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\CHRIST~1\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-08 17:46 - 2015-02-08 17:46 - 00000000 ____D () C:\Users\Christoph\Desktop\PROGS
2015-02-04 20:59 - 2015-02-08 17:09 - 00001162 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA.job
2015-02-04 20:59 - 2015-02-06 18:09 - 00001110 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core.job
2015-02-04 20:59 - 2015-02-06 18:04 - 00004116 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA
2015-02-04 20:59 - 2015-02-06 18:04 - 00003736 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core
2015-02-04 20:59 - 2015-02-04 20:59 - 00001276 _____ () C:\Users\Christoph\Desktop\Chromecast.lnk
2015-02-04 20:59 - 2015-02-04 20:59 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromecast
2015-01-30 20:08 - 2015-01-30 20:05 - 20552922 _____ () C:\Users\Christoph\Downloads\haecker.dem
2015-01-25 20:11 - 2015-01-25 20:11 - 00000840 _____ () C:\Users\Christoph\Documents\CSGO_admin.txt
2015-01-14 18:49 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 18:49 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 18:49 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 18:49 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 18:49 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 18:49 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 18:49 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 18:49 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 18:49 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 18:49 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 18:49 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 18:49 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 18:49 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 18:49 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 18:49 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 18:49 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 18:49 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 18:49 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 18:49 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 18:49 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 18:49 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-08 17:50 - 2014-06-05 21:58 - 00000000 ____D () C:\FRST
2015-02-08 17:48 - 2013-10-17 20:18 - 01165622 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-08 17:46 - 2013-11-12 20:57 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{93C005A8-655F-4C1D-BABB-61A09296FDDE}
2015-02-08 17:33 - 2012-11-16 20:22 - 00001144 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-08 17:33 - 2012-11-16 20:22 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-08 17:21 - 2013-01-24 19:12 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-08 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-08 16:00 - 2013-10-17 20:23 - 00000000 __RDO () C:\Users\Christoph\SkyDrive
2015-02-07 18:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-02-06 17:28 - 2012-11-16 20:22 - 00004116 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 17:28 - 2012-11-16 20:22 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 17:22 - 2012-11-16 20:19 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1842290086-4195455623-1572856928-1001
2015-02-06 17:22 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-04 20:59 - 2012-11-16 20:22 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Google
2015-02-04 20:21 - 2013-01-24 19:12 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 18:32 - 2013-05-12 19:25 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\TS3Client
2015-02-01 11:53 - 2014-11-10 20:20 - 00001153 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-02-01 11:53 - 2013-10-04 17:38 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-01 11:53 - 2012-11-16 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-02-01 11:53 - 2012-11-16 22:02 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-21 20:23 - 2013-10-17 20:15 - 00000000 ____D () C:\Users\Christoph
2015-01-21 18:53 - 2013-09-30 05:14 - 00005430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-21 18:53 - 2013-09-30 04:56 - 01489330 _____ () C:\WINDOWS\system32\perfh007.dat
2015-01-21 18:53 - 2013-09-30 04:56 - 00382950 _____ () C:\WINDOWS\system32\perfc007.dat
2015-01-21 18:47 - 2014-11-23 19:00 - 00001730 _____ () C:\WINDOWS\setupact.log
2015-01-21 18:47 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-16 17:52 - 2014-12-10 19:00 - 00002900 _____ () C:\WINDOWS\PFRO.log
2015-01-15 21:08 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-01-15 21:07 - 2013-01-31 21:06 - 00000000 ____D () C:\ProgramData\ShareCenter
2015-01-15 18:01 - 2013-07-25 18:35 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-15 17:56 - 2012-12-13 20:59 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories =======
2012-11-16 21:12 - 2014-11-15 19:14 - 0007626 _____ () C:\Users\Christoph\AppData\Local\Resmon.ResmonCfg
2014-06-01 13:07 - 2014-06-01 13:09 - 0000826 _____ () C:\ProgramData\hpzinstall.log
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-04 20:14
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by Christoph at 2015-02-08 17:50:34
Running from C:\Users\Christoph\Desktop\PROGS\init
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AION Free-to-Play Version 1.0 (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: 1.0 - Gameforge)
AMD Catalyst Install Manager (HKLM\...\{5AE0838D-19B1-5D12-5FE8-E6503B2C8716}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield Play4Free (HKLM-x32\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version: - EA Digital illusions)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
Brother MFL-Pro Suite DCP-1510 series (HKLM-x32\...\{90C24B16-9C28-44AB-8C63-BB9822218E18}) (Version: 1.0.0.0 - Brother Industries, Ltd.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
ChromecastApp (HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1383.0 - Google Inc.)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - )
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
Curse Client (HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.2.5 - SCS Software)
F2100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F2100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Game of Thrones (HKLM-x32\...\Steam App 208730) (Version: - Cyanide Studios)
Gameforge Live 1.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.0.1717 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Hartlauer Foto World (HKLM-x32\...\Hartlauer Foto World) (Version: 5.0.1 - CEWE COLOR AG u Co. OHG)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Java 7 Update 13 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417013FF}) (Version: 7.0.130 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java SE Development Kit 7 Update 13 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170130}) (Version: 1.7.0.130 - Oracle)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)
Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)
Look@LAN 2.50 Build 35 (HKLM-x32\...\Look@LAN_1.0) (Version: - )
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1229 - Electronic Arts)
NETGEAR A6200 Genie (HKLM-x32\...\{48E61F3E-61D4-42A3-9D29-D0CF40838779}) (Version: 26.0.0.0 - NETGEAR)
NETGEAR USB Control Center (HKLM-x32\...\{4528B812-FF2C-4E3A-A9EA-1ECB483BF03A}) (Version: 1.32 - NETGEAR)
Network Printer Wizard (HKLM-x32\...\InstallShield_{F2DF59A0-5C1F-4454-9B67-538F43E2D335}) (Version: 2.0.1.7 - Generic)
Network Printer Wizard (Version: 2.0.1.7 - Generic) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Off-Road Drive (HKLM-x32\...\Steam App 200230) (Version: - 1C-Avalon)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.6.4643 - Electronic Arts, Inc.)
PDF Architect (HKLM-x32\...\{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}) (Version: 1.0.41.8362 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.1 - pdfforge)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
ShareCenterSync (HKLM-x32\...\ShareCenterSync_is1) (Version: - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
Test Drive Unlimited 2 (HKLM-x32\...\Steam App 9930) (Version: - Eden Studios)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrackMania United (HKLM-x32\...\Steam App 7200) (Version: - Nadeo)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
win2day Poker (HKLM-x32\...\win2day Poker ) (Version: - Boss Media AB)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {3442176F-799E-4F91-A597-53A40DD68F07} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {5A9862D5-0B2A-4B37-8EF7-4E0E34600E11} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-16] (Google Inc.)
Task: {789270E7-0B8E-40F5-9D31-94D438755167} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-16] (Google Inc.)
Task: {A2C09B64-05D9-44B7-A0D2-C44343856905} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {C0070F82-433D-4E95-9C16-78F0974DE323} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-15] (Microsoft Corporation)
Task: {E10CFAB8-7E69-4BEA-A300-605B10EA6D56} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {EDC30982-8566-4227-96EB-994928671E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core.job => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA.job => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\WebReg HP Deskjet F2100 series.job => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe
==================== Loaded Modules (whitelisted) ==============
2013-10-08 09:35 - 2013-10-08 09:35 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-10-22 14:41 - 2012-10-22 14:41 - 00749056 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-10-22 14:42 - 2012-10-22 14:42 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-10-08 09:34 - 2013-10-08 09:34 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2012-03-20 14:02 - 2012-03-20 14:02 - 00798720 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe
2012-03-20 14:02 - 2012-03-20 14:02 - 00267776 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWpsm.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00306688 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWdcp.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00096768 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWlog.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00104448 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWuntp.dll
2013-09-18 13:33 - 2013-10-31 10:57 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-07-12 18:06 - 2012-09-24 16:28 - 00029984 _____ () C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
2013-10-20 16:40 - 2013-10-20 16:40 - 00183808 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\ErrorReporting.dll
2014-02-11 19:21 - 2014-02-11 19:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-02-11 19:22 - 2014-02-11 19:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-02-11 19:21 - 2014-02-11 19:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-02-11 19:22 - 2014-02-11 19:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2013-10-08 09:34 - 2013-10-08 09:34 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-09-20 16:57 - 2012-09-20 16:57 - 04139008 _____ () C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe
2014-10-23 20:19 - 2014-10-23 20:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00103424 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
2013-01-31 21:06 - 2012-03-13 14:37 - 00077523 _____ () C:\Program Files (x86)\ShareCenterSync\librsync.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00788333 _____ () C:\Program Files (x86)\ShareCenterSync\libgnutls-26.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00153543 _____ () C:\Program Files (x86)\ShareCenterSync\libgsasl-7.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00333288 _____ () C:\Program Files (x86)\ShareCenterSync\Sqlite3.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00107520 _____ () C:\Program Files (x86)\ShareCenterSync\libgcc_s_dw2-1.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00879630 _____ () C:\Program Files (x86)\ShareCenterSync\libstdc++-6.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00571199 _____ () C:\Program Files (x86)\ShareCenterSync\libgcrypt-11.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00109849 _____ () C:\Program Files (x86)\ShareCenterSync\libtasn1-3.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00223291 _____ () C:\Program Files (x86)\ShareCenterSync\libidn-11.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00075707 _____ () C:\Program Files (x86)\ShareCenterSync\libgpg-error-0.dll
2014-06-08 18:17 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 02396672 _____ () H:\Steam\libavcodec-56.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00479744 _____ () H:\Steam\libavformat-56.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00332800 _____ () H:\Steam\libavresample-2.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00442880 _____ () H:\Steam\libavutil-54.dll
2014-11-13 18:58 - 2014-11-11 19:47 - 00774656 _____ () H:\Steam\SDL2.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 05002752 _____ () H:\Steam\v8.dll
2015-01-24 21:21 - 2015-01-23 23:34 - 02227904 _____ () H:\Steam\video.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 01612800 _____ () H:\Steam\icui18n.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 01210368 _____ () H:\Steam\icuuc.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00485888 _____ () H:\Steam\libswscale-3.dll
2015-01-24 21:21 - 2015-01-23 23:33 - 00696512 _____ () H:\Steam\bin\chromehtml.DLL
2015-02-08 16:04 - 2015-02-08 16:04 - 00155232 ___HT () C:\Users\Christoph\AppData\Local\Temp\~CAD7.tmp
2015-02-06 22:34 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll
2015-01-20 18:17 - 2015-01-16 00:42 - 34641288 _____ () H:\Steam\bin\libcef.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () F:\Programme\OpenOffice\program\libxml2.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00198144 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00311296 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00203776 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00387072 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 06186496 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\engine.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00156160 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 01174016 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 01240064 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00351744 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00607744 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00164864 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00708096 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00134656 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 01336832 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00395264 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 03186176 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 01761792 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00143360 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\localize.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00230912 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00988672 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 01059328 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\chromehtml.dll
2014-11-24 17:47 - 2014-11-24 17:48 - 20625832 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\libcef.dll
2013-02-03 11:22 - 2013-02-03 11:53 - 01099616 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\avcodec-53.dll
2013-02-03 11:53 - 2013-02-03 11:53 - 00123232 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\avutil-51.dll
2013-02-03 11:53 - 2013-02-03 11:53 - 00190816 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\avformat-53.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00582144 _____ () h:\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 12294144 _____ () h:\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 09827328 _____ () h:\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00094208 _____ () H:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00084992 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll
2014-09-13 14:36 - 2014-09-13 14:36 - 00071680 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi
2014-09-13 14:36 - 2014-09-13 14:36 - 00012800 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt
2014-09-13 14:36 - 2014-09-13 14:36 - 00055808 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt
2015-02-06 17:10 - 2015-02-06 17:10 - 00967680 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll
2015-02-06 17:10 - 2015-02-06 17:10 - 00176128 _____ () h:\steam\steamapps\common\counter-strike global offensive\bin\vaudio_speex.dll
2015-01-20 18:17 - 2015-01-16 00:42 - 01709960 _____ () H:\Steam\bin\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Christoph\SkyDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Registry Areas =====================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Christoph\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-1842290086-4195455623-1572856928-500 - Administrator - Disabled)
Christoph (S-1-5-21-1842290086-4195455623-1572856928-1001 - Administrator - Enabled) => C:\Users\Christoph
Gast (S-1-5-21-1842290086-4195455623-1572856928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1842290086-4195455623-1572856928-1007 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/08/2015 00:40:46 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/08/2015 00:04:32 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/07/2015 04:56:59 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/07/2015 00:59:18 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/04/2015 09:35:04 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/04/2015 07:00:07 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: There was an error with the Windows Location Provider database
Error: (02/01/2015 09:00:41 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/01/2015 00:16:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHRISTOPH-PC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/29/2015 08:19:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20279 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1c1c
Startzeit: 01d03ba0cd88fa7e
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: acb13fd2-a7eb-11e4-bee1-3085a94236f8
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (01/29/2015 06:29:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.16384, Zeitstempel: 0x5215e075
Name des fehlerhaften Moduls: FunDisc.dll_unloaded, Version: 6.3.9600.16384, Zeitstempel: 0x5215de55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000219d
ID des fehlerhaften Prozesses: 0xb1c
Startzeit der fehlerhaften Anwendung: 0xWLANExt.exe0
Pfad der fehlerhaften Anwendung: WLANExt.exe1
Pfad des fehlerhaften Moduls: WLANExt.exe2
Berichtskennung: WLANExt.exe3
Vollständiger Name des fehlerhaften Pakets: WLANExt.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WLANExt.exe5
System errors:
=============
Error: (02/08/2015 03:56:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (02/08/2015 03:56:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BCM42RLY" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (02/08/2015 00:40:45 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:45 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:45 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:45 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:44 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:44 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:44 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (02/08/2015 00:40:44 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office Sessions:
=========================
Error: (02/08/2015 00:40:46 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/08/2015 00:04:32 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/07/2015 04:56:59 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/07/2015 00:59:18 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/04/2015 09:35:04 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/04/2015 07:00:07 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: -2147024883
Error: (02/01/2015 09:00:41 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.ComponentModel.Win32Exception (0x80004005): Key (Users\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall) could not be opened Error: 87, Hive: Users, Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.CheckResultAndThrowWin32Exception(Int32 result, String message)
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.OpenRegKey()
bei Avira.OE.WinCore.Utility.RegistryValueWatcher.Start()
bei Avira.OE.ServiceHost.AppInfoRepositoryFactory.CreateRegistryAppInfoRepository(RegistryHive registryHive, String registryPath, RegistryView registryView)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateUserAppInfoRepository(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.UpdateOnNewUserSid(String userSid)
bei Avira.OE.ServiceHost.DesktopApplications.OnSessionChange(Int32 sessionId, SessionChangeReason reason)
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei S...
Error: (02/01/2015 00:16:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CHRISTOPH-PC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/29/2015 08:19:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.202791c1c01d03ba0cd88fa7e4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\LiveComm.exeacb13fd2-a7eb-11e4-bee1-3085a94236f8microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (01/29/2015 06:29:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WLANExt.exe6.3.9600.163845215e075FunDisc.dll_unloaded6.3.9600.163845215de55c0000005000000000000219db1c01d03bd3c6a69f0cC:\WINDOWS\system32\WLANExt.exeFunDisc.dll6ddb88ba-a7dc-11e4-bee1-3085a94236f8
CodeIntegrity Errors:
===================================
Date: 2013-10-31 10:03:55.117
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-31 10:03:41.476
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 21:17:26.811
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 21:17:13.045
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 19:49:54.489
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 19:49:42.492
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-12 14:47:10.718
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-12 14:46:56.678
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: AMD FX(tm)-6100 Six-Core Processor
Percentage of memory in use: 27%
Total physical RAM: 16366.11 MB
Available physical RAM: 11882.23 MB
Total Pagefile: 16366.11 MB
Available Pagefile: 11181.04 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:55.56 GB) (Free:17.81 GB) NTFS
Drive d: (Dokumente) (Fixed) (Total:0.1 GB) (Free:0.03 GB) NTFS
Drive e: (Games) (Fixed) (Total:97.66 GB) (Free:24.94 GB) NTFS
Drive f: (Daten) (Fixed) (Total:254.27 GB) (Free:236.21 GB) NTFS
Drive h: (Games2) (Fixed) (Total:244.14 GB) (Free:142.82 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 685BECED)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: F1B7990D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=254.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=244.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=97.7 GB) - (Type=OF Extended)
==================== End Of Log ============================
Christoph/Sub Zero |
|
08.02.2015, 18:12
| #2 |
| /// the machine /// TB-Ausbilder    | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
08.02.2015, 18:44
| #3 |
| | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Hallo schrauber,
__________________danke für deine schnelle Antwort, das sind die Ergebnisse (Hinweis: nachdem MBAM durch war, hat sich Avira gemeldet, dass ein auffälliger Zugriff auf die Registry blockiert wurde) MBAM Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 08.02.2015 Suchlauf-Zeit: 18:15:11 Logdatei: mbam.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.02.08.05 Rootkit Datenbank: v2015.02.03.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Christoph Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 365935 Verstrichene Zeit: 8 Min, 29 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 2 PUP.Optional.OpenCandy, C:\Users\Christoph\AppData\Roaming\OpenCandy, In Quarantäne, [9c69e13b5238b284498e0c42af54c23e], PUP.Optional.OpenCandy, C:\Users\Christoph\AppData\Roaming\OpenCandy\3CEC0E823F37403A967727EFAD8AC86F, In Quarantäne, [9c69e13b5238b284498e0c42af54c23e], Dateien: 1 PUP.Optional.Conduit.A, C:\Users\Christoph\AppData\Roaming\OpenCandy\3CEC0E823F37403A967727EFAD8AC86F\sp-downloader.exe, In Quarantäne, [50b516066d1df343cc33cf73926fa15f], Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.110 - Bericht erstellt 08/02/2015 um 18:33:21
# Aktualisiert 05/02/2015 von Xplode
# Datenbank : 2015-02-08.1 [Server]
# Betriebssystem : Windows 8.1 (x64)
# Benutzername : Christoph - CHRISTOPH-PC
# Gestarted von : C:\Users\Christoph\Desktop\PROGS\n1\AdwCleaner_4.110.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Users\Christoph\AppData\Local\CrashRpt
Ordner Gelöscht : C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh
Datei Gelöscht : C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Google Chrome v40.0.2214.111
*************************
AdwCleaner[R0].txt - [2076 Bytes] - [08/02/2015 18:32:00]
AdwCleaner[S0].txt - [1998 Bytes] - [08/02/2015 18:33:21]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2057 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 8.1 x64
Ran by Christoph on 08.02.2015 at 18:35:59,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.02.2015 at 18:38:07,20
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Christoph (administrator) on CHRISTOPH-PC on 08-02-2015 18:39:43
Running from C:\Users\Christoph\Desktop\PROGS\init
Loaded Profiles: Christoph (Available profiles: Christoph)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(D-Link Crop.) C:\Program Files (x86)\ShareCenterSync\daemon.exe
() C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Valve Corporation) H:\Steam\Steam.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
(OpenOffice.org) F:\Programme\OpenOffice\program\soffice.exe
(OpenOffice.org) F:\Programme\OpenOffice\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
() C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.)
HKLM\...\Run: [GENIE] => C:\Program Files (x86)\NETGEAR\A6200\A6200.exe [348888 2013-02-18] (NETGEAR,Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-01-23] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4509184 2012-12-27] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsInd00] => C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe [1885184 2012-12-18] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [NETGEAR USB Control Center] => C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe [4139008 2012-09-20] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [Steam] => H:\Steam\steam.exe [1942720 2015-01-23] (Valve Corporation)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [ShareCenterSync] => C:\Program Files (x86)\ShareCenterSync\ShareCenterSync.exe [1569600 2012-03-13] ()
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [GoogleChromeAutoLaunch_F90F4DEE659B937C11A81E3452105E4C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [Google Update] => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2015-02-04] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> F:\Programme\OpenOffice\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Winsock: Catalog5-x64 07 C:\Program Files (x86)\Generic\Network Printer Wizard\NPWprint.dll [195584] (Elite Silicon Technology Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1842290086-4195455623-1572856928-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Christoph\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1842290086-4195455623-1572856928-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Christoph\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2012-12-17]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.at/
CHR Profile: C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-16]
CHR Extension: (Google Cast) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-09-29]
CHR Extension: (Google-Suche) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-16]
CHR Extension: (Avira Browserschutz) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-15]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-16]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-10-08] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NPWService; C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe [798720 2012-03-20] () [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-04] (Electronic Arts)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-10-31] ()
R2 ShareCenterSync; C:\Program Files (x86)\ShareCenterSync\daemon.exe [3152184 2012-03-13] (D-Link Crop.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 WNDA6200; C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe [29984 2012-09-24] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BCMH43XX; C:\Windows\system32\DRIVERS\bcmwlhigh63a.sys [2392240 2013-02-28] (Broadcom Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NetgearUDSMBus; C:\Windows\system32\drivers\NetgearUDSMBus.sys [107296 2012-08-13] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\Windows\System32\drivers\NetgearUDSTcpBus.sys [183584 2012-08-13] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\Windows\SysWOW64\drivers\NetgearUDSTcpBus.sys [153600 2012-06-15] (Windows (R) Codename Longhorn DDK provider) [File not signed]
R1 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-26] (CACE Technologies, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\CHRIST~1\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-08 18:38 - 2015-02-08 18:38 - 00000618 _____ () C:\Users\Christoph\Desktop\JRT.txt
2015-02-08 18:31 - 2015-02-08 18:33 - 00000000 ____D () C:\AdwCleaner
2015-02-08 17:46 - 2015-02-08 18:13 - 00000000 ____D () C:\Users\Christoph\Desktop\PROGS
2015-02-04 20:59 - 2015-02-08 18:09 - 00001162 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA.job
2015-02-04 20:59 - 2015-02-08 18:09 - 00001110 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core.job
2015-02-04 20:59 - 2015-02-06 18:04 - 00004116 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA
2015-02-04 20:59 - 2015-02-06 18:04 - 00003736 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core
2015-02-04 20:59 - 2015-02-04 20:59 - 00001276 _____ () C:\Users\Christoph\Desktop\Chromecast.lnk
2015-02-04 20:59 - 2015-02-04 20:59 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromecast
2015-01-30 20:08 - 2015-01-30 20:05 - 20552922 _____ () C:\Users\Christoph\Downloads\haecker.dem
2015-01-25 20:11 - 2015-01-25 20:11 - 00000840 _____ () C:\Users\Christoph\Documents\CSGO_admin.txt
2015-01-14 18:49 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 18:49 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 18:49 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 18:49 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 18:49 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 18:49 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 18:49 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 18:49 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 18:49 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 18:49 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 18:49 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 18:49 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 18:49 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 18:49 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 18:49 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 18:49 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 18:49 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 18:49 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 18:49 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 18:49 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 18:49 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-08 18:39 - 2014-06-05 21:58 - 00000000 ____D () C:\FRST
2015-02-08 18:34 - 2014-12-10 19:00 - 00004980 _____ () C:\WINDOWS\PFRO.log
2015-02-08 18:34 - 2014-11-23 19:00 - 00001884 _____ () C:\WINDOWS\setupact.log
2015-02-08 18:34 - 2013-10-17 20:23 - 00000000 ___DO () C:\Users\Christoph\SkyDrive
2015-02-08 18:34 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-08 18:34 - 2012-11-16 20:22 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-08 18:33 - 2013-10-17 20:18 - 01226584 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-08 18:33 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-08 18:33 - 2013-01-31 21:06 - 00000000 ____D () C:\ProgramData\ShareCenter
2015-02-08 18:33 - 2012-11-16 20:22 - 00001144 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-08 18:31 - 2013-11-12 20:57 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{93C005A8-655F-4C1D-BABB-61A09296FDDE}
2015-02-08 18:30 - 2014-07-24 18:33 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-08 18:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\vpnplugins
2015-02-08 18:21 - 2013-01-24 19:12 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-08 18:19 - 2012-11-16 20:19 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1842290086-4195455623-1572856928-1001
2015-02-08 18:14 - 2014-07-24 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-08 18:14 - 2014-07-24 18:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-08 18:14 - 2014-02-15 12:50 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-08 18:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-07 18:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-02-06 17:28 - 2012-11-16 20:22 - 00004116 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 17:28 - 2012-11-16 20:22 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 17:22 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-04 20:59 - 2012-11-16 20:22 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Google
2015-02-04 20:21 - 2013-01-24 19:12 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 18:32 - 2013-05-12 19:25 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\TS3Client
2015-02-01 11:53 - 2014-11-10 20:20 - 00001153 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-02-01 11:53 - 2013-10-04 17:38 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-01 11:53 - 2012-11-16 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-02-01 11:53 - 2012-11-16 22:02 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-21 20:23 - 2013-10-17 20:15 - 00000000 ____D () C:\Users\Christoph
2015-01-21 18:53 - 2013-09-30 05:14 - 00005430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-21 18:53 - 2013-09-30 04:56 - 01489330 _____ () C:\WINDOWS\system32\perfh007.dat
2015-01-21 18:53 - 2013-09-30 04:56 - 00382950 _____ () C:\WINDOWS\system32\perfc007.dat
2015-01-15 18:01 - 2013-07-25 18:35 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-15 17:56 - 2012-12-13 20:59 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories =======
2012-11-16 21:12 - 2014-11-15 19:14 - 0007626 _____ () C:\Users\Christoph\AppData\Local\Resmon.ResmonCfg
2014-06-01 13:07 - 2014-06-01 13:09 - 0000826 _____ () C:\ProgramData\hpzinstall.log
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Christoph\AppData\Local\Temp\Quarantine.exe
C:\Users\Christoph\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-04 20:14
==================== End Of Log ============================
--- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by Christoph at 2015-02-08 18:40:16
Running from C:\Users\Christoph\Desktop\PROGS\init
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AION Free-to-Play Version 1.0 (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: 1.0 - Gameforge)
AMD Catalyst Install Manager (HKLM\...\{5AE0838D-19B1-5D12-5FE8-E6503B2C8716}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield Play4Free (HKLM-x32\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version: - EA Digital illusions)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
Brother MFL-Pro Suite DCP-1510 series (HKLM-x32\...\{90C24B16-9C28-44AB-8C63-BB9822218E18}) (Version: 1.0.0.0 - Brother Industries, Ltd.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
ChromecastApp (HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1383.0 - Google Inc.)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - )
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
Curse Client (HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.2.5 - SCS Software)
F2100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F2100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Game of Thrones (HKLM-x32\...\Steam App 208730) (Version: - Cyanide Studios)
Gameforge Live 1.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.0.1717 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Hartlauer Foto World (HKLM-x32\...\Hartlauer Foto World) (Version: 5.0.1 - CEWE COLOR AG u Co. OHG)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Java 7 Update 13 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417013FF}) (Version: 7.0.130 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java SE Development Kit 7 Update 13 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170130}) (Version: 1.7.0.130 - Oracle)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)
Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)
Look@LAN 2.50 Build 35 (HKLM-x32\...\Look@LAN_1.0) (Version: - )
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1229 - Electronic Arts)
NETGEAR A6200 Genie (HKLM-x32\...\{48E61F3E-61D4-42A3-9D29-D0CF40838779}) (Version: 26.0.0.0 - NETGEAR)
NETGEAR USB Control Center (HKLM-x32\...\{4528B812-FF2C-4E3A-A9EA-1ECB483BF03A}) (Version: 1.32 - NETGEAR)
Network Printer Wizard (HKLM-x32\...\InstallShield_{F2DF59A0-5C1F-4454-9B67-538F43E2D335}) (Version: 2.0.1.7 - Generic)
Network Printer Wizard (Version: 2.0.1.7 - Generic) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Off-Road Drive (HKLM-x32\...\Steam App 200230) (Version: - 1C-Avalon)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.6.4643 - Electronic Arts, Inc.)
PDF Architect (HKLM-x32\...\{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}) (Version: 1.0.41.8362 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.1 - pdfforge)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
ShareCenterSync (HKLM-x32\...\ShareCenterSync_is1) (Version: - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
Test Drive Unlimited 2 (HKLM-x32\...\Steam App 9930) (Version: - Eden Studios)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrackMania United (HKLM-x32\...\Steam App 7200) (Version: - Nadeo)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
win2day Poker (HKLM-x32\...\win2day Poker ) (Version: - Boss Media AB)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {2851C370-BC29-4D8E-BF1F-49C3A1729747} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-15] (Microsoft Corporation)
Task: {3442176F-799E-4F91-A597-53A40DD68F07} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {5A9862D5-0B2A-4B37-8EF7-4E0E34600E11} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-16] (Google Inc.)
Task: {789270E7-0B8E-40F5-9D31-94D438755167} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-16] (Google Inc.)
Task: {A2C09B64-05D9-44B7-A0D2-C44343856905} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {E10CFAB8-7E69-4BEA-A300-605B10EA6D56} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {EDC30982-8566-4227-96EB-994928671E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core.job => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA.job => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\WebReg HP Deskjet F2100 series.job => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe
==================== Loaded Modules (whitelisted) ==============
2013-10-08 09:35 - 2013-10-08 09:35 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-10-22 14:41 - 2012-10-22 14:41 - 00749056 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-10-22 14:42 - 2012-10-22 14:42 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-10-08 09:34 - 2013-10-08 09:34 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2012-03-20 14:02 - 2012-03-20 14:02 - 00798720 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe
2012-03-20 14:02 - 2012-03-20 14:02 - 00267776 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWpsm.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00306688 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWdcp.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00096768 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWlog.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00104448 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWuntp.dll
2013-09-18 13:33 - 2013-10-31 10:57 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-07-12 18:06 - 2012-09-24 16:28 - 00029984 _____ () C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
2014-02-11 19:21 - 2014-02-11 19:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-02-11 19:22 - 2014-02-11 19:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-02-11 19:21 - 2014-02-11 19:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-02-11 19:22 - 2014-02-11 19:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2012-09-20 16:57 - 2012-09-20 16:57 - 04139008 _____ () C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe
2013-10-08 09:34 - 2013-10-08 09:34 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-10-23 20:19 - 2014-10-23 20:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00077523 _____ () C:\Program Files (x86)\ShareCenterSync\librsync.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00788333 _____ () C:\Program Files (x86)\ShareCenterSync\libgnutls-26.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00153543 _____ () C:\Program Files (x86)\ShareCenterSync\libgsasl-7.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00333288 _____ () C:\Program Files (x86)\ShareCenterSync\Sqlite3.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00107520 _____ () C:\Program Files (x86)\ShareCenterSync\libgcc_s_dw2-1.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00879630 _____ () C:\Program Files (x86)\ShareCenterSync\libstdc++-6.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00571199 _____ () C:\Program Files (x86)\ShareCenterSync\libgcrypt-11.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00109849 _____ () C:\Program Files (x86)\ShareCenterSync\libtasn1-3.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00223291 _____ () C:\Program Files (x86)\ShareCenterSync\libidn-11.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00075707 _____ () C:\Program Files (x86)\ShareCenterSync\libgpg-error-0.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 02396672 _____ () H:\Steam\libavcodec-56.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00479744 _____ () H:\Steam\libavformat-56.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00332800 _____ () H:\Steam\libavresample-2.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00442880 _____ () H:\Steam\libavutil-54.dll
2014-11-13 18:58 - 2014-11-11 19:47 - 00774656 _____ () H:\Steam\SDL2.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 05002752 _____ () H:\Steam\v8.dll
2015-01-24 21:21 - 2015-01-23 23:34 - 02227904 _____ () H:\Steam\video.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 01612800 _____ () H:\Steam\icui18n.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 01210368 _____ () H:\Steam\icuuc.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00485888 _____ () H:\Steam\libswscale-3.dll
2015-01-24 21:21 - 2015-01-23 23:33 - 00696512 _____ () H:\Steam\bin\chromehtml.DLL
2015-01-20 18:17 - 2015-01-16 00:42 - 34641288 _____ () H:\Steam\bin\libcef.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () F:\Programme\OpenOffice\program\libxml2.dll
2014-06-08 18:17 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Christoph\SkyDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Registry Areas =====================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Christoph\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-1842290086-4195455623-1572856928-500 - Administrator - Disabled)
Christoph (S-1-5-21-1842290086-4195455623-1572856928-1001 - Administrator - Enabled) => C:\Users\Christoph
Gast (S-1-5-21-1842290086-4195455623-1572856928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1842290086-4195455623-1572856928-1007 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
System errors:
=============
Error: (02/08/2015 06:40:27 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 06:39:57 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 06:39:27 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Microsoft Office Sessions:
=========================
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F2030000E5050000
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance163707000000000000000000008F020000
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance163707000000000000000000008F020000
CodeIntegrity Errors:
===================================
Date: 2013-10-31 10:03:55.117
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-31 10:03:41.476
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 21:17:26.811
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 21:17:13.045
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 19:49:54.489
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 19:49:42.492
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-12 14:47:10.718
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-12 14:46:56.678
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: AMD FX(tm)-6100 Six-Core Processor
Percentage of memory in use: 13%
Total physical RAM: 16366.11 MB
Available physical RAM: 14118.63 MB
Total Pagefile: 16366.11 MB
Available Pagefile: 13619.77 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:55.56 GB) (Free:17.94 GB) NTFS
Drive d: (Dokumente) (Fixed) (Total:0.1 GB) (Free:0.03 GB) NTFS
Drive e: (Games) (Fixed) (Total:97.66 GB) (Free:24.94 GB) NTFS
Drive f: (Daten) (Fixed) (Total:254.27 GB) (Free:236.21 GB) NTFS
Drive h: (Games2) (Fixed) (Total:244.14 GB) (Free:142.82 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 685BECED)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: F1B7990D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=254.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=244.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=97.7 GB) - (Type=OF Extended)
==================== End Of Log ============================
Christoph/Sub Zero |
|
08.02.2015, 18:48
| #4 |
| /// the machine /// TB-Ausbilder | [Win8.1] TR/Dropper.MSIL.Gen wurde gefundenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.02.2015, 21:23
| #5 |
| | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Hallo schrauber, hier die neuen LOGS, Security Check liefert ein "UNSUPPORTED OPERATING SYSTEM! ABORTED!" vor dem starten von ESET hat sich Avira noch zu Wort gemeldet und ein paar Phshing Funde angezeigt, die Berichte hänge ich unten noch schnell an. ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=0dabe3cb04c9be4fb95238510206053f
# engine=22365
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-02-08 07:54:19
# local_time=2015-02-08 08:54:19 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 8727 288848549 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 7508284 71033389 0 0
# scanned=256480
# found=3
# cleaned=0
# scan_time=7286
sh=A0C13C33EA0B77C45F689B15CF1AF8F0FC80F3EA ft=1 fh=602cdfd5ed0d307b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="F:\OpenOffice - CHIP-Installer.exe"
sh=64131EBCE68286BAAEFAC74F12628EBFC159B7CB ft=1 fh=252d3f247af8095f vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="F:\Downloads\PDFCreator-1_6_1_setup.exe"
sh=BB7DCE9910EEA232D055C9C5EC0CA17251634E1B ft=1 fh=56636229fbc05465 vn="Win32/WinloadSDA.A evtl. unerwünschte Anwendung" ac=I fn="F:\Downloads\Rettungswagen-Simulator-Setup.exe"
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Christoph (administrator) on CHRISTOPH-PC on 08-02-2015 21:13:42
Running from C:\Users\Christoph\Desktop\PROGS\init
Loaded Profiles: Christoph (Available profiles: Christoph)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(D-Link Crop.) C:\Program Files (x86)\ShareCenterSync\daemon.exe
() C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20279_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Valve Corporation) H:\Steam\Steam.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Valve Corporation) H:\Steam\bin\steamwebhelper.exe
(OpenOffice.org) F:\Programme\OpenOffice\program\soffice.exe
(OpenOffice.org) F:\Programme\OpenOffice\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
() C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.)
HKLM\...\Run: [GENIE] => C:\Program Files (x86)\NETGEAR\A6200\A6200.exe [348888 2013-02-18] (NETGEAR,Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-01-23] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4509184 2012-12-27] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsInd00] => C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe [1885184 2012-12-18] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [NETGEAR USB Control Center] => C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe [4139008 2012-09-20] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [Steam] => H:\Steam\steam.exe [1942720 2015-01-23] (Valve Corporation)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [ShareCenterSync] => C:\Program Files (x86)\ShareCenterSync\ShareCenterSync.exe [1569600 2012-03-13] ()
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [GoogleChromeAutoLaunch_F90F4DEE659B937C11A81E3452105E4C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-02-04] (Google Inc.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\Run: [Google Update] => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2015-02-04] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> F:\Programme\OpenOffice\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Winsock: Catalog5-x64 07 C:\Program Files (x86)\Generic\Network Printer Wizard\NPWprint.dll [195584] (Elite Silicon Technology Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1842290086-4195455623-1572856928-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Christoph\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1842290086-4195455623-1572856928-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Christoph\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2012-12-17]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.at/
CHR Profile: C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-16]
CHR Extension: (Google Cast) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-09-29]
CHR Extension: (Google-Suche) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-16]
CHR Extension: (Avira Browserschutz) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-15]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-16]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-10-08] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NPWService; C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe [798720 2012-03-20] () [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-04] (Electronic Arts)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-10-31] ()
R2 ShareCenterSync; C:\Program Files (x86)\ShareCenterSync\daemon.exe [3152184 2012-03-13] (D-Link Crop.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 WNDA6200; C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe [29984 2012-09-24] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57512 2012-11-20] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-30] (Avira Operations GmbH & Co. KG)
R3 BCMH43XX; C:\Windows\system32\DRIVERS\bcmwlhigh63a.sys [2392240 2013-02-28] (Broadcom Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NetgearUDSMBus; C:\Windows\system32\drivers\NetgearUDSMBus.sys [107296 2012-08-13] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\Windows\System32\drivers\NetgearUDSTcpBus.sys [183584 2012-08-13] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\Windows\SysWOW64\drivers\NetgearUDSTcpBus.sys [153600 2012-06-15] (Windows (R) Codename Longhorn DDK provider) [File not signed]
R1 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-26] (CACE Technologies, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\CHRIST~1\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-08 18:38 - 2015-02-08 18:38 - 00000618 _____ () C:\Users\Christoph\Desktop\JRT.txt
2015-02-08 18:31 - 2015-02-08 18:33 - 00000000 ____D () C:\AdwCleaner
2015-02-08 17:46 - 2015-02-08 18:49 - 00000000 ____D () C:\Users\Christoph\Desktop\PROGS
2015-02-04 20:59 - 2015-02-08 21:09 - 00001162 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA.job
2015-02-04 20:59 - 2015-02-08 18:09 - 00001110 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core.job
2015-02-04 20:59 - 2015-02-06 18:04 - 00004116 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA
2015-02-04 20:59 - 2015-02-06 18:04 - 00003736 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core
2015-02-04 20:59 - 2015-02-04 20:59 - 00001276 _____ () C:\Users\Christoph\Desktop\Chromecast.lnk
2015-02-04 20:59 - 2015-02-04 20:59 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromecast
2015-01-30 20:08 - 2015-01-30 20:05 - 20552922 _____ () C:\Users\Christoph\Downloads\haecker.dem
2015-01-25 20:11 - 2015-01-25 20:11 - 00000840 _____ () C:\Users\Christoph\Documents\CSGO_admin.txt
2015-01-14 18:49 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 18:49 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 18:49 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 18:49 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 18:49 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 18:49 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-14 18:49 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 18:49 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 18:49 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 18:49 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 18:49 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 18:49 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 18:49 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 18:49 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-14 18:49 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-14 18:49 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-14 18:49 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-14 18:49 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-14 18:49 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 18:49 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-14 18:49 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 18:49 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-14 18:49 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-08 21:13 - 2014-06-05 21:58 - 00000000 ____D () C:\FRST
2015-02-08 21:04 - 2013-11-12 20:57 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{93C005A8-655F-4C1D-BABB-61A09296FDDE}
2015-02-08 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-08 20:56 - 2013-10-17 20:18 - 01267854 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-08 20:33 - 2012-11-16 20:22 - 00001144 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-08 20:21 - 2013-01-24 19:12 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-08 18:40 - 2013-09-30 05:14 - 00005430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-08 18:40 - 2013-09-30 04:56 - 01503872 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-08 18:40 - 2013-09-30 04:56 - 00387468 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-08 18:34 - 2014-12-10 19:00 - 00004980 _____ () C:\WINDOWS\PFRO.log
2015-02-08 18:34 - 2014-11-23 19:00 - 00001884 _____ () C:\WINDOWS\setupact.log
2015-02-08 18:34 - 2013-10-17 20:23 - 00000000 ___DO () C:\Users\Christoph\SkyDrive
2015-02-08 18:34 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-08 18:34 - 2012-11-16 20:22 - 00001140 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-08 18:33 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-08 18:33 - 2013-01-31 21:06 - 00000000 ____D () C:\ProgramData\ShareCenter
2015-02-08 18:30 - 2014-07-24 18:33 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-08 18:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\vpnplugins
2015-02-08 18:19 - 2012-11-16 20:19 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1842290086-4195455623-1572856928-1001
2015-02-08 18:14 - 2014-07-24 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-02-08 18:14 - 2014-07-24 18:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-02-08 18:14 - 2014-02-15 12:50 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-07 18:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-02-06 17:28 - 2012-11-16 20:22 - 00004116 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 17:28 - 2012-11-16 20:22 - 00003880 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 17:22 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-04 20:59 - 2012-11-16 20:22 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Google
2015-02-04 20:21 - 2013-01-24 19:12 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-03 20:31 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 18:32 - 2013-05-12 19:25 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\TS3Client
2015-02-01 11:53 - 2014-11-10 20:20 - 00001153 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-02-01 11:53 - 2013-10-04 17:38 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-01 11:53 - 2012-11-16 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-02-01 11:53 - 2012-11-16 22:02 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-21 20:23 - 2013-10-17 20:15 - 00000000 ____D () C:\Users\Christoph
2015-01-15 18:01 - 2013-07-25 18:35 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-15 17:56 - 2012-12-13 20:59 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories =======
2012-11-16 21:12 - 2014-11-15 19:14 - 0007626 _____ () C:\Users\Christoph\AppData\Local\Resmon.ResmonCfg
2014-06-01 13:07 - 2014-06-01 13:09 - 0000826 _____ () C:\ProgramData\hpzinstall.log
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Christoph\AppData\Local\Temp\Quarantine.exe
C:\Users\Christoph\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-08 18:56
==================== End Of Log ============================
--- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by Christoph at 2015-02-08 21:14:11
Running from C:\Users\Christoph\Desktop\PROGS\init
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AION Free-to-Play Version 1.0 (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: 1.0 - Gameforge)
AMD Catalyst Install Manager (HKLM\...\{5AE0838D-19B1-5D12-5FE8-E6503B2C8716}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield Play4Free (HKLM-x32\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version: - EA Digital illusions)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
Brother MFL-Pro Suite DCP-1510 series (HKLM-x32\...\{90C24B16-9C28-44AB-8C63-BB9822218E18}) (Version: 1.0.0.0 - Brother Industries, Ltd.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
ChromecastApp (HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1383.0 - Google Inc.)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - )
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
Curse Client (HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.2.5 - SCS Software)
F2100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F2100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Game of Thrones (HKLM-x32\...\Steam App 208730) (Version: - Cyanide Studios)
Gameforge Live 1.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.0.1717 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Hartlauer Foto World (HKLM-x32\...\Hartlauer Foto World) (Version: 5.0.1 - CEWE COLOR AG u Co. OHG)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Java 7 Update 13 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417013FF}) (Version: 7.0.130 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java SE Development Kit 7 Update 13 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170130}) (Version: 1.7.0.130 - Oracle)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)
Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.154 - Logitech Inc.)
Look@LAN 2.50 Build 35 (HKLM-x32\...\Look@LAN_1.0) (Version: - )
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1229 - Electronic Arts)
NETGEAR A6200 Genie (HKLM-x32\...\{48E61F3E-61D4-42A3-9D29-D0CF40838779}) (Version: 26.0.0.0 - NETGEAR)
NETGEAR USB Control Center (HKLM-x32\...\{4528B812-FF2C-4E3A-A9EA-1ECB483BF03A}) (Version: 1.32 - NETGEAR)
Network Printer Wizard (HKLM-x32\...\InstallShield_{F2DF59A0-5C1F-4454-9B67-538F43E2D335}) (Version: 2.0.1.7 - Generic)
Network Printer Wizard (Version: 2.0.1.7 - Generic) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Off-Road Drive (HKLM-x32\...\Steam App 200230) (Version: - 1C-Avalon)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.6.4643 - Electronic Arts, Inc.)
PDF Architect (HKLM-x32\...\{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}) (Version: 1.0.41.8362 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.1 - pdfforge)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
ShareCenterSync (HKLM-x32\...\ShareCenterSync_is1) (Version: - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
Test Drive Unlimited 2 (HKLM-x32\...\Steam App 9930) (Version: - Eden Studios)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrackMania United (HKLM-x32\...\Steam App 7200) (Version: - Nadeo)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
win2day Poker (HKLM-x32\...\win2day Poker ) (Version: - Boss Media AB)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
08-02-2015 21:06:41 Geplanter Prüfpunkt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {26326341-2F10-4A5A-8B45-86FBFAD47E7C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-15] (Microsoft Corporation)
Task: {3442176F-799E-4F91-A597-53A40DD68F07} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {5A9862D5-0B2A-4B37-8EF7-4E0E34600E11} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-16] (Google Inc.)
Task: {789270E7-0B8E-40F5-9D31-94D438755167} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-16] (Google Inc.)
Task: {A2C09B64-05D9-44B7-A0D2-C44343856905} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {E10CFAB8-7E69-4BEA-A300-605B10EA6D56} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {EDC30982-8566-4227-96EB-994928671E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001Core.job => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1842290086-4195455623-1572856928-1001UA.job => C:\Users\Christoph\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\WebReg HP Deskjet F2100 series.job => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe
==================== Loaded Modules (whitelisted) ==============
2013-10-08 09:35 - 2013-10-08 09:35 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-10-22 14:41 - 2012-10-22 14:41 - 00749056 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-10-22 14:42 - 2012-10-22 14:42 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-10-08 09:34 - 2013-10-08 09:34 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2012-03-20 14:02 - 2012-03-20 14:02 - 00798720 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWService.exe
2012-03-20 14:02 - 2012-03-20 14:02 - 00267776 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWpsm.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00306688 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWdcp.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00096768 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWlog.dll
2012-03-20 14:01 - 2012-03-20 14:01 - 00104448 _____ () C:\Program Files (x86)\Generic\Network Printer Wizard\NPWuntp.dll
2013-09-18 13:33 - 2013-10-31 10:57 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-07-12 18:06 - 2012-09-24 16:28 - 00029984 _____ () C:\Program Files (x86)\NETGEAR\A6200\WifiService.exe
2014-02-11 19:21 - 2014-02-11 19:21 - 00860160 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-02-11 19:22 - 2014-02-11 19:22 - 01043968 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-02-11 19:21 - 2014-02-11 19:21 - 00052736 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-02-11 19:22 - 2014-02-11 19:22 - 00236032 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2012-09-20 16:57 - 2012-09-20 16:57 - 04139008 _____ () C:\Program Files (x86)\NETGEAR\USB Control Center\Control Center.exe
2013-10-08 09:34 - 2013-10-08 09:34 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-10-23 20:19 - 2014-10-23 20:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00077523 _____ () C:\Program Files (x86)\ShareCenterSync\librsync.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00788333 _____ () C:\Program Files (x86)\ShareCenterSync\libgnutls-26.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00153543 _____ () C:\Program Files (x86)\ShareCenterSync\libgsasl-7.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00333288 _____ () C:\Program Files (x86)\ShareCenterSync\Sqlite3.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00107520 _____ () C:\Program Files (x86)\ShareCenterSync\libgcc_s_dw2-1.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00879630 _____ () C:\Program Files (x86)\ShareCenterSync\libstdc++-6.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00571199 _____ () C:\Program Files (x86)\ShareCenterSync\libgcrypt-11.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00109849 _____ () C:\Program Files (x86)\ShareCenterSync\libtasn1-3.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00223291 _____ () C:\Program Files (x86)\ShareCenterSync\libidn-11.dll
2013-01-31 21:06 - 2012-03-13 14:37 - 00075707 _____ () C:\Program Files (x86)\ShareCenterSync\libgpg-error-0.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 02396672 _____ () H:\Steam\libavcodec-56.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00479744 _____ () H:\Steam\libavformat-56.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00332800 _____ () H:\Steam\libavresample-2.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00442880 _____ () H:\Steam\libavutil-54.dll
2014-11-13 18:58 - 2014-11-11 19:47 - 00774656 _____ () H:\Steam\SDL2.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 05002752 _____ () H:\Steam\v8.dll
2015-01-24 21:21 - 2015-01-23 23:34 - 02227904 _____ () H:\Steam\video.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 01612800 _____ () H:\Steam\icui18n.dll
2015-01-20 18:17 - 2014-12-02 01:29 - 01210368 _____ () H:\Steam\icuuc.dll
2015-01-20 18:17 - 2014-12-01 22:31 - 00485888 _____ () H:\Steam\libswscale-3.dll
2015-01-24 21:21 - 2015-01-23 23:33 - 00696512 _____ () H:\Steam\bin\chromehtml.DLL
2015-01-20 18:17 - 2015-01-16 00:42 - 34641288 _____ () H:\Steam\bin\libcef.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () F:\Programme\OpenOffice\program\libxml2.dll
2014-06-08 18:17 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll
2015-02-06 22:34 - 2015-02-04 10:02 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Christoph\SkyDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Registry Areas =====================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1842290086-4195455623-1572856928-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Christoph\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-1842290086-4195455623-1572856928-500 - Administrator - Disabled)
Christoph (S-1-5-21-1842290086-4195455623-1572856928-1001 - Administrator - Enabled) => C:\Users\Christoph
Gast (S-1-5-21-1842290086-4195455623-1572856928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1842290086-4195455623-1572856928-1007 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/08/2015 06:56:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (02/08/2015 06:50:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
System errors:
=============
Error: (02/08/2015 09:14:05 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 09:13:35 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 09:13:05 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 09:12:35 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 09:12:05 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 09:11:35 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 09:11:05 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 08:46:50 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 08:46:20 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Error: (02/08/2015 08:45:50 PM) (Source: DCOM) (EventID: 10010) (User: CHRISTOPH-PC)
Description: {9AA46009-3CE0-458A-A354-715610A075E6}
Microsoft Office Sessions:
=========================
Error: (02/08/2015 06:56:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: System-reserviertFalscher Parameter. (0x80070057)
Error: (02/08/2015 06:50:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Christoph\Desktop\PROGS\n2\esetsmartinstaller_deu.exe
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F2030000E5050000
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance163707000000000000000000008F020000
Error: (02/08/2015 06:40:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance163707000000000000000000008F020000
CodeIntegrity Errors:
===================================
Date: 2013-10-31 10:03:55.117
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-31 10:03:41.476
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 21:17:26.811
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 21:17:13.045
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 19:49:54.489
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-17 19:49:42.492
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-12 14:47:10.718
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-10-12 14:46:56.678
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: AMD FX(tm)-6100 Six-Core Processor
Percentage of memory in use: 17%
Total physical RAM: 16366.11 MB
Available physical RAM: 13529.97 MB
Total Pagefile: 16366.11 MB
Available Pagefile: 12459.38 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:55.56 GB) (Free:17.66 GB) NTFS
Drive d: (Dokumente) (Fixed) (Total:0.1 GB) (Free:0.03 GB) NTFS
Drive e: (Games) (Fixed) (Total:97.66 GB) (Free:24.94 GB) NTFS
Drive f: (Daten) (Fixed) (Total:254.27 GB) (Free:240.87 GB) NTFS
Drive h: (Games2) (Fixed) (Total:244.14 GB) (Free:170.65 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 685BECED)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: F1B7990D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=254.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=244.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=97.7 GB) - (Type=OF Extended)
==================== End Of Log ============================
Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Sonntag, 08. Februar 2015 21:20
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 8.1
Windowsversion : (plain) [6.2.9200]
Boot Modus : Normal gebootet
Benutzername : Christoph
Computername : CHRISTOPH-PC
Versionsinformationen:
BUILD.DAT : 14.0.7.468 91859 Bytes 24.11.2014 10:23:00
AVSCAN.EXE : 14.0.7.462 1015544 Bytes 17.12.2014 18:12:31
AVSCANRC.DLL : 14.0.7.308 64304 Bytes 18.11.2014 18:22:50
LUKE.DLL : 14.0.7.462 60664 Bytes 17.12.2014 18:12:39
AVSCPLR.DLL : 14.0.7.440 93488 Bytes 17.12.2014 18:12:31
REPAIR.DLL : 14.0.7.412 366328 Bytes 17.12.2014 18:12:30
REPAIR.RDF : 1.0.4.60 704786 Bytes 06.02.2015 16:10:29
AVREG.DLL : 14.0.7.310 264952 Bytes 18.11.2014 18:22:50
AVLODE.DLL : 14.0.7.440 561456 Bytes 17.12.2014 18:12:29
AVLODE.RDF : 14.0.4.54 78895 Bytes 05.12.2014 18:23:10
XBV00015.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00016.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00017.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00018.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00019.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00020.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00021.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00022.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00023.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00024.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00025.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00026.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00027.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00028.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00029.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00030.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00031.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00032.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00033.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00034.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00035.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00036.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00037.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00038.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00039.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00040.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00041.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00075.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00076.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00077.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00078.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00079.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00080.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00081.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00082.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00083.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00084.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00085.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00086.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00087.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00088.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00089.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00090.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00091.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00092.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00093.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00094.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00095.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00096.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00097.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00098.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00099.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00100.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00101.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00102.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00103.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00104.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00105.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00106.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00107.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00108.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00109.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00110.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00111.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00112.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00113.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00114.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00115.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00116.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00117.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00118.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00119.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00120.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00121.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00122.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00123.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00124.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00125.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00126.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00127.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00128.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00129.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00130.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00131.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00132.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00133.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00134.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00135.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00136.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00137.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00138.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00139.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00140.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00141.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00142.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00143.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00144.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00145.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00146.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00147.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00148.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00149.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00150.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00151.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00152.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00153.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00154.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00155.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00156.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00157.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00158.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00159.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00160.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00161.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00162.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00163.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00164.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00165.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00166.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00167.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00168.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00169.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00170.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00171.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00172.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00173.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00174.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00175.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00176.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00177.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00178.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00179.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00180.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00181.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00182.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00183.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00184.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00185.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00186.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00187.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00188.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00189.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00190.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00191.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00192.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00193.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00194.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00195.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00196.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00197.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00198.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00199.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00200.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00201.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00202.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00203.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00204.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00205.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00206.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00207.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00208.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00209.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00210.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00211.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00212.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00213.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00214.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00215.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00216.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00217.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00218.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00219.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00220.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00221.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00222.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00223.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00224.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00225.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00226.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00227.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00228.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00229.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00230.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00231.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00232.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00233.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00234.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00235.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00236.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00237.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00238.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00239.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00240.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00241.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00242.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00243.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00244.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00245.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00246.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00247.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00248.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00249.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00250.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00251.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00252.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00253.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00254.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00255.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:38:48
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:26:51
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 16:59:46
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 18:26:03
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 12:35:56
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 19:49:09
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 17:48:32
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 18:37:05
XBV00008.VDF : 8.11.165.192 4251136 Bytes 07.08.2014 16:19:16
XBV00009.VDF : 8.11.172.30 2094080 Bytes 15.09.2014 16:56:48
XBV00010.VDF : 8.11.178.32 1581056 Bytes 14.10.2014 17:37:00
XBV00011.VDF : 8.11.184.50 2178560 Bytes 11.11.2014 17:32:10
XBV00012.VDF : 8.11.190.32 1876992 Bytes 03.12.2014 18:23:11
XBV00013.VDF : 8.11.201.28 2973696 Bytes 14.01.2015 17:47:53
XBV00014.VDF : 8.11.206.252 2695680 Bytes 04.02.2015 17:51:04
XBV00042.VDF : 8.11.207.24 43520 Bytes 04.02.2015 16:10:28
XBV00043.VDF : 8.11.207.50 2048 Bytes 04.02.2015 16:10:28
XBV00044.VDF : 8.11.207.52 2048 Bytes 04.02.2015 16:10:28
XBV00045.VDF : 8.11.207.78 20480 Bytes 04.02.2015 16:10:28
XBV00046.VDF : 8.11.207.104 5632 Bytes 04.02.2015 16:10:28
XBV00047.VDF : 8.11.207.106 2048 Bytes 05.02.2015 16:10:28
XBV00048.VDF : 8.11.207.108 23040 Bytes 05.02.2015 16:10:28
XBV00049.VDF : 8.11.207.110 34304 Bytes 05.02.2015 16:10:28
XBV00050.VDF : 8.11.207.112 2048 Bytes 05.02.2015 16:10:28
XBV00051.VDF : 8.11.207.134 15360 Bytes 05.02.2015 16:10:28
XBV00052.VDF : 8.11.207.154 9728 Bytes 05.02.2015 16:10:28
XBV00053.VDF : 8.11.207.178 39936 Bytes 05.02.2015 16:10:28
XBV00054.VDF : 8.11.207.200 32256 Bytes 05.02.2015 16:10:28
XBV00055.VDF : 8.11.207.204 2560 Bytes 05.02.2015 16:10:28
XBV00056.VDF : 8.11.207.208 57856 Bytes 06.02.2015 16:10:28
XBV00057.VDF : 8.11.207.210 2048 Bytes 06.02.2015 16:10:28
XBV00058.VDF : 8.11.207.212 5120 Bytes 06.02.2015 16:10:28
XBV00059.VDF : 8.11.207.232 18944 Bytes 06.02.2015 16:10:28
XBV00060.VDF : 8.11.207.252 24576 Bytes 06.02.2015 16:10:28
XBV00061.VDF : 8.11.208.16 9216 Bytes 06.02.2015 16:10:28
XBV00062.VDF : 8.11.208.18 4096 Bytes 06.02.2015 16:10:28
XBV00063.VDF : 8.11.208.20 2560 Bytes 06.02.2015 16:10:28
XBV00064.VDF : 8.11.208.42 54272 Bytes 06.02.2015 22:10:17
XBV00065.VDF : 8.11.208.62 2048 Bytes 06.02.2015 22:10:17
XBV00066.VDF : 8.11.208.84 28160 Bytes 06.02.2015 10:28:36
XBV00067.VDF : 8.11.208.86 2048 Bytes 06.02.2015 10:28:36
XBV00068.VDF : 8.11.208.88 2048 Bytes 07.02.2015 10:28:37
XBV00069.VDF : 8.11.208.92 61440 Bytes 07.02.2015 10:49:10
XBV00070.VDF : 8.11.208.112 2048 Bytes 07.02.2015 10:49:10
XBV00071.VDF : 8.11.208.130 40448 Bytes 07.02.2015 10:49:10
XBV00072.VDF : 8.11.208.148 2048 Bytes 07.02.2015 10:49:10
XBV00073.VDF : 8.11.208.166 62976 Bytes 08.02.2015 16:49:04
XBV00074.VDF : 8.11.208.184 2048 Bytes 08.02.2015 16:49:04
LOCAL001.VDF : 8.11.208.184 120644608 Bytes 08.02.2015 16:49:17
Engineversion : 8.3.28.16
AEVDF.DLL : 8.3.1.6 133992 Bytes 20.08.2014 16:51:42
AESCRIPT.DLL : 8.2.2.54 550824 Bytes 06.02.2015 16:10:28
AESCN.DLL : 8.3.2.2 139456 Bytes 21.07.2014 17:32:00
AESBX.DLL : 8.2.20.24 1409224 Bytes 08.05.2014 17:39:12
AERDL.DLL : 8.2.1.16 743328 Bytes 29.10.2014 18:45:59
AEPACK.DLL : 8.4.0.58 789360 Bytes 16.01.2015 16:58:04
AEOFFICE.DLL : 8.3.1.10 351088 Bytes 16.01.2015 16:58:04
AEMOBILE.DLL : 8.1.2.0 277360 Bytes 17.12.2014 18:12:27
AEHEUR.DLL : 8.1.4.1522 8071080 Bytes 06.02.2015 16:10:28
AEHELP.DLL : 8.3.1.0 278728 Bytes 28.05.2014 18:13:12
AEGEN.DLL : 8.1.7.40 456608 Bytes 20.12.2014 14:04:29
AEEXP.DLL : 8.4.2.70 255904 Bytes 06.02.2015 16:10:28
AEEMU.DLL : 8.1.3.4 399264 Bytes 07.08.2014 16:19:13
AEDROID.DLL : 8.4.3.6 850800 Bytes 17.12.2014 18:12:27
AECORE.DLL : 8.3.4.0 243624 Bytes 17.12.2014 18:12:26
AEBB.DLL : 8.1.2.0 60448 Bytes 07.08.2014 16:19:13
AVWINLL.DLL : 14.0.7.308 25904 Bytes 18.11.2014 18:22:48
AVPREF.DLL : 14.0.7.308 52016 Bytes 18.11.2014 18:22:50
AVREP.DLL : 14.0.7.308 220976 Bytes 18.11.2014 18:22:50
AVARKT.DLL : 14.0.7.308 227632 Bytes 18.11.2014 18:22:48
AVEVTLOG.DLL : 14.0.7.440 184112 Bytes 17.12.2014 18:12:28
SQLITE3.DLL : 14.0.7.308 453936 Bytes 18.11.2014 18:22:59
AVSMTP.DLL : 14.0.7.308 79096 Bytes 18.11.2014 18:22:50
NETNT.DLL : 14.0.7.308 15152 Bytes 18.11.2014 18:22:58
RCIMAGE.DLL : 14.0.7.308 4865328 Bytes 18.11.2014 18:22:48
RCTEXT.DLL : 14.0.7.318 77048 Bytes 18.11.2014 18:22:48
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: ShlExt
Konfigurationsdatei...................: C:\Users\CHRIST~1\AppData\Local\Temp\3b1b26d6.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:,
Durchsuche aktive Programme...........: aus
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Beginn des Suchlaufs: Sonntag, 08. Februar 2015 21:20
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe'
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\2001020c\Amazon-Aktualisieren.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/Amazon.sgd
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20010400\Aktualisierung.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/PayPal.44667
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20010b28\KontoAktualisierung.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/PayPal.iema
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20011b61\PostBank-KreditKarte.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/Oeger.214
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20011d41\KontoAktualisierung.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/Amazon.21601
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\200120cd\Ing.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/IngGe.18601
Beginne mit der Desinfektion:
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\200120cd\Ing.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/IngGe.18601
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '53516858.qua' verschoben!
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20011d41\KontoAktualisierung.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/Amazon.21601
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4bbd4780.qua' verschoben!
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20011b61\PostBank-KreditKarte.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/Oeger.214
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '19ed1d68.qua' verschoben!
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20010b28\KontoAktualisierung.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/PayPal.iema
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7fd552aa.qua' verschoben!
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\20010400\Aktualisierung.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/PayPal.44667
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '3a5f7fe8.qua' verschoben!
C:\Users\Christoph\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\53f0a475d35441b6\120712-0049\Att\2001020c\Amazon-Aktualisieren.html
[FUND] Enthält Erkennungsmuster der Phish-Datei/Email PHISH/Amazon.sgd
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '45374d8b.qua' verschoben!
Ende des Suchlaufs: Sonntag, 08. Februar 2015 21:21
Benötigte Zeit: 01:20 Minute(n)
Der Suchlauf wurde vollständig durchgeführt.
1301 Verzeichnisse wurden überprüft
25138 Dateien wurden geprüft
6 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
6 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
25132 Dateien ohne Befall
6184 Archive wurden durchsucht
0 Warnungen
6 Hinweise
Christoph/Sub Zero |
|
09.02.2015, 06:55
| #6 |
| /// the machine /// TB-Ausbilder | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Die Funde scheinen im Windows Communicator zu sitzen. Nutzt du den? Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter F:\OpenOffice - CHIP-Installer.exe
F:\Downloads\PDFCreator-1_6_1_setup.exe
F:\Downloads\Rettungswagen-Simulator-Setup.exe
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ --> [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden |
|
09.02.2015, 18:15
| #7 | |
| | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Hallo schrauber, Zitat:
Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015
Ran by Christoph at 2015-02-09 18:11:01 Run:1
Running from C:\Users\Christoph\Desktop\PROGS\init
Loaded Profiles: Christoph (Available profiles: Christoph)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
F:\OpenOffice - CHIP-Installer.exe
F:\Downloads\PDFCreator-1_6_1_setup.exe
F:\Downloads\Rettungswagen-Simulator-Setup.exe
Emptytemp:
*****************
"F:\OpenOffice - CHIP-Installer.exe" => File/Directory not found.
F:\Downloads\PDFCreator-1_6_1_setup.exe => Moved successfully.
F:\Downloads\Rettungswagen-Simulator-Setup.exe => Moved successfully.
EmptyTemp: => Removed 3.1 GB temporary data.
The system needed a reboot.
==== End of Fixlog 18:11:09 ====
Christoph/Sub Zero |
|
09.02.2015, 20:16
| #8 |
| /// the machine /// TB-Ausbilder | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Meckert Avira noch?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.02.2015, 22:08
| #9 |
| | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Hallo schrauber, Avira meckert nicht mehr, hier noch das Ergebnis des vollständigen System-Scans Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 09. Februar 2015 20:41
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 8.1
Windowsversion : (plain) [6.2.9200]
Boot Modus : Normal gebootet
Benutzername : Christoph
Computername : CHRISTOPH-PC
Versionsinformationen:
BUILD.DAT : 14.0.7.468 91859 Bytes 24.11.2014 10:23:00
AVSCAN.EXE : 14.0.7.462 1015544 Bytes 17.12.2014 18:12:31
AVSCANRC.DLL : 14.0.7.308 64304 Bytes 18.11.2014 18:22:50
LUKE.DLL : 14.0.7.462 60664 Bytes 17.12.2014 18:12:39
AVSCPLR.DLL : 14.0.7.440 93488 Bytes 17.12.2014 18:12:31
REPAIR.DLL : 14.0.7.412 366328 Bytes 17.12.2014 18:12:30
REPAIR.RDF : 1.0.4.60 704786 Bytes 06.02.2015 16:10:29
AVREG.DLL : 14.0.7.310 264952 Bytes 18.11.2014 18:22:50
AVLODE.DLL : 14.0.7.440 561456 Bytes 17.12.2014 18:12:29
AVLODE.RDF : 14.0.4.54 78895 Bytes 05.12.2014 18:23:10
XBV00015.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00016.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00017.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00018.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00019.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00020.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00021.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00022.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00023.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00024.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00025.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00026.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00027.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00028.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00029.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00030.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00031.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00032.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00033.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00034.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00035.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00036.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00037.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00038.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00039.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00040.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00041.VDF : 8.11.165.190 2048 Bytes 07.08.2014 16:19:17
XBV00081.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00082.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00083.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00084.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00085.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00086.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00087.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00088.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00089.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00090.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00091.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00092.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00093.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00094.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00095.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00096.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00097.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00098.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00099.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00100.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00101.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:05
XBV00102.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00103.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00104.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00105.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00106.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00107.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00108.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00109.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00110.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00111.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00112.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00113.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00114.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00115.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00116.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00117.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00118.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00119.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00120.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00121.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00122.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00123.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00124.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00125.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00126.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00127.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00128.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00129.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00130.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00131.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00132.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00133.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00134.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00135.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00136.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00137.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00138.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00139.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00140.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00141.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00142.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00143.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00144.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00145.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00146.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00147.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00148.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00149.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00150.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:06
XBV00151.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00152.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00153.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00154.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00155.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00156.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00157.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00158.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00159.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00160.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00161.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00162.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00163.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00164.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00165.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00166.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00167.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00168.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00169.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00170.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00171.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00172.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00173.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00174.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00175.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00176.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00177.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00178.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00179.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00180.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00181.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00182.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00183.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00184.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00185.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00186.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00187.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00188.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00189.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00190.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00191.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00192.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00193.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00194.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00195.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00196.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00197.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00198.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00199.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:07
XBV00200.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00201.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00202.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00203.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00204.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00205.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00206.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00207.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00208.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00209.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00210.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00211.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00212.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00213.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00214.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00215.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00216.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00217.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00218.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00219.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00220.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00221.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00222.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00223.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00224.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00225.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00226.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00227.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00228.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00229.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00230.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00231.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00232.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00233.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00234.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00235.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00236.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00237.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00238.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00239.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00240.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00241.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00242.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00243.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00244.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00245.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00246.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00247.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:08
XBV00248.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00249.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00250.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00251.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00252.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00253.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00254.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00255.VDF : 8.11.206.252 2048 Bytes 04.02.2015 17:51:09
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:38:48
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:26:51
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 16:59:46
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 18:26:03
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 12:35:56
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 19:49:09
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 17:48:32
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 18:37:05
XBV00008.VDF : 8.11.165.192 4251136 Bytes 07.08.2014 16:19:16
XBV00009.VDF : 8.11.172.30 2094080 Bytes 15.09.2014 16:56:48
XBV00010.VDF : 8.11.178.32 1581056 Bytes 14.10.2014 17:37:00
XBV00011.VDF : 8.11.184.50 2178560 Bytes 11.11.2014 17:32:10
XBV00012.VDF : 8.11.190.32 1876992 Bytes 03.12.2014 18:23:11
XBV00013.VDF : 8.11.201.28 2973696 Bytes 14.01.2015 17:47:53
XBV00014.VDF : 8.11.206.252 2695680 Bytes 04.02.2015 17:51:04
XBV00042.VDF : 8.11.207.24 43520 Bytes 04.02.2015 16:10:28
XBV00043.VDF : 8.11.207.50 2048 Bytes 04.02.2015 16:10:28
XBV00044.VDF : 8.11.207.52 2048 Bytes 04.02.2015 16:10:28
XBV00045.VDF : 8.11.207.78 20480 Bytes 04.02.2015 16:10:28
XBV00046.VDF : 8.11.207.104 5632 Bytes 04.02.2015 16:10:28
XBV00047.VDF : 8.11.207.106 2048 Bytes 05.02.2015 16:10:28
XBV00048.VDF : 8.11.207.108 23040 Bytes 05.02.2015 16:10:28
XBV00049.VDF : 8.11.207.110 34304 Bytes 05.02.2015 16:10:28
XBV00050.VDF : 8.11.207.112 2048 Bytes 05.02.2015 16:10:28
XBV00051.VDF : 8.11.207.134 15360 Bytes 05.02.2015 16:10:28
XBV00052.VDF : 8.11.207.154 9728 Bytes 05.02.2015 16:10:28
XBV00053.VDF : 8.11.207.178 39936 Bytes 05.02.2015 16:10:28
XBV00054.VDF : 8.11.207.200 32256 Bytes 05.02.2015 16:10:28
XBV00055.VDF : 8.11.207.204 2560 Bytes 05.02.2015 16:10:28
XBV00056.VDF : 8.11.207.208 57856 Bytes 06.02.2015 16:10:28
XBV00057.VDF : 8.11.207.210 2048 Bytes 06.02.2015 16:10:28
XBV00058.VDF : 8.11.207.212 5120 Bytes 06.02.2015 16:10:28
XBV00059.VDF : 8.11.207.232 18944 Bytes 06.02.2015 16:10:28
XBV00060.VDF : 8.11.207.252 24576 Bytes 06.02.2015 16:10:28
XBV00061.VDF : 8.11.208.16 9216 Bytes 06.02.2015 16:10:28
XBV00062.VDF : 8.11.208.18 4096 Bytes 06.02.2015 16:10:28
XBV00063.VDF : 8.11.208.20 2560 Bytes 06.02.2015 16:10:28
XBV00064.VDF : 8.11.208.42 54272 Bytes 06.02.2015 22:10:17
XBV00065.VDF : 8.11.208.62 2048 Bytes 06.02.2015 22:10:17
XBV00066.VDF : 8.11.208.84 28160 Bytes 06.02.2015 10:28:36
XBV00067.VDF : 8.11.208.86 2048 Bytes 06.02.2015 10:28:36
XBV00068.VDF : 8.11.208.88 2048 Bytes 07.02.2015 10:28:37
XBV00069.VDF : 8.11.208.92 61440 Bytes 07.02.2015 10:49:10
XBV00070.VDF : 8.11.208.112 2048 Bytes 07.02.2015 10:49:10
XBV00071.VDF : 8.11.208.130 40448 Bytes 07.02.2015 10:49:10
XBV00072.VDF : 8.11.208.148 2048 Bytes 07.02.2015 10:49:10
XBV00073.VDF : 8.11.208.166 62976 Bytes 08.02.2015 16:49:04
XBV00074.VDF : 8.11.208.184 2048 Bytes 08.02.2015 16:49:04
XBV00075.VDF : 8.11.208.204 32768 Bytes 08.02.2015 17:09:20
XBV00076.VDF : 8.11.208.206 49664 Bytes 09.02.2015 17:09:20
XBV00077.VDF : 8.11.208.224 5120 Bytes 09.02.2015 17:09:20
XBV00078.VDF : 8.11.208.242 5120 Bytes 09.02.2015 17:09:20
XBV00079.VDF : 8.11.209.4 17920 Bytes 09.02.2015 17:09:20
XBV00080.VDF : 8.11.209.22 7680 Bytes 09.02.2015 17:09:20
LOCAL000.VDF : 8.11.209.22 120749056 Bytes 09.02.2015 17:09:36
Engineversion : 8.3.28.16
AEVDF.DLL : 8.3.1.6 133992 Bytes 20.08.2014 16:51:42
AESCRIPT.DLL : 8.2.2.54 550824 Bytes 06.02.2015 16:10:28
AESCN.DLL : 8.3.2.2 139456 Bytes 21.07.2014 17:32:00
AESBX.DLL : 8.2.20.24 1409224 Bytes 08.05.2014 17:39:12
AERDL.DLL : 8.2.1.16 743328 Bytes 29.10.2014 18:45:59
AEPACK.DLL : 8.4.0.58 789360 Bytes 16.01.2015 16:58:04
AEOFFICE.DLL : 8.3.1.10 351088 Bytes 16.01.2015 16:58:04
AEMOBILE.DLL : 8.1.2.0 277360 Bytes 17.12.2014 18:12:27
AEHEUR.DLL : 8.1.4.1522 8071080 Bytes 06.02.2015 16:10:28
AEHELP.DLL : 8.3.1.0 278728 Bytes 28.05.2014 18:13:12
AEGEN.DLL : 8.1.7.40 456608 Bytes 20.12.2014 14:04:29
AEEXP.DLL : 8.4.2.70 255904 Bytes 06.02.2015 16:10:28
AEEMU.DLL : 8.1.3.4 399264 Bytes 07.08.2014 16:19:13
AEDROID.DLL : 8.4.3.6 850800 Bytes 17.12.2014 18:12:27
AECORE.DLL : 8.3.4.0 243624 Bytes 17.12.2014 18:12:26
AEBB.DLL : 8.1.2.0 60448 Bytes 07.08.2014 16:19:13
AVWINLL.DLL : 14.0.7.308 25904 Bytes 18.11.2014 18:22:48
AVPREF.DLL : 14.0.7.308 52016 Bytes 18.11.2014 18:22:50
AVREP.DLL : 14.0.7.308 220976 Bytes 18.11.2014 18:22:50
AVARKT.DLL : 14.0.7.308 227632 Bytes 18.11.2014 18:22:48
AVEVTLOG.DLL : 14.0.7.440 184112 Bytes 17.12.2014 18:12:28
SQLITE3.DLL : 14.0.7.308 453936 Bytes 18.11.2014 18:22:59
AVSMTP.DLL : 14.0.7.308 79096 Bytes 18.11.2014 18:22:50
NETNT.DLL : 14.0.7.308 15152 Bytes 18.11.2014 18:22:58
RCIMAGE.DLL : 14.0.7.308 4865328 Bytes 18.11.2014 18:22:48
RCTEXT.DLL : 14.0.7.318 77048 Bytes 18.11.2014 18:22:48
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:, E:, F:, H:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Beginn des Suchlaufs: Montag, 09. Februar 2015 20:41
Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:)'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'HDD1(D:, E:, F:, H:)'
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf nach versteckten Objekten wird begonnen.
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'dwm.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '102' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '177' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '121' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '79' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLANExt.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '12' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'Fuel.Service.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '130' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'dashost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'NPWService.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'HelperService.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'ConversionService.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'PnkBstrA.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemon.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'WifiService.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhostex.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '240' Modul(e) wurden durchsucht
Durchsuche Prozess 'LiveComm.exe' - '110' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'skydrive.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '100' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'SettingSyncHost.exe' - '127' Modul(e) wurden durchsucht
Durchsuche Prozess 'RuntimeBroker.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'LCore.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'Steam.exe' - '126' Modul(e) wurden durchsucht
Durchsuche Prozess 'hpqtra08.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.bin' - '94' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'hpwuschd2.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrCtrlCntr.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrStMonW.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrYNSvc.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrIndicator.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'BrCcUxSys.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'Control Center.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'Avira.OE.Systray.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'steamwebhelper.exe' - '66' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '236' Modul(e) wurden durchsucht
Durchsuche Prozess 'SteamService.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCleaner64.exe' - '79' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'jucheck.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '131' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '15' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '36' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '2367' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\'
Beginne mit der Suche in 'D:\' <Dokumente>
Beginne mit der Suche in 'E:\' <Games>
Beginne mit der Suche in 'F:\' <Daten>
Beginne mit der Suche in 'H:\' <Games2>
Ende des Suchlaufs: Montag, 09. Februar 2015 21:55
Benötigte Zeit: 1:14:02 Stunde(n)
Der Suchlauf wurde vollständig durchgeführt.
43361 Verzeichnisse wurden überprüft
1925960 Dateien wurden geprüft
0 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
1925960 Dateien ohne Befall
19557 Archive wurden durchsucht
0 Warnungen
0 Hinweise
863864 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden
Christoph/Sub Zero |
|
10.02.2015, 11:43
| #10 |
| /// the machine /// TB-Ausbilder | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.02.2015, 18:03
| #11 |
| | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Alles erledigt Danke vielmals! LG Christoph/Sub Zero |
|
11.02.2015, 07:06
| #12 |
| /// the machine /// TB-Ausbilder | [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu [Win8.1] TR/Dropper.MSIL.Gen wurde gefunden |
| administrator, adware, bingbar, browser, converter, defender, desktop, explorer, fehler, flash player, frage, google, homepage, launch, lightning, netgear, opera, programm, registry, security, services.exe, software, stick, temp, usb, warnung, win8.1, windows, windowsapps, winlogon.exe |
![[Win8.1] TR/Dropper.MSIL.Gen wurde gefunden](iconimages/log-analyse-auswertung/win8-1-tr-dropper-msil-gen-wurde-gefunden_ltr.gif)
Linear-Darstellung
