|
Plagegeister aller Art und deren Bekämpfung: Maleware gefunden - was muß ich nun tun?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
24.03.2015, 15:44 | #46 |
| Maleware gefunden - was muß ich nun tun?Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015 Ran by Slim at 2015-03-24 15:35:35 Running from C:\Dokumente und Einstellungen\Slim\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Download Manager (HKLM\...\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}) (Version: 1.6.2.60 - NOS Microsystems Ltd.) Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader 9.3.4 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A93000000001}) (Version: 9.3.4 - Adobe Systems Incorporated) Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden Amazon Kindle (HKLM\...\Amazon Kindle) (Version: - Amazon) Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-796845957-926492609-839522115-1003\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC) Amazon MP3-Downloader 1.0.9 (HKLM\...\Amazon MP3-Downloader) (Version: - ) ArcSoft PhotoStudio 5 (HKLM\...\{03F1CC67-5BD8-4C36-8394-76311B2AE69A}) (Version: - ) ATI - Software Uninstall Utility (HKLM\...\All ATI Software) (Version: 6.14.10.1022 - ) ATI Catalyst Control Center (HKLM\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.009.0225.1545 - ) ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.591-090225a-076825C-ATI - ) Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira) ccc-core-preinstall (Version: 2009.0225.1546.28221 - ATI) Hidden ccc-core-static (Version: 2009.0225.1546.28221 - ATI) Hidden CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.7.2356 - CDBurnerXP) CloneDVD2 (HKLM\...\CloneDVD2) (Version: - Elaborate Bytes) Freemake Video Downloader (HKLM\...\Freemake Video Downloader_is1) (Version: 3.7.0 - Ellora Assets Corporation) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden High Definition Audio Driver Package - KB888111 (HKLM\...\KB888111WXPSP2) (Version: 20040219.000000 - Microsoft Corporation) Hotfix für Windows XP (KB2443685) (HKLM\...\KB2443685) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB2570791) (HKLM\...\KB2570791) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB976098-v2) (HKLM\...\KB976098-v2) (Version: 2 - Microsoft Corporation) Hotfix für Windows XP (KB979306) (HKLM\...\KB979306) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB981793) (HKLM\...\KB981793) (Version: 1 - Microsoft Corporation) hp deskjet 3320 series (HKLM\...\hp deskjet 3320 series_Driver) (Version: - ) hp deskjet 3320 series (nur entfernen) (HKLM\...\hp deskjet 3320 series) (Version: - ) InterVideo DeviceService (HKLM\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo) InterVideo DVDCopy5 (HKLM\...\{C167A588-87AA-47BF-A88E-5B0F9A14480D}) (Version: 5.0-B4.45 - InterVideo Inc.) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Media & Office Keyboard (HKLM\...\OfficeKB) (Version: - ) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office XP Small Business (HKLM\...\{91130407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 36.0.4 (x86 de) (HKLM\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MySQL Connector/ODBC 3.51 (HKLM\...\{0CB3C535-1171-4A20-B549-E2CB5DEB9723}) (Version: 3.51.12 - MySQL AB) Nero 9 Lite (HKLM\...\{53205192-a183-469b-8d43-7adad9c360cc}) (Version: - Nero AG) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) NVIDIA GeForce Experience 1.6.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA nView 140.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 140.62 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) QuickTime (HKLM\...\{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}) (Version: 7.1.3.100 - Apple Computer, Inc.) RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks) REALTEK GbE & FE Ethernet PCI-E NIC Driver (HKLM\...\{C9BED750-1211-4480-B1A5-718A3BE15525}) (Version: 1.23.0000 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5809 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version: - ) Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2183461) (HKLM\...\KB2183461-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2482017) (HKLM\...\KB2482017-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (HKLM\...\KB2544521-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2586448) (HKLM\...\KB2586448-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB971961) (HKLM\...\KB971961-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB976325) (HKLM\...\KB976325-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB978207) (HKLM\...\KB978207-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB981332) (HKLM\...\KB981332-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Media Encoder (KB2447961) (HKLM\...\KB2447961_WM9L) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Encoder (KB954156) (HKLM\...\KB954156_WM9L) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Encoder (KB979332) (HKLM\...\KB979332_WM9L) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB952069) (HKLM\...\KB952069_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB954155) (HKLM\...\KB954155_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB968816) (HKLM\...\KB968816_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB979402) (HKLM\...\KB979402_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2121546) (HKLM\...\KB2121546) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2160329) (HKLM\...\KB2160329) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2259922) (HKLM\...\KB2259922) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2286198) (HKLM\...\KB2286198) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2412687) (HKLM\...\KB2412687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2476687) (HKLM\...\KB2476687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2479628) (HKLM\...\KB2479628) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2485376) (HKLM\...\KB2485376) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2508272) (HKLM\...\KB2508272) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2562937) (HKLM\...\KB2562937) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2567053) (HKLM\...\KB2567053) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2567680) (HKLM\...\KB2567680) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2570222) (HKLM\...\KB2570222) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB951066) (HKLM\...\KB951066) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB951748) (HKLM\...\KB951748) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB955069) (HKLM\...\KB955069) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956803) (HKLM\...\KB956803) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB957097) (HKLM\...\KB957097) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB958687) (HKLM\...\KB958687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB958869) (HKLM\...\KB958869) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB960225) (HKLM\...\KB960225) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB969947) (HKLM\...\KB969947) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB970238) (HKLM\...\KB970238) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971468) (HKLM\...\KB971468) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971486) (HKLM\...\KB971486) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971557) (HKLM\...\KB971557) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971633) (HKLM\...\KB971633) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973354) (HKLM\...\KB973354) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973525) (HKLM\...\KB973525) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975561) (HKLM\...\KB975561) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975713) (HKLM\...\KB975713) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB976325) (Version: 1 - Microsoft Corporation) Hidden Sicherheitsupdate für Windows XP (KB977165-v2) (HKLM\...\KB977165-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978037) (HKLM\...\KB978037) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978251) (HKLM\...\KB978251) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978262) (HKLM\...\KB978262) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979559) (HKLM\...\KB979559) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979683) (HKLM\...\KB979683) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980195) (HKLM\...\KB980195) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980218) (HKLM\...\KB980218) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980232) (HKLM\...\KB980232) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980436) (HKLM\...\KB980436) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB981852) (HKLM\...\KB981852) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982214) (HKLM\...\KB982214) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982802) (HKLM\...\KB982802) (Version: 1 - Microsoft Corporation) Skins (Version: 2009.0225.1546.28221 - ATI) Hidden SmartSound Quicktracks Plugin (HKLM\...\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.5.0 - SmartSound Software Inc) SmartSound Quicktracks Plugin (Version: 3.0.5.0 - SmartSound Software Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH) Ulead VideoStudio 11 (HKLM\...\InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}) (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) upapp (HKLM\...\{4EF69D40-4DC9-485E-95D3-B1C22F218FC8}) (Version: 0.20.0000 - Hewlett-Packard) Update für Windows Internet Explorer 8 (KB975364) (HKLM\...\KB975364-IE8) (Version: 1 - Microsoft Corporation) Update für Windows Internet Explorer 8 (KB976662) (HKLM\...\KB976662-IE8) (Version: 1 - Microsoft Corporation) Update für Windows Internet Explorer 8 (KB980182) (HKLM\...\KB980182-IE8) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2141007) (HKLM\...\KB2141007) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB951978) (HKLM\...\KB951978) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation) VideoStudio (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) Hidden VLC media player 1.0.3 (HKLM\...\VLC media player) (Version: 1.0.3 - VideoLAN Team) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation) Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation) Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version: - ) Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version: - ) Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031514 - Microsoft Corporation) WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) XMedia Recode 2.2.5.0 (HKLM\...\XMedia Recode) (Version: 2.2.5.0 - Sebastian Dörfler) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-796845957-926492609-839522115-1003_Classes\CLSID\{A863CE12-5BDE-4B93-90DC-16D2078C0317}\InprocServer32 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{64937408-0582-4B1C-9C31-D08E175394CA}\soft (the data entry has 15 more characters). ==================== Restore Points ========================= 09-03-2015 06:58:11 Wiederherstellungsvorgang 09-03-2015 14:06:59 Revo Uninstaller's restore point - softonic-de3 Toolbar 11-03-2015 08:37:17 Systemprüfpunkt 12-03-2015 16:03:04 vor combifox 13-03-2015 09:35:16 Software Distribution Service 3.0 15-03-2015 10:03:19 Systemprüfpunkt 16-03-2015 12:15:53 Systemprüfpunkt 18-03-2015 09:08:24 Systemprüfpunkt 19-03-2015 16:16:13 Systemprüfpunkt 19-03-2015 18:13:20 Software Distribution Service 3.0 19-03-2015 19:50:02 Software Distribution Service 3.0 19-03-2015 20:20:34 Wiederherstellungsvorgang 19-03-2015 22:12:25 Revo Uninstaller's restore point - Opera Stable 27.0.1689.76 20-03-2015 07:25:23 Revo Uninstaller's restore point - Mozilla Firefox 36.0.1 (x86 de) ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-02-28 13:00 - 2015-03-12 16:23 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\RealNetworks\RealDownloader\recordingmanager.exe Task: C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\RealNetworks\RealDownloader\realupgrade.exe Task: C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\RealNetworks\RealDownloader\realupgrade.exe Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe ==================== Loaded Modules (whitelisted) ============== 2013-05-22 19:50 - 2013-05-22 19:50 - 00400704 _____ () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe 2006-02-28 13:00 - 2008-04-14 07:52 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2010-08-18 11:07 - 2010-03-04 22:38 - 00071096 _____ () C:\Programme\CDBurnerXP\NMSAccessU.exe 2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Programme\RealNetworks\RealDownloader\rndlresolversvc.exe ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Desktop:$SS_DESCRIPTOR_PVX2VCGFMVF9V8N4TKBRVDNGCMPLJ9M9YWPP96MVV4VTJFVVMJVM ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-796845957-926492609-839522115-1003\Control Panel\Desktop\\Wallpaper -> C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp HKU\S-1-5-21-796845957-926492609-839522115-1010\Control Panel\Desktop\\Wallpaper -> (Kein) DNS Servers: 192.168.178.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-796845957-926492609-839522115-500 - Administrator - Enabled) ASPNET (S-1-5-21-796845957-926492609-839522115-1009 - Limited - Enabled) Gast (S-1-5-21-796845957-926492609-839522115-501 - Limited - Disabled) Hilfeassistent (S-1-5-21-796845957-926492609-839522115-1000 - Limited - Disabled) Slim (S-1-5-21-796845957-926492609-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Slim SUPPORT_388945a0 (S-1-5-21-796845957-926492609-839522115-1002 - Limited - Disabled) UpdatusUser (S-1-5-21-796845957-926492609-839522115-1010 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\UpdatusUser ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (03/22/2015 10:32:50 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (03/22/2015 09:35:09 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (03/20/2015 08:11:34 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (03/19/2015 07:21:19 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (03/19/2015 07:21:16 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 System errors: ============= Error: (03/24/2015 03:29:20 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/24/2015 06:23:38 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/23/2015 06:39:57 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/23/2015 06:53:12 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/22/2015 05:32:38 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/22/2015 09:42:21 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/22/2015 08:20:22 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/20/2015 06:59:25 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/20/2015 02:04:03 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/19/2015 03:11:09 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Microsoft Office Sessions: ========================= Error: (03/22/2015 10:32:50 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000 Error: (03/22/2015 09:35:09 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000 Error: (03/20/2015 08:11:34 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000 Error: (03/19/2015 07:21:19 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (03/19/2015 07:21:16 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 ==================== Memory info =========================== Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ Percentage of memory in use: 53% Total physical RAM: 1535.29 MB Available physical RAM: 719.71 MB Total Pagefile: 3431.74 MB Available Pagefile: 2543.4 MB Total Virtual: 2047.88 MB Available Virtual: 1933.41 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:48.83 GB) (Free:16 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive d: (Daten_1) (Fixed) (Total:25.7 GB) (Free:14.68 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 74.5 GB) (Disk ID: E4DFE4DF) Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=25.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter ==================== End Of Log ======================A====== |
24.03.2015, 19:34 | #47 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun? FRST.txt ist leer, bitte nochmal FRST scannen, aber das Fenster offen lassen.
__________________
__________________ |
25.03.2015, 10:40 | #48 |
| Maleware gefunden - was muß ich nun tun? Hey Schrauber das Fenster war offen hab es erst geschlossen nach dem FRST Scan. Aber ich versuch es nochmal...hat mich ja auch gewundert mit dem leeren Fenster...
__________________ |
25.03.2015, 19:29 | #49 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun? ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.03.2015, 06:44 | #50 |
| Maleware gefunden - was muß ich nun tun? FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015 Ran by Slim (administrator) on SLIM-36FB768E46 on 26-03-2015 06:38:33 Running from C:\Dokumente und Einstellungen\Slim\Desktop Loaded Profiles: Slim & UpdatusUser (Available profiles: Slim & UpdatusUser) Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe (Advanced Micro Devices Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Adobe Systems Incorporated) C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (HP) C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe (Apple Computer, Inc.) C:\Programme\QuickTime\qttask.exe (Dritek System Inc.) C:\PROGRA~1\OfficeKB\OfficeKB.EXE (Dritek System Inc.) C:\PROGRA~1\OfficeKB\KPDrv4XP.EXE (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (NVIDIA Corporation) C:\Programme\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe (RealNetworks, Inc.) C:\Programme\Real\RealPlayer\Update\realsched.exe () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (InterVideo Inc.) C:\Programme\Gemeinsame Dateien\InterVideo\Common\Bin\WinCinemaMgr.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe (InterVideo Inc.) C:\Programme\Gemeinsame Dateien\InterVideo\DeviceService\DevSvc.exe (Freemake) C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Ellora Assets Corp.) C:\Programme\Freemake\CaptureLib\CaptureLibService.exe (Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe () C:\Programme\CDBurnerXP\NMSAccessU.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation) C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Programme\RealNetworks\RealDownloader\rndlresolversvc.exe (Ulead Systems, Inc.) C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [StartCCC] => C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2009-02-25] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [17531392 2009-03-12] (Realtek Semiconductor Corp.) HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2011-01-31] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [HPDJ Taskbar Utility] => C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [188416 2002-07-10] (HP) HKLM\...\Run: [UVS11 Preload] => C:\Programme\Ulead Systems\Ulead VideoStudio 11\uvPL.exe [341232 2007-07-23] (InterVideo Digital Technology Corporation) HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\qttask.exe [282624 2006-09-01] (Apple Computer, Inc.) HKLM\...\Run: [OfficeKB] => C:\Programme\OfficeKB\OfficeKB.EXE [200704 2004-10-22] (Dritek System Inc.) HKLM\...\Run: [KPDrv4XP] => C:\Programme\OfficeKB\KPDrv4XP.EXE [32768 2003-06-12] (Dritek System Inc.) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [NvMediaCenter] => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login HKLM\...\Run: [nwiz] => C:\Programme\NVIDIA Corporation\nview\nwiz.exe [2586912 2013-09-12] () HKLM\...\Run: [Nvtmru] => C:\Programme\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM\...\Run: [avgnt] => C:\Programme\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [TkBellExe] => C:\Programme\Real\RealPlayer\update\realsched.exe [295512 2014-04-29] (RealNetworks, Inc.) Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.) HKU\S-1-5-21-796845957-926492609-839522115-1003\...\Run: [AmazonMP3DownloaderHelper] => C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () HKU\S-1-5-21-796845957-926492609-839522115-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssmarque.scr [20992 2008-04-14] (Microsoft Corporation) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\InterVideo WinCinema Manager.lnk ShortcutTarget: InterVideo WinCinema Manager.lnk -> C:\Programme\Gemeinsame Dateien\InterVideo\Common\Bin\WinCinemaMgr.exe (InterVideo Inc.) Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-796845957-926492609-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-796845957-926492609-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKU\S-1-5-21-796845957-926492609-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: [S-1-5-21-796845957-926492609-839522115-1010] ATTENTION ==> Default URLSearchHook is missing. SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-796845957-926492609-839522115-1010 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22] (Adobe Systems Incorporated) BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01] (Google Inc.) BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Programme\Google\GoogleToolbarNotifier\5.10.11023.1534\swg.dll [2015-03-03] (Google Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01] (Google Inc.) Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01] (Google Inc.) Toolbar: HKU\S-1-5-21-796845957-926492609-839522115-1003 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01] (Google Inc.) DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\OLE DB\msdaipp.dll [2004-01-29] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\Mozilla\Firefox\Profiles\i64sllul.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-04] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Programme\Microsoft Silverlight\3.0.40818.0\npctrl.dll [2009-08-17] ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=16.0.3.51 -> C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll [2014-04-29] (RealNetworks, Inc.) FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-28] (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-28] (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.3.51 -> C:\Programme\Real\RealPlayer\Netscape6\nprpplugin.dll [2014-04-29] (RealPlayer) FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.) FF Plugin HKU\S-1-5-21-796845957-926492609-839522115-1003: amazon.com/AmazonMP3DownloaderPlugin -> C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-01-16] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-10-28] FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: No Name - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-06-12] FF HKLM\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com FF Extension: Freemake Video Downloader Plugin - C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com [2014-06-06] FF HKLM\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com FF Extension: Freemake Youtube Download Button - C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com [2014-06-06] Chrome: ======= CHR Profile: C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default CHR Extension: (No Name) - C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk(2) [2014-02-11] CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-06-06] CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-06-06] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [Not Found] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG) S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2009-02-25] () [File not signed] R2 Capture Device Service; C:\Programme\Gemeinsame Dateien\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.) R2 Freemake Improver; C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-05-22] (Freemake) [File not signed] R2 FreemakeVideoCapture; C:\Programme\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-05-22] (Ellora Assets Corp.) [File not signed] S3 getPlusHelper; C:\Programme\NOS\bin\getPlus_Helper.dll [67360 2009-12-17] (NOS Microsystems Ltd.) S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2013-08-14] (Google Inc.) S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2013-08-14] (Google Inc.) S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2013-10-10] (Google) R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation) S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [148080 2015-03-23] (Mozilla Foundation) R2 NMSAccess; C:\Programme\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] () R2 nvUpdatusService; C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2155296 2013-08-27] (NVIDIA Corporation) R2 RealNetworks Downloader Resolver Service; C:\Programme\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 UleadBurningHelper; C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe [67056 2007-03-03] (Ulead Systems, Inc.) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1684736 2008-08-05] (Creative) R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG) R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG) R3 HIDKbFlt; C:\WINDOWS\System32\drivers\HIDKbFlt.sys [21120 2004-12-14] (Dritek System Inc.) [File not signed] R3 Iviaspi; C:\WINDOWS\System32\drivers\iviaspi.sys [10368 2005-09-20] (InterVideo, Inc.) [File not signed] R0 iviVD; C:\WINDOWS\System32\DRIVERS\iviVD.sys [45056 2005-11-16] (InterVideo) S3 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [54360 2014-11-21] (Malwarebytes Corporation) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1389056 2006-01-04] (Creative Technology Ltd.) R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.) R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [128672 2013-06-16] (NVIDIA Corporation) R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH) S3 ss_bbus; C:\WINDOWS\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI) S3 ss_bmdfl; C:\WINDOWS\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation) S3 ss_bmdm; C:\WINDOWS\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation) S3 ss_bserd; C:\WINDOWS\System32\DRIVERS\ss_bserd.sys [100224 2009-09-19] (MCCI Corporation) S3 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed] S3 catchme; \??\C:\DOKUME~1\Slim\LOKALE~1\Temp\catchme.sys [X] S4 IntelIde; No ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-26 06:38 - 2015-03-26 06:38 - 00019973 _____ () C:\Dokumente und Einstellungen\Slim\Desktop\FRST.txt 2015-03-23 06:59 - 2015-03-23 06:59 - 00000000 ____D () C:\Programme\Mozilla Firefox 2015-03-20 07:34 - 2015-03-24 15:26 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service 2015-03-20 07:34 - 2015-03-20 07:34 - 00000709 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk 2015-03-20 07:34 - 2015-03-20 07:34 - 00000703 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk 2015-03-19 19:50 - 2015-03-19 19:51 - 00020009 _____ () C:\WINDOWS\iis6.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00018549 _____ () C:\WINDOWS\FaxSetup.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00008868 _____ () C:\WINDOWS\ocgen.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00008464 _____ () C:\WINDOWS\tsoc.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00008427 _____ () C:\WINDOWS\KB2914368.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00006123 _____ () C:\WINDOWS\comsetup.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00005648 _____ () C:\WINDOWS\msmqinst.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00003705 _____ () C:\WINDOWS\ntdtcsetup.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00003249 _____ () C:\WINDOWS\netfxocm.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00001374 _____ () C:\WINDOWS\imsins.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00001374 _____ () C:\WINDOWS\imsins.BAK 2015-03-19 19:50 - 2015-03-19 19:51 - 00001275 _____ () C:\WINDOWS\MedCtrOC.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00001026 _____ () C:\WINDOWS\ocmsn.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00000933 _____ () C:\WINDOWS\tabletoc.log 2015-03-19 19:50 - 2015-03-19 19:51 - 00000927 _____ () C:\WINDOWS\msgsocm.log 2015-03-19 16:07 - 2015-03-19 20:19 - 00018871 _____ () C:\WINDOWS\KB2780091.log 2015-03-19 16:07 - 2015-03-19 20:18 - 00020193 _____ () C:\WINDOWS\KB2930275.log 2015-03-19 16:07 - 2015-03-19 20:18 - 00019176 _____ () C:\WINDOWS\KB2876217.log 2015-03-19 16:07 - 2015-03-19 20:18 - 00019165 _____ () C:\WINDOWS\KB2864063.log 2015-03-19 16:07 - 2015-03-19 20:18 - 00019162 _____ () C:\WINDOWS\KB2862152.log 2015-03-19 16:07 - 2015-03-19 20:17 - 00020137 _____ () C:\WINDOWS\KB2859537.log 2015-03-19 16:07 - 2015-03-19 20:17 - 00019158 _____ () C:\WINDOWS\KB2876331.log 2015-03-19 16:07 - 2015-03-19 20:17 - 00019158 _____ () C:\WINDOWS\KB2850869.log 2015-03-19 16:06 - 2015-03-19 20:18 - 00018878 _____ () C:\WINDOWS\KB2719985.log 2015-03-19 16:06 - 2015-03-19 20:17 - 00018860 _____ () C:\WINDOWS\KB2820917.log 2015-03-19 16:06 - 2015-03-19 20:16 - 00018877 _____ () C:\WINDOWS\KB2757638.log 2015-03-19 16:06 - 2015-03-19 20:16 - 00018857 _____ () C:\WINDOWS\KB2749655.log 2015-03-19 16:06 - 2015-03-19 20:16 - 00013026 _____ () C:\WINDOWS\KB2893294.log 2015-03-19 16:00 - 2015-03-19 20:16 - 00018858 _____ () C:\WINDOWS\KB2653956.log 2015-03-19 15:52 - 2015-03-19 20:16 - 00019159 _____ () C:\WINDOWS\KB2892075.log 2015-03-19 15:51 - 2015-03-19 20:16 - 00018862 _____ () C:\WINDOWS\KB2619339.log 2015-03-19 15:50 - 2015-03-19 20:16 - 00020575 _____ () C:\WINDOWS\KB2813345.log 2015-03-19 15:50 - 2015-03-19 20:16 - 00019135 _____ () C:\WINDOWS\KB2705219-v2.log 2015-03-19 15:50 - 2015-03-19 20:16 - 00018855 _____ () C:\WINDOWS\KB2727528.log 2015-03-19 15:49 - 2015-03-19 20:15 - 00022431 _____ () C:\WINDOWS\KB2676562.log 2015-03-19 15:43 - 2015-03-19 19:51 - 00024886 _____ () C:\WINDOWS\KB2620712.log 2015-03-19 15:41 - 2015-03-19 20:20 - 00017436 _____ () C:\WINDOWS\KB2868626.log 2015-03-19 15:41 - 2015-03-19 20:19 - 00017241 _____ () C:\WINDOWS\KB2802968.log 2015-03-19 15:40 - 2015-03-19 20:20 - 00017440 _____ () C:\WINDOWS\KB2922229.log 2015-03-19 15:40 - 2015-03-19 20:20 - 00017436 _____ () C:\WINDOWS\KB2916036.log 2015-03-19 15:40 - 2015-03-19 20:19 - 00017440 _____ () C:\WINDOWS\KB2898715.log 2015-03-19 15:40 - 2015-03-19 20:19 - 00017435 _____ () C:\WINDOWS\KB2847311.log 2015-03-19 15:40 - 2015-03-19 20:19 - 00017431 _____ () C:\WINDOWS\KB2929961.log 2015-03-19 15:39 - 2015-03-19 20:20 - 00011000 _____ () C:\WINDOWS\KB2712808.log 2015-03-19 15:39 - 2015-03-19 20:19 - 00017199 _____ () C:\WINDOWS\KB2691442.log 2015-03-19 15:38 - 2015-03-19 20:20 - 00016939 _____ () C:\WINDOWS\KB2585542.log 2015-03-19 15:38 - 2015-03-19 20:19 - 00016843 _____ () C:\WINDOWS\KB2631813.log 2015-03-19 15:38 - 2015-03-19 20:19 - 00016730 _____ () C:\WINDOWS\KB2655992.log 2015-03-19 15:38 - 2015-03-19 20:19 - 00016635 _____ () C:\WINDOWS\KB2598479.log 2015-03-19 15:37 - 2015-03-19 19:50 - 00024132 _____ () C:\WINDOWS\KB2584146.log 2015-03-19 15:29 - 2015-03-19 15:29 - 00000349 _____ () C:\WINDOWS\setupapi.log 2015-03-15 19:16 - 2015-03-15 19:16 - 00852604 _____ () C:\SecurityCheck.exe 2015-03-14 17:40 - 2015-03-14 17:40 - 00039466 _____ () C:\Addition.txt 2015-03-14 17:39 - 2015-03-14 17:40 - 00035743 _____ () C:\FRST.txt 2015-03-14 17:39 - 2015-03-14 17:39 - 01135104 _____ (Farbar) C:\Dokumente und Einstellungen\Slim\Desktop\FRST.exe 2015-03-14 17:35 - 2015-03-14 17:35 - 00000727 _____ () C:\JRT.txt 2015-03-14 17:31 - 2015-03-14 17:31 - 01388333 _____ (Thisisu) C:\Dokumente und Einstellungen\Slim\Desktop\JRT.exe 2015-03-13 15:29 - 2015-03-14 17:21 - 00000000 ____D () C:\AdwCleaner 2015-03-13 15:01 - 2015-03-13 15:01 - 00001222 _____ () C:\mbam.txt. für schrauber.txt 2015-03-13 14:34 - 2015-03-13 14:34 - 00000756 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk 2015-03-13 14:34 - 2015-03-13 14:34 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 2015-03-13 14:34 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2015-03-12 16:44 - 2015-03-12 16:44 - 00000422 _____ () C:\Dokumente und Einstellungen\Slim\Desktop\Verknüpfung mit ComboFix.lnk 2015-03-12 16:25 - 2015-03-26 06:38 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\temp 2015-03-12 16:25 - 2015-03-12 16:25 - 00022597 _____ () C:\ComboFix.txt 2015-03-12 16:25 - 2015-03-12 16:25 - 00000000 ____D () C:\Dokumente und Einstellungen\UpdatusUser\Lokale Einstellungen\temp 2015-03-12 16:25 - 2015-03-12 16:25 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\temp 2015-03-12 16:25 - 2015-03-12 16:25 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\temp 2015-03-12 16:15 - 2015-03-12 16:15 - 00000000 _RSHD () C:\cmdcons 2015-03-12 16:15 - 2010-01-13 20:32 - 00000211 _____ () C:\Boot.bak 2015-03-12 16:15 - 2004-08-03 23:00 - 00262448 __RSH () C:\cmldr 2015-03-12 16:06 - 2011-06-26 07:45 - 00256000 _____ () C:\WINDOWS\PEV.exe 2015-03-12 16:06 - 2010-11-07 18:20 - 00208896 _____ () C:\WINDOWS\MBR.exe 2015-03-12 16:06 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe 2015-03-12 16:06 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe 2015-03-12 16:06 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe 2015-03-12 16:06 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe 2015-03-12 16:06 - 2000-08-31 01:00 - 00098816 _____ () C:\WINDOWS\sed.exe 2015-03-12 16:06 - 2000-08-31 01:00 - 00080412 _____ () C:\WINDOWS\grep.exe 2015-03-12 16:06 - 2000-08-31 01:00 - 00068096 _____ () C:\WINDOWS\zip.exe 2015-03-12 16:05 - 2015-03-12 16:25 - 00000000 ____D () C:\Qoobox 2015-03-12 16:05 - 2015-03-12 16:05 - 00000000 ___RD () C:\Dokumente und Einstellungen\Slim\Startmenü\Programme\Verwaltung 2015-03-12 16:04 - 2015-03-12 16:24 - 00000000 ____D () C:\WINDOWS\erdnt 2015-03-12 16:04 - 2015-03-12 16:03 - 05613296 ____R (Swearware) C:\ComboFix.exe 2015-03-11 19:08 - 2015-03-11 19:08 - 00000000 ____D () C:\TDSSKiller_Quarantine 2015-03-11 07:39 - 2015-03-11 07:39 - 04197016 _____ (Kaspersky Lab ZAO) C:\Dokumente und Einstellungen\Slim\Desktop\tdsskiller.exe 2015-03-09 14:24 - 2015-03-13 14:34 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes 2015-03-09 14:23 - 2015-03-13 14:35 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-03-09 14:23 - 2015-03-13 08:48 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes' Anti-Malware (portable) 2015-03-09 14:20 - 2015-03-10 11:20 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Desktop\mbar 2015-03-09 14:20 - 2014-11-21 06:14 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-03-09 13:57 - 2015-03-09 13:57 - 00000896 _____ () C:\Dokumente und Einstellungen\Slim\Desktop\Revo Uninstaller.lnk 2015-03-09 13:57 - 2015-03-09 13:57 - 00000000 ____D () C:\Programme\VS Revo Group 2015-03-09 07:59 - 2015-03-09 07:59 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Eigene Dateien\Ulead VideoStudio 2015-03-09 07:24 - 2015-03-09 07:24 - 00000060 _____ () C:\WINDOWS\setupact.log 2015-03-09 07:24 - 2015-03-09 07:24 - 00000000 _____ () C:\WINDOWS\setuperr.log 2015-03-09 06:58 - 2015-03-09 06:58 - 00000000 ___DC () C:\NVIDIA 2015-03-08 21:03 - 2015-03-09 06:59 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2862335$ 2015-03-08 21:01 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2780091$ 2015-03-08 20:58 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2904266$ 2015-03-08 20:57 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2930275$ 2015-03-08 20:57 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2876217$ 2015-03-08 20:57 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2864063$ 2015-03-08 20:57 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2862152$ 2015-03-08 20:57 - 2015-03-09 07:00 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2719985$ 2015-03-08 20:32 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB941569$ 2015-03-08 20:32 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2770660$ 2015-03-08 20:31 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2876331$ 2015-03-08 20:31 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2859537$ 2015-03-08 20:31 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2850869$ 2015-03-08 20:30 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2893294$ 2015-03-08 20:30 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2820917$ 2015-03-08 20:30 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2757638$ 2015-03-08 20:30 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2749655$ 2015-03-08 20:30 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2653956$ 2015-03-08 20:29 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2892075$ 2015-03-08 20:29 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2813345$ 2015-03-08 20:29 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2727528$ 2015-03-08 20:29 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2705219-v2$ 2015-03-08 20:29 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2619339$ 2015-03-08 20:28 - 2015-03-19 20:24 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2620712$ 2015-03-08 20:28 - 2015-03-19 20:24 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2584146$ 2015-03-08 20:28 - 2015-03-09 07:01 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2676562$ 2015-03-08 20:00 - 2015-03-26 06:38 - 00000000 ____D () C:\FRST 2015-03-08 16:59 - 2015-03-09 07:05 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2807986$ 2015-03-08 16:52 - 2015-03-09 07:07 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2868038$ 2015-03-08 16:48 - 2015-03-08 16:48 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2603381$ 2015-03-08 16:47 - 2015-03-09 07:08 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2834903-v2_WM10L$ 2015-03-08 16:46 - 2015-03-09 07:08 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2698365$ 2015-03-08 16:41 - 2015-03-09 07:09 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2723135-v2$ 2015-03-08 16:40 - 2015-03-09 07:09 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2862330$ 2015-03-08 16:14 - 2015-03-19 20:24 - 00000000 ___DC () C:\WINDOWS\$NtUninstallKB2914368$ 2015-03-08 13:56 - 2015-03-08 13:56 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\IETldCache ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-26 06:37 - 2013-10-08 13:38 - 00009362 _____ () C:\WINDOWS\system32\nvAppTimestamps 2015-03-26 06:34 - 2014-10-07 09:19 - 00000268 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job 2015-03-26 06:34 - 2014-04-29 17:36 - 00000276 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job 2015-03-26 06:34 - 2010-07-01 18:44 - 00000268 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job 2015-03-26 06:34 - 2006-02-28 13:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl 2015-03-26 06:33 - 2010-01-13 20:38 - 01729271 _____ () C:\WINDOWS\WindowsUpdate.log 2015-03-26 06:32 - 2010-01-13 20:31 - 00000159 _____ () C:\WINDOWS\wiadebug.log 2015-03-26 06:32 - 2010-01-13 20:31 - 00000050 _____ () C:\WINDOWS\wiaservc.log 2015-03-26 06:31 - 2014-04-29 17:48 - 00000290 _____ () C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job 2015-03-26 06:31 - 2013-08-14 13:54 - 00001086 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-26 06:31 - 2010-01-13 20:44 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-03-25 10:41 - 2014-06-06 11:00 - 00196608 _____ () C:\WINDOWS\system32\config\CaptureL.evt 2015-03-25 10:41 - 2010-01-13 20:45 - 00000300 ___SH () C:\Dokumente und Einstellungen\Slim\ntuser.ini 2015-03-25 10:41 - 2010-01-13 20:45 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim 2015-03-25 10:41 - 2010-01-13 20:44 - 00032438 _____ () C:\WINDOWS\SchedLgU.Txt 2015-03-25 07:03 - 2013-08-14 13:54 - 00001090 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-25 07:00 - 2013-06-21 05:50 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-03-24 06:27 - 2010-01-13 20:29 - 00000000 ___RD () C:\Programme 2015-03-23 18:58 - 2010-09-30 09:23 - 00002501 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Word.lnk 2015-03-22 11:03 - 2010-01-13 21:17 - 00000000 ____D () C:\WINDOWS\Help 2015-03-20 07:34 - 2010-01-13 20:28 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme 2015-03-19 22:26 - 2011-05-27 14:14 - 00000000 ____D () C:\WINDOWS\system32\NtmsData 2015-03-19 22:17 - 2010-01-13 20:35 - 00000000 ____D () C:\WINDOWS\Registration 2015-03-19 20:28 - 2010-01-13 20:44 - 00000000 __SHD () C:\Dokumente und Einstellungen\LocalService 2015-03-19 20:28 - 2010-01-13 20:43 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService 2015-03-19 20:21 - 2010-01-13 21:28 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt 2015-03-19 20:09 - 2010-01-13 21:23 - 00000000 ____D () C:\WINDOWS\Microsoft.NET 2015-03-19 15:41 - 2010-01-13 20:40 - 00000000 ___HD () C:\WINDOWS\$hf_mig$ 2015-03-19 15:30 - 2010-01-13 20:43 - 00000000 ___HD () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Verlauf 2015-03-18 08:41 - 2010-01-13 20:44 - 00000000 __SHD () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Verlauf 2015-03-18 08:40 - 2010-01-13 20:45 - 00000000 __SHD () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Verlauf 2015-03-18 08:38 - 2013-10-08 13:33 - 00000000 ___HD () C:\Dokumente und Einstellungen\UpdatusUser\Lokale Einstellungen\Verlauf 2015-03-18 08:38 - 2010-01-13 20:28 - 00000000 __SHD () C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Verlauf 2015-03-13 15:53 - 2010-02-04 14:35 - 00082800 _____ () C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\GDIPFONTCACHEV1.DAT 2015-03-13 15:03 - 2011-03-21 13:38 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2443685$ 2015-03-12 19:31 - 2010-01-15 14:40 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\vlc 2015-03-12 19:19 - 2011-03-01 21:59 - 00054156 ____H () C:\WINDOWS\QTFont.qfn 2015-03-12 16:23 - 2006-02-28 13:00 - 00000227 _____ () C:\WINDOWS\system.ini 2015-03-12 16:15 - 2010-01-13 21:27 - 00000327 __RSH () C:\boot.ini 2015-03-12 16:05 - 2010-01-13 20:45 - 00000000 ___RD () C:\Dokumente und Einstellungen\Slim\Startmenü\Programme 2015-03-10 18:20 - 2010-07-01 18:43 - 00000276 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job 2015-03-10 07:52 - 2013-02-03 18:34 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\TS3Client 2015-03-09 14:07 - 2012-11-03 09:27 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Conduit 2015-03-09 07:17 - 2010-01-13 20:28 - 00294864 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-03-09 07:10 - 2010-01-16 20:15 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer 2015-03-09 07:02 - 2014-02-07 08:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Opera Software 2015-03-09 07:02 - 2014-02-07 08:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\Opera Software 2015-03-09 07:02 - 2013-09-30 14:01 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Startmenü\Programme\Amazon 2015-03-09 07:02 - 2010-08-18 08:50 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\Amazon 2015-03-09 07:02 - 2010-08-18 08:49 - 00000000 ____D () C:\Programme\Amazon 2015-03-09 07:02 - 2010-08-18 08:49 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Amazon 2015-03-08 20:58 - 2010-01-13 22:00 - 00031828 _____ () C:\WINDOWS\system32\TZLog.log 2015-03-08 16:40 - 2010-01-13 21:59 - 00000000 ____D () C:\WINDOWS\ie8updates 2015-03-06 11:37 - 2014-04-29 17:48 - 00000298 _____ () C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job 2015-03-05 14:41 - 2014-01-31 09:30 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys 2015-03-05 14:41 - 2014-01-31 09:30 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys 2015-03-03 14:36 - 2010-01-15 13:59 - 00000000 ____D () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Google ==================== Files in the root of some directories ======= 2010-06-30 06:27 - 2010-06-30 06:28 - 33177736 _____ (Nero AG) C:\Programme\Nero-9.4.12.708b_lite.exe 2010-07-01 18:39 - 2010-07-01 18:39 - 0822296 _____ (RealNetworks, Inc.) C:\Programme\RealPlayerSPGold_de.exe 2010-09-30 09:28 - 2010-09-30 09:29 - 0291680 _____ () C:\Programme\SoftonicDownloader_fuer_microsoft-office-powerpoint-viewer.exe 2010-08-18 11:00 - 2010-08-18 11:02 - 0000150 _____ () C:\Dokumente und Einstellungen\Slim\Anwendungsdaten\burnaware.ini 2010-02-02 18:10 - 2014-05-06 19:39 - 0062976 _____ () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2010-04-09 18:27 - 2010-04-09 18:27 - 0000137 _____ () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat Some content of TEMP: ==================== C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015 Ran by Slim at 2015-03-26 06:39:36 Running from C:\Dokumente und Einstellungen\Slim\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Download Manager (HKLM\...\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}) (Version: 1.6.2.60 - NOS Microsystems Ltd.) Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader 9.3.4 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A93000000001}) (Version: 9.3.4 - Adobe Systems Incorporated) Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden Amazon Kindle (HKLM\...\Amazon Kindle) (Version: - Amazon) Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-796845957-926492609-839522115-1003\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC) Amazon MP3-Downloader 1.0.9 (HKLM\...\Amazon MP3-Downloader) (Version: - ) ArcSoft PhotoStudio 5 (HKLM\...\{03F1CC67-5BD8-4C36-8394-76311B2AE69A}) (Version: - ) ATI - Software Uninstall Utility (HKLM\...\All ATI Software) (Version: 6.14.10.1022 - ) ATI Catalyst Control Center (HKLM\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.009.0225.1545 - ) ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.591-090225a-076825C-ATI - ) Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira) ccc-core-preinstall (Version: 2009.0225.1546.28221 - ATI) Hidden ccc-core-static (Version: 2009.0225.1546.28221 - ATI) Hidden CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.7.2356 - CDBurnerXP) CloneDVD2 (HKLM\...\CloneDVD2) (Version: - Elaborate Bytes) Freemake Video Downloader (HKLM\...\Freemake Video Downloader_is1) (Version: 3.7.0 - Ellora Assets Corporation) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden High Definition Audio Driver Package - KB888111 (HKLM\...\KB888111WXPSP2) (Version: 20040219.000000 - Microsoft Corporation) Hotfix für Windows XP (KB2443685) (HKLM\...\KB2443685) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB2570791) (HKLM\...\KB2570791) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB976098-v2) (HKLM\...\KB976098-v2) (Version: 2 - Microsoft Corporation) Hotfix für Windows XP (KB979306) (HKLM\...\KB979306) (Version: 1 - Microsoft Corporation) Hotfix für Windows XP (KB981793) (HKLM\...\KB981793) (Version: 1 - Microsoft Corporation) hp deskjet 3320 series (HKLM\...\hp deskjet 3320 series_Driver) (Version: - ) hp deskjet 3320 series (nur entfernen) (HKLM\...\hp deskjet 3320 series) (Version: - ) InterVideo DeviceService (HKLM\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo) InterVideo DVDCopy5 (HKLM\...\{C167A588-87AA-47BF-A88E-5B0F9A14480D}) (Version: 5.0-B4.45 - InterVideo Inc.) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Media & Office Keyboard (HKLM\...\OfficeKB) (Version: - ) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office XP Small Business (HKLM\...\{91130407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 36.0.4 (x86 de) (HKLM\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MySQL Connector/ODBC 3.51 (HKLM\...\{0CB3C535-1171-4A20-B549-E2CB5DEB9723}) (Version: 3.51.12 - MySQL AB) Nero 9 Lite (HKLM\...\{53205192-a183-469b-8d43-7adad9c360cc}) (Version: - Nero AG) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) NVIDIA GeForce Experience 1.6.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA nView 140.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 140.62 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) QuickTime (HKLM\...\{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}) (Version: 7.1.3.100 - Apple Computer, Inc.) RealDownloader (Version: 1.3.3 - RealNetworks, Inc.) Hidden RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks) REALTEK GbE & FE Ethernet PCI-E NIC Driver (HKLM\...\{C9BED750-1211-4480-B1A5-718A3BE15525}) (Version: 1.23.0000 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5809 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version: - ) Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2183461) (HKLM\...\KB2183461-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2482017) (HKLM\...\KB2482017-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (HKLM\...\KB2544521-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB2586448) (HKLM\...\KB2586448-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB971961) (HKLM\...\KB971961-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB976325) (HKLM\...\KB976325-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB978207) (HKLM\...\KB978207-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB981332) (HKLM\...\KB981332-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows Media Encoder (KB2447961) (HKLM\...\KB2447961_WM9L) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Encoder (KB954156) (HKLM\...\KB954156_WM9L) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Encoder (KB979332) (HKLM\...\KB979332_WM9L) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB952069) (HKLM\...\KB952069_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB954155) (HKLM\...\KB954155_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB968816) (HKLM\...\KB968816_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows Media Player (KB979402) (HKLM\...\KB979402_WM9) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2121546) (HKLM\...\KB2121546) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2160329) (HKLM\...\KB2160329) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2259922) (HKLM\...\KB2259922) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2286198) (HKLM\...\KB2286198) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2412687) (HKLM\...\KB2412687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2476687) (HKLM\...\KB2476687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2479628) (HKLM\...\KB2479628) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2485376) (HKLM\...\KB2485376) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2508272) (HKLM\...\KB2508272) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2562937) (HKLM\...\KB2562937) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2567053) (HKLM\...\KB2567053) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2567680) (HKLM\...\KB2567680) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2570222) (HKLM\...\KB2570222) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB951066) (HKLM\...\KB951066) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB951748) (HKLM\...\KB951748) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB955069) (HKLM\...\KB955069) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956803) (HKLM\...\KB956803) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB957097) (HKLM\...\KB957097) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB958687) (HKLM\...\KB958687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB958869) (HKLM\...\KB958869) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB960225) (HKLM\...\KB960225) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB969947) (HKLM\...\KB969947) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB970238) (HKLM\...\KB970238) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971468) (HKLM\...\KB971468) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971486) (HKLM\...\KB971486) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971557) (HKLM\...\KB971557) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971633) (HKLM\...\KB971633) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973354) (HKLM\...\KB973354) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973525) (HKLM\...\KB973525) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975561) (HKLM\...\KB975561) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB975713) (HKLM\...\KB975713) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB976325) (Version: 1 - Microsoft Corporation) Hidden Sicherheitsupdate für Windows XP (KB977165-v2) (HKLM\...\KB977165-v2) (Version: 2 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978037) (HKLM\...\KB978037) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978251) (HKLM\...\KB978251) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978262) (HKLM\...\KB978262) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979559) (HKLM\...\KB979559) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979683) (HKLM\...\KB979683) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980195) (HKLM\...\KB980195) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980218) (HKLM\...\KB980218) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980232) (HKLM\...\KB980232) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB980436) (HKLM\...\KB980436) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB981852) (HKLM\...\KB981852) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982214) (HKLM\...\KB982214) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation) Sicherheitsupdate für Windows XP (KB982802) (HKLM\...\KB982802) (Version: 1 - Microsoft Corporation) Skins (Version: 2009.0225.1546.28221 - ATI) Hidden SmartSound Quicktracks Plugin (HKLM\...\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.5.0 - SmartSound Software Inc) SmartSound Quicktracks Plugin (Version: 3.0.5.0 - SmartSound Software Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15.1 - TeamSpeak Systems GmbH) Ulead VideoStudio 11 (HKLM\...\InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}) (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) upapp (HKLM\...\{4EF69D40-4DC9-485E-95D3-B1C22F218FC8}) (Version: 0.20.0000 - Hewlett-Packard) Update für Windows Internet Explorer 8 (KB975364) (HKLM\...\KB975364-IE8) (Version: 1 - Microsoft Corporation) Update für Windows Internet Explorer 8 (KB976662) (HKLM\...\KB976662-IE8) (Version: 1 - Microsoft Corporation) Update für Windows Internet Explorer 8 (KB980182) (HKLM\...\KB980182-IE8) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2141007) (HKLM\...\KB2141007) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB951978) (HKLM\...\KB951978) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation) Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation) VideoStudio (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) Hidden VLC media player 1.0.3 (HKLM\...\VLC media player) (Version: 1.0.3 - VideoLAN Team) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation) Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation) Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version: - ) Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version: - ) Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031514 - Microsoft Corporation) WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) XMedia Recode 2.2.5.0 (HKLM\...\XMedia Recode) (Version: 2.2.5.0 - Sebastian Dörfler) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-796845957-926492609-839522115-1003_Classes\CLSID\{A863CE12-5BDE-4B93-90DC-16D2078C0317}\InprocServer32 -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{64937408-0582-4B1C-9C31-D08E175394CA}\soft (the data entry has 15 more characters). ==================== Restore Points ========================= 09-03-2015 06:58:11 Wiederherstellungsvorgang 09-03-2015 14:06:59 Revo Uninstaller's restore point - softonic-de3 Toolbar 11-03-2015 08:37:17 Systemprüfpunkt 12-03-2015 16:03:04 vor combifox 13-03-2015 09:35:16 Software Distribution Service 3.0 15-03-2015 10:03:19 Systemprüfpunkt 16-03-2015 12:15:53 Systemprüfpunkt 18-03-2015 09:08:24 Systemprüfpunkt 19-03-2015 16:16:13 Systemprüfpunkt 19-03-2015 18:13:20 Software Distribution Service 3.0 19-03-2015 19:50:02 Software Distribution Service 3.0 19-03-2015 20:20:34 Wiederherstellungsvorgang 19-03-2015 22:12:25 Revo Uninstaller's restore point - Opera Stable 27.0.1689.76 20-03-2015 07:25:23 Revo Uninstaller's restore point - Mozilla Firefox 36.0.1 (x86 de) ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-02-28 13:00 - 2015-03-12 16:23 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\RealNetworks\RealDownloader\recordingmanager.exe Task: C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\RealNetworks\RealDownloader\realupgrade.exe Task: C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\RealNetworks\RealDownloader\realupgrade.exe Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-796845957-926492609-839522115-1003.job => C:\Programme\Real\RealUpgrade\realupgrade.exe ==================== Loaded Modules (whitelisted) ============== 2013-05-22 19:50 - 2013-05-22 19:50 - 00400704 _____ () C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe 2006-02-28 13:00 - 2008-04-14 07:52 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll 2010-08-18 11:07 - 2010-03-04 22:38 - 00071096 _____ () C:\Programme\CDBurnerXP\NMSAccessU.exe 2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Programme\RealNetworks\RealDownloader\rndlresolversvc.exe ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Desktop:$SS_DESCRIPTOR_PVX2VCGFMVF9V8N4TKBRVDNGCMPLJ9M9YWPP96MVV4VTJFVVMJVM ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-796845957-926492609-839522115-1003\Control Panel\Desktop\\Wallpaper -> C:\Dokumente und Einstellungen\Slim\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp HKU\S-1-5-21-796845957-926492609-839522115-1010\Control Panel\Desktop\\Wallpaper -> (Kein) DNS Servers: 192.168.178.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-796845957-926492609-839522115-500 - Administrator - Enabled) ASPNET (S-1-5-21-796845957-926492609-839522115-1009 - Limited - Enabled) Gast (S-1-5-21-796845957-926492609-839522115-501 - Limited - Disabled) Hilfeassistent (S-1-5-21-796845957-926492609-839522115-1000 - Limited - Disabled) Slim (S-1-5-21-796845957-926492609-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Slim SUPPORT_388945a0 (S-1-5-21-796845957-926492609-839522115-1002 - Limited - Disabled) UpdatusUser (S-1-5-21-796845957-926492609-839522115-1010 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\UpdatusUser ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (03/22/2015 10:32:50 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (03/22/2015 09:35:09 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (03/20/2015 08:11:34 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error: (03/19/2015 07:21:19 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (03/19/2015 07:21:16 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 System errors: ============= Error: (03/26/2015 06:34:14 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/25/2015 10:36:18 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/24/2015 05:22:39 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/24/2015 03:29:20 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/24/2015 06:23:38 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/23/2015 06:39:57 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/23/2015 06:53:12 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/22/2015 05:32:38 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/22/2015 09:42:21 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Error: (03/22/2015 08:20:22 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Freemake Improver" wurde nicht ordnungsgemäß gestartet. Microsoft Office Sessions: ========================= Error: (03/22/2015 10:32:50 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000 Error: (03/22/2015 09:35:09 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000 Error: (03/20/2015 08:11:34 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000 Error: (03/19/2015 07:21:19 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:18 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (03/19/2015 07:21:17 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (03/19/2015 07:21:16 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 ==================== Memory info =========================== Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+ Percentage of memory in use: 37% Total physical RAM: 1535.29 MB Available physical RAM: 965.44 MB Total Pagefile: 3431.74 MB Available Pagefile: 2856.39 MB Total Virtual: 2047.88 MB Available Virtual: 1936.56 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:48.83 GB) (Free:16.2 GB) NTFS ==>[Drive with boot components (Windows XP)] Drive d: (Daten_1) (Fixed) (Total:25.7 GB) (Free:14.68 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 74.5 GB) (Disk ID: E4DFE4DF) Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=25.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
26.03.2015, 17:09 | #51 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun? Gewusst wie: Durchführen eines sauberen Neustarts in Windows Bitte einen Clean Boot machen. Wenn das Problem dann weg ist, einzeln wieder Dienste aktivieren, dazwischen immer einen Reboot machen. Solange bis Du weißt welcher Dienst die Probleme macht. Diesen dann hier benennen.
__________________ --> Maleware gefunden - was muß ich nun tun? |
26.03.2015, 19:39 | #52 |
| Maleware gefunden - was muß ich nun tun? schluck ... einzeln Dienste aktivieren? da steht ist für fortgeschrittene PC-Benutzer..äähhh ich glaub ich bin noch im Kindergarten allenfalls PC-Vorschule? Sorry aber ich hab grad nen mittleren Panikanfall... Geändert von mysteryPC (26.03.2015 um 19:49 Uhr) |
27.03.2015, 10:35 | #53 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun? Wenn Du nach dem Bild vorgehst und erstmal die Microsoft Dienste versteckst kann nix schief gehen. Dann alle andern deaktivieren und rebooten.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.03.2015, 14:41 | #54 |
| Maleware gefunden - was muß ich nun tun? Hey Schrauber ich habe mal ne frage bevor ich das jetzt tue: Wenn ich meinen PC eh umstellen muß, würde sich dann dieser Schritt nicht erübrigen? (Nur mal so frag) Oder sollte ich das mit dem reboot dennoch machen vorher? |
30.03.2015, 05:03 | #55 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun? Wenn Du komplett formatierst und dann ein neues BS installierst hat sich der Schritt erübrigt
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.03.2015, 14:46 | #56 |
| Maleware gefunden - was muß ich nun tun? Hi Schrauber, oookay...was ist ein BS (=Betriebssystem?) ? Und: wie mache ich das mit dem umstellen einfach windows 7 runterladen und fertig, oder wie? Kann ich sowas alleine oder sollte ich mir vor ort Hilfe holen oder kannst Du mir dabei helfen? Muß ich danach irgendwelche Treiber nochmal einzeln runterladen? Ich kann halt nicht abschätzen was da auf mich zukommt deswegen die vielfragerei ;-) Also eigentlich möchte ich alles so haben wie es jetzt ist nur halt sicher |
30.03.2015, 17:40 | #57 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
31.03.2015, 06:25 | #58 |
| Maleware gefunden - was muß ich nun tun? Ok mach ich...ich deute das als: Ja Du Hilfst mir :-) :-) :-) |
31.03.2015, 16:48 | #59 |
/// the machine /// TB-Ausbilder | Maleware gefunden - was muß ich nun tun? jop
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
13.04.2015, 16:14 | #60 |
| Maleware gefunden - was muß ich nun tun? Hallo schrauber sorry das ich mich bisher nicht weiter gemeldet habe, aber ich war verhindert...nun gehts weiter... Habe den Link angeklickt und kann nix Laden oder laufen lassen wenn ich da klicke bekomme ich folgendes: Windows hat die folgenden Informationen zu diesem Dateityp. Diese Seite unterstützt Sie bei der Suche nach Software zum Öffnen dieser Datei. Dateityp: Hotfix installer package Dateierweiterung: .msu Beschreibung: An installer file format intended for use in an installer library. Auf den folgenden Websites finden Sie umfassende Listen von Dateierweiterungen. Möglicherweise finden Sie hier Informationen zu diesem Dateityp: Im Web suchen Haben Sie Fragen? Beachten Sie die FAQ (Häufig gestellte Fragen). |
Themen zu Maleware gefunden - was muß ich nun tun? |
andere, anderen, antivirusprogramm, avira, dahinter, einfach, emails, erneut, frage, freue, herausfinden, hoffe, klicke, korrekt, links, maleware, nummer, nummern, ordner, quarantäne, richtig, rubrik, verschoben, wirklich, worte, ändern |