| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Avira Free erkennt TR/Crypt.ZPACK.GenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.06.2015, 14:50
| #1 |
| |  Avira Free erkennt TR/Crypt.ZPACK.Gen Hallo liebes Team von Trojaner Board, ich brauche eure Hilfe. Heute hat mir mein Free Antivirus folgende Meldung gezeigt: In der Datei 'C:\drivers\Bluetooth Driver (Atheros, Broadcom, Realtek, Intel)\Intel_3.1.1311.400_WHQL\Win7\vs64\DLIH\1.0.1\obexsrv.exe' wurde ein Virus oder unerwünschtes Programm 'TR/Crypt.ZPACK.Gen' [trojan] gefunden. Ausgeführte Aktion: Zugriff verweigern habe danach einen Malwarebyte Scan laufen lassen, der hat aber komischerweise nichts gefunden: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 07.06.2015 Suchlauf-Zeit: 15:28:21 Logdatei: scanlog07_06.txt Administrator: Ja Version: 2.01.6.1022 Malware Datenbank: v2015.06.07.03 Rootkit Datenbank: v2015.06.02.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Sabrina Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 388953 Verstrichene Zeit: 17 Min, 50 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 0 (Keine schädliche Elemente gefunden) Registrierungswerte: 0 (Keine schädliche Elemente gefunden) Registrierungsdaten: 0 (Keine schädliche Elemente gefunden) Ordner: 0 (Keine schädliche Elemente gefunden) Dateien: 0 (Keine schädliche Elemente gefunden) Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) Was sol ich jetzt tun? schon mal Danke im Vorraus für eure Hilfe Liebe Grüße brinizi |
|
07.06.2015, 15:04
| #2 |
| /// the machine /// TB-Ausbilder    | Avira Free erkennt TR/Crypt.ZPACK.Gen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
07.06.2015, 19:49
| #3 |
| | Avira Free erkennt TR/Crypt.ZPACK.Gen Hallo Schrauber,
__________________danke für die schnelle Hilfe! frst.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2015 Ran by Sabrina (administrator) on BRINIZI on 07-06-2015 16:10:17 Running from C:\Users\Sabrina\Desktop Loaded Profiles: Sabrina & (Available Profiles: Sabrina) Platform: Windows 8.1 Pro (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor Corporation) C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek semiconductor) C:\Windows\RTFTrack.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216064 2014-01-06] (Realtek Semiconductor Corporation) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [6340312 2013-10-18] (Realtek semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2781936 2013-12-24] (Synaptics Incorporated) HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-12-03] (Lenovo(beijing) Limited) HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-12-03] (Lenovo(beijing) Limited) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-04] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2465088 2014-11-17] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters). HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [728312 2015-04-16] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1430275538-2783748576-1565938762-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28919424 2015-05-14] (Skype Technologies S.A.) HKU\S-1-5-21-1430275538-2783748576-1565938762-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28919424 2015-05-14] (Skype Technologies S.A.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Handler-x32: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2014-07-21] (SAP, Walldorf) Handler-x32: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2014-07-21] (SAP, Walldorf) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\grl2jlw4.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll [2014-12-11] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll [2014-12-11] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-17] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-17] (Intel Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF user.js: detected! => C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\grl2jlw4.default\user.js [2015-05-07] FF Extension: Avira Browser Safety - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\grl2jlw4.default\Extensions\abs@avira.com [2015-05-29] FF Extension: Ghostery - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\grl2jlw4.default\Extensions\firefox@ghostery.com.xpi [2014-12-03] FF Extension: NoScript - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\grl2jlw4.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-12-03] FF Extension: Adblock Plus - C:\Users\Sabrina\AppData\Roaming\Mozilla\Firefox\Profiles\grl2jlw4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-03] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827640 2015-04-16] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [434424 2015-04-16] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [434424 2015-04-16] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1185584 2015-04-16] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG) R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [79872 2014-01-06] () [File not signed] S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-11-17] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-11-17] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19821376 2014-11-17] (NVIDIA Corporation) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2014-12-01] (The OpenVPN Project) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-04-16] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-04-16] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-04-16] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-04-16] (Avira Operations GmbH & Co. KG) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-07] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20800 2014-11-17] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation) S3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [558296 2014-01-06] (Realtek Semiconductor Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8876248 2013-10-18] (Realtek Semiconductor Corp.) R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2982104 2013-12-26] (Realtek Semiconductor Corporation ) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-12-24] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-07 16:10 - 2015-06-07 16:10 - 00014573 _____ C:\Users\Sabrina\Desktop\FRST.txt 2015-06-07 16:08 - 2015-06-07 16:09 - 00026495 _____ C:\Users\Sabrina\Downloads\Addition.txt 2015-06-07 16:07 - 2015-06-07 16:10 - 00000000 ____D C:\FRST 2015-06-07 16:07 - 2015-06-07 16:09 - 00032271 _____ C:\Users\Sabrina\Downloads\FRST.txt 2015-06-07 16:06 - 2015-06-07 16:06 - 02108928 _____ (Farbar) C:\Users\Sabrina\Desktop\FRST64.exe 2015-06-07 15:46 - 2015-06-07 15:46 - 00001202 _____ C:\scan0706.txt 2015-06-07 12:25 - 2015-06-07 15:00 - 00000000 ____D C:\Users\Sabrina\Desktop\May 11th 2015-06-07 11:49 - 2015-06-07 11:49 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe 2015-06-07 11:47 - 2015-06-07 11:47 - 00000000 ____D C:\Windows\PCHEALTH 2015-06-07 11:47 - 2015-06-07 11:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus 2015-06-07 11:47 - 2015-06-07 11:47 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint 2015-06-07 11:42 - 2015-06-07 11:42 - 00000000 ____D C:\Users\Sabrina\AppData\Roaming\Avira 2015-06-07 11:41 - 2015-04-16 15:23 - 00152744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-06-07 11:41 - 2015-04-16 15:23 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-06-07 11:41 - 2015-04-16 15:23 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-06-07 11:41 - 2015-04-16 15:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-06-07 11:38 - 2015-06-07 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-06-07 11:38 - 2015-06-07 11:38 - 00001212 _____ C:\Users\Public\Desktop\Avira.lnk 2015-06-07 11:27 - 2015-06-07 11:27 - 04683232 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sabrina\Downloads\avira_de_av_55740d267c0ba__ws.exe 2015-06-06 14:59 - 2015-06-07 11:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-06-02 08:53 - 2015-06-02 08:53 - 00000000 ____D C:\Users\Sabrina\AppData\Local\GWX 2015-05-28 15:54 - 2015-05-28 15:55 - 00006525 _____ C:\Users\Sabrina\Downloads\notes.sql 2015-05-19 19:20 - 2015-06-07 12:02 - 00012815 _____ C:\Users\Sabrina\Desktop\noten.ods 2015-05-15 00:05 - 2015-04-10 02:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-05-15 00:05 - 2015-04-10 02:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2015-05-15 00:05 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-05-15 00:05 - 2015-03-17 19:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-05-15 00:05 - 2015-03-09 04:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys 2015-05-15 00:05 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll 2015-05-15 00:05 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll 2015-05-15 00:05 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-05-15 00:05 - 2014-11-14 08:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll 2015-05-15 00:04 - 2015-05-01 01:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-05-15 00:04 - 2015-05-01 00:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-05-15 00:04 - 2015-04-24 23:32 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-05-15 00:04 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2015-05-15 00:04 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2015-05-15 00:04 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2015-05-15 00:04 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll 2015-05-15 00:04 - 2015-03-13 06:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-05-15 00:04 - 2015-03-13 06:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-05-15 00:04 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2015-05-15 00:04 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2015-05-15 00:04 - 2015-03-13 02:29 - 00410017 _____ C:\Windows\system32\ApnDatabase.xml 2015-05-15 00:04 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-05-15 00:04 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2015-05-15 00:04 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-05-15 00:04 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2015-05-15 00:04 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2015-05-15 00:04 - 2015-03-05 01:09 - 01429504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-05-15 00:04 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-05-15 00:03 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll 2015-05-15 00:03 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll 2015-05-15 00:03 - 2015-03-30 07:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-05-15 00:03 - 2015-03-27 05:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-05-15 00:03 - 2015-03-27 04:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-05-15 00:03 - 2015-03-27 04:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-05-15 00:03 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2015-05-15 00:02 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-05-15 00:02 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-05-15 00:02 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-05-15 00:02 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-05-15 00:02 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-05-15 00:02 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-05-15 00:02 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-05-15 00:02 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-05-15 00:02 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-05-15 00:02 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-05-15 00:02 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-05-15 00:02 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-05-15 00:02 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-05-15 00:02 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-05-15 00:02 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-05-15 00:02 - 2015-04-14 00:48 - 04180480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-05-15 00:02 - 2015-04-10 03:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-05-15 00:02 - 2015-04-10 02:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-05-15 00:02 - 2015-04-10 02:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-05-15 00:02 - 2015-04-09 00:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-05-15 00:01 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-05-15 00:01 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-05-15 00:01 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-05-15 00:01 - 2015-04-21 18:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-05-15 00:01 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-05-15 00:01 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-05-15 00:01 - 2015-04-21 18:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-05-15 00:01 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-05-15 00:01 - 2015-04-21 17:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-05-15 00:01 - 2015-04-21 17:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-05-15 00:01 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-05-15 00:01 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-05-15 00:01 - 2015-04-21 17:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-05-15 00:01 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-05-15 00:01 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-05-15 00:01 - 2015-04-21 17:37 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-05-15 00:01 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-05-15 00:01 - 2015-04-21 17:32 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-05-15 00:01 - 2015-04-21 17:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-05-15 00:01 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-05-15 00:01 - 2015-04-21 17:26 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-05-15 00:01 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-05-15 00:01 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-05-15 00:01 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-05-14 19:24 - 2015-04-30 22:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-14 19:24 - 2015-04-30 22:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-05-11 19:29 - 2015-05-26 19:29 - 00000000 ____D C:\Users\Sabrina\Desktop\db praktikum 2015-05-08 18:35 - 2015-06-07 11:33 - 00000000 ____D C:\Users\Sabrina\Desktop\SWMO 2015-05-08 18:30 - 2015-06-07 11:32 - 00000000 ____D C:\Users\Sabrina\Desktop\PROWI 2015-05-08 18:30 - 2015-05-20 15:17 - 00000000 ____D C:\Users\Sabrina\Desktop\SUE 2015-05-08 17:53 - 2015-05-08 17:53 - 00000884 _____ C:\Users\Sabrina\Desktop\Downloads - Verknüpfung.lnk ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-07 16:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru 2015-06-07 15:58 - 2015-03-05 23:18 - 00000000 ____D C:\Users\Sabrina\AppData\Roaming\Skype 2015-06-07 15:52 - 2014-12-03 04:01 - 01367532 _____ C:\Windows\WindowsUpdate.log 2015-06-07 15:51 - 2014-12-03 21:54 - 01109719 _____ C:\Users\Sabrina\AppData\Local\BTServer.log 2015-06-07 15:29 - 2014-12-03 04:07 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1430275538-2783748576-1565938762-1001 2015-06-07 15:28 - 2015-04-10 12:01 - 00001118 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-06-07 15:28 - 2014-12-04 09:55 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-07 15:28 - 2014-12-04 09:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-06-07 15:28 - 2014-12-04 09:54 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-06-07 15:04 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2015-06-07 13:46 - 2014-12-04 00:21 - 00000000 ____D C:\Users\Sabrina\Desktop\Uni Augsburg 2015-06-07 12:55 - 2015-03-13 12:29 - 00000000 ____D C:\Users\Sabrina\Desktop\Englisch 2015-06-07 11:56 - 2013-08-22 16:46 - 00025981 _____ C:\Windows\setupact.log 2015-06-07 11:55 - 2014-03-18 03:51 - 00775322 _____ C:\Windows\PFRO.log 2015-06-07 11:55 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-06-07 11:55 - 2013-08-22 16:44 - 00365096 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-07 11:55 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2015-06-07 11:54 - 2014-12-03 22:32 - 03997996 _____ C:\Users\Public\CAFADEBUG.log 2015-06-07 11:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\ELAMBKUP 2015-06-07 11:53 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2015-06-07 11:47 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-06-07 11:41 - 2015-01-03 02:00 - 00000000 ____D C:\ProgramData\Avira 2015-06-07 11:41 - 2015-01-03 02:00 - 00000000 ____D C:\Program Files (x86)\Avira 2015-06-07 11:37 - 2014-12-03 21:54 - 00000000 ____D C:\ProgramData\Package Cache 2015-06-07 11:35 - 2014-12-03 22:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-06-06 16:45 - 2015-03-12 20:25 - 00000000 ____D C:\Users\Sabrina\.vagrant.d 2015-06-06 14:50 - 2015-03-12 20:25 - 00000000 ____D C:\Users\Sabrina\.VirtualBox 2015-06-06 14:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2015-06-02 23:11 - 2015-01-10 22:56 - 00000000 ____D C:\Users\Sabrina\AppData\Roaming\TS3Client 2015-06-02 18:26 - 2015-03-05 23:18 - 00000000 ____D C:\ProgramData\Skype 2015-05-29 20:44 - 2015-04-04 16:34 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-05-29 20:44 - 2015-04-04 16:34 - 00000000 ___SD C:\Windows\system32\GWX 2015-05-26 19:28 - 2015-03-13 12:28 - 00000000 ____D C:\Users\Sabrina\Desktop\Mathematik 2 2015-05-26 19:17 - 2015-01-10 22:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2015-05-20 13:38 - 2014-12-03 22:25 - 00000000 ____D C:\ProgramData\Energy Manager 2015-05-17 16:49 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2015-05-16 13:25 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2015-05-16 13:25 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-05-16 13:03 - 2014-12-08 12:06 - 00000000 ____D C:\Windows\system32\MRT 2015-05-16 13:01 - 2014-12-08 12:06 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-05-14 19:46 - 2014-12-04 00:38 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-05-14 19:23 - 2014-03-18 11:40 - 00000000 ____D C:\Program Files\Windows Journal 2015-05-14 19:18 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF 2015-05-08 12:16 - 2014-12-03 04:02 - 00000000 ____D C:\Users\Sabrina ==================== Files in the root of some directories ======= 2014-12-03 23:06 - 2014-12-03 23:06 - 0000000 _____ () C:\Users\Sabrina\AppData\Roaming\gdfw.log 2014-12-03 23:06 - 2014-12-03 23:06 - 0000779 _____ () C:\Users\Sabrina\AppData\Roaming\gdscan.log 2014-12-03 21:54 - 2015-06-07 15:51 - 1109719 _____ () C:\Users\Sabrina\AppData\Local\BTServer.log 2015-01-03 02:11 - 2015-01-03 02:11 - 0271919 _____ () C:\ProgramData\1420243806.bdinstall.bin 2014-12-03 22:32 - 2014-12-03 22:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Some files in TEMP: ==================== C:\Users\Sabrina\AppData\Local\Temp\avgnt.exe C:\Users\Sabrina\AppData\Local\Temp\BingBarSetup-Partner.exe C:\Users\Sabrina\AppData\Local\Temp\i4jdel0.exe C:\Users\Sabrina\AppData\Local\Temp\WdfCoInstaller01007.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-06 17:52 ==================== End of log ============================ Addition.txt [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:06-06-2015
Ran by Sabrina at 2015-06-07 16:10:50
Running from C:\Users\Sabrina\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1430275538-2783748576-1565938762-500 - Administrator - Disabled)
Gast (S-1-5-21-1430275538-2783748576-1565938762-501 - Limited - Disabled)
Sabrina (S-1-5-21-1430275538-2783748576-1565938762-1001 - Administrator - Enabled) => C:\Users\Sabrina
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.28.50 - Conexant)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo)
Energy Manager (x32 Version: 1.0.0.35 - Lenovo) Hidden
Git version 1.9.5-preview20141217 (HKLM-x32\...\Git_is1) (Version: 1.9.5-preview20141217 - The Git Development Community)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
JetBrains PhpStorm 8.0.3 (HKLM-x32\...\PhpStorm 8.0.3) (Version: 139.1348 - JetBrains s.r.o.)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10249 - Realtek Semiconductor Corp.)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM-x32\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft redistributable runtime DLLs VS2008 SP1(x86) (HKLM-x32\...\{A47A9101-6EB5-4314-BDA1-297880FBB908}) (Version: 9.0 - SAP AG)
Microsoft redistributable runtime DLLs VS2010 SP1 (x86) (HKLM-x32\...\{2385C070-EC26-4AB9-8718-E605C977C0ED}) (Version: 10.0.40219.1 - SAP)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
NVIDIA GeForce Experience 2.1.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OpenVPN 2.3.6-I001 (HKLM\...\OpenVPN) (Version: 2.3.6-I001 - )
Oracle VM VirtualBox 4.3.24 (HKLM\...\{15E093DF-951E-46CB-B3EC-E1287E7A2319}) (Version: 4.3.24 - Oracle Corporation)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.805.802.010814 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0238 - REALTEK Semiconductor Corp.)
SAP GUI for Windows 7.30 (Patch 10) (HKLM-x32\...\SAPGUI710) (Version: 7.30 Compilation 3 - SAP AG)
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.69 - NVIDIA Corporation) Hidden
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.14.74 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Vagrant (HKLM-x32\...\{40ADEFDD-ABAC-4AAE-A868-387F666C0B17}) (Version: 1.7.2 - HashiCorp)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows-Treiberpaket - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
yEd Graph Editor 3.14 (HKLM-x32\...\3309-7404-0599-8908) (Version: 3.14 - yWorks GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1430275538-2783748576-1565938762-1001_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll ()
==================== Restore Points =========================
14-05-2015 19:02:13 Windows Update
29-05-2015 20:42:52 Windows Update
06-06-2015 14:48:09 Geplanter Prüfpunkt
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0240BB9E-BC0C-4059-9BAA-B90728C0E020} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)
Task: {025C95D0-E9FC-420C-82F0-5A93FA1750AC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-05-16] (Microsoft Corporation)
Task: {23D7C2B4-DDD0-421B-A389-94A0D6FDA63C} - System32\Tasks\{66B9E5CC-5432-436A-B81C-07F6FCB6D28A} => Firefox.exe hxxp://ui.skype.com/ui/0/7.2.59.103/de/abandoninstall?page=tsBing
Task: {4A35E543-CB06-468E-BCA7-44ADC3784C39} - System32\Tasks\{B58E7ACA-45F7-4907-9370-3E1BE2DF72C1} => pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.exe" -d "C:\Riot Games\League of Legends\"
Task: {4E0645D6-8632-4451-88CB-E7A276F9C26A} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {53AE4FBF-F076-49F7-A903-56C7C3CBB64C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {68436EF3-95BC-4EC4-A60C-A022185B5ACF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {6A7553C7-9C1C-46E1-B429-A7049638E37D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {9F8844D4-50E7-43BA-AE7E-7FF2A9E6B6C9} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {C82F0392-A0F9-45A2-940F-E4F5D81E96E0} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {E631EBD3-5B5F-4EC9-BC32-4DFC3034396D} - System32\Tasks\{96387D3F-9DA0-4EF6-B9E1-3202C3340DAC} => pcalua.exe -a "C:\Riot Games\League of Legends\lol.launcher.exe" -d "C:\Riot Games\League of Legends\"
==================== Loaded Modules (Whitelisted) ==============
2014-12-03 22:04 - 2014-11-12 23:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-03 21:53 - 2014-01-06 15:56 - 00079872 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2014-12-03 22:33 - 2010-10-26 13:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
2014-12-03 22:28 - 2013-09-17 04:20 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1430275538-2783748576-1565938762-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sabrina\Desktop\hello_kitty.gif
HKU\S-1-5-21-1430275538-2783748576-1565938762-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Sabrina\Desktop\hello_kitty.gif
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [TCP Query User{923F529A-A9A5-4C42-B2C3-B6DD09D1DD19}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{FDDE39A6-1A1D-4413-ADEB-F97035DD7DDC}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{832DC4D1-7707-4AAF-96FE-435E626BD61A}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{BFB74BFD-B042-47D3-BF89-C7739E5C7892}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{08641DF3-C859-480A-BBD7-EDA6541810DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D780EFF4-7CAD-4337-9230-9A0ABDD998F8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{A9754661-A0A3-425E-9EC9-B732BC5B2443}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{717888D6-53BB-487C-A328-466E893D7ED0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DDF95DC4-F106-4F9B-966D-6F5B2C635A58}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{83184E05-C7A2-4AE2-8C35-5D1834EBF254}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{BB0C41C3-8ACE-4175-85D1-B4F5D63DF1F9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B3F12000-8A5A-4E49-A07E-C694C2278508}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{359F9C4D-E0F9-4F2E-9D5E-332407C04066}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{BD4DEB61-DCAD-4AA8-B556-C59B1D8088C5}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{39C37DDC-F89B-498C-9E33-EB5CE1BCED9B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{7F9DF708-1308-4ED4-9981-1B9D35B13924}C:\program files (x86)\jetbrains\phpstorm 8.0.3\bin\phpstorm.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.3\bin\phpstorm.exe
FirewallRules: [UDP Query User{63DD061E-2E2D-46AA-B04D-02AF1275D2BB}C:\program files (x86)\jetbrains\phpstorm 8.0.3\bin\phpstorm.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.3\bin\phpstorm.exe
FirewallRules: [TCP Query User{C62ECCCC-B979-4965-9095-2DA0FCCC4EF6}C:\program files\oracle\virtualbox\virtualbox.exe] => (Allow) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [UDP Query User{36E97260-0D32-48C1-9822-3EDDA745A130}C:\program files\oracle\virtualbox\virtualbox.exe] => (Allow) C:\program files\oracle\virtualbox\virtualbox.exe
FirewallRules: [TCP Query User{73E1518F-C4DC-4BE8-9393-496C5F9B4319}C:\program files\oracle\virtualbox\vboxheadless.exe] => (Allow) C:\program files\oracle\virtualbox\vboxheadless.exe
FirewallRules: [UDP Query User{7FAE8441-06D7-46E2-81F0-0F6017F24255}C:\program files\oracle\virtualbox\vboxheadless.exe] => (Allow) C:\program files\oracle\virtualbox\vboxheadless.exe
FirewallRules: [{DAD640CC-0E62-49D3-9E4E-2298E1A4830B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{7C95F3D3-8AF5-4E5A-8AFF-EF443D67BEB2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{8B19FDC3-C975-45E3-BEE2-6ABA4DEE2CD3}C:\program files (x86)\jetbrains\phpstorm 8.0.3\jre\jre\bin\java.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.3\jre\jre\bin\java.exe
FirewallRules: [UDP Query User{6E1F55CD-4310-4370-A5EE-96E2DBCF7327}C:\program files (x86)\jetbrains\phpstorm 8.0.3\jre\jre\bin\java.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.3\jre\jre\bin\java.exe
==================== Faulty Device Manager Devices =============
Name: Realtek Bluetooth 4.0 + High Speed Chip
Description: Realtek Bluetooth 4.0 + High Speed Chip
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Realtek Semiconductor Corp.
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/07/2015 11:54:53 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (06/07/2015 11:34:25 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNetworkStreamService did not shut down when asked, terminating. [0]
Error: (06/07/2015 11:34:22 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (06/06/2015 02:48:21 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (05/29/2015 07:36:23 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (05/22/2015 11:19:04 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Skype.exe, Version 7.4.0.102 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3f8
Startzeit: 01d0946fbc76ffb4
Endzeit: 4294967295
Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe
Berichts-ID: 94ad9764-0063-11e5-8275-28d244effd47
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (05/20/2015 00:11:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.2000.0, Zeitstempel: 0x5466ab69
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336
Ausnahmecode: 0xc0000142
Fehleroffset: 0x00000000000ec180
ID des fehlerhaften Prozesses: 0x1740
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Vollständiger Name des fehlerhaften Pakets: nvstreamsvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: nvstreamsvc.exe5
Error: (05/17/2015 09:27:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, Zeitstempel: 0x515663e0
Name des fehlerhaften Moduls: Adobe AIR.dll, Version: 3.7.0.1530, Zeitstempel: 0x5156646c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0006dd76
ID des fehlerhaften Prozesses: 0x18f8
Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0
Pfad der fehlerhaften Anwendung: LolClient.exe1
Pfad des fehlerhaften Moduls: LolClient.exe2
Berichtskennung: LolClient.exe3
Vollständiger Name des fehlerhaften Pakets: LolClient.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LolClient.exe5
Error: (05/17/2015 11:17:29 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8
Error: (05/14/2015 07:46:28 PM) (Source: MsiInstaller) (EventID: 1024) (User: brinizi)
Description: Produkt: Adobe Reader XI (11.0.10) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011011}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
System errors:
=============
Error: (06/07/2015 03:24:03 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/07/2015 03:23:33 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/07/2015 03:16:43 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/07/2015 03:16:13 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/07/2015 03:05:26 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/07/2015 03:04:56 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/06/2015 05:53:35 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/06/2015 05:53:05 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (06/06/2015 04:45:20 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (06/06/2015 04:44:50 PM) (Source: DCOM) (EventID: 10010) (User: brinizi)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Microsoft Office:
=========================
Error: (06/07/2015 11:54:53 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (06/07/2015 11:34:25 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNetworkStreamService did not shut down when asked, terminating. [0]
Error: (06/07/2015 11:34:22 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (06/06/2015 02:48:21 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (05/29/2015 07:36:23 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (05/22/2015 11:19:04 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Skype.exe7.4.0.1023f801d0946fbc76ffb44294967295C:\Program Files (x86)\Skype\Phone\Skype.exe94ad9764-0063-11e5-8275-28d244effd47
Error: (05/20/2015 00:11:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.2000.05466ab69KERNELBASE.dll6.3.9600.17736550f4336c000014200000000000ec180174001d09280b3cfce15C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeKERNELBASE.dllf2280187-fe73-11e4-8275-28d244effd47
Error: (05/17/2015 09:27:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LolClient.exe0.0.0.0515663e0Adobe AIR.dll3.7.0.15305156646cc00000050006dd7618f801d0908e610b5175C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.144\deploy\LolClient.exeC:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.144\deploy\Adobe AIR\Versions\1.0\Adobe AIR.dllc8d3e112-fcca-11e4-8275-28d244effd47
Error: (05/17/2015 11:17:29 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8
Error: (05/14/2015 07:46:28 PM) (Source: MsiInstaller) (EventID: 1024) (User: brinizi)
Description: Adobe Reader XI (11.0.10) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011011}1625(NULL)(NULL)(NULL)
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 28%
Total physical RAM: 8084.27 MB
Available physical RAM: 5803.73 MB
Total Pagefile: 9364.27 MB
Available Pagefile: 6723.93 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:928.79 GB) (Free:868.34 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 7B4728A6)
Partition: GPT Partition Type.
==================== End of log ============================
So, weil ich etwas ungeduldig bin *sry* hab ich einfach mal die Datei die befallen sein soll nochmal einzeln scannen lassen von Avira. Eigentlich sollte doch wieder die Meldung kommen, warum kommt sie nicht? warum sagt mir Avira sie ist clean? Ist es evtl ne Falschmeldung? Ich habe die Datei seit 03.12.14 auf dem Laptop und erst jetzt wird mir ein Trojaner angezeigt Code:
ATTFilter
Free Antivirus
Erstellungsdatum der Reportdatei: Sonntag, 7. Juni 2015 20:42
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 8.1 Pro
Windowsversion : (plain) [6.3.9600]
Boot Modus : Normal gebootet
Benutzername : Sabrina
Computername : BRINIZI
Versionsinformationen:
BUILD.DAT : 15.0.10.434 109882 Bytes 16.04.2015 15:24:00
AVSCAN.EXE : 15.0.10.430 1028856 Bytes 16.04.2015 13:23:55
AVSCANRC.DLL : 15.0.10.236 64760 Bytes 16.04.2015 13:23:55
LUKE.DLL : 15.0.10.414 59696 Bytes 16.04.2015 13:23:56
AVSCPLR.DLL : 15.0.10.414 97736 Bytes 16.04.2015 13:23:55
REPAIR.DLL : 15.0.10.414 375088 Bytes 16.04.2015 13:23:55
REPAIR.RDF : 1.0.8.26 917354 Bytes 07.06.2015 09:43:56
AVREG.DLL : 15.0.10.414 275248 Bytes 16.04.2015 13:23:55
AVLODE.DLL : 15.0.10.414 597240 Bytes 16.04.2015 13:23:55
AVLODE.RDF : 14.0.4.70 79227 Bytes 07.06.2015 09:43:07
XBV00021.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00022.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00023.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00024.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00025.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00026.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00027.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00028.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00029.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00030.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00031.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00032.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00033.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00034.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00035.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00036.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00037.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00038.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00039.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00040.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00041.VDF : 8.11.165.190 2048 Bytes 07.08.2014 13:23:57
XBV00085.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:17
XBV00086.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:17
XBV00087.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00088.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00089.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00090.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00091.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00092.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00093.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00094.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00095.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00096.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00097.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00098.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00099.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00100.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00101.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:18
XBV00102.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00103.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00104.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00105.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00106.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00107.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00108.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00109.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00110.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00111.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00112.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00113.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00114.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00115.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:19
XBV00116.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00117.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00118.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00119.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00120.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00121.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00122.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00123.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00124.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00125.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00126.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00127.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00128.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:20
XBV00129.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00130.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00131.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00132.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00133.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00134.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00135.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00136.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00137.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00138.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00139.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00140.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00141.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:21
XBV00142.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00143.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00144.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00145.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00146.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00147.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00148.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00149.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00150.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00151.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00152.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00153.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00154.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00155.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00156.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:22
XBV00157.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00158.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00159.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00160.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00161.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00162.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00163.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00164.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00165.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00166.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00167.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00168.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00169.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00170.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:23
XBV00171.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00172.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00173.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00174.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00175.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00176.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00177.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00178.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00179.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00180.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00181.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00182.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00183.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:24
XBV00184.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00185.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00186.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00187.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00188.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00189.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00190.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00191.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00192.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00193.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00194.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00195.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00196.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:25
XBV00197.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00198.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00199.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00200.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00201.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00202.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00203.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00204.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00205.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00206.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00207.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00208.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00209.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:26
XBV00210.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00211.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00212.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00213.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00214.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00215.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00216.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00217.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00218.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00219.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00220.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00221.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00222.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00223.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:27
XBV00224.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00225.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00226.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00227.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00228.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00229.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00230.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00231.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00232.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00233.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00234.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00235.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00236.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00237.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:28
XBV00238.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00239.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00240.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00241.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00242.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00243.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00244.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00245.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00246.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00247.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00248.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00249.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00250.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00251.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:29
XBV00252.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:30
XBV00253.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:30
XBV00254.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:30
XBV00255.VDF : 8.11.237.30 2048 Bytes 02.06.2015 09:43:30
XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 13:23:57
XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 13:23:57
XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 13:23:57
XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 13:23:57
XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 13:23:57
XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 13:23:57
XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 13:23:57
XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 13:23:57
XBV00008.VDF : 8.11.165.192 4251136 Bytes 07.08.2014 13:23:57
XBV00009.VDF : 8.11.172.30 2094080 Bytes 15.09.2014 13:23:57
XBV00010.VDF : 8.11.178.32 1581056 Bytes 14.10.2014 13:23:57
XBV00011.VDF : 8.11.184.50 2178560 Bytes 11.11.2014 13:23:57
XBV00012.VDF : 8.11.190.32 1876992 Bytes 03.12.2014 13:23:57
XBV00013.VDF : 8.11.201.28 2973696 Bytes 14.01.2015 13:23:57
XBV00014.VDF : 8.11.206.252 2695680 Bytes 04.02.2015 13:23:57
XBV00015.VDF : 8.11.213.84 3175936 Bytes 03.03.2015 13:23:57
XBV00016.VDF : 8.11.213.176 212480 Bytes 05.03.2015 13:23:57
XBV00017.VDF : 8.11.219.166 2033664 Bytes 25.03.2015 13:23:57
XBV00018.VDF : 8.11.225.88 2367488 Bytes 22.04.2015 09:43:09
XBV00019.VDF : 8.11.230.186 1674752 Bytes 13.05.2015 09:43:10
XBV00020.VDF : 8.11.237.30 4711936 Bytes 02.06.2015 09:43:14
XBV00042.VDF : 8.11.237.62 34816 Bytes 02.06.2015 09:43:14
XBV00043.VDF : 8.11.237.64 14848 Bytes 02.06.2015 09:43:14
XBV00044.VDF : 8.11.237.96 44032 Bytes 02.06.2015 09:43:14
XBV00045.VDF : 8.11.237.128 4096 Bytes 02.06.2015 09:43:14
XBV00046.VDF : 8.11.237.130 12800 Bytes 02.06.2015 09:43:14
XBV00047.VDF : 8.11.237.132 23552 Bytes 03.06.2015 09:43:14
XBV00048.VDF : 8.11.237.134 4608 Bytes 03.06.2015 09:43:14
XBV00049.VDF : 8.11.237.136 4096 Bytes 03.06.2015 09:43:14
XBV00050.VDF : 8.11.237.138 6144 Bytes 03.06.2015 09:43:14
XBV00051.VDF : 8.11.237.160 7680 Bytes 03.06.2015 09:43:14
XBV00052.VDF : 8.11.237.182 17408 Bytes 03.06.2015 09:43:15
XBV00053.VDF : 8.11.237.204 10240 Bytes 03.06.2015 09:43:15
XBV00054.VDF : 8.11.237.224 7168 Bytes 03.06.2015 09:43:15
XBV00055.VDF : 8.11.237.226 10752 Bytes 03.06.2015 09:43:15
XBV00056.VDF : 8.11.237.228 11264 Bytes 03.06.2015 09:43:15
XBV00057.VDF : 8.11.237.230 6144 Bytes 03.06.2015 09:43:15
XBV00058.VDF : 8.11.237.234 10240 Bytes 04.06.2015 09:43:15
XBV00059.VDF : 8.11.237.236 2048 Bytes 04.06.2015 09:43:15
XBV00060.VDF : 8.11.237.238 14848 Bytes 04.06.2015 09:43:15
XBV00061.VDF : 8.11.237.240 6144 Bytes 04.06.2015 09:43:15
XBV00062.VDF : 8.11.237.242 2560 Bytes 04.06.2015 09:43:15
XBV00063.VDF : 8.11.237.244 17408 Bytes 04.06.2015 09:43:15
XBV00064.VDF : 8.11.237.246 2048 Bytes 04.06.2015 09:43:16
XBV00065.VDF : 8.11.237.248 2048 Bytes 04.06.2015 09:43:16
XBV00066.VDF : 8.11.237.250 2048 Bytes 04.06.2015 09:43:16
XBV00067.VDF : 8.11.237.252 2048 Bytes 04.06.2015 09:43:16
XBV00068.VDF : 8.11.237.254 2048 Bytes 04.06.2015 09:43:16
XBV00069.VDF : 8.11.238.0 2048 Bytes 04.06.2015 09:43:16
XBV00070.VDF : 8.11.238.4 26624 Bytes 04.06.2015 09:43:16
XBV00071.VDF : 8.11.238.6 8192 Bytes 05.06.2015 09:43:16
XBV00072.VDF : 8.11.238.8 5632 Bytes 05.06.2015 09:43:16
XBV00073.VDF : 8.11.238.10 3072 Bytes 05.06.2015 09:43:16
XBV00074.VDF : 8.11.238.12 43520 Bytes 05.06.2015 09:43:16
XBV00075.VDF : 8.11.238.32 6656 Bytes 05.06.2015 09:43:16
XBV00076.VDF : 8.11.238.52 9728 Bytes 05.06.2015 09:43:16
XBV00077.VDF : 8.11.238.72 20992 Bytes 05.06.2015 09:43:17
XBV00078.VDF : 8.11.238.94 58368 Bytes 05.06.2015 09:43:17
XBV00079.VDF : 8.11.238.96 45056 Bytes 05.06.2015 09:43:17
XBV00080.VDF : 8.11.238.98 37376 Bytes 05.06.2015 09:43:17
XBV00081.VDF : 8.11.238.102 52736 Bytes 06.06.2015 09:43:17
XBV00082.VDF : 8.11.238.122 9216 Bytes 06.06.2015 09:43:17
XBV00083.VDF : 8.11.238.140 41984 Bytes 07.06.2015 09:43:17
XBV00084.VDF : 8.11.238.178 31744 Bytes 07.06.2015 14:06:11
LOCAL001.VDF : 8.11.238.178 127057920 Bytes 07.06.2015 14:06:38
Engineversion : 8.3.30.40
AEVDF.DLL : 8.3.1.6 133992 Bytes 16.04.2015 13:23:54
AESCRIPT.DLL : 8.2.2.68 524352 Bytes 07.06.2015 09:43:06
AESCN.DLL : 8.3.2.10 142456 Bytes 07.06.2015 09:43:06
AESBX.DLL : 8.2.21.0 1622072 Bytes 07.06.2015 09:43:07
AERDL.DLL : 8.2.1.20 731040 Bytes 16.04.2015 13:23:54
AEPACK.DLL : 8.4.0.80 793728 Bytes 07.06.2015 09:43:05
AEOFFICE.DLL : 8.3.1.22 363376 Bytes 07.06.2015 09:43:05
AEMOBILE.DLL : 8.1.7.2 281720 Bytes 07.06.2015 09:43:07
AEHEUR.DLL : 8.1.4.1714 8440688 Bytes 07.06.2015 09:43:05
AEHELP.DLL : 8.3.2.0 281456 Bytes 16.04.2015 13:23:54
AEGEN.DLL : 8.1.7.40 456608 Bytes 16.04.2015 13:23:54
AEEXP.DLL : 8.4.2.88 266296 Bytes 07.06.2015 09:43:07
AEEMU.DLL : 8.1.3.4 399264 Bytes 16.04.2015 13:23:54
AEDROID.DLL : 8.4.3.116 1050536 Bytes 16.04.2015 13:23:54
AECORE.DLL : 8.3.6.2 243624 Bytes 07.06.2015 09:43:02
AEBB.DLL : 8.1.2.0 60448 Bytes 16.04.2015 13:23:54
AVWINLL.DLL : 15.0.10.236 25904 Bytes 16.04.2015 13:23:55
AVPREF.DLL : 15.0.10.236 52984 Bytes 16.04.2015 13:23:55
AVREP.DLL : 15.0.10.236 220464 Bytes 16.04.2015 13:23:55
AVARKT.DLL : 15.0.10.296 228088 Bytes 16.04.2015 13:23:54
AVEVTLOG.DLL : 15.0.10.296 194296 Bytes 16.04.2015 13:23:54
SQLITE3.DLL : 15.0.10.236 456440 Bytes 16.04.2015 13:23:56
AVSMTP.DLL : 15.0.10.236 78128 Bytes 16.04.2015 13:23:55
NETNT.DLL : 15.0.10.236 16120 Bytes 16.04.2015 13:23:56
CommonImageRc.dll: 15.0.10.236 4355376 Bytes 16.04.2015 13:23:56
CommonTextRc.DLL: 15.0.10.270 70904 Bytes 16.04.2015 13:23:56
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: ShlExt
Konfigurationsdatei...................: C:\Users\Sabrina\AppData\Local\Temp\46114083.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:,
Durchsuche aktive Programme...........: aus
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Abweichende Gefahrenkategorien........: +JOKE,+SPR,
Beginn des Suchlaufs: Sonntag, 7. Juni 2015 20:42
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\drivers\Bluetooth Driver (Atheros, Broadcom, Realtek, Intel)\Intel_3.1.1311.400_WHQL\Win7\vs64\DLIH\1.0.1\obexsrv.exe'
Ende des Suchlaufs: Sonntag, 7. Juni 2015 20:42
Benötigte Zeit: 00:00 Minute(n)
Der Suchlauf wurde vollständig durchgeführt.
0 Verzeichnisse wurden überprüft
1 Dateien wurden geprüft
0 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
1 Dateien ohne Befall
0 Archive wurden durchsucht
0 Warnungen
0 Hinweise
Geändert von brinizi (07.06.2015 um 20:07 Uhr) |
|
08.06.2015, 15:28
| #4 |
| /// the machine /// TB-Ausbilder | Avira Free erkennt TR/Crypt.ZPACK.Gen Jo, ist ne Falschmeldung von Avira 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Avira Free erkennt TR/Crypt.ZPACK.Gen |
| 'tr/crypt.zpack.gen', antivirus, avira, blue, brauche, code, datei, folge, free, malwarebytes, meldung, nichts, programm, realtek, scan, schutz, tr/crypt.zpack.gen, trojaner, trojaner board, unerwünschtes programm, webseiten, win, win7, windows, zugriff |
Linear-Darstellung
