Trojaner-Board - Google Chrome- Systemabsturz (Freezing)

Trojaner-Board (https://www.trojaner-board.de/)

- Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)

- - Google Chrome- Systemabsturz (Freezing) (https://www.trojaner-board.de/139156-google-chrome-systemabsturz-freezing.html)

Hallo t’john

Ich habe das Programm ausgeführt. Kann aber nichts mit den Informationen anfangen. Liegt zum Teil auch an meinen schlechten Englisch.

Mit freundlichen Grüßen
Chesspower

Code:

--------------------------------------------------------------------------------

Welcome to WhoCrashed (HOME EDITION) v 4.01

--------------------------------------------------------------------------------
 

This program checks for drivers which have been crashing your computer. If your computer has displayed a blue screen of death, suddenly rebooted or shut down then this program will help you find the root cause and possibly a solution. 
 

Whenever a computer suddenly reboots without displaying any notice or blue screen of death, the first thing that is often thought about is a hardware failure. In reality, on Windows most crashes are caused by malfunctioning device drivers and kernel modules. In case of a kernel error, many computers do not show a blue screen unless they are configured for this. Instead these systems suddenly reboot without any notice. 
 

This program will analyze your crash dumps with the single click of a button. It will tell you what drivers are likely to be responsible for crashing your computer. It will report a conclusion which offers suggestions on how to proceed in any situation while the analysis report will display internet links which will help you further troubleshoot any detected problems. 
 

To obtain technical support visit www.resplendence.com/support
 

Click here to check if you have the latest version or if an update is available. 
 

Just click the Analyze button for a comprehensible report ...
 
 
 

--------------------------------------------------------------------------------

Home Edition Notice

--------------------------------------------------------------------------------
 

This version of WhoCrashed is free for use at home only. If you would like to use this software at work or in a commercial environment you should get the professional edition of WhoCrashed which also allows analysis of crashdumps on remote drives and computers on the network and offers a range of additional features.
 

Click here for more information on the professional edition.

Click here to buy the the professional edition of WhoCrashed.
 
 

--------------------------------------------------------------------------------

System Information (local)

--------------------------------------------------------------------------------
 

computer name: CHESSPOWER-VAIO

windows version: Windows 7 Service Pack 1, 6.1, build: 7601

windows dir: C:\Windows

CPU: GenuineIntel Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz Intel586, level: 6

4 logical processors, active mask: 15

RAM: 4141977600 total

VM: 2147352576, free: 1941192704
 
 
 
 

--------------------------------------------------------------------------------

Crash Dump Analysis

--------------------------------------------------------------------------------
 

Crash dump directory: C:\Windows\Minidump
 

Crash dumps are enabled on your computer.
 

No valid crash dumps have been found on your computer
 

--------------------------------------------------------------------------------

Conclusion

--------------------------------------------------------------------------------
 

Crash dumps are enabled but no valid crash dumps have been found. It may be that there are problems which prevent crash dumps from being written out. Check out the following article for possible causes: If crash dumps are not written out.
 

In case your computer does experience sudden reboots it is likely these are caused by malfunctioning hardware, power failure or a thermal issue. To troubleshoot a thermal issue, check the temperature using your BIOS setup program, check for dust in CPU and motherboard fans and if your computer is portable make sure it's located on a hard surface. Otherwise it's suggested you contact the support department of the manufacturer of your system or test your system with a memory test utility for further investigation.
 

Check out the following articles for more information: Troubleshooting sudden resets and shut downs. 
 

Read the topic general suggestions for troubleshooting system crashes for more information. 
 

Note that it's not always possible to state with certainty whether a reported driver is actually responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.

Hallo Chesspower,

bei mir konnte ich es auf den Adobe Shockwave Player (aktuelle Version, 12.0.4) eingrenzen.
Chrome vollständig deinstalliert, dann den Shockwave Player. Neustart des Rechners, Chrome neu installiert. Bisher keine Probleme.
Ich bleibe am Ball.

Gruiß,
Bibo

@bibobird

Ich habe gründlich meine installierten Programme durchgeschaut. Ein Adobe Shockwave Player war nicht dabei.

Noch da t’john? Oder bleibe ich für immer ein Silversurfer? :)

Ich sehe in deinem Rechner mehrere moegliche Ursachen

Ich würde dir als erstes empfehlen den Rechner aufzuraeumen und alles was du nicht brauchst zu deinstallieren.

Darunter sollte zwingend deinstalliert werden:

Code:

ZoneAlarm Firewall (x32 Version: 10.1.065.000)

ZoneAlarm Free (x32 Version: 10.1.056.000)

ZoneAlarm Security (x32 Version: 10.1.065.000)

ZoneAlarm Toolbar

VLC media player 1.1.11 (x32 Version: 1.1.11)

Spybot - Search & Destroy (x32 Version: 1.6.2)

SpywareBlaster 4.4 (x32 Version: 4.4.0)

CCleaner (Version: 4.00)

danach:
Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

und:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo t'john,

ich habe deine Anweisungen befolgt. Zone Alarm hatte ich bereits deinstalliert auf deine Anweisungen. Die anderen genannten Programme sind nun auch deinstalliert.

Bei Search & Destroy kam es zu einer Fehlermeldung (siehe Bild):
hxxp://postimg.org/image/9ozeyahpn/

Das Programm wurde jedoch deinstalliert und den verbliebenen Ordner habe ich dann manuell deinstalliert.

TFC-Cleaner ausgeführt (siehe Bild):
hxxp://postimg.org/image/i8zdr8lp1/

FRST64 ausgeführt jedoch wurde keine Addition.txt erstellt.

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02

Ran by Gerd (administrator) on CHESSPOWER-VAIO on 30-09-2013 09:43:29

Running from C:\Users\Gerd\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Device Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Device Center\itype.exe

(EmTec Innovative Software) C:\Program Files (x86)\AtomSync\atomsync.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe

(ALPS) C:\Program Files\Apoint\Apvfb.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)

HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation)

HKLM\...\Run: [IntelliType Pro] - c:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [AtomSync] - C:\Program Files (x86)\AtomSync\atomsync.exe [546232 2008-11-17] (EmTec Innovative Software)

HKCU\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759384 2013-07-08] (Sandboxie Holdings, LLC)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-09-20] (Advanced Micro Devices, Inc.)

BootExecute: autocheck autochk /p \??\X:autocheck autochk * 
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.wikipedia.org/wiki/Wikipedia:Hauptseite

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x7048A75D3AB5CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {D67B1DF1-58D4-4491-93B5-F17C5F133D20} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {B4D1E127-FE08-43F0-A8D2-7323A321C978} URL = hxxp://www.resultscan.com/?prt=RstscnAMON&keywords={searchTerms}

SearchScopes: HKCU - {D67B1DF1-58D4-4491-93B5-F17C5F133D20} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblockx64.dll (Simple Adblock)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: WebSpeechBHO Class - {83A30C59-3A50-49E6-9DAF-4923C4EA3C23} - C:\Program Files (x86)\Common Files\WebSpeech.4.0\LgxIEBar.dll (G DATA Software AG)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock)

Toolbar: HKCU -  No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU -  No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File

Toolbar: HKCU -  No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File

DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: HKLM-x32 {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -  No File

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 10 %SystemRoot%\system32\PrxerNsp.dll [56424] ()

Winsock: Catalog5-x64 10 %SystemRoot%\system32\PrxerNsp.dll [57448] ()
 

FireFox:

========

FF ProfilePath: C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default

FF Homepage: hxxp://www.tagesschau.de/

FF Keyword.URL: hxxp://www.google.com/search?ie=utf-8&mssrc=ms_kwd&mstb=adawaretb&q=

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC 2.0.4\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Gerd\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Gerd\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: HTTPS-Everywhere - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\https-everywhere@eff.org

FF Extension: No Name - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi

FF Extension: No Name - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: No Name - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
 

Chrome: 

=======

CHR HomePage: hxxp://de.wikipedia.org/wiki/Wikipedia:Hauptseite

CHR RestoreOnStartup: "hxxp://www.startfenster.com"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC 2.0.4\npvlc.dll (VideoLAN)

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

CHR Extension: (Google Translate) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_1

CHR Extension: (Magic Actions for YouTube\u2122) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif\6.2.3_1

CHR Extension: (YouTube) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Stylish) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe\1.2_0

CHR Extension: (AdBlock) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0

CHR Extension: (FVD Video Downloader) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.4.1_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: () - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0

CHR Extension: (ScriptSafe) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR Extension: (Gmail) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR Extension: (Black Black Chrome Theme Purple Highlight) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhjkffljijlebgbmppbgeoikaafbbek\3.4_0

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S4 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [836904 2007-09-10] (Nero AG)

S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [382248 2007-08-21] (Nero AG)

S3 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75064 2013-06-16] ()

S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)

S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)

S3 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)

S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [74496 2010-09-27] (Sony Corporation)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)

S4 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [11839488 2011-11-13] ()

S4 McAfee SiteAdvisor Service; 
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [511232 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.)

S3 Bcfilter; C:\Windows\System32\DRIVERS\bcfilter.sys [30784 2010-10-01] (Jetico, Inc.)

S3 BcfilterMP; C:\Windows\System32\DRIVERS\bcfilter.sys [30784 2010-10-01] (Jetico, Inc.)

R2 bcfsrm; C:\Windows\System32\drivers\bcfsrm.sys [20544 2010-10-01] (Jetico, Inc.)

R1 bcftdi; C:\Windows\System32\Drivers\bcftdi.sys [68672 2010-10-01] (Jetico, Inc.)

R1 bc_hash_f; C:\Windows\System32\Drivers\bc_hash_f.sys [17984 2010-10-01] (Jetico, Inc.)

R1 bc_ip_f; C:\Windows\System32\Drivers\bc_ip_f.sys [38976 2010-10-01] (Jetico, Inc.)

R0 bc_ngn; C:\Windows\System32\Drivers\bc_ngn.sys [22080 2010-10-01] (Jetico, Inc.)

R1 bc_pat_f; C:\Windows\System32\Drivers\bc_pat_f.sys [17984 2010-10-01] (Jetico, Inc.)

R1 bc_prt_f; C:\Windows\System32\Drivers\bc_prt_f.sys [19520 2010-10-01] (Jetico, Inc.)

R1 bc_tdi_f; C:\Windows\System32\Drivers\bc_tdi_f.sys [23104 2010-10-01] (Jetico, Inc.)

S3 CPen; C:\Windows\System32\Drivers\CPen.sys [21184 2010-04-08] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [256576 2011-04-19] (DT Soft Ltd)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 OXUDIDRV; C:\Windows\system32\Drivers\OXUDIDRV_X64.sys [31280 2010-05-25] ()

R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)

S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)

R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)

S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)

R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-10-06] ()

S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2010-12-19] (EnTech Taiwan)

R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)

R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)

R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)

S3 VaneFltr; C:\Windows\System32\drivers\Lachesis.sys [29952 2009-10-16] (Razer (Asia-Pacific) Pte Ltd)

R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()

U3 ayg9b97s; C:\Windows\System32\Drivers\ayg9b97s.sys [0 ] (Microsoft Corporation)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S0 Lbd; system32\DRIVERS\Lbd.sys [x]

S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-30 09:36 - 2013-09-30 09:36 - 01953880 _____ (Farbar) C:\Users\Gerd\Desktop\FRST64.exe

2013-09-30 09:31 - 2013-09-30 09:31 - 00448512 _____ (OldTimer Tools) C:\Users\Gerd\Desktop\TFC.exe

2013-09-30 08:22 - 2013-09-30 08:22 - 00000000 ____D C:\Users\Gerd\Desktop\Neuer Ordner

2013-09-23 00:36 - 2013-09-23 11:21 - 00000000 ____D C:\Program Files\WhoCrashed

2013-09-23 00:36 - 2013-09-23 00:36 - 00000796 _____ C:\Users\Gerd\Desktop\WhoCrashed.lnk

2013-09-22 21:08 - 2013-09-22 21:08 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2013-09-15 16:55 - 2013-09-15 16:55 - 00001346 _____ C:\Users\Gerd\Desktop\Safari-Browser.lnk

2013-09-15 16:28 - 2013-09-15 16:28 - 00000000 ____D C:\ProgramData\ATI

2013-09-15 16:27 - 2013-09-15 16:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2013-09-15 16:17 - 2013-09-15 16:17 - 00017025 _____ C:\Windows\SysWOW64\CCCInstall_201309151617031399.log

2013-09-15 15:37 - 2013-09-30 09:39 - 00007638 _____ C:\Windows\PFRO.log

2013-09-15 15:28 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-15 15:28 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-15 15:28 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-15 15:28 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-15 15:28 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-15 15:28 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-15 15:28 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-15 15:28 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-15 15:28 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-15 15:28 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-15 15:28 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-15 15:28 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-15 15:08 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-15 15:08 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-15 15:08 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-15 15:08 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-15 15:08 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-15 15:08 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-15 15:08 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-15 15:08 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-15 15:08 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-15 15:08 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-15 15:08 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-15 15:08 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-15 15:08 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-15 15:08 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-15 15:08 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-15 15:08 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-15 15:08 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-15 15:08 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-15 15:08 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-15 15:08 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-15 15:08 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-15 15:08 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-15 15:08 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-15 15:08 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-15 15:08 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-15 15:08 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-09-30 09:44 - 2009-07-14 06:45 - 00022752 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-30 09:44 - 2009-07-14 06:45 - 00022752 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-30 09:39 - 2013-09-15 15:37 - 00007638 _____ C:\Windows\PFRO.log

2013-09-30 09:39 - 2013-08-25 01:00 - 00002184 _____ C:\Windows\setupact.log

2013-09-30 09:39 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-30 09:38 - 2012-08-30 06:27 - 01855013 _____ C:\Windows\WindowsUpdate.log

2013-09-30 09:36 - 2013-09-30 09:36 - 01953880 _____ (Farbar) C:\Users\Gerd\Desktop\FRST64.exe

2013-09-30 09:34 - 2013-07-30 21:17 - 00001956 _____ C:\Windows\Sandboxie.ini

2013-09-30 09:31 - 2013-09-30 09:31 - 00448512 _____ (OldTimer Tools) C:\Users\Gerd\Desktop\TFC.exe

2013-09-30 09:26 - 2010-08-31 05:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-09-30 09:20 - 2012-02-05 17:14 - 00000000 ____D C:\Users\Gerd\AppData\Local\VMware

2013-09-30 09:18 - 2012-02-05 17:14 - 00000000 ____D C:\Users\Gerd\AppData\Roaming\VMware

2013-09-30 08:57 - 2012-04-02 17:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-30 08:22 - 2013-09-30 08:22 - 00000000 ____D C:\Users\Gerd\Desktop\Neuer Ordner

2013-09-30 07:55 - 2010-08-23 18:27 - 00000000 ____D C:\Users\Gerd\AppData\Local\Adobe

2013-09-23 11:21 - 2013-09-23 00:36 - 00000000 ____D C:\Program Files\WhoCrashed

2013-09-23 00:36 - 2013-09-23 00:36 - 00000796 _____ C:\Users\Gerd\Desktop\WhoCrashed.lnk

2013-09-23 00:18 - 2011-08-28 17:36 - 00000000 ____D C:\Program Files (x86)\Trillian

2013-09-22 23:59 - 2012-10-04 12:12 - 00000000 ____D C:\Users\Gerd\Downloads\Versaute Sachen

2013-09-22 23:57 - 2013-08-08 16:34 - 00000000 ____D C:\ProgramData\boost_interprocess

2013-09-22 23:57 - 2011-05-02 22:13 - 00000000 ____D C:\Users\Gerd\AppData\Roaming\TS3Client

2013-09-22 21:50 - 2013-07-31 18:33 - 00002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-09-22 21:31 - 2011-05-02 22:12 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client

2013-09-22 21:09 - 2012-04-02 17:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-22 21:08 - 2013-09-22 21:08 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2013-09-22 21:08 - 2012-04-02 17:20 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-22 21:08 - 2011-05-21 10:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-16 13:41 - 2010-12-12 21:34 - 00000069 _____ C:\Windows\NeroDigital.ini

2013-09-16 13:29 - 2010-08-06 18:17 - 00703330 _____ C:\Windows\system32\perfh007.dat

2013-09-16 13:29 - 2010-08-06 18:17 - 00150620 _____ C:\Windows\system32\perfc007.dat

2013-09-16 13:29 - 2009-07-14 07:13 - 01630418 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-15 17:33 - 2010-08-21 11:45 - 00000000 ___RD C:\PC Games

2013-09-15 16:55 - 2013-09-15 16:55 - 00001346 _____ C:\Users\Gerd\Desktop\Safari-Browser.lnk

2013-09-15 16:32 - 2013-04-09 20:22 - 00000000 ____D C:\Users\Gerd\Downloads\AMD Graka Treiber (testen) funktioniert

2013-09-15 16:28 - 2013-09-15 16:28 - 00000000 ____D C:\ProgramData\ATI

2013-09-15 16:27 - 2013-09-15 16:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2013-09-15 16:17 - 2013-09-15 16:17 - 00017025 _____ C:\Windows\SysWOW64\CCCInstall_201309151617031399.log

2013-09-15 15:38 - 2010-08-20 16:19 - 00000000 ___RD C:\Users\Gerd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-15 15:38 - 2010-08-20 16:19 - 00000000 ___RD C:\Users\Gerd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-15 15:38 - 2010-05-19 23:44 - 00000000 ____D C:\Windows\Panther

2013-09-15 15:37 - 2013-08-26 18:11 - 05120704 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-15 15:21 - 2013-07-20 08:33 - 00000000 ____D C:\Windows\system32\MRT

2013-09-15 15:21 - 2011-01-18 08:39 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-15 15:21 - 2010-08-28 20:25 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-09 21:51 - 2013-08-09 19:08 - 00000000 ____D C:\Program Files (x86)\Opera
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-07 12:51
 

==================== End Of Log ============================

Versuche es mit Revo Uninstaller - Download - Filepony zu entfernen.

Danach Sandboxie entfernen.

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

dann nochmal FRST

Hallo t'john

Sandboxie deinstalliert.

Hier die Logfiles:

SecurityCheck Logfile:

Code:

 Results of screen317's Security Check version 0.99.73  

 Windows 7 Service Pack 1 x64 (UAC is disabled!)  

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 Java 7 Update 25  

 Adobe Flash Player 11.8.800.168  

 Adobe Reader XI  

 Mozilla Firefox (23.0.1) 

 Google Chrome 29.0.1547.66  

 Google Chrome 29.0.1547.76  
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes' Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02

Ran by Gerd (administrator) on CHESSPOWER-VAIO on 02-10-2013 13:36:27

Running from C:\Users\Gerd\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Sony Corporation) c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

(AMD) C:\Windows\system32\atieclxx.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Device Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Device Center\itype.exe

(EmTec Innovative Software) C:\Program Files (x86)\AtomSync\atomsync.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe

(ALPS) C:\Program Files\Apoint\Apvfb.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe

(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe

(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)

HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation)

HKLM\...\Run: [IntelliType Pro] - c:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [AtomSync] - C:\Program Files (x86)\AtomSync\atomsync.exe [546232 2008-11-17] (EmTec Innovative Software)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-09-20] (Advanced Micro Devices, Inc.)

BootExecute: autocheck autochk /p \??\X:autocheck autochk * 
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.wikipedia.org/wiki/Wikipedia:Hauptseite

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x7048A75D3AB5CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {D67B1DF1-58D4-4491-93B5-F17C5F133D20} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {B4D1E127-FE08-43F0-A8D2-7323A321C978} URL = hxxp://www.resultscan.com/?prt=RstscnAMON&keywords={searchTerms}

SearchScopes: HKCU - {D67B1DF1-58D4-4491-93B5-F17C5F133D20} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblockx64.dll (Simple Adblock)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: WebSpeechBHO Class - {83A30C59-3A50-49E6-9DAF-4923C4EA3C23} - C:\Program Files (x86)\Common Files\WebSpeech.4.0\LgxIEBar.dll (G DATA Software AG)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock)

Toolbar: HKCU -  No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU -  No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File

Toolbar: HKCU -  No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File

DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: HKLM-x32 {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} -  No File

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 10 %SystemRoot%\system32\PrxerNsp.dll [56424] ()

Winsock: Catalog5-x64 10 %SystemRoot%\system32\PrxerNsp.dll [57448] ()
 

FireFox:

========

FF ProfilePath: C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default

FF Homepage: hxxp://www.tagesschau.de/

FF Keyword.URL: hxxp://www.google.com/search?ie=utf-8&mssrc=ms_kwd&mstb=adawaretb&q=

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC 2.0.4\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Gerd\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Gerd\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: HTTPS-Everywhere - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\https-everywhere@eff.org

FF Extension: No Name - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi

FF Extension: No Name - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: No Name - C:\Users\Gerd\AppData\Roaming\Mozilla\Firefox\Profiles\uxc6fp4v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
 

Chrome: 

=======

CHR HomePage: hxxp://de.wikipedia.org/wiki/Wikipedia:Hauptseite

CHR RestoreOnStartup: "hxxp://www.startfenster.com"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC 2.0.4\npvlc.dll (VideoLAN)

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

CHR Extension: (Google Translate) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_1

CHR Extension: (Magic Actions for YouTube\u2122) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif\6.2.3_1

CHR Extension: (YouTube) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Stylish) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe\1.2_0

CHR Extension: (AdBlock) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0

CHR Extension: (FVD Video Downloader) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.4.1_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: () - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0

CHR Extension: (ScriptSafe) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR Extension: (Gmail) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR Extension: (Black Black Chrome Theme Purple Highlight) - C:\Users\Gerd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhjkffljijlebgbmppbgeoikaafbbek\3.4_0

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S4 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [836904 2007-09-10] (Nero AG)

S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [382248 2007-08-21] (Nero AG)

S3 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75064 2013-06-16] ()

S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)

S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)

S3 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)

S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [74496 2010-09-27] (Sony Corporation)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)

S4 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [11839488 2011-11-13] ()

S4 McAfee SiteAdvisor Service; 
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [511232 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.)

S3 Bcfilter; C:\Windows\System32\DRIVERS\bcfilter.sys [30784 2010-10-01] (Jetico, Inc.)

S3 BcfilterMP; C:\Windows\System32\DRIVERS\bcfilter.sys [30784 2010-10-01] (Jetico, Inc.)

R2 bcfsrm; C:\Windows\System32\drivers\bcfsrm.sys [20544 2010-10-01] (Jetico, Inc.)

R1 bcftdi; C:\Windows\System32\Drivers\bcftdi.sys [68672 2010-10-01] (Jetico, Inc.)

R1 bc_hash_f; C:\Windows\System32\Drivers\bc_hash_f.sys [17984 2010-10-01] (Jetico, Inc.)

R1 bc_ip_f; C:\Windows\System32\Drivers\bc_ip_f.sys [38976 2010-10-01] (Jetico, Inc.)

R0 bc_ngn; C:\Windows\System32\Drivers\bc_ngn.sys [22080 2010-10-01] (Jetico, Inc.)

R1 bc_pat_f; C:\Windows\System32\Drivers\bc_pat_f.sys [17984 2010-10-01] (Jetico, Inc.)

R1 bc_prt_f; C:\Windows\System32\Drivers\bc_prt_f.sys [19520 2010-10-01] (Jetico, Inc.)

R1 bc_tdi_f; C:\Windows\System32\Drivers\bc_tdi_f.sys [23104 2010-10-01] (Jetico, Inc.)

S3 CPen; C:\Windows\System32\Drivers\CPen.sys [21184 2010-04-08] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [256576 2011-04-19] (DT Soft Ltd)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 OXUDIDRV; C:\Windows\system32\Drivers\OXUDIDRV_X64.sys [31280 2010-05-25] ()

R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)

S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)

R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)

S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)

R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-10-06] ()

S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2010-12-19] (EnTech Taiwan)

R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)

R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)

R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)

S3 VaneFltr; C:\Windows\System32\drivers\Lachesis.sys [29952 2009-10-16] (Razer (Asia-Pacific) Pte Ltd)

R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] ()

U3 a7r9acj5; C:\Windows\System32\Drivers\a7r9acj5.sys [0 ] (Microsoft Corporation)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S0 Lbd; system32\DRIVERS\Lbd.sys [x]

S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-02 13:36 - 2013-10-02 13:36 - 00000958 _____ C:\Users\Gerd\Desktop\Neues Textdokument.txt

2013-10-02 13:16 - 2013-10-02 13:16 - 00001224 _____ C:\Users\Gerd\Desktop\Revo Uninstaller.lnk

2013-10-02 13:16 - 2013-10-02 13:16 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-10-02 13:15 - 2013-10-02 13:15 - 00891144 _____ C:\Users\Gerd\Desktop\SecurityCheck.exe

2013-10-02 11:34 - 2013-10-02 11:37 - 00000000 ____D C:\Users\Gerd\Desktop\USB-Backupdaten

2013-09-30 09:36 - 2013-09-30 09:36 - 01953880 _____ (Farbar) C:\Users\Gerd\Desktop\FRST64.exe

2013-09-30 09:31 - 2013-09-30 09:31 - 00448512 _____ (OldTimer Tools) C:\Users\Gerd\Desktop\TFC.exe

2013-09-30 08:22 - 2013-09-30 08:22 - 00000000 ____D C:\Users\Gerd\Desktop\Neuer Ordner

2013-09-23 00:36 - 2013-09-23 11:21 - 00000000 ____D C:\Program Files\WhoCrashed

2013-09-23 00:36 - 2013-09-23 00:36 - 00000796 _____ C:\Users\Gerd\Desktop\WhoCrashed.lnk

2013-09-22 21:08 - 2013-09-22 21:08 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2013-09-15 16:55 - 2013-09-15 16:55 - 00001346 _____ C:\Users\Gerd\Desktop\Safari-Browser.lnk

2013-09-15 16:28 - 2013-09-15 16:28 - 00000000 ____D C:\ProgramData\ATI

2013-09-15 16:27 - 2013-09-15 16:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2013-09-15 16:17 - 2013-09-15 16:17 - 00017025 _____ C:\Windows\SysWOW64\CCCInstall_201309151617031399.log

2013-09-15 15:37 - 2013-09-30 09:39 - 00007638 _____ C:\Windows\PFRO.log

2013-09-15 15:28 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-15 15:28 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-15 15:28 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-15 15:28 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-15 15:28 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-15 15:28 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-15 15:28 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-15 15:28 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-15 15:28 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-15 15:28 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-15 15:28 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-15 15:28 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-15 15:28 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-15 15:28 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-15 15:08 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-15 15:08 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-15 15:08 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-15 15:08 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-15 15:08 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-15 15:08 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-15 15:08 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-15 15:08 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-15 15:08 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-15 15:08 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-15 15:08 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-15 15:08 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-15 15:08 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-15 15:08 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-15 15:08 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-15 15:08 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-15 15:08 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-15 15:08 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-15 15:08 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-15 15:08 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-15 15:08 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-15 15:08 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-15 15:08 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-15 15:08 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-15 15:08 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-15 15:08 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-15 15:08 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-02 13:36 - 2013-10-02 13:36 - 00000958 _____ C:\Users\Gerd\Desktop\Neues Textdokument.txt

2013-10-02 13:27 - 2009-07-14 06:45 - 00022752 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-02 13:27 - 2009-07-14 06:45 - 00022752 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-02 13:26 - 2012-08-30 06:27 - 01884210 _____ C:\Windows\WindowsUpdate.log

2013-10-02 13:22 - 2013-08-25 01:00 - 00002632 _____ C:\Windows\setupact.log

2013-10-02 13:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-02 13:16 - 2013-10-02 13:16 - 00001224 _____ C:\Users\Gerd\Desktop\Revo Uninstaller.lnk

2013-10-02 13:16 - 2013-10-02 13:16 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-10-02 13:15 - 2013-10-02 13:15 - 00891144 _____ C:\Users\Gerd\Desktop\SecurityCheck.exe

2013-10-02 11:43 - 2010-08-06 18:17 - 00703330 _____ C:\Windows\system32\perfh007.dat

2013-10-02 11:43 - 2010-08-06 18:17 - 00150620 _____ C:\Windows\system32\perfc007.dat

2013-10-02 11:43 - 2009-07-14 07:13 - 01630418 _____ C:\Windows\system32\PerfStringBackup.INI

2013-10-02 11:42 - 2010-08-23 18:27 - 00000000 ____D C:\Users\Gerd\AppData\Local\Adobe

2013-10-02 11:37 - 2013-10-02 11:34 - 00000000 ____D C:\Users\Gerd\Desktop\USB-Backupdaten

2013-10-02 10:57 - 2012-04-02 17:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-30 10:18 - 2013-08-09 19:08 - 00000000 ____D C:\Program Files (x86)\Opera

2013-09-30 09:39 - 2013-09-15 15:37 - 00007638 _____ C:\Windows\PFRO.log

2013-09-30 09:36 - 2013-09-30 09:36 - 01953880 _____ (Farbar) C:\Users\Gerd\Desktop\FRST64.exe

2013-09-30 09:31 - 2013-09-30 09:31 - 00448512 _____ (OldTimer Tools) C:\Users\Gerd\Desktop\TFC.exe

2013-09-30 09:20 - 2012-02-05 17:14 - 00000000 ____D C:\Users\Gerd\AppData\Local\VMware

2013-09-30 09:18 - 2012-02-05 17:14 - 00000000 ____D C:\Users\Gerd\AppData\Roaming\VMware

2013-09-30 08:22 - 2013-09-30 08:22 - 00000000 ____D C:\Users\Gerd\Desktop\Neuer Ordner

2013-09-23 11:21 - 2013-09-23 00:36 - 00000000 ____D C:\Program Files\WhoCrashed

2013-09-23 00:36 - 2013-09-23 00:36 - 00000796 _____ C:\Users\Gerd\Desktop\WhoCrashed.lnk

2013-09-23 00:18 - 2011-08-28 17:36 - 00000000 ____D C:\Program Files (x86)\Trillian

2013-09-22 23:59 - 2012-10-04 12:12 - 00000000 ____D C:\Users\Gerd\Downloads\Versaute Sachen

2013-09-22 23:57 - 2013-08-08 16:34 - 00000000 ____D C:\ProgramData\boost_interprocess

2013-09-22 23:57 - 2011-05-02 22:13 - 00000000 ____D C:\Users\Gerd\AppData\Roaming\TS3Client

2013-09-22 22:38 - 2012-02-06 19:12 - 00000000 ___RD C:\Users\Gerd\Desktop\Vm Ordner

2013-09-22 21:50 - 2013-07-31 18:33 - 00002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-09-22 21:31 - 2011-05-02 22:12 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client

2013-09-22 21:09 - 2012-04-02 17:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-22 21:08 - 2013-09-22 21:08 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2013-09-22 21:08 - 2012-04-02 17:20 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-22 21:08 - 2011-05-21 10:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-16 13:41 - 2010-12-12 21:34 - 00000069 _____ C:\Windows\NeroDigital.ini

2013-09-15 17:33 - 2010-08-21 11:45 - 00000000 ___RD C:\PC Games

2013-09-15 16:55 - 2013-09-15 16:55 - 00001346 _____ C:\Users\Gerd\Desktop\Safari-Browser.lnk

2013-09-15 16:32 - 2013-04-09 20:22 - 00000000 ____D C:\Users\Gerd\Downloads\AMD Graka Treiber (testen) funktioniert

2013-09-15 16:28 - 2013-09-15 16:28 - 00000000 ____D C:\ProgramData\ATI

2013-09-15 16:27 - 2013-09-15 16:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2013-09-15 16:17 - 2013-09-15 16:17 - 00017025 _____ C:\Windows\SysWOW64\CCCInstall_201309151617031399.log

2013-09-15 15:38 - 2010-08-20 16:19 - 00000000 ___RD C:\Users\Gerd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-15 15:38 - 2010-08-20 16:19 - 00000000 ___RD C:\Users\Gerd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-15 15:38 - 2010-05-19 23:44 - 00000000 ____D C:\Windows\Panther

2013-09-15 15:37 - 2013-08-26 18:11 - 05120704 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-15 15:28 - 2013-07-20 08:33 - 00000000 ____D C:\Windows\system32\MRT

2013-09-15 15:21 - 2011-01-18 08:39 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-15 15:21 - 2010-08-28 20:25 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-07 12:51
 

==================== End Of Log ============================

Wo ist die Addition.txt ?

Hallo t'john

Die Addition.txt wird nicht erstellt. Es ist aber eine Checkbox angegeben, aber deine Anweisungen lauteten wie folgt:

Zitat:

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Scan.

Das Problem ist nun behoben. Es lag an Sandboxie sehr wahrscheinlich. Der Fehler tritt nun nicht mehr auf. Schade nur, weil ich Sandboxie eigentlich sehr gut finde.

MfG
Chesspower

Zitat:

Die Addition.txt wird nicht erstellt. Es ist aber eine Checkbox angegeben, aber deine Anweisungen lauteten wie folgt:

Und da ich gefragt habe, haettest du es auch anklicken koennen :)

Zitat:

Das Problem ist nun behoben. Es lag an Sandboxie sehr wahrscheinlich. Der Fehler tritt nun nicht mehr auf.

Ja, hab ich mir gedacht :)

Poste trotzdem noch eine frische Addition bitte.

OK, hier nochmals die Additions.txt Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by Gerd at 2013-10-04 22:54:38

Running from C:\Users\Gerd\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(De)Coder 4.1 Public Beta 4b (x32 Version: 4.1.0.0)

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)

aborange Crypter - Deinstallation (x32 Version: 3.00)

ACE COMBAT ASSAULT HORIZON Enhanced Edition (x32)

AdblockIE (x32 Version: 1.2)

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Photoshop CS5.1 (x32 Version: 12.1)

Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)

Alps Pointing-device for VAIO

AMD Catalyst Install Manager (Version: 8.0.903.0)

Apple Software Update (x32 Version: 2.1.3.127)

ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.85)

ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.278)

Audacity 1.2.6 (x32)

Blair Witch II (x32 Version: 1.00.0000)

Blair Witch Vol. III - Die Elly Kedward Sage (x32)

Call of Duty - United Offensive (x32 Version: 1.00.0000)

Call of Duty (x32)

Call of Duty(R) 2 (x32 Version: 1.2)

Call of Duty(R) 2 (x32 Version: 1.3)

Call of Duty(R) 2 Patch 1.3 (x32 Version: 1.3)

Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32)

Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32)

Call of Duty: Modern Warfare 2 - Multiplayer (x32)

Call of Duty: Modern Warfare 2 (x32)

Call of Duty: Modern Warfare 3 - Dedicated Server (x32)

Call of Duty: Modern Warfare 3 - Multiplayer (x32)

Call of Duty: Modern Warfare 3 (x32)

Canon MX330 series MP Drivers

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center Core Implementation (x32 Version: 2010.0920.2143.37117)

Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0920.2143.37117)

Catalyst Control Center Graphics Full New (x32 Version: 2010.0920.2143.37117)

Catalyst Control Center Graphics Light (x32 Version: 2010.0920.2143.37117)

Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0920.2143.37117)

Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0920.2143.37117)

Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2257.41150)

Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485)

Catalyst Control Center Localization All (x32 Version: 2010.0920.2143.37117)

CCC Help Chinese Standard (x32 Version: 2010.0920.2142.37117)

CCC Help Chinese Traditional (x32 Version: 2010.0920.2142.37117)

CCC Help Czech (x32 Version: 2010.0920.2142.37117)

CCC Help Danish (x32 Version: 2010.0920.2142.37117)

CCC Help Dutch (x32 Version: 2010.0920.2142.37117)

CCC Help English (x32 Version: 2010.0920.2142.37117)

CCC Help Finnish (x32 Version: 2010.0920.2142.37117)

CCC Help French (x32 Version: 2010.0920.2142.37117)

CCC Help German (x32 Version: 2010.0920.2142.37117)

CCC Help Greek (x32 Version: 2010.0920.2142.37117)

CCC Help Hungarian (x32 Version: 2010.0920.2142.37117)

CCC Help Italian (x32 Version: 2010.0920.2142.37117)

CCC Help Japanese (x32 Version: 2010.0920.2142.37117)

CCC Help Korean (x32 Version: 2010.0920.2142.37117)

CCC Help Norwegian (x32 Version: 2010.0920.2142.37117)

CCC Help Polish (x32 Version: 2010.0920.2142.37117)

CCC Help Portuguese (x32 Version: 2010.0920.2142.37117)

CCC Help Russian (x32 Version: 2010.0920.2142.37117)

CCC Help Spanish (x32 Version: 2010.0920.2142.37117)

CCC Help Swedish (x32 Version: 2010.0920.2142.37117)

CCC Help Thai (x32 Version: 2010.0920.2142.37117)

CCC Help Turkish (x32 Version: 2010.0920.2142.37117)

ccc-core-static (x32 Version: 2010.0920.2143.37117)

ccc-utility64 (Version: 2010.0920.2143.37117)

ChessBase Reader (x32 Version: 2)

Command & Conquer 3 (x32 Version: 1.00.0000)

Command & Conquer Generals (x32 Version: 0.50.0000)

Command & Conquer™ 3: Kanes Rache (x32 Version: 1.00.0000)

Command & Conquer™ Alarmstufe Rot 3 (x32 Version: 1.0.1.0)

Counter-Strike: Source (x32)

C-Pen Core (x32 Version: 1.3.00)

D3DX10 (x32 Version: 15.4.2368.0902)

Deep Fritz 12 (x32 Version: 12.0.0)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

diclovit's mod pack 1.4.98b (x32 Version: 1.4.98b)

Die Sims™ 3 (x32 Version: 1.47.6)

Die Sims™ 3 70er, 80er & 90er Accessoires (x32 Version: 17.0.77)

Die Sims™ 3 Design-Garten-Accessoires (x32 Version: 7.0.55)

Die Sims™ 3 Diesel Accessoires (x32 Version: 14.0.48)

Die Sims™ 3 Gib Gas-Accessoires (x32 Version: 5.0.44)

Die Sims™ 3 Jahreszeiten (x32 Version: 16.0.136)

Die Sims™ 3 Late Night (x32 Version: 6.0.81)

Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)

Die Sims™ 3 Reiseabenteuer (x32 Version: 2.0.86)

Die Sims™ 3 Traumkarrieren (x32 Version: 4.0.87)

Die*Sims™*3 Erstelle einen Sim (x32 Version: 1.0.25)

DiRT 3 (x32 Version: 1.0.0001.130)

DivX-Setup (x32 Version: 2.6.1.24)

Dual-Core Optimizer (x32 Version: 1.1.4.0169)

Duden Korrektor (x32 Version: 7.00.0000)

Duden Korrektor Patch 022010 (x32 Version: 7.00.0000)

Duke Nukem Forever (x32)

EASEUS Partition Master 9.1.0 Home Edition (x32)

Einstellungen für VAIO-Inhaltsüberwachung (x32 Version: 2.6.0.11050)

EVEREST Ultimate Edition v5.50 (x32 Version: 5.50)

Exif Tag Remover 2.0 (x32)

Forged Alliance Forever (x32 Version: 240.8.31)

Free PDF to Word Doc Converter v1.1 (x32 Version: 1.1)

Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430)

FreeCommander 2009.02b (x32 Version: 2009.02)

Fritz 13 (x32 Version: 13.0.0.0)

Fritz Beginner (x32 Version: 12.0.0)

Fritz11 WM Edition (x32 Version: 1.0)

Futuremark SystemInfo (x32 Version: 4.6.0)

G DATA Logox 4 Speechengine (x32)

G DATA WebSpeech 4 (x32)

GameRanger (HKCU)

GEOgraf System Runtime Components (x32 Version: 3.0.0)

Google Chrome (x32 Version: 29.0.1547.76)

Google Drive (x32 Version: 1.11.4865.2530)

Google Earth (x32 Version: 6.0.1.2032)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

GPGNet (x32 Version: 1.0.0)

GRID (x32 Version: 1.30.0000)

Hex-Editor MX (x32 Version: 6.0)

Homeworld2 (x32)

HyperCam 3 (x32 Version: 3.0.912.18)

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008)

Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002)

Iomega Encryption (Version: 1.00.0003)

IrfanView (remove only) (x32 Version: 4.35)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

JDownloader (x32)

Junk Mail filter update (x32 Version: 15.4.3502.0922)

KEBau (x32)

K-Lite Codec Pack 10.0.0 Full (x32 Version: 10.0.0)

Left 4 Dead (x32)

Left 4 Dead 2 (x32)

Lock On: Air Combat Simulation (x32 Version: 1.00.000)

LogMeIn Hamachi (x32 Version: 2.1.0.124)

Logox 4 Professional (x32)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)

Microsoft Picture It! Foto Premium 9 (x32 Version: 9.0.0.0000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0)

Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727)

Microsoft Visual J# 2.0 Redistributable Package (x32)

Microsoft Works (x32 Version: 07.03.0512)

Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)

Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)

Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000)

Microsoft-Maus- und Tastatur-Center (Version: 1.1.500.0)

Moorhuhn 3 DL (x32)

Moorhuhn-Sushi (x32)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT_amd64 (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

Mumble 1.2.4 (x32 Version: 1.2.4)

Need for Speed™ Most Wanted (x32)

Nero 8 (x32 Version: 8.0.293)

Office-Bibliothek (x32 Version: 5.00.3)

OpenAL (x32)

OpenRA (x32)

Opera Stable 16.0.1196.80 (x32 Version: 16.0.1196.80)

Pamela Pro 4.8 (x32 Version: 4.8)

Paragon Backup & Recovery™ 2013 Free (x32 Version: 90.00.0003)

PDF Settings CS5 (x32 Version: 10.0)

PDFCreator (x32 Version: 0.9.5)

PMB (x32 Version: 5.0.00.10260)

PMB VAIO Edition Plug-in (Version: 1.5.10.05300)

PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150)

Proxifier version 3.21 (x32 Version: 3.21)

R.U.S.E (x32)

Razer Lachesis (x32 Version: 1.10.0000)

Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5992)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.5992)

Recuva (Version: 1.42)

Revo Uninstaller 1.95 (x32 Version: 1.95)

Roxio Central Audio (x32 Version: 3.8.0)

Roxio Central Copy (x32 Version: 3.8.0)

Roxio Central Core (x32 Version: 3.8.0)

Roxio Central Data (x32 Version: 3.8.0)

Roxio Central Tools (x32 Version: 3.8.0)

Roxio Easy Media Creator 10 LJ (x32 Version: 10.3)

Roxio Easy Media Creator Home (x32 Version: 10.3.183)

Safari (x32 Version: 5.34.57.2)

Secure Eraser v4.0 (x32)

Security Task Manager 1.8d (x32 Version: 1.8d)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)

Setting Utility Series (x32 Version: 5.1.0.11200)

Setup_msm_VCMS_x64 (Version: 2.6.0.06040)

Setup_msm_VOFS_x64 (Version: 2.3.0.09270)

Setup_VEP_x64_Contain_SSDB (Version: 3.9.0.09270)

Setup-Start von Microsoft Works 2004 (x32)

Silent Hill 2 - Directors Cut (x32)

SILENT HILL 3 (x32 Version: 1.00.0000)

SILENT HILL 4 (x32 Version: 1.00.000)

SimilarImages (x32 Version: 2010.09)

Simple Adblock (x32 Version: 1.1.5)

Skype Click to Call (x32 Version: 5.9.9216)

Skype™ 6.3 (x32 Version: 6.3.105)

SOHLib Merge Module (x32 Version: 2.2.0.11240)

Sony Home Network Library (x32 Version: 2.0.1.10160)

Sony Home Network Library (x32 Version: 2.2.0.11240)

SpeechRedist (x32 Version: 1.0.0)

Star Wars Battlefront II (x32 Version: 1.0)

Star Wars Empire at War (x32 Version: 1.0)

Star Wars Empire at War Forces of Corruption (x32 Version: 1.0)

Steam (x32 Version: 1.0.0.0)

SupCom Replay Manager (x32 Version: 1.0.1)

Supreme Commander - Forged Alliance (x32 Version: 1.00.0000)

Supreme Commander (x32)

Sven Bømwøllen DL (x32)

TeamSpeak 3 Client (Version: 3.0.13)

TeamViewer 8 (x32 Version: 8.0.20202)

tools-freebsd (x32 Version: 8.8.1.528992)

tools-linux (x32 Version: 8.8.1.528992)

tools-netware (x32 Version: 8.8.1.528992)

tools-solaris (x32 Version: 8.8.1.528992)

tools-windows (x32 Version: 8.8.1.528992)

tools-winPre2k (x32 Version: 8.8.1.528992)

Trillian (x32)

TrueCrypt (x32 Version: 7.1a)

Unreal Tournament 2004 (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2494150) (x32)

Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589370) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

VAIO - PMB VAIO Edition Guide (x32 Version: 1.5.00.03020)

VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.10.11160)

VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.9.0.11260)

VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250)

VAIO Content Metadata Intelligent Network Service Manager (Version: 3.9.0.11180)

VAIO Content Metadata Manager Settings (Version: 3.9.0.11180)

VAIO Content Metadata XML Interface Library (Version: 3.9.0.11180)

VAIO Control Center (x32 Version: 4.1.1.07160)

VAIO Data Restore Tool (x32 Version: 1.2.0.09150)

VAIO DVD Menu Data (x32 Version: 2.4.00.05300)

VAIO Energie Verwaltung (x32 Version: 5.0.0.11300)

VAIO Entertainment Platform (x32 Version: 3.9.0.11160)

VAIO Event Service (x32 Version: 5.1.0.12010)

VAIO Gate Default (x32 Version: 1.0.0.10290)

VAIO Hardware Diagnostics (x32 Version: 3.9.1)

VAIO Marketing Tools (x32)

VAIO Media plus (x32 Version: 2.0.1.10160)

VAIO Media plus Opening Movie (x32 Version: 1.2.0.09100)

VAIO Movie Story Template Data (x32 Version: 2.0.00.09240)

VAIO Movie Story Template Data (x32 Version: 2.5.00.05300)

VAIO Original Funktion Einstellungen (x32 Version: 2.3.0.11240)

VAIO Personalization Manager (Version: 3.0.0.11160)

VAIO Premium Partners (x32 Version: 1.0)

VAIO Quick Web Access (x32 Version: 1.3.1.7)

VAIO screensaver (x32 Version: 1.0.0.0)

VAIO Smart Network (x32 Version: 3.3.1.08110)

VAIO Update (x32 Version: 5.5.3.10280)

VAIO Update Merge Module x64 (Version: 5.6.10270)

VAIO Wallpaper Contents (x32 Version: 2.0.0.06010)

VAIO-Support für Übertragungen (x32 Version: 1.1.2.06030)

VC 9.0 Runtime (x32 Version: 1.0.0)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)

VeryPDF PDF2Word v3.0 (x32)

Visual C++ 2008 x86 Runtime - (v9.0.30729) (x32 Version: 9.0.30729)

Visual C++ 2008 x86 Runtime - v9.0.30729.01 (x32 Version: 9.0.30729.01)

VmciSockets (Version: 9.1.54.1)

VMware Workstation (x32 Version: 8.0.1.27038)

War Thunder Launcher 1.0.1.185 (x32)

WebM Media Foundation Components (x32 Version: 1.0.0.0)

WhoCrashed 4.01

WIDCOMM Bluetooth Software (Version: 6.2.1.500)

Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (Version: 09/09/2009 6.2.0.9405)

Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3555.0308)

Windows Live Family Safety (Version: 15.4.3555.0308)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3555.0308)

Windows Live Mail (x32 Version: 15.4.3502.0922)

Windows Live MIME IFilter (Version: 15.4.3502.0922)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live Sync (x32 Version: 14.0.8117.416)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

Windows Live Writer (x32 Version: 15.4.3502.0922)

Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

Windows-Treiberpaket - C Technologies AB (CPen) Input Pen  (02/22/2010 3.0.0.2) (Version: 02/22/2010 3.0.0.2)

WinHTTrack Website Copier 3.46-1 (x64) (Version: 3.46.1)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)

Xfire (remove only) (x32)

Zero-K (HKCU Version: 3.0.0.2)
 

==================== Restore Points  =========================
 

19-08-2013 11:32:10 Tweaking.com - Windows Repair

22-08-2013 09:45:54 Installed Safari

29-08-2013 11:11:24 Windows Update

15-09-2013 13:12:37 Windows Update
 

==================== Hosts content: ==========================
 

2011-10-14 16:53 - 2013-08-19 14:28 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {1761F793-2C77-4B99-BCAB-6E3DB12510A6} - System32\Tasks\AdobeAAMUpdater-1.0-CHESSPOWER-VAIO-Gerd => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)

Task: {1CB965A7-56F6-4D9F-9BBC-81A0286CBCCD} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: {1FDE7322-0840-4B7E-A984-3A5BE8D851B6} - System32\Tasks\{3BBE6C36-2FC9-442E-A228-1A523AAFC0B5} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-02-28] (Skype Technologies S.A.)

Task: {29D8DEA4-343A-421C-A873-8086311D2B75} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation)

Task: {2F4D9D94-BC85-4B9C-AD88-7D21038D7010} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe

Task: {33FF6FC1-C45D-4A9E-9057-7AFD8907EF54} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-20] (Google Inc.)

Task: {36C63201-60D7-4874-AF50-07511CC96B0E} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)

Task: {3D3CC477-BBA2-4FD4-9C2A-B40FFAD1643E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Java\jre6\bin\jusched.exe

Task: {5E640AF3-CDE0-4FB3-94DF-F5BE2CB2493F} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {6C0FDA06-CAAF-4638-AE88-6358F67179C5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-22] (Adobe Systems Incorporated)

Task: {6D4425B7-7C4D-415A-B709-2DFFA72DCDC3} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation)

Task: {6D65CDE5-DB2C-4FB1-8E8A-4F36D1077450} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft)

Task: {74A64151-FF2F-476F-940B-9FD200F8D32E} - System32\Tasks\Works Update Find => C:\Program Files (x86)\Common Files\Microsoft Shared\Works Shared\WkUFind.exe [2003-06-17] (Microsoft® Corporation)

Task: {8D908B63-EBCA-44F1-BA04-21A526F1CFB5} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)

Task: {9448034D-7B51-4B6D-8BAF-6F6F22C58511} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)

Task: {9CC049BB-72AD-4B10-B149-54CDF14B7B24} - System32\Tasks\{F8052007-03D6-428C-AC6D-07B275FC3CB6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.1.0.112/en/abandoninstall?page=tsDownload&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;userlevelpresent

Task: {A2E597F5-E279-4180-8314-C7F028CC1874} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe

Task: {A330A8A1-9B76-4C4B-9D9F-BE882873A4DE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

Task: {CC3D860B-C003-4A2E-927D-D8F06443134F} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)

Task: {D23EEB03-2E55-43CF-82B9-115D1FFD6227} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)

Task: {E63BC770-C400-42C1-BD65-4E31EAFA481D} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)

Task: {F16ED198-D3DF-4042-AD57-0E63CDEACFE8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-20] (Google Inc.)

Task: {F48C7D8F-92D8-423E-9796-D9E6CC2957C6} - System32\Tasks\Google Updater and Installer => C:\Users\Gerd\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {F50B0FBA-FB2C-4902-A93E-4FD38B4844A0} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)

Task: {FC4276EB-F727-4369-AB85-FCD8110C6AEF} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2011-11-07] (Sony Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2011-11-18 17:33 - 2011-05-28 02:52 - 00557280 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll

2013-01-02 18:38 - 2012-11-22 19:57 - 00057448 _____ () C:\Windows\system32\PrxerNsp.dll

2010-08-24 14:39 - 2010-08-24 14:39 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2013-09-15 16:28 - 2013-09-15 16:28 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2010-08-06 17:44 - 2009-12-01 22:03 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll

2010-08-06 17:44 - 2009-12-01 22:03 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll

2010-09-18 17:43 - 2008-11-17 14:43 - 00139264 _____ () C:\Program Files (x86)\AtomSync\atomsyncgerman.dll

2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf

2010-10-04 12:50 - 2010-10-04 12:50 - 00472552 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\adxloader.dll

2010-06-28 21:33 - 2010-06-28 21:33 - 00786432 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\Interop.Access.dll

2010-06-28 21:33 - 2010-06-28 21:33 - 00950272 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\Interop.Excel.dll

2010-06-28 21:33 - 2010-06-28 21:33 - 00065536 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\Interop.FrontPage.dll

2010-06-28 21:33 - 2010-06-28 21:33 - 00286720 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\Interop.Outlook.dll

2010-06-28 21:33 - 2010-06-28 21:33 - 00204800 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\Interop.PowerPoint.dll

2010-06-28 21:33 - 2010-06-28 21:33 - 00495616 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\Interop.Word.dll

2010-10-04 12:50 - 2010-10-04 12:50 - 00079872 _____ () C:\Program Files (x86)\Duden\Duden Korrektor\MBControls.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

AlternateDataStreams: C:\Users\Gerd\wot_sweetdreams_wp_2560x1440.jpg:SummaryInformation

AlternateDataStreams: C:\Users\Gerd\wot_sweetdreams_wp_2560x1440.jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

AlternateDataStreams: C:\Users\Gerd\Desktop\Fehelermeldung Search and Destroy.jpg:SummaryInformation

AlternateDataStreams: C:\Users\Gerd\Desktop\Fehelermeldung Search and Destroy.jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}

AlternateDataStreams: C:\Users\Gerd\Desktop\TFC-Cleaner ausgeführt..jpg:SummaryInformation

AlternateDataStreams: C:\Users\Gerd\Desktop\TFC-Cleaner ausgeführt..jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: SBRE

Description: SBRE

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: SBRE

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/15/2013 04:16:18 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: CLI.exe, Version: 2.0.0.0, Zeitstempel: 0x4f2058ba

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677

Ausnahmecode: 0xe0434352

Fehleroffset: 0x000000000000940d

ID des fehlerhaften Prozesses: 0x107c

Startzeit der fehlerhaften Anwendung: 0xCLI.exe0

Pfad der fehlerhaften Anwendung: CLI.exe1

Pfad des fehlerhaften Moduls: CLI.exe2

Berichtskennung: CLI.exe3
 

Error: (09/15/2013 04:16:18 PM) (Source: .NET Runtime) (User: )

Description: Anwendung: CLI.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.Reflection.TargetInvocationException

Stapel:

   bei System.RuntimeMethodHandle._InvokeMethodFast(System.IRuntimeMethodInfo, System.Object, System.Object[], System.SignatureStruct ByRef, System.Reflection.MethodAttributes, System.RuntimeType)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo, Boolean)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)

   bei System.RuntimeType.InvokeMember(System.String, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object, System.Object[], System.Reflection.ParameterModifier[], System.Globalization.CultureInfo, System.String[])

   bei ATI.ACE.CLI.EXE.CLI.Main(System.String[])
 

Error: (09/15/2013 04:14:23 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: CLI.exe, Version: 2.0.0.0, Zeitstempel: 0x4f2058ba

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677

Ausnahmecode: 0xe0434352

Fehleroffset: 0x000000000000940d

ID des fehlerhaften Prozesses: 0x13c4

Startzeit der fehlerhaften Anwendung: 0xCLI.exe0

Pfad der fehlerhaften Anwendung: CLI.exe1

Pfad des fehlerhaften Moduls: CLI.exe2

Berichtskennung: CLI.exe3
 

Error: (09/15/2013 04:14:21 PM) (Source: .NET Runtime) (User: )

Description: Anwendung: CLI.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.Reflection.TargetInvocationException

Stapel:

   bei System.RuntimeMethodHandle._InvokeMethodFast(System.IRuntimeMethodInfo, System.Object, System.Object[], System.SignatureStruct ByRef, System.Reflection.MethodAttributes, System.RuntimeType)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo, Boolean)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)

   bei System.RuntimeType.InvokeMember(System.String, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object, System.Object[], System.Reflection.ParameterModifier[], System.Globalization.CultureInfo, System.String[])

   bei ATI.ACE.CLI.EXE.CLI.Main(System.String[])
 

Error: (09/15/2013 02:50:19 PM) (Source: DeviceCenter) (User: )

Description: Unknown Node:#text        -->
 

Error: (08/22/2013 08:52:19 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WebKit2WebProcess.exe, Version: 7534.57.2.4, Zeitstempel: 0x4f97642d

Name des fehlerhaften Moduls: WebKit.dll, Version: 7534.57.2.4, Zeitstempel: 0x4f976417

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000c7f63

ID des fehlerhaften Prozesses: 0xcb0

Startzeit der fehlerhaften Anwendung: 0xWebKit2WebProcess.exe0

Pfad der fehlerhaften Anwendung: WebKit2WebProcess.exe1

Pfad des fehlerhaften Moduls: WebKit2WebProcess.exe2

Berichtskennung: WebKit2WebProcess.exe3
 

Error: (08/22/2013 08:50:27 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WebKit2WebProcess.exe, Version: 7534.57.2.4, Zeitstempel: 0x4f97642d

Name des fehlerhaften Moduls: WebKit.dll, Version: 7534.57.2.4, Zeitstempel: 0x4f976417

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000c7f63

ID des fehlerhaften Prozesses: 0x818

Startzeit der fehlerhaften Anwendung: 0xWebKit2WebProcess.exe0

Pfad der fehlerhaften Anwendung: WebKit2WebProcess.exe1

Pfad des fehlerhaften Moduls: WebKit2WebProcess.exe2

Berichtskennung: WebKit2WebProcess.exe3
 

Error: (08/21/2013 08:24:41 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: mbamgui.exe, Version: 1.70.0.0, Zeitstempel: 0x512fc066

Name des fehlerhaften Moduls: mbamgui.exe, Version: 1.70.0.0, Zeitstempel: 0x512fc066

Ausnahmecode: 0x40000015

Fehleroffset: 0x0003b525

ID des fehlerhaften Prozesses: 0x5b0

Startzeit der fehlerhaften Anwendung: 0xmbamgui.exe0

Pfad der fehlerhaften Anwendung: mbamgui.exe1

Pfad des fehlerhaften Moduls: mbamgui.exe2

Berichtskennung: mbamgui.exe3
 

Error: (08/19/2013 02:49:49 PM) (Source: Microsoft-Windows-CAPI2) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. "ESENT"-Fehler: -566.
 

Error: (08/19/2013 02:49:49 PM) (Source: ESENT) (User: )

Description: Catalog Database (1408) Catalog Database: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -566 auf.
 
 

System errors:

=============

Error: (10/04/2013 07:36:41 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.
 

Error: (10/03/2013 00:14:35 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.
 

Error: (10/02/2013 01:53:59 PM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

Lbd

SBRE
 

Error: (10/02/2013 01:53:49 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
 

Error: (10/02/2013 01:53:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Net.Tcp-Listeneradapter" ist vom Dienst "Net.Tcp-Portfreigabedienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (10/02/2013 01:53:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Net.Pipe-Listeneradapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.
 

Error: (10/02/2013 01:53:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Net.Msmq-Listeneradapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.
 

Error: (10/02/2013 01:22:53 PM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

Lbd

SBRE
 

Error: (10/02/2013 01:22:43 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
 

Error: (10/02/2013 01:22:43 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Net.Tcp-Listeneradapter" ist vom Dienst "Net.Tcp-Portfreigabedienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 
 

Microsoft Office Sessions:

=========================

Error: (09/15/2013 04:16:18 PM) (Source: Application Error)(User: )

Description: CLI.exe2.0.0.04f2058baKERNELBASE.dll6.1.7601.1822951fb1677e0434352000000000000940d107c01ceb21e24261ac9C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.exeC:\Windows\system32\KERNELBASE.dll62fe930b-1e11-11e3-b602-bef3ea706ac8
 

Error: (09/15/2013 04:16:18 PM) (Source: .NET Runtime)(User: )

Description: Anwendung: CLI.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.Reflection.TargetInvocationException

Stapel:

   bei System.RuntimeMethodHandle._InvokeMethodFast(System.IRuntimeMethodInfo, System.Object, System.Object[], System.SignatureStruct ByRef, System.Reflection.MethodAttributes, System.RuntimeType)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo, Boolean)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)

   bei System.RuntimeType.InvokeMember(System.String, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object, System.Object[], System.Reflection.ParameterModifier[], System.Globalization.CultureInfo, System.String[])

   bei ATI.ACE.CLI.EXE.CLI.Main(System.String[])
 

Error: (09/15/2013 04:14:23 PM) (Source: Application Error)(User: )

Description: CLI.exe2.0.0.04f2058baKERNELBASE.dll6.1.7601.1822951fb1677e0434352000000000000940d13c401ceb21ddc849be2C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.exeC:\Windows\system32\KERNELBASE.dll1e592ddd-1e11-11e3-b602-bef3ea706ac8
 

Error: (09/15/2013 04:14:21 PM) (Source: .NET Runtime)(User: )

Description: Anwendung: CLI.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.Reflection.TargetInvocationException

Stapel:

   bei System.RuntimeMethodHandle._InvokeMethodFast(System.IRuntimeMethodInfo, System.Object, System.Object[], System.SignatureStruct ByRef, System.Reflection.MethodAttributes, System.RuntimeType)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo, Boolean)

   bei System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)

   bei System.RuntimeType.InvokeMember(System.String, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object, System.Object[], System.Reflection.ParameterModifier[], System.Globalization.CultureInfo, System.String[])

   bei ATI.ACE.CLI.EXE.CLI.Main(System.String[])
 

Error: (09/15/2013 02:50:19 PM) (Source: DeviceCenter)(User: )

Description: Unknown Node:#text        -->
 

Error: (08/22/2013 08:52:19 PM) (Source: Application Error)(User: )

Description: WebKit2WebProcess.exe7534.57.2.44f97642dWebKit.dll7534.57.2.44f976417c0000005000c7f63cb001ce9f687b8a0c14C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exeC:\Program Files (x86)\Safari\Apple Application Support\WebKit.dllf7efd7f0-0b5b-11e3-b716-d7c1c71082c6
 

Error: (08/22/2013 08:50:27 PM) (Source: Application Error)(User: )

Description: WebKit2WebProcess.exe7534.57.2.44f97642dWebKit.dll7534.57.2.44f976417c0000005000c7f6381801ce9f62751273e3C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exeC:\Program Files (x86)\Safari\Apple Application Support\WebKit.dllb52f1902-0b5b-11e3-b716-d7c1c71082c6
 

Error: (08/21/2013 08:24:41 AM) (Source: Application Error)(User: )

Description: mbamgui.exe1.70.0.0512fc066mbamgui.exe1.70.0.0512fc066400000150003b5255b001ce9e370fe798daC:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe5c5108cc-0a2a-11e3-978c-9c297ff485da
 

Error: (08/19/2013 02:49:49 PM) (Source: Microsoft-Windows-CAPI2)(User: )

Description: -566
 

Error: (08/19/2013 02:49:49 PM) (Source: ESENT)(User: )

Description: Catalog Database1408Catalog Database: -566
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-08-05 14:44:34.540

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-08-05 14:44:34.462

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-08-05 14:44:34.384

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-08-05 14:44:34.321

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-31 16:21:55.686

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-07-31 16:11:06.966

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-07-31 15:37:17.978

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-07-31 15:25:35.328

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-07-31 15:08:42.146

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-07-31 08:30:20.095

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 35%

Total physical RAM: 3950.1 MB

Available physical RAM: 2565.57 MB

Total Pagefile: 9873.28 MB

Available Pagefile: 8129.99 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive a: (BackUp-Daten) (Fixed) (Total:11.03 GB) (Free:0.95 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive c: () (Fixed) (Total:687.5 GB) (Free:283.59 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 699 GB) (Disk ID: DF981B7C)

Partition 1: (Active) - (Size=11 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=688 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Gruß
Chesspower

Sehr gut! :daumenhoc

Java aktualisieren

Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

Downloade dir bitte die neueste Java-Version von hier
Speichere die .exe-Datei
Schließe alle laufenden Programme. Speziell deinen Browser.
Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 40 ) herunter laden.
Wenn die Installation beendet wurde
Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

Nach dem Neustart

Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
Klicke auf Dateien löschen....
Gehe sicher das überall ein Hacken gesetzt ist und klicke OK.
Klicke erneut OK.

dann:

Tool-Bereinigung
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hallo t'john

Java aktualisiert und Java-Cache gelöscht. Nach älteren Javas gesucht und nicht gefunden.

DelFix ausgeführt. Remover und Windows Crash Programm manuell deinstalliert.

Muss ich zukünftig auf Sandboxie komplett verzichten? Ist das Programm nicht ausgereift genug?

MfG
Chesspower

Zitat:

Muss ich zukünftig auf Sandboxie komplett verzichten?

Im Zusammenhang mit Chrome schon.

Zitat:

Ist das Programm nicht ausgereift genug?

Schon, aber anscheinend gibt es in den jetztigen Versionen Probleme.
Das kann natuerlich in spaeteren Versionen behoben werden, wenn das jemand als Bug gemeldet hat.

wir wuenschen eine virenfreie Zeit :)