Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   Windows Vista KEINE LAN Verbindung mit INTERNET möglich, statisch / dhcp (https://www.trojaner-board.de/148926-windows-vista-keine-lan-verbindung-internet-moeglich-statisch-dhcp.html)

namor82 30.01.2014 12:22
Windows Vista KEINE LAN Verbindung mit INTERNET möglich, statisch / dhcp
 
Hallo,

ich bin hier am verzweifeln, ich kriege keine Verbindung mit dem Router zustande (LAN).
Habe auch mit einer anderen Netzwerkkarte probiert, es geht einfach nicht.
Soweit ich feststellen kann ist der Rechner Virenfrei.

Das Problem:
Die Netzwerkkarte wird erkannt, die Dienste laufen auch alle normal (soweit ich es feststellen kann). Ich kriege dennoch keine IP per DHCP. Sofern ich eine Statische IP vergebe, bekomme ich auch keine Verbindung zum Internet (bei Vista steht "NUR LOKAL").

Habe alles versucht.
0.) Netzwerkkarte mit Treiber deinstalliert und neu installiert.
1.) ipconfig / release, danach ipconfig /renew (natürlich als admin im Konsole cmd ).
2.) über die Konsole mit dem netsh befehl wie hier beschrieben hxxp://support.microsoft.com/kb/257748/de
3.) habe die winsocks repariert wie hier beschrieben
hxxp://www.speedguide.net/faq_in_q.php?qid=272

Das bringt mich alles nix.


über ipconfig /renew kam der Fehler:

Code:
Beim Aktualisieren der Schnittstelle "LAN-Verbindung" ist folgender Fehler aufgetreten:
es kann keine Verbindung mit dem DHCP-Server hergestellt werden. Anforderung wurde wegen Zeitüberschreitung abgebrochen.
Beim Freigeben der Schnittstelle Loopback Pseudo-Interface 1 ist folgender Fehler aufgetreten:
Das System kann die angegebene Datei nicht finden.
Kann ich da noch was machen oder muss ich neu installieren ?!

cosinus 30.01.2014 13:55
Hi,

Patchlevel von Vista? Irgendwelche Virenscanner oder unsinnige Desktop-Firewalls im Spiel? (abgesehen von der Windows-Firewall)

namor82 30.01.2014 15:05
Vista ist SP2 drauf mit (fast) allen Updates da das Netzwerk ja defekt ist.
Virenscanner usw. ist nichts weiter drauf. Es war Norton 360 drauf, habe ich deinstalliert.

Brauchst du irgendwelche Logs ? Falls ja kann ich gerne ein paar machen (FRST, FSS, etc).

cosinus 30.01.2014 15:42
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


namor82 30.01.2014 18:10

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2014 03
Ran by Trama (administrator) on TRAMA-PC on 30-01-2014 17:48:52
Running from C:\Users\Trama\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehrecvr.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehsched.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Realtek Semiconductor) C:\WINDOWS\RtHDVCpl.exe
(OsdMaestro) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\WINDOWS\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4874240 2008-01-15] (Realtek Semiconductor)
HKLM\...\Run: [OsdMaestro] - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [118784 2007-02-15] (OsdMaestro)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [178712 2007-07-12] (Intel Corporation)
HKLM\...\Run: [HP Health Check Scheduler] - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
HKLM\...\Run: [SunJavaUpdateReg] - C:\Windows\system32\jureg.exe [54936 2007-04-07] (Sun Microsystems, Inc.)
HKLM\...\Run: [HP Software Update] - c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [hpsysdrv] - c:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)
HKLM\...\Run: [KBD] - C:\HP\KBD\KbdStub.EXE
HKCU\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [942080 2008-01-18] (Hewlett-Packard)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-18] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=es_es&c=81&bd=Pavilion&pf=desktop
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=es_es&c=81&bd=Pavilion&pf=desktop
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=es_es&c=81&bd=Pavilion&pf=desktop
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=es_es&c=81&bd=Pavilion&pf=desktop
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Tcpip\..\Interfaces\{6c3c60cb-59e1-479b-88fb-83fdb2fbd230}: [NameServer]192.168.178.1
Tcpip\..\Interfaces\{8bc59cf8-46ba-4f2c-9142-8644814e8e77}: [NameServer]192.168.178.1

Chrome:
=======
CHR Extension: (YouTube) - C:\Users\Trama\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-03]

========================== Services (Whitelisted) =================

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [65536 2007-09-19] (Hewlett-Packard)

==================== Drivers (Whitelisted) ====================

S3 EL90Xbc; C:\Windows\System32\DRIVERS\el90Xbc5.SYS [74338 2002-09-25] (3Com Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2014-01-28] (Malwarebytes Corporation)
R2 RtNdPt60; C:\Windows\System32\DRIVERS\RtNdPt60.sys [28160 2007-12-12] (Windows (R) Codename Longhorn DDK provider)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2014-01-18] (Symantec Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-30 17:48 - 2014-01-30 18:04 - 00006572 _____ C:\Users\Trama\Desktop\FRST.txt
2014-01-30 17:48 - 2014-01-28 15:24 - 01136640 _____ (Farbar) C:\Users\Trama\Desktop\FRST.exe
2014-01-30 12:03 - 2014-01-30 12:03 - 00000000 ____D C:\Program Files\3Com Corporation
2014-01-30 12:02 - 2002-09-25 13:40 - 00074338 _____ (3Com Corporation) C:\Windows\system32\Drivers\el90Xbc5.SYS
2014-01-28 20:25 - 2014-01-28 20:27 - 01061566 _____ C:\ProgramData\LuUninstall.LiveUpdate
2014-01-28 19:45 - 2014-01-28 19:45 - 00053248 _____ C:\Windows\system32\zlib.dll
2014-01-28 19:45 - 2014-01-28 19:45 - 00000000 ____D C:\Support
2014-01-28 19:25 - 2014-01-28 20:04 - 00000000 ____D C:\comintrepair
2014-01-28 19:10 - 2014-01-28 19:10 - 00000116 _____ C:\Users\Public\Desktop\NortonIdentitySafe.url
2014-01-28 18:17 - 2014-01-30 17:44 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-28 15:28 - 2014-01-28 15:28 - 00000000 ____D C:\FRST
2014-01-28 14:47 - 2014-01-28 14:48 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2014-01-28 14:47 - 2014-01-28 14:48 - 00000000 ____D C:\Windows\system32\de
2014-01-28 14:47 - 2014-01-28 14:48 - 00000000 ____D C:\Windows\de-DE
2014-01-28 14:47 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\system32\Windows System Resource Manager
2014-01-28 14:47 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\system32\0407
2014-01-28 14:46 - 2014-01-28 14:46 - 00000000 ____D C:\Windows\system32\Vistalizator
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____D C:\Users\Trama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____D C:\Program Files\Unlocker
2014-01-28 13:21 - 2014-01-28 15:03 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-01-28 13:14 - 2014-01-28 13:14 - 00000207 _____ C:\Windows\tweaking.com-regbackup-TRAMA-PC-Microsoft®-Windows-Vista™-Home-Premium-(32-bit).dat
2014-01-28 13:13 - 2014-01-28 13:13 - 00000000 ____D C:\RegBackup
2014-01-28 12:58 - 2014-01-28 12:58 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2014-01-28 12:58 - 2014-01-28 12:58 - 00000000 ____D C:\Users\Trama\AppData\Roaming\Malwarebytes
2014-01-28 12:57 - 2014-01-28 12:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 12:44 - 2014-01-28 12:47 - 00000000 ____D C:\AdwCleaner
2014-01-28 12:42 - 2014-01-28 14:52 - 00000000 ____D C:\Users\Trama\Desktop\Nueva carpeta
2014-01-25 23:55 - 2014-01-26 23:14 - 00000000 ____D C:\Users\Trama\Desktop\Natur
2014-01-23 22:44 - 2014-01-23 22:44 - 00000000 ____D C:\Users\Trama\AppData\Local\CrashDumps
2014-01-19 20:11 - 2014-01-19 20:15 - 00040960 _____ C:\Users\Trama\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-18 00:33 - 2014-01-28 19:16 - 00000000 ____D C:\ProgramData\Norton
2014-01-17 23:35 - 2014-01-17 23:36 - 00401768 _____ (Softonic                                        ) C:\Users\Trama\Downloads\SoftonicDownloader_para_avira-free-antivirus.exe
2014-01-16 22:09 - 2014-01-16 22:10 - 00660232 _____ (VLC Player) C:\Users\Trama\Downloads\FlvPlayer.exe
2014-01-15 17:23 - 2014-01-15 17:25 - 36599466 _____ C:\Users\Trama\Downloads\mauro (1).zip
2014-01-14 17:23 - 2014-01-14 17:23 - 01585400 _____ C:\Users\Trama\Desktop\Falling Ethics 002.tif
2014-01-14 17:22 - 2014-01-14 17:22 - 01585380 _____ C:\Users\Trama\Desktop\Falling Ethics 002. Foto
2014-01-13 00:50 - 2014-01-13 00:50 - 07647728 _____ C:\Users\Trama\Downloads\1.0.tif
2014-01-13 00:33 - 2014-01-13 00:34 - 829256062 _____ C:\Users\Trama\Desktop\Monochrome Laboratory.zip
2014-01-12 13:21 - 2014-01-12 13:23 - 358874085 _____ C:\Users\Trama\Downloads\Archivo comprimido.zip
2014-01-11 21:20 - 2014-01-11 21:20 - 33528043 _____ C:\Users\Trama\Desktop\Detroit Underground.zip
2014-01-11 20:55 - 2014-01-11 22:00 - 130505172 _____ C:\Users\Trama\Desktop\Doctrine - video.mov
2014-01-11 02:37 - 2014-01-11 02:37 - 89654112 _____ C:\Users\Trama\Downloads\Dubit_-_1N50MN14_(Original_Mix)_MASTER_Soluxion_Lab.wav
2014-01-11 01:38 - 2014-01-11 02:51 - 00000000 ____D C:\Users\Trama\Desktop\Neu
2014-01-10 22:53 - 2014-01-10 23:03 - 00000000 ____D C:\Users\Trama\Desktop\PSK Podcast
2014-01-09 22:12 - 2014-01-17 22:10 - 00000000 ____D C:\Users\Trama\Desktop\Monochrome Laboratory
2014-01-09 22:09 - 2014-01-09 22:11 - 00000000 ____D C:\Users\Trama\Desktop\Anita+
2014-01-09 21:07 - 2014-01-09 21:08 - 151028642 _____ C:\Users\Trama\Downloads\almu.zip
2014-01-08 16:23 - 2014-01-08 16:23 - 00000000 ____D C:\Users\Trama\Documents\AdobeStockPhotos
2014-01-08 00:54 - 2014-01-08 03:13 - 419430400 _____ C:\Users\Trama\Downloads\APEV11Multi.part2.rar
2014-01-07 21:22 - 2014-01-07 21:22 - 00002028 _____ C:\Users\Trama\Desktop\Continue installation - FlashPlayer.lnk
2014-01-07 19:41 - 2014-01-07 19:41 - 00000000 ____D C:\Users\Trama\Desktop\Native.Instruments.Traktor.2.v2.6.6.R308-CHAOS
2014-01-07 18:59 - 2014-01-07 21:18 - 419430400 _____ C:\Users\Trama\Downloads\APEV11Multi.part1.rar
2014-01-07 18:49 - 2014-01-07 19:19 - 165162240 _____ C:\Users\Trama\Downloads\Native.Instruments.Traktor.2.v2.6.6.R308-CHAOS.rar
2014-01-07 18:43 - 2014-01-07 18:43 - 00000000 ____D C:\Program Files\Native Instruments
2014-01-06 22:39 - 2014-01-06 22:39 - 00000496 _____ C:\Users\Trama\Desktop\MVI_7240.MOV - Acceso directo.lnk
2014-01-01 17:54 - 2014-01-01 18:39 - 138317921 _____ C:\Users\Trama\Downloads\insid.rar

==================== One Month Modified Files and Folders =======

2014-01-30 18:04 - 2014-01-30 17:48 - 00006572 _____ C:\Users\Trama\Desktop\FRST.txt
2014-01-30 17:48 - 2006-11-02 11:33 - 01495786 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-30 17:47 - 2013-10-15 18:07 - 01875001 _____ C:\Windows\WindowsUpdate.log
2014-01-30 17:44 - 2014-01-28 18:17 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-30 17:44 - 2013-12-03 14:10 - 00001082 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-30 17:44 - 2006-11-02 13:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-30 17:44 - 2006-11-02 13:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-30 17:44 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2014-01-30 12:11 - 2006-11-02 14:01 - 00032522 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-30 12:03 - 2014-01-30 12:03 - 00000000 ____D C:\Program Files\3Com Corporation
2014-01-30 12:03 - 2013-10-15 18:14 - 00000000 ____D C:\Users\Trama
2014-01-30 12:03 - 2007-02-15 13:20 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-30 11:43 - 2013-12-03 14:10 - 00001086 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-28 20:36 - 2013-10-15 23:04 - 01103068 _____ C:\Windows\PFRO.log
2014-01-28 20:27 - 2014-01-28 20:25 - 01061566 _____ C:\ProgramData\LuUninstall.LiveUpdate
2014-01-28 20:27 - 2007-02-15 13:41 - 00000000 ____D C:\Program Files\Symantec
2014-01-28 20:27 - 2007-02-15 13:41 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2014-01-28 20:04 - 2014-01-28 19:25 - 00000000 ____D C:\comintrepair
2014-01-28 19:45 - 2014-01-28 19:45 - 00053248 _____ C:\Windows\system32\zlib.dll
2014-01-28 19:45 - 2014-01-28 19:45 - 00000000 ____D C:\Support
2014-01-28 19:16 - 2014-01-18 00:33 - 00000000 ____D C:\ProgramData\Norton
2014-01-28 19:13 - 2013-12-03 14:43 - 00000838 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-28 19:10 - 2014-01-28 19:10 - 00000116 _____ C:\Users\Public\Desktop\NortonIdentitySafe.url
2014-01-28 19:03 - 2007-02-15 21:58 - 00000000 ___HD C:\hp
2014-01-28 19:03 - 2007-02-15 13:31 - 00000000 ____D C:\ProgramData\Adobe
2014-01-28 19:03 - 2007-02-15 13:31 - 00000000 ____D C:\Program Files\Common Files\Adobe
2014-01-28 19:03 - 2007-02-15 13:31 - 00000000 ____D C:\Program Files\Adobe
2014-01-28 19:02 - 2013-12-04 23:41 - 00000000 ____D C:\Users\Trama\AppData\Local\Adobe
2014-01-28 15:49 - 2013-12-03 14:00 - 00000680 _____ C:\Users\Trama\AppData\Local\d3d9caps.dat
2014-01-28 15:28 - 2014-01-28 15:28 - 00000000 ____D C:\FRST
2014-01-28 15:24 - 2014-01-30 17:48 - 01136640 _____ (Farbar) C:\Users\Trama\Desktop\FRST.exe
2014-01-28 15:03 - 2014-01-28 13:21 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-01-28 14:52 - 2014-01-28 12:42 - 00000000 ____D C:\Users\Trama\Desktop\Nueva carpeta
2014-01-28 14:48 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2014-01-28 14:48 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\system32\de
2014-01-28 14:48 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\de-DE
2014-01-28 14:48 - 2006-11-02 13:42 - 00000000 ____D C:\Windows\WindowsMobile
2014-01-28 14:48 - 2006-11-02 13:42 - 00000000 ____D C:\Windows\system32\WCN
2014-01-28 14:48 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Defender
2014-01-28 14:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2014-01-28 14:48 - 2006-11-02 12:18 - 00000000 ____D C:\Program Files\Common Files\System
2014-01-28 14:47 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\system32\Windows System Resource Manager
2014-01-28 14:47 - 2014-01-28 14:47 - 00000000 ____D C:\Windows\system32\0407
2014-01-28 14:47 - 2006-11-02 13:42 - 00000000 ____D C:\Windows\system32\winrm
2014-01-28 14:47 - 2006-11-02 13:42 - 00000000 ____D C:\Windows\system32\slmgr
2014-01-28 14:47 - 2006-11-02 13:42 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\DigitalLocker
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Sidebar
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Photo Gallery
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Journal
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Collaboration
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Windows Calendar
2014-01-28 14:47 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Movie Maker
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Web
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\MUI
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\inetsrv
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\com
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\MSAgent
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\IME
2014-01-28 14:47 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Help
2014-01-28 14:46 - 2014-01-28 14:46 - 00000000 ____D C:\Windows\system32\Vistalizator
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____D C:\Users\Trama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-01-28 13:46 - 2014-01-28 13:46 - 00000000 ____D C:\Program Files\Unlocker
2014-01-28 13:32 - 2013-10-15 18:18 - 00072760 _____ C:\Users\Trama\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-28 13:31 - 2006-11-02 13:47 - 00289664 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-28 13:20 - 2006-11-02 13:52 - 00040282 _____ C:\Windows\setupact.log
2014-01-28 13:14 - 2014-01-28 13:14 - 00000207 _____ C:\Windows\tweaking.com-regbackup-TRAMA-PC-Microsoft®-Windows-Vista™-Home-Premium-(32-bit).dat
2014-01-28 13:13 - 2014-01-28 13:13 - 00000000 ____D C:\RegBackup
2014-01-28 12:58 - 2014-01-28 12:58 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2014-01-28 12:58 - 2014-01-28 12:58 - 00000000 ____D C:\Users\Trama\AppData\Roaming\Malwarebytes
2014-01-28 12:57 - 2014-01-28 12:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 12:47 - 2014-01-28 12:44 - 00000000 ____D C:\AdwCleaner
2014-01-28 00:46 - 2013-10-15 18:14 - 00001046 _____ C:\Users\Trama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk
2014-01-28 00:42 - 2013-12-23 21:20 - 00000000 ____D C:\Users\Trama\Desktop\almu
2014-01-26 23:14 - 2014-01-25 23:55 - 00000000 ____D C:\Users\Trama\Desktop\Natur
2014-01-23 22:44 - 2014-01-23 22:44 - 00000000 ____D C:\Users\Trama\AppData\Local\CrashDumps
2014-01-19 20:15 - 2014-01-19 20:11 - 00040960 _____ C:\Users\Trama\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-18 10:02 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\NDF
2014-01-18 00:34 - 2007-02-15 13:41 - 00142936 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2014-01-18 00:34 - 2007-02-15 13:41 - 00008194 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2014-01-17 23:49 - 2007-02-15 13:41 - 00000000 ____D C:\ProgramData\Symantec
2014-01-17 23:38 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-17 23:36 - 2014-01-17 23:35 - 00401768 _____ (Softonic                                        ) C:\Users\Trama\Downloads\SoftonicDownloader_para_avira-free-antivirus.exe
2014-01-17 22:10 - 2014-01-09 22:12 - 00000000 ____D C:\Users\Trama\Desktop\Monochrome Laboratory
2014-01-17 11:29 - 2013-12-04 19:42 - 00000000 ____D C:\Users\Trama\AppData\Roaming\Adobe
2014-01-16 22:10 - 2014-01-16 22:09 - 00660232 _____ (VLC Player) C:\Users\Trama\Downloads\FlvPlayer.exe
2014-01-16 11:46 - 2013-12-03 14:11 - 00001971 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-16 03:03 - 2013-12-05 03:02 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 03:00 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-01-15 17:25 - 2014-01-15 17:23 - 36599466 _____ C:\Users\Trama\Downloads\mauro (1).zip
2014-01-14 17:23 - 2014-01-14 17:23 - 01585400 _____ C:\Users\Trama\Desktop\Falling Ethics 002.tif
2014-01-14 17:22 - 2014-01-14 17:22 - 01585380 _____ C:\Users\Trama\Desktop\Falling Ethics 002. Foto
2014-01-13 00:50 - 2014-01-13 00:50 - 07647728 _____ C:\Users\Trama\Downloads\1.0.tif
2014-01-13 00:50 - 2013-12-28 20:28 - 00018361 _____ C:\Users\Trama\Downloads\Cleopatra.avi
2014-01-13 00:34 - 2014-01-13 00:33 - 829256062 _____ C:\Users\Trama\Desktop\Monochrome Laboratory.zip
2014-01-12 14:23 - 2012-04-03 16:12 - 130265672 _____ C:\Users\Trama\Desktop\Area51_2_Master_48_24.wav
2014-01-12 14:23 - 2012-04-03 15:48 - 99855170 _____ C:\Users\Trama\Desktop\Area51_1_Master_48_24.wav
2014-01-12 14:23 - 2011-09-06 23:00 - 75988654 _____ C:\Users\Trama\Desktop\DJF LIGHT OF BUDA.aif
2014-01-12 14:23 - 2011-09-06 22:49 - 72333528 _____ C:\Users\Trama\Desktop\DJF AREA.aif
2014-01-12 13:23 - 2014-01-12 13:21 - 358874085 _____ C:\Users\Trama\Downloads\Archivo comprimido.zip
2014-01-11 22:00 - 2014-01-11 20:55 - 130505172 _____ C:\Users\Trama\Desktop\Doctrine - video.mov
2014-01-11 21:20 - 2014-01-11 21:20 - 33528043 _____ C:\Users\Trama\Desktop\Detroit Underground.zip
2014-01-11 21:18 - 2013-12-26 21:01 - 00000000 ____D C:\Users\Trama\Desktop\Detroit Underground
2014-01-11 02:51 - 2014-01-11 01:38 - 00000000 ____D C:\Users\Trama\Desktop\Neu
2014-01-11 02:37 - 2014-01-11 02:37 - 89654112 _____ C:\Users\Trama\Downloads\Dubit_-_1N50MN14_(Original_Mix)_MASTER_Soluxion_Lab.wav
2014-01-10 23:03 - 2014-01-10 22:53 - 00000000 ____D C:\Users\Trama\Desktop\PSK Podcast
2014-01-09 22:11 - 2014-01-09 22:09 - 00000000 ____D C:\Users\Trama\Desktop\Anita+
2014-01-09 21:08 - 2014-01-09 21:07 - 151028642 _____ C:\Users\Trama\Downloads\almu.zip
2014-01-09 14:31 - 2013-10-19 17:18 - 00000049 __RSH C:\Users\Public\Documents\HBEPGUID.TXT
2014-01-08 16:23 - 2014-01-08 16:23 - 00000000 ____D C:\Users\Trama\Documents\AdobeStockPhotos
2014-01-08 03:13 - 2014-01-08 00:54 - 419430400 _____ C:\Users\Trama\Downloads\APEV11Multi.part2.rar
2014-01-07 21:22 - 2014-01-07 21:22 - 00002028 _____ C:\Users\Trama\Desktop\Continue installation - FlashPlayer.lnk
2014-01-07 21:18 - 2014-01-07 18:59 - 419430400 _____ C:\Users\Trama\Downloads\APEV11Multi.part1.rar
2014-01-07 19:41 - 2014-01-07 19:41 - 00000000 ____D C:\Users\Trama\Desktop\Native.Instruments.Traktor.2.v2.6.6.R308-CHAOS
2014-01-07 19:19 - 2014-01-07 18:49 - 165162240 _____ C:\Users\Trama\Downloads\Native.Instruments.Traktor.2.v2.6.6.R308-CHAOS.rar
2014-01-07 18:43 - 2014-01-07 18:43 - 00000000 ____D C:\Program Files\Native Instruments
2014-01-06 22:39 - 2014-01-06 22:39 - 00000496 _____ C:\Users\Trama\Desktop\MVI_7240.MOV - Acceso directo.lnk
2014-01-01 18:39 - 2014-01-01 17:54 - 138317921 _____ C:\Users\Trama\Downloads\insid.rar

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 17:50

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-01-2014 03
Ran by Trama at 2014-01-30 18:04:12
Running from C:\Users\Trama\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Bridge 1.0 (Version: 001.000.000 - Adobe Systems) Hidden
Adobe Common File Installer (Version: 1.00.0000 - Adobe System Incorporated) Hidden
Adobe Creative Suite 2 (Version:  - )
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (Version: 001.000.000 - Adobe Systems) Hidden
Adobe Photoshop CS2 (Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Stock Photos 1.0 (Version: 001.000.000 - Adobe Systems) Hidden
Cards_Calendar_OrderGift_DoMorePlugout (Version: 1.00.0000 - Hewlett-Packard) Hidden
CyberLink DVD Suite Deluxe (Version: 5.5.1126 - CyberLink Corp.)
Google Chrome (Version: 32.0.1700.76 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Herramientas de diagnóstico de hardware (Version: 5.1.4708.19 - PC-Doctor, Inc.)
Hewlett-Packard Active Check (Version: 1.1.11.0 - Hewlett-Packard) Hidden
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.62.5 - HP) Hidden
HP Customer Experience Enhancements (Version: 5.6.0.2499 - Hewlett-Packard)
HP Customer Feedback (Version: 1.0.0 - Hewlett-Packard) Hidden
HP Easy Setup - Frontend (Version: 5.6.0.2542 - Hewlett-Packard)
HP On-Screen Cap/Num/Scroll Lock Indicator (Version:  - Hewlett-Packard)
HP Photosmart Essential 2.5 (Version: 1.02.0000 - Hewlett-Packard) Hidden
HP Photosmart Essential 2.5 (Version: 2.5 - HP)
HP Total Care Advisor (Version: 1.6.12.2542 - Hewlett-Packard)
HP Update (Version: 4.000.007.003 - Hewlett-Packard)
HPPhotoSmartPhotobookWebPack1 (Version: 1.00.0000 - Hewlett-Packard) Hidden
Intel(R) Matrix Storage Manager (Version:  - )
ISO to USB version 1.0 (Version: 1.0 - isotousb.com)
LabelPrint (Version: 2.2.2329 - CyberLink Corp.)
LightScribe System Software  1.10.23.1 (Version: 1.10.23.1 - hxxp://www.lightscribe.com)
Microsoft .NET Framework 3.5 Language Pack SP1 - esn (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile ESN Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (Spanish) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Works (Version: 9.7.0621 - Microsoft Corporation)
muvee autoProducer 6.1 (Version: 6.10.050 - muvee Technologies)
My HP Games (Version: HPCMPQ1902 - WildTangent)
NVIDIA Controlador de audio HD 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Controlador de gráficos 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Controlador de la controladora 3D Vision 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden
Panel de control de NVIDIA 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
Paquete de compatibilidad para 2007 Office system (Version: 12.0.4518.1014 - Microsoft Corporation)
Paquete de idioma de Microsoft .NET Framework 3.5 SP1 - esn (Version:  - Microsoft Corporation)
Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN (Version: 4.0.30319 - Microsoft Corporation)
Power2Go (Version: 5.6.3610 - CyberLink Corp.)
PowerDirector (Version: 6.5.2420 - CyberLink Corp.)
PowerDirector (Version: 6.5.2420 - CyberLink Corp.) Hidden
PSSWCORE (Version: 2.02.0000 - Hewlett-Packard) Hidden
Python 2.5 (Version: 2.5.150 - Martin v. Löwis)
Realtek High Definition Audio Driver (Version:  - )
Suite Specific (Version: 2.0.0 - Adobe Systems, Incorporated) Hidden
Unlocker 1.9.2 (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Versión de prueba de Microsoft Office Home and Student 2007 (Version:  - )
VideoToolkit01 (Version: 100.0.128.000 - Hewlett-Packard) Hidden
Windows 7 USB/DVD Download Tool (Version: 1.0.30 - Microsoft Corporation)

==================== Restore Points  =========================

09-01-2014 02:27:56 Punto de control programado
10-01-2014 00:33:37 Punto de control programado
10-01-2014 15:28:54 Punto de control programado
11-01-2014 04:03:50 Punto de control programado
13-01-2014 03:04:48 Punto de control programado
13-01-2014 22:22:39 Punto de control programado
14-01-2014 15:35:45 Windows Update
16-01-2014 02:00:10 Windows Update
17-01-2014 02:20:42 Punto de control programado
17-01-2014 22:55:19 avast! antivirus system restore point
17-01-2014 23:24:06 Removed Avira SearchFree Toolbar
17-01-2014 23:25:40 Removed Avira SearchFree Toolbar
18-01-2014 08:54:27 Removed Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
19-01-2014 18:15:56 Punto de control programado
20-01-2014 16:49:29 Punto de control programado
21-01-2014 19:30:18 Punto de control programado
22-01-2014 17:20:51 Punto de control programado
24-01-2014 17:33:57 Punto de control programado
26-01-2014 16:08:12 Instalación del paquete de controladores de dispositivo: Microsoft Protocolo de red
26-01-2014 16:10:30 Instalación del paquete de controladores de dispositivo: Realtek Protocolo de red
28-01-2014 11:58:00 Removed Java(TM) SE Runtime Environment 6 Update 1
28-01-2014 12:12:52 Tweaking.com - Windows Repair
28-01-2014 13:52:48 Gerätetreiber-Paketinstallation: Realtek Netzwerkadapter
28-01-2014 17:51:58 Installed Microsoft Fix it 50357
28-01-2014 18:01:56 Adobe Reader 8.1.0 - Español wird entfernt
28-01-2014 19:25:38 Removed LiveUpdate (Symantec Corporation)
30-01-2014 11:03:42 Gerätetreiber-Paketinstallation: 3Com Netzwerkadapter

==================== Hosts content: ==========================

2006-11-02 11:23 - 2014-01-28 20:19 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost
::1            localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {008E2E6E-5BD7-4154-A63C-16DBC214DB20} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-03] (Google Inc.)
Task: {12E720BA-5368-4021-BE3F-4944D108CE77} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3673613F-6E3E-4BB7-98C2-73BF3355CECE} - System32\Tasks\PC-Doctor\Scheduled Maintenance => C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe [2007-10-04] (PC-Doctor, Inc.)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3F72603C-5C16-4EAB-B881-3903AEE8DCB0} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-18] (Microsoft Corporation)
Task: {868A16F9-31B6-4B4C-9270-F204CCB621D0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {A489D448-AA93-4426-9922-5D93CF3DB274} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries
Task: {A75B10C2-9230-445F-A881-1D2E5CBC8D04} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {ACAA2CEA-2AD4-45D2-A4B3-2ED04C00EA32} - System32\Tasks\JavaUpdateAdministrator => C:\Windows\system32\jusched.exe
Task: {B8FC083E-ADB9-491A-B62B-8063A0FB6EF7} - System32\Tasks\ExtendedServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {BD6907CF-1AA3-4B0C-9766-0A3EA765E025} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-03] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: {ED784881-F87F-4E4A-9E0D-ED9E7D9D4EB4} - System32\Tasks\PC-Doctor\Scheduled Maintenance Swap => C:\Program Files\PC-Doctor 5 for Windows\task_swap.bat [2007-02-15] ()
Task: {FB134395-0E83-49B6-9EFF-8BEED4E1D88A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-18] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-07-04 22:32 - 2010-07-04 22:32 - 00010752 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2008-01-18 18:21 - 2008-01-18 18:21 - 00057344 _____ () C:\Program Files\Hewlett-Packard\HP Advisor\Pillars\PCAlerts\PCAlertsPillar.dll
2008-01-18 18:20 - 2008-01-18 18:20 - 00040960 _____ () C:\Program Files\Hewlett-Packard\HP Advisor\MessagingServer.dll
2008-01-18 18:20 - 2008-01-18 18:20 - 00006144 _____ () C:\Program Files\Hewlett-Packard\HP Advisor\MessagingInterface.dll
2008-01-18 18:20 - 2008-01-18 18:20 - 00028672 _____ () C:\Program Files\Hewlett-Packard\HP Advisor\MessagingMessages.dll
2013-12-03 15:52 - 2009-04-10 23:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll
2008-01-18 18:21 - 2008-01-18 18:21 - 00036864 _____ () C:\Program Files\Hewlett-Packard\HP Advisor\MessagingClients.dll
2008-01-18 18:21 - 2008-01-18 18:21 - 00007168 _____ () C:\Program Files\Hewlett-Packard\HP Advisor\RemotingClient.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Trama\Downloads\Cleopatra.avi:TOC.WMV

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Realtek RTL8168C/8111C Family PCI-E Gigabit Ethernet NIC (NDIS 6.0) #2
Description: Realtek RTL8168C/8111C Family PCI-E Gigabit Ethernet NIC (NDIS 6.0)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8169
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/30/2014 00:03:43 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 08:25:38 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 07:47:17 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (User: NT-AUTORITÄT)
Description: 0x80072af9

Error: (01/28/2014 07:02:05 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 06:52:04 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 03:32:18 PM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt) (User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6002.22213_NONE_4468964BD78652FB\WGXINSTALLEDGAME.MOF

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt) (User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6002.18101_NONE_43E7C8D8BE626492\WGXINSTALLEDGAME.MOF

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt) (User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6001.22509_NONE_4292F60BDA5279F0\WGXINSTALLEDGAME.MOF

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt) (User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6001.18320_NONE_41EAB4E8C14D30D2\WGXINSTALLEDGAME.MOF


System errors:
=============
Error: (01/30/2014 00:07:36 PM) (Source: Service Control Manager) (User: )
Description: i8042prt

Error: (01/28/2014 08:37:53 PM) (Source: Service Control Manager) (User: )
Description: i8042prt

Error: (01/28/2014 08:14:41 PM) (Source: Service Control Manager) (User: )
Description: i8042prt

Error: (01/28/2014 08:06:16 PM) (Source: Service Control Manager) (User: )
Description: i8042prt

Error: (01/28/2014 07:51:17 PM) (Source: Service Control Manager) (User: )
Description: i8042prt

Error: (01/28/2014 07:48:08 PM) (Source: Service Control Manager) (User: )
Description: Druckwarteschlange1600001Neustart des Diensts

Error: (01/28/2014 07:48:08 PM) (Source: Service Control Manager) (User: )
Description: i8042prt

Error: (01/28/2014 07:48:08 PM) (Source: Service Control Manager) (User: )
Description: Windows Media Player-NetzwerkfreigabedienstUPnP-Gerätehost%%1068

Error: (01/28/2014 07:48:08 PM) (Source: Service Control Manager) (User: )
Description: UPnP-GerätehostSSDP-Suche%%1062

Error: (01/28/2014 07:48:08 PM) (Source: Service Control Manager) (User: )
Description: Windows Media Player-NetzwerkfreigabedienstUPnP-Gerätehost%%1068


Microsoft Office Sessions:
=========================
Error: (01/30/2014 00:03:43 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 08:25:38 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 07:47:17 PM) (Source: Microsoft-Windows-SpoolerSpoolss)(User: NT-AUTORITÄT)
Description: 0x80072af9

Error: (01/28/2014 07:02:05 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 06:52:04 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service FontCache since QueryServiceConfig API failed

System Error:
Das Ressourcenladeprogramm konnte die MUI-Datei nicht finden.

Error: (01/28/2014 03:32:18 PM) (Source: EventSystem)(User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt)(User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6002.22213_NONE_4468964BD78652FB\WGXINSTALLEDGAME.MOF

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt)(User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6002.18101_NONE_43E7C8D8BE626492\WGXINSTALLEDGAME.MOF

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt)(User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6001.22509_NONE_4292F60BDA5279F0\WGXINSTALLEDGAME.MOF

Error: (01/28/2014 03:00:39 PM) (Source: WinMgmt)(User: )
Description: 0x8004401eC:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\D7480A065993D63DCAB7527FA2107FEE\X86_MICROSOFT-WINDOWS-GAMEEXPLORER_31BF3856AD364E35_6.0.6001.18320_NONE_41EAB4E8C14D30D2\WGXINSTALLEDGAME.MOF


CodeIntegrity Errors:
===================================
  Date: 2014-01-30 18:04:08.830
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:04:08.727
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:04:08.623
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:04:08.519
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:03:59.900
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:03:59.794
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:03:59.668
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 18:03:59.523
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-28 17:59:04.227
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-28 17:59:04.118
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\WINDOWS\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 3582.39 MB
Available physical RAM: 2637.49 MB
Total Pagefile: 7349.77 MB
Available Pagefile: 6383.11 MB
Total Virtual: 2047.88 MB
Available Virtual: 1945.62 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:455.74 GB) (Free:342.86 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:10.02 GB) (Free:1.35 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (DUNED1_SCN) (CDROM) (Total:6.98 GB) (Free:0 GB) UDF
Drive j: () (Removable) (Total:1.85 GB) (Free:0.19 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 67222EC9)
Partition 1: (Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 2 GB) (Disk ID: C55D4D7D)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)

==================== End Of Log ============================

cosinus 30.01.2014 20:31
Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.






Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

MightyMarc 30.01.2014 21:11
Kannst Du den DHCP anpingen?

Edit: Und um es rund zu machen: Findet sich in den Logs des DHCP-Servers ein Hinweis?

namor82 30.01.2014 23:07
nein den dhcp kann ich auch nicht anpingen habe ich versucht.
wo finde ich denn die logs vom dhcp ?


EDIT:
Die logs von FSS und MBAR werde ich morgen früh uploaden

MightyMarc 30.01.2014 23:59
Zitat:
Zitat von namor82 (Beitrag 1242946)
nein den dhcp kann ich auch nicht anpingen habe ich versucht.
wo finde ich denn die logs vom dhcp ?
Folge erstmal cosinus' Anweisungen.

Falls dabei nichts rausskommt: lässt sich der Router von einem anderem System aus erreichen (pingen oder sogar DHCP-Handshake?)?

Mighty

namor82 01.02.2014 00:20
Bin den Anweisungen gefolgt hat aber nix gebracht.
Das System ist irgendwie kaputt habe es jetzt neuinstalliert.
Danke für die Hilfe

cosinus 01.02.2014 01:27
Zitat:
Bin den Anweisungen gefolgt hat aber nix gebracht.
Du solltest ja auch die Logs posten :stirn:
Dass nach dem Ausführen alles okay sein wird hat niemand behauptet

Zitat:
Das System ist irgendwie kaputt habe es jetzt neuinstalliert.
immerhin :daumenhoc


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:10 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19