| Disziplinar | 02.08.2013 13:53 |
Sorry Du willst ja das FRST Log.....mache ich gleich.
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-08-2013 01
Ran by Michael (administrator) on 02-08-2013 14:32:15
Running from C:\Dokumente und Einstellungen\Michael\Desktop
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe
() C:\Programme\Canon\IJPLM\IJPLMSVC.EXE
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
() C:\Programme\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\WINDOWS\system32\locator.exe
() C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\IE\SumatraPDFUpdater.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Programme\Microsoft Security Client\msseces.exe
(Cyberlink Corp.) C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
(PixArt Imaging Incorporation) C:\WINDOWS\Philips\SPC500NC\Monitor.exe
(Sun Microsystems, Inc.) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(CANON INC.) C:\Programme\Canon\MyPrinter\BJMyPrt.exe
(CANON INC.) C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE
(Facebook Inc.) C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
(Secure Banking) C:\Programme\Secure Banking\SecureBanking.exe
(Skype Technologies S.A.) C:\Programme\Skype\Phone\Skype.exe
() C:\Programme\Secure Banking\sbservice.exe
(SurfRight B.V.) C:\Programme\HitmanPro\hmpsched.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Programme\Microsoft Security Client\msseces.exe [997920 2011-06-15] (Microsoft Corporation)
HKLM\...\Run: [RemoteControl] - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [32768 2005-01-12] (Cyberlink Corp.)
HKLM\...\Run: [SPC500NC_Monitor] - C:\WINDOWS\Philips\SPC500NC\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254696 2011-06-09] (Sun Microsystems, Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Programme\Canon\MyPrinter\BJMyPrt.exe [2569616 2010-07-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM\...\Runonce: [Del4614828] - cmd.exe /Q /D /c del "C:\DOKUME~1\Michael\LOKALE~1\Temp\0.del" [x]
HKCU\...\Run: [Facebook Update] - C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe [138096 2012-11-16] (Facebook Inc.)
HKCU\...\Run: [Adobe Reader Synchronizer] - C:\Programme\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1272912 2013-05-10] (Adobe Systems Incorporated)
HKCU\...\Run: [SecureBanking] - C:\Programme\Secure Banking\SecureBanking.exe [507904 2013-07-02] (Secure Banking)
HKCU\...\Run: [Skype] - C:\Programme\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [CrossRiderPlugin] - C:\Programme\CrossriderWebApps\Crossrider.exe [x]
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * bootdelete
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=507A003005BF529E&affID=119357&tsp=4962
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=507A003005BF529E&affID=119357&tsp=4962
SearchScopes: HKCU - {14FECBD7-1995-4379-B068-1AF13722311D} URL = hxxp://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKCU - {CB110068-E6B5-4561-A31E-513206548568} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie8
SearchScopes: HKCU - {CB80852D-9760-4563-AD25-A709656DEAD6} URL = hxxp://rover.ebay.com/rover/1/707-37276-23097-0/4?satitle={searchTerms}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll No File
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll No File
BHO: SumatraPDF - {EA58BBDF-F45C-4F28-8E52-CD5AA70D2C1E} - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\IE\SumatraPDF.dll (Krzysztof Kowalczyk)
BHO: DealPly - {EF7BD87A-8024-11E2-F316-F3E56188709B} - C:\Programme\DealPly\DealPlyIE.dll (DealPly)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU -&Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
Handler: ipp - No CLSID Value -
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default
FF user.js: detected! => C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @canon.com/EPPEX - C:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Programme\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF SearchPlugin: C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Microsoft Choice Guard - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\ChoiceGuard@Microsoft
FF Extension: Babylon - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\ffxtlbr@babylon(2).com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\ich@maltegoetz.de
FF Extension: toolplugin - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\welcome@toolmin(2).com
FF Extension: Zula Games - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\zulagames@ZulaGames.com
FF Extension: Yahoo! Toolbar - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF Extension: WOT - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: No Name - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\firejump_1027.zip
FF Extension: No Name - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
FF Extension: Default - C:\Programme\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [crossriderapp435@crossrider.com] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CodecCheck\firefox
FF Extension: No Name - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CodecCheck\firefox
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: No Name - C:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR Extension: (YouTube) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (DealPly Shopping ) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\fmfnfnpmhcllokmkepffndflpnadjmma\3.5.0.0_0
CHR Extension: () - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.5
CHR Extension: (SumatraPDF) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ibhppgjkanllkaefhbhloijppmjnfmje\2.0.18_0
CHR Extension: (Gmail) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [gflandjopdloblmlcoiidmncpinmmacn] - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\zulagames\zulagames.crx
CHR HKLM\...\Chrome\Extension: [ibhppgjkanllkaefhbhloijppmjnfmje] - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\CHROME\SumatraPDF.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Programme\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
========================== Services (Whitelisted) =================
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2012-05-27] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2012-05-27] (Google Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [136120 2011-02-08] (Google)
R2 HitmanProScheduler; C:\Programme\HitmanPro\hmpsched.exe [106280 2013-08-02] (SurfRight B.V.)
R2 IJPLMSVC; C:\Programme\Canon\IJPLM\IJPLMSVC.EXE [137680 2010-07-27] ()
R2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation)
R2 MsMpSvc; c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe [11736 2011-04-27] (Microsoft Corporation)
R2 NMSAccess; C:\Programme\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [162408 2013-06-21] (Skype Technologies)
R2 SumatraPDFUpdater; C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\IE\SumatraPDFUpdater.exe [18432 2012-05-10] ()
S2 JavaQuickStarterService; "C:\Programme\Java\jre6\bin\jqs.exe" -service -config "C:\Programme\Java\jre6\lib\deploy\jqs\jqs.conf" [x]
S3 McComponentHostService; "C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe" [x]
==================== Drivers (Whitelisted) ====================
R3 ALCXSENS; C:\Windows\System32\drivers\ALCXSENS.SYS [400384 2011-07-29] (Sensaura)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [626977 2011-07-29] (Realtek Semiconductor Corp.)
R3 AN983; C:\Windows\System32\DRIVERS\AN983.sys [36224 2004-08-03] (ADMtek Incorporated.)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [165648 2011-04-18] (Microsoft Corporation)
S3 NABTSFEC; C:\Windows\System32\DRIVERS\NABTSFEC.sys [85248 2008-04-13] (Microsoft Corporation)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 SLIP; C:\Windows\System32\DRIVERS\SLIP.sys [11136 2008-04-13] (Microsoft Corporation)
R3 SPC500NC; C:\Windows\System32\DRIVERS\SPC500NC.SYS [409600 2007-06-21] (PixArt Imaging Inc.)
R2 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 streamip; C:\Windows\System32\DRIVERS\StreamIP.sys [15232 2008-04-13] (Microsoft Corporation)
S3 WSTCODEC; C:\Windows\System32\DRIVERS\WSTCODEC.SYS [19200 2008-04-13] (Microsoft Corporation)
S3 catchme; \??\C:\DOKUME~1\Michael\LOKALE~1\Temp\catchme.sys [x]
S4 IntelIde; No ImagePath
S1 jzwsxyxj; \??\C:\WINDOWS\system32\drivers\jzwsxyxj.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 massfilter_hs; system32\drivers\massfilter_hs.sys [x]
S3 papycpu; No ImagePath
S0 PxHelp20; System32\Drivers\PxHelp20.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-02 14:29 - 2013-08-02 14:30 - 01222124 _____ (Farbar) C:\Dokumente und Einstellungen\Michael\Desktop\FRST.exe
2013-08-02 14:12 - 2013-08-02 14:12 - 00000566 _____ C:\WINDOWS\system32\bootdelete.lst
2013-08-02 13:26 - 2013-08-02 13:48 - 00001600 _____ C:\Dokumente und Einstellungen\All Users\Desktop\HitmanPro.lnk
2013-08-02 13:26 - 2013-08-02 13:26 - 00000000 ____D C:\Programme\HitmanPro
2013-08-02 13:16 - 2013-08-02 13:16 - 09158600 _____ (SurfRight B.V.) C:\Dokumente und Einstellungen\Michael\Desktop\HitmanPro.exe
2013-08-02 13:14 - 2013-08-02 13:20 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\BabSolution
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Startmenü\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Babylon
2013-08-01 23:42 - 2013-08-02 14:12 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-08-01 22:39 - 2013-08-01 22:40 - 00012632 _____ C:\AdwCleaner[S4].txt
2013-08-01 22:39 - 2013-08-01 22:39 - 00012480 _____ C:\AdwCleaner[R3].txt
2013-08-01 22:19 - 2013-08-01 22:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Qtrax
2013-08-01 22:12 - 2013-08-01 22:12 - 00000000 ____D C:\Programme\Microsoft Silverlight
2013-08-01 22:11 - 2013-08-01 22:11 - 00000422 _____ C:\WINDOWS\Tasks\At1.job
2013-08-01 22:11 - 2013-08-01 22:11 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DigitalSite
2013-08-01 21:53 - 2013-08-01 21:53 - 00562430 _____ (Oleg N. Scherbakov) C:\Dokumente und Einstellungen\Michael\Desktop\JRT.exe
2013-08-01 21:53 - 2013-08-01 21:53 - 00000000 ____D C:\WINDOWS\ERUNT
2013-08-01 21:41 - 2013-08-01 21:42 - 00021840 _____ C:\AdwCleaner[S3].txt
2013-08-01 21:41 - 2013-08-01 21:41 - 00021896 _____ C:\AdwCleaner[R2].txt
2013-08-01 21:37 - 2013-08-01 21:37 - 00000356 _____ C:\AdwCleaner[S2].txt
2013-08-01 21:36 - 2013-08-01 21:37 - 00021776 _____ C:\AdwCleaner[R1].txt
2013-08-01 21:28 - 2013-08-01 21:29 - 00666633 _____ C:\Dokumente und Einstellungen\Michael\Desktop\adwcleaner.exe
2013-08-01 21:07 - 2013-08-01 21:07 - 00010271 _____ C:\ComboFix.txt
2013-08-01 20:41 - 2013-08-01 21:07 - 00000000 ____D C:\Qoobox
2013-08-01 20:41 - 2013-08-01 21:07 - 00000000 ____D C:\ComboFix
2013-08-01 20:41 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-08-01 20:41 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-08-01 20:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-08-01 20:39 - 2013-08-01 20:39 - 05097176 ____R (Swearware) C:\Dokumente und Einstellungen\Michael\Desktop\ComboFix.exe
2013-08-01 16:58 - 2013-08-01 16:59 - 00031569 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Addition.txt.txt
2013-08-01 16:56 - 2013-08-01 16:56 - 00000000 ____D C:\FRST
2013-08-01 16:50 - 2013-08-01 16:50 - 00000476 _____ C:\Dokumente und Einstellungen\Michael\Desktop\defogger_disable.log
2013-08-01 16:50 - 2013-08-01 16:50 - 00000000 _____ C:\Dokumente und Einstellungen\Michael\defogger_reenable
2013-08-01 16:42 - 2013-08-01 16:41 - 00050477 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Defogger.exe
2013-07-29 15:45 - 2013-07-29 15:45 - 00001893 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
2013-07-24 17:00 - 2013-07-24 17:00 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
2013-07-24 17:00 - 2013-07-24 17:00 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
2013-07-24 16:57 - 2013-07-24 16:57 - 00000789 _____ C:\WINDOWS\updspapi.log
2013-07-24 16:56 - 2013-07-24 17:01 - 00014428 _____ C:\WINDOWS\spupdsvc.log
2013-07-24 16:56 - 2013-07-24 16:57 - 00028777 _____ C:\WINDOWS\wmp11Uninst.log
2013-07-18 15:19 - 2013-07-18 15:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\zulagames
2013-07-09 17:06 - 2013-07-09 17:06 - 00000000 ____D C:\Programme\MSECache
==================== One Month Modified Files and Folders =======
2013-08-02 14:30 - 2013-08-02 14:29 - 01222124 _____ (Farbar) C:\Dokumente und Einstellungen\Michael\Desktop\FRST.exe
2013-08-02 14:21 - 2012-05-26 21:50 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-08-02 14:12 - 2013-08-02 14:12 - 00000566 _____ C:\WINDOWS\system32\bootdelete.lst
2013-08-02 14:12 - 2013-08-01 23:42 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-08-02 14:12 - 2011-08-24 15:39 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Skype
2013-08-02 14:00 - 2012-02-04 21:21 - 01330608 _____ C:\WINDOWS\WindowsUpdate.log
2013-08-02 13:48 - 2013-08-02 13:26 - 00001600 _____ C:\Dokumente und Einstellungen\All Users\Desktop\HitmanPro.lnk
2013-08-02 13:42 - 2012-02-03 23:21 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 13:26 - 2013-08-02 13:26 - 00000000 ____D C:\Programme\HitmanPro
2013-08-02 13:26 - 2011-07-29 23:52 - 00000000 ___RD C:\Programme
2013-08-02 13:22 - 2011-07-29 23:10 - 00000000 ___RD C:\Dokumente und Einstellungen\Michael\Startmenü\Programme
2013-08-02 13:20 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\BabSolution
2013-08-02 13:16 - 2013-08-02 13:16 - 09158600 _____ (SurfRight B.V.) C:\Dokumente und Einstellungen\Michael\Desktop\HitmanPro.exe
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Startmenü\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Babylon
2013-08-02 12:18 - 2012-01-08 13:12 - 00001026 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-861567501-2111687655-725345543-1003UA.job
2013-08-02 12:10 - 2011-08-24 00:21 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-08-02 12:09 - 2012-02-03 23:21 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-02 12:04 - 2011-07-30 09:34 - 00000416 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2013-08-02 11:59 - 2011-07-29 23:55 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-08-02 11:59 - 2011-07-29 23:55 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-08-02 11:58 - 2011-07-29 23:08 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-08-02 09:57 - 2011-07-29 23:08 - 00032472 _____ C:\WINDOWS\SchedLgU.Txt
2013-08-01 23:48 - 2011-07-29 23:10 - 00000300 ___SH C:\Dokumente und Einstellungen\Michael\ntuser.ini
2013-08-01 22:41 - 2011-07-29 23:10 - 00000000 ____D C:\Dokumente und Einstellungen\Michael
2013-08-01 22:40 - 2013-08-01 22:39 - 00012632 _____ C:\AdwCleaner[S4].txt
2013-08-01 22:39 - 2013-08-01 22:39 - 00012480 _____ C:\AdwCleaner[R3].txt
2013-08-01 22:19 - 2013-08-01 22:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Qtrax
2013-08-01 22:12 - 2013-08-01 22:12 - 00000000 ____D C:\Programme\Microsoft Silverlight
2013-08-01 22:11 - 2013-08-01 22:11 - 00000422 _____ C:\WINDOWS\Tasks\At1.job
2013-08-01 22:11 - 2013-08-01 22:11 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DigitalSite
2013-08-01 21:56 - 2011-07-29 23:06 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService
2013-08-01 21:53 - 2013-08-01 21:53 - 00562430 _____ (Oleg N. Scherbakov) C:\Dokumente und Einstellungen\Michael\Desktop\JRT.exe
2013-08-01 21:53 - 2013-08-01 21:53 - 00000000 ____D C:\WINDOWS\ERUNT
2013-08-01 21:42 - 2013-08-01 21:41 - 00021840 _____ C:\AdwCleaner[S3].txt
2013-08-01 21:41 - 2013-08-01 21:41 - 00021896 _____ C:\AdwCleaner[R2].txt
2013-08-01 21:40 - 2013-05-18 19:10 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Desktop\MICHAEL PRIVAT
2013-08-01 21:37 - 2013-08-01 21:37 - 00000356 _____ C:\AdwCleaner[S2].txt
2013-08-01 21:37 - 2013-08-01 21:36 - 00021776 _____ C:\AdwCleaner[R1].txt
2013-08-01 21:29 - 2013-08-01 21:28 - 00666633 _____ C:\Dokumente und Einstellungen\Michael\Desktop\adwcleaner.exe
2013-08-01 21:07 - 2013-08-01 21:07 - 00010271 _____ C:\ComboFix.txt
2013-08-01 21:07 - 2013-08-01 20:41 - 00000000 ____D C:\Qoobox
2013-08-01 21:07 - 2013-08-01 20:41 - 00000000 ____D C:\ComboFix
2013-08-01 21:03 - 2001-08-18 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-08-01 20:39 - 2013-08-01 20:39 - 05097176 ____R (Swearware) C:\Dokumente und Einstellungen\Michael\Desktop\ComboFix.exe
2013-08-01 20:01 - 2012-02-04 12:58 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Desktop\Wohnungsdeko
2013-08-01 16:59 - 2013-08-01 16:58 - 00031569 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Addition.txt.txt
2013-08-01 16:56 - 2013-08-01 16:56 - 00000000 ____D C:\FRST
2013-08-01 16:50 - 2013-08-01 16:50 - 00000476 _____ C:\Dokumente und Einstellungen\Michael\Desktop\defogger_disable.log
2013-08-01 16:50 - 2013-08-01 16:50 - 00000000 _____ C:\Dokumente und Einstellungen\Michael\defogger_reenable
2013-08-01 16:41 - 2013-08-01 16:42 - 00050477 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Defogger.exe
2013-08-01 15:18 - 2012-01-08 13:12 - 00001004 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-861567501-2111687655-725345543-1003Core.job
2013-08-01 14:22 - 2001-08-18 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-07-29 16:22 - 2012-11-21 20:13 - 00245248 ___SH C:\Dokumente und Einstellungen\Michael\Desktop\Thumbs.db
2013-07-29 15:45 - 2013-07-29 15:45 - 00001893 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
2013-07-27 21:41 - 2012-11-07 18:42 - 00000276 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-07-26 19:52 - 2012-05-03 11:24 - 00000000 ___RD C:\Programme\Skype
2013-07-25 14:44 - 2011-08-23 07:47 - 00000000 ___RD C:\Dokumente und Einstellungen\Michael\Eigene Dateien\Eigene Musik
2013-07-25 14:38 - 2011-07-29 23:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2229593_0$
2013-07-25 14:08 - 2012-11-14 22:13 - 00000704 _____ C:\WINDOWS\setupact.log
2013-07-24 23:57 - 2011-08-23 09:31 - 00000300 ___SH C:\Dokumente und Einstellungen\marco\ntuser.ini
2013-07-24 21:23 - 2011-07-29 23:36 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-07-24 17:06 - 2013-03-01 18:32 - 00014430 _____ C:\WINDOWS\wmsetup.log
2013-07-24 17:05 - 2012-11-14 20:25 - 00070053 _____ C:\WINDOWS\setupapi.log
2013-07-24 17:01 - 2013-07-24 16:56 - 00014428 _____ C:\WINDOWS\spupdsvc.log
2013-07-24 17:00 - 2013-07-24 17:00 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
2013-07-24 17:00 - 2013-07-24 17:00 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
2013-07-24 17:00 - 2011-07-29 23:10 - 00000778 _____ C:\Dokumente und Einstellungen\Michael\Startmenü\Programme\Windows Media Player.lnk
2013-07-24 17:00 - 2001-08-18 14:00 - 00000877 _____ C:\WINDOWS\win.ini
2013-07-24 16:59 - 2011-08-26 00:29 - 00000000 ____D C:\WINDOWS\SxsCaPendDel
2013-07-24 16:57 - 2013-07-24 16:57 - 00000789 _____ C:\WINDOWS\updspapi.log
2013-07-24 16:57 - 2013-07-24 16:56 - 00028777 _____ C:\WINDOWS\wmp11Uninst.log
2013-07-24 16:57 - 2011-08-24 00:30 - 00000000 ____D C:\Programme\Windows Media Connect 2
2013-07-24 16:57 - 2011-07-30 00:47 - 00000000 ____D C:\WINDOWS\Help
2013-07-24 16:46 - 2011-07-29 23:17 - 00000002 _____ C:\WINDOWS\~sisRslt
2013-07-24 16:45 - 2012-02-04 12:59 - 00000000 ____D C:\Programme\Java
2013-07-24 16:43 - 2012-01-15 23:04 - 00000000 ____D C:\WINDOWS\system32\Adobe
2013-07-24 16:43 - 2011-07-29 23:27 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Adobe
2013-07-18 16:34 - 2011-08-22 17:37 - 00000000 ___RD C:\Dokumente und Einstellungen\Michael\Eigene Dateien\Eigene Bilder
2013-07-18 15:19 - 2013-07-18 15:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\zulagames
2013-07-16 18:47 - 2013-05-18 18:42 - 00024064 ____H C:\Dokumente und Einstellungen\Michael\Desktop\~WRL0142.tmp
2013-07-10 10:12 - 2011-07-29 23:23 - 00001988 _____ C:\WINDOWS\epplauncher.mif
2013-07-10 09:01 - 2011-07-29 23:51 - 00145216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-07-09 17:08 - 2011-10-04 13:45 - 00025688 _____ C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2013-07-09 17:07 - 2011-07-30 11:04 - 00000000 ____D C:\Programme\Microsoft Office
2013-07-09 17:07 - 2011-07-29 23:52 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Microsoft Shared
2013-07-09 17:06 - 2013-07-09 17:06 - 00000000 ____D C:\Programme\MSECache
Files to move or delete:
====================
C:\Windows\Tasks\At1.job
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2004-08-04 01:57] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e
C:\Windows\System32\winlogon.exe
[2004-08-04 01:58] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a
C:\Windows\System32\svchost.exe
[2004-08-04 01:58] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366
C:\Windows\System32\services.exe
[2004-08-04 01:58] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc
C:\Windows\System32\User32.dll
[2004-08-04 01:57] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd
C:\Windows\System32\userinit.exe
[2004-08-04 01:58] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-04 01:44] - [2008-04-14 03:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d
==================== End Of Log ==================
--- --- ---
--- --- ---
--- --- ---
--- --- ---
Jetzt noch einmal scannen und den Haken anmachen auf Addition.txt..?
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-08-2013 01
Ran by Michael (administrator) on 02-08-2013 14:47:24
Running from C:\Dokumente und Einstellungen\Michael\Desktop
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe
() C:\Programme\Canon\IJPLM\IJPLMSVC.EXE
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
() C:\Programme\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\WINDOWS\system32\locator.exe
() C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\IE\SumatraPDFUpdater.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Programme\Microsoft Security Client\msseces.exe
(Cyberlink Corp.) C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
(PixArt Imaging Incorporation) C:\WINDOWS\Philips\SPC500NC\Monitor.exe
(Sun Microsystems, Inc.) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(CANON INC.) C:\Programme\Canon\MyPrinter\BJMyPrt.exe
(CANON INC.) C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE
(Facebook Inc.) C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
(Secure Banking) C:\Programme\Secure Banking\SecureBanking.exe
(Skype Technologies S.A.) C:\Programme\Skype\Phone\Skype.exe
() C:\Programme\Secure Banking\sbservice.exe
(SurfRight B.V.) C:\Programme\HitmanPro\hmpsched.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Programme\Microsoft Security Client\msseces.exe [997920 2011-06-15] (Microsoft Corporation)
HKLM\...\Run: [RemoteControl] - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [32768 2005-01-12] (Cyberlink Corp.)
HKLM\...\Run: [SPC500NC_Monitor] - C:\WINDOWS\Philips\SPC500NC\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254696 2011-06-09] (Sun Microsystems, Inc.)
HKLM\...\Run: [CanonMyPrinter] - C:\Programme\Canon\MyPrinter\BJMyPrt.exe [2569616 2010-07-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM\...\Runonce: [Del4614828] - cmd.exe /Q /D /c del "C:\DOKUME~1\Michael\LOKALE~1\Temp\0.del" [x]
HKCU\...\Run: [Facebook Update] - C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe [138096 2012-11-16] (Facebook Inc.)
HKCU\...\Run: [Adobe Reader Synchronizer] - C:\Programme\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1272912 2013-05-10] (Adobe Systems Incorporated)
HKCU\...\Run: [SecureBanking] - C:\Programme\Secure Banking\SecureBanking.exe [507904 2013-07-02] (Secure Banking)
HKCU\...\Run: [Skype] - C:\Programme\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [CrossRiderPlugin] - C:\Programme\CrossriderWebApps\Crossrider.exe [x]
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * bootdelete
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=507A003005BF529E&affID=119357&tsp=4962
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=507A003005BF529E&affID=119357&tsp=4962
SearchScopes: HKCU - {14FECBD7-1995-4379-B068-1AF13722311D} URL = hxxp://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKCU - {CB110068-E6B5-4561-A31E-513206548568} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie8
SearchScopes: HKCU - {CB80852D-9760-4563-AD25-A709656DEAD6} URL = hxxp://rover.ebay.com/rover/1/707-37276-23097-0/4?satitle={searchTerms}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll No File
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll No File
BHO: SumatraPDF - {EA58BBDF-F45C-4F28-8E52-CD5AA70D2C1E} - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\IE\SumatraPDF.dll (Krzysztof Kowalczyk)
BHO: DealPly - {EF7BD87A-8024-11E2-F316-F3E56188709B} - C:\Programme\DealPly\DealPlyIE.dll (DealPly)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU -&Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
Handler: ipp - No CLSID Value -
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default
FF user.js: detected! => C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @canon.com/EPPEX - C:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Programme\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF SearchPlugin: C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Microsoft Choice Guard - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\ChoiceGuard@Microsoft
FF Extension: Babylon - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\ffxtlbr@babylon(2).com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\ich@maltegoetz.de
FF Extension: toolplugin - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\welcome@toolmin(2).com
FF Extension: Zula Games - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\zulagames@ZulaGames.com
FF Extension: Yahoo! Toolbar - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF Extension: WOT - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: No Name - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\firejump_1027.zip
FF Extension: No Name - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Mozilla\Firefox\Profiles\g11gop64.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
FF Extension: Default - C:\Programme\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [crossriderapp435@crossrider.com] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CodecCheck\firefox
FF Extension: No Name - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CodecCheck\firefox
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: No Name - C:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF StartMenuInternet: FIREFOX.EXE - D:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR Extension: (YouTube) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (DealPly Shopping ) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\fmfnfnpmhcllokmkepffndflpnadjmma\3.5.0.0_0
CHR Extension: () - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\gflandjopdloblmlcoiidmncpinmmacn\1.0.0.5
CHR Extension: (SumatraPDF) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ibhppgjkanllkaefhbhloijppmjnfmje\2.0.18_0
CHR Extension: (Gmail) - C:\DOKUME~1\Michael\LOKALE~1\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [gflandjopdloblmlcoiidmncpinmmacn] - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\zulagames\zulagames.crx
CHR HKLM\...\Chrome\Extension: [ibhppgjkanllkaefhbhloijppmjnfmje] - C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\CHROME\SumatraPDF.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Programme\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
========================== Services (Whitelisted) =================
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2012-05-27] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [116648 2012-05-27] (Google Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [136120 2011-02-08] (Google)
R2 HitmanProScheduler; C:\Programme\HitmanPro\hmpsched.exe [106280 2013-08-02] (SurfRight B.V.)
R2 IJPLMSVC; C:\Programme\Canon\IJPLM\IJPLMSVC.EXE [137680 2010-07-27] ()
R2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation)
R2 MsMpSvc; c:\Programme\Microsoft Security Client\Antimalware\MsMpEng.exe [11736 2011-04-27] (Microsoft Corporation)
R2 NMSAccess; C:\Programme\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [162408 2013-06-21] (Skype Technologies)
R2 SumatraPDFUpdater; C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\SumatraPDF\IE\SumatraPDFUpdater.exe [18432 2012-05-10] ()
S2 JavaQuickStarterService; "C:\Programme\Java\jre6\bin\jqs.exe" -service -config "C:\Programme\Java\jre6\lib\deploy\jqs\jqs.conf" [x]
S3 McComponentHostService; "C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe" [x]
==================== Drivers (Whitelisted) ====================
R3 ALCXSENS; C:\Windows\System32\drivers\ALCXSENS.SYS [400384 2011-07-29] (Sensaura)
R3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [626977 2011-07-29] (Realtek Semiconductor Corp.)
R3 AN983; C:\Windows\System32\DRIVERS\AN983.sys [36224 2004-08-03] (ADMtek Incorporated.)
S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [165648 2011-04-18] (Microsoft Corporation)
S3 NABTSFEC; C:\Windows\System32\DRIVERS\NABTSFEC.sys [85248 2008-04-13] (Microsoft Corporation)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 SLIP; C:\Windows\System32\DRIVERS\SLIP.sys [11136 2008-04-13] (Microsoft Corporation)
R3 SPC500NC; C:\Windows\System32\DRIVERS\SPC500NC.SYS [409600 2007-06-21] (PixArt Imaging Inc.)
R2 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 streamip; C:\Windows\System32\DRIVERS\StreamIP.sys [15232 2008-04-13] (Microsoft Corporation)
S3 WSTCODEC; C:\Windows\System32\DRIVERS\WSTCODEC.SYS [19200 2008-04-13] (Microsoft Corporation)
S3 catchme; \??\C:\DOKUME~1\Michael\LOKALE~1\Temp\catchme.sys [x]
S4 IntelIde; No ImagePath
S1 jzwsxyxj; \??\C:\WINDOWS\system32\drivers\jzwsxyxj.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 massfilter_hs; system32\drivers\massfilter_hs.sys [x]
S3 papycpu; No ImagePath
S0 PxHelp20; System32\Drivers\PxHelp20.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-02 14:29 - 2013-08-02 14:30 - 01222124 _____ (Farbar) C:\Dokumente und Einstellungen\Michael\Desktop\FRST.exe
2013-08-02 14:12 - 2013-08-02 14:12 - 00000566 _____ C:\WINDOWS\system32\bootdelete.lst
2013-08-02 13:26 - 2013-08-02 13:48 - 00001600 _____ C:\Dokumente und Einstellungen\All Users\Desktop\HitmanPro.lnk
2013-08-02 13:26 - 2013-08-02 13:26 - 00000000 ____D C:\Programme\HitmanPro
2013-08-02 13:16 - 2013-08-02 13:16 - 09158600 _____ (SurfRight B.V.) C:\Dokumente und Einstellungen\Michael\Desktop\HitmanPro.exe
2013-08-02 13:14 - 2013-08-02 13:20 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\BabSolution
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Startmenü\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Babylon
2013-08-01 23:42 - 2013-08-02 14:12 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-08-01 22:39 - 2013-08-01 22:40 - 00012632 _____ C:\AdwCleaner[S4].txt
2013-08-01 22:39 - 2013-08-01 22:39 - 00012480 _____ C:\AdwCleaner[R3].txt
2013-08-01 22:19 - 2013-08-01 22:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Qtrax
2013-08-01 22:12 - 2013-08-01 22:12 - 00000000 ____D C:\Programme\Microsoft Silverlight
2013-08-01 22:11 - 2013-08-01 22:11 - 00000422 _____ C:\WINDOWS\Tasks\At1.job
2013-08-01 22:11 - 2013-08-01 22:11 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DigitalSite
2013-08-01 21:53 - 2013-08-01 21:53 - 00562430 _____ (Oleg N. Scherbakov) C:\Dokumente und Einstellungen\Michael\Desktop\JRT.exe
2013-08-01 21:53 - 2013-08-01 21:53 - 00000000 ____D C:\WINDOWS\ERUNT
2013-08-01 21:41 - 2013-08-01 21:42 - 00021840 _____ C:\AdwCleaner[S3].txt
2013-08-01 21:41 - 2013-08-01 21:41 - 00021896 _____ C:\AdwCleaner[R2].txt
2013-08-01 21:37 - 2013-08-01 21:37 - 00000356 _____ C:\AdwCleaner[S2].txt
2013-08-01 21:36 - 2013-08-01 21:37 - 00021776 _____ C:\AdwCleaner[R1].txt
2013-08-01 21:28 - 2013-08-01 21:29 - 00666633 _____ C:\Dokumente und Einstellungen\Michael\Desktop\adwcleaner.exe
2013-08-01 21:07 - 2013-08-01 21:07 - 00010271 _____ C:\ComboFix.txt
2013-08-01 20:41 - 2013-08-01 21:07 - 00000000 ____D C:\Qoobox
2013-08-01 20:41 - 2013-08-01 21:07 - 00000000 ____D C:\ComboFix
2013-08-01 20:41 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-08-01 20:41 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-08-01 20:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-08-01 20:41 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-08-01 20:39 - 2013-08-01 20:39 - 05097176 ____R (Swearware) C:\Dokumente und Einstellungen\Michael\Desktop\ComboFix.exe
2013-08-01 16:58 - 2013-08-01 16:59 - 00031569 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Addition.txt.txt
2013-08-01 16:56 - 2013-08-01 16:56 - 00000000 ____D C:\FRST
2013-08-01 16:50 - 2013-08-01 16:50 - 00000476 _____ C:\Dokumente und Einstellungen\Michael\Desktop\defogger_disable.log
2013-08-01 16:50 - 2013-08-01 16:50 - 00000000 _____ C:\Dokumente und Einstellungen\Michael\defogger_reenable
2013-08-01 16:42 - 2013-08-01 16:41 - 00050477 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Defogger.exe
2013-07-29 15:45 - 2013-07-29 15:45 - 00001893 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
2013-07-24 17:00 - 2013-07-24 17:00 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
2013-07-24 17:00 - 2013-07-24 17:00 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
2013-07-24 16:57 - 2013-07-24 16:57 - 00000789 _____ C:\WINDOWS\updspapi.log
2013-07-24 16:56 - 2013-07-24 17:01 - 00014428 _____ C:\WINDOWS\spupdsvc.log
2013-07-24 16:56 - 2013-07-24 16:57 - 00028777 _____ C:\WINDOWS\wmp11Uninst.log
2013-07-18 15:19 - 2013-07-18 15:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\zulagames
2013-07-09 17:06 - 2013-07-09 17:06 - 00000000 ____D C:\Programme\MSECache
==================== One Month Modified Files and Folders =======
2013-08-02 14:42 - 2012-02-03 23:21 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 14:30 - 2013-08-02 14:29 - 01222124 _____ (Farbar) C:\Dokumente und Einstellungen\Michael\Desktop\FRST.exe
2013-08-02 14:21 - 2012-05-26 21:50 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-08-02 14:12 - 2013-08-02 14:12 - 00000566 _____ C:\WINDOWS\system32\bootdelete.lst
2013-08-02 14:12 - 2013-08-01 23:42 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2013-08-02 14:12 - 2011-08-24 15:39 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Skype
2013-08-02 14:00 - 2012-02-04 21:21 - 01330608 _____ C:\WINDOWS\WindowsUpdate.log
2013-08-02 13:48 - 2013-08-02 13:26 - 00001600 _____ C:\Dokumente und Einstellungen\All Users\Desktop\HitmanPro.lnk
2013-08-02 13:26 - 2013-08-02 13:26 - 00000000 ____D C:\Programme\HitmanPro
2013-08-02 13:26 - 2011-07-29 23:52 - 00000000 ___RD C:\Programme
2013-08-02 13:22 - 2011-07-29 23:10 - 00000000 ___RD C:\Dokumente und Einstellungen\Michael\Startmenü\Programme
2013-08-02 13:20 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\BabSolution
2013-08-02 13:16 - 2013-08-02 13:16 - 09158600 _____ (SurfRight B.V.) C:\Dokumente und Einstellungen\Michael\Desktop\HitmanPro.exe
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Startmenü\Programme\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DealPly
2013-08-02 13:14 - 2013-08-02 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Babylon
2013-08-02 12:18 - 2012-01-08 13:12 - 00001026 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-861567501-2111687655-725345543-1003UA.job
2013-08-02 12:10 - 2011-08-24 00:21 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-08-02 12:09 - 2012-02-03 23:21 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-02 12:04 - 2011-07-30 09:34 - 00000416 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2013-08-02 11:59 - 2011-07-29 23:55 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-08-02 11:59 - 2011-07-29 23:55 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-08-02 11:58 - 2011-07-29 23:08 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-08-02 09:57 - 2011-07-29 23:08 - 00032472 _____ C:\WINDOWS\SchedLgU.Txt
2013-08-01 23:48 - 2011-07-29 23:10 - 00000300 ___SH C:\Dokumente und Einstellungen\Michael\ntuser.ini
2013-08-01 22:41 - 2011-07-29 23:10 - 00000000 ____D C:\Dokumente und Einstellungen\Michael
2013-08-01 22:40 - 2013-08-01 22:39 - 00012632 _____ C:\AdwCleaner[S4].txt
2013-08-01 22:39 - 2013-08-01 22:39 - 00012480 _____ C:\AdwCleaner[R3].txt
2013-08-01 22:19 - 2013-08-01 22:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Qtrax
2013-08-01 22:12 - 2013-08-01 22:12 - 00000000 ____D C:\Programme\Microsoft Silverlight
2013-08-01 22:11 - 2013-08-01 22:11 - 00000422 _____ C:\WINDOWS\Tasks\At1.job
2013-08-01 22:11 - 2013-08-01 22:11 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\DigitalSite
2013-08-01 21:56 - 2011-07-29 23:06 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService
2013-08-01 21:53 - 2013-08-01 21:53 - 00562430 _____ (Oleg N. Scherbakov) C:\Dokumente und Einstellungen\Michael\Desktop\JRT.exe
2013-08-01 21:53 - 2013-08-01 21:53 - 00000000 ____D C:\WINDOWS\ERUNT
2013-08-01 21:42 - 2013-08-01 21:41 - 00021840 _____ C:\AdwCleaner[S3].txt
2013-08-01 21:41 - 2013-08-01 21:41 - 00021896 _____ C:\AdwCleaner[R2].txt
2013-08-01 21:40 - 2013-05-18 19:10 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Desktop\MICHAEL PRIVAT
2013-08-01 21:37 - 2013-08-01 21:37 - 00000356 _____ C:\AdwCleaner[S2].txt
2013-08-01 21:37 - 2013-08-01 21:36 - 00021776 _____ C:\AdwCleaner[R1].txt
2013-08-01 21:29 - 2013-08-01 21:28 - 00666633 _____ C:\Dokumente und Einstellungen\Michael\Desktop\adwcleaner.exe
2013-08-01 21:07 - 2013-08-01 21:07 - 00010271 _____ C:\ComboFix.txt
2013-08-01 21:07 - 2013-08-01 20:41 - 00000000 ____D C:\Qoobox
2013-08-01 21:07 - 2013-08-01 20:41 - 00000000 ____D C:\ComboFix
2013-08-01 21:03 - 2001-08-18 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-08-01 20:39 - 2013-08-01 20:39 - 05097176 ____R (Swearware) C:\Dokumente und Einstellungen\Michael\Desktop\ComboFix.exe
2013-08-01 20:01 - 2012-02-04 12:58 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Desktop\Wohnungsdeko
2013-08-01 16:59 - 2013-08-01 16:58 - 00031569 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Addition.txt.txt
2013-08-01 16:56 - 2013-08-01 16:56 - 00000000 ____D C:\FRST
2013-08-01 16:50 - 2013-08-01 16:50 - 00000476 _____ C:\Dokumente und Einstellungen\Michael\Desktop\defogger_disable.log
2013-08-01 16:50 - 2013-08-01 16:50 - 00000000 _____ C:\Dokumente und Einstellungen\Michael\defogger_reenable
2013-08-01 16:41 - 2013-08-01 16:42 - 00050477 _____ C:\Dokumente und Einstellungen\Michael\Desktop\Defogger.exe
2013-08-01 15:18 - 2012-01-08 13:12 - 00001004 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-861567501-2111687655-725345543-1003Core.job
2013-08-01 14:22 - 2001-08-18 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-07-29 16:22 - 2012-11-21 20:13 - 00245248 ___SH C:\Dokumente und Einstellungen\Michael\Desktop\Thumbs.db
2013-07-29 15:45 - 2013-07-29 15:45 - 00001893 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
2013-07-27 21:41 - 2012-11-07 18:42 - 00000276 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-07-26 19:52 - 2012-05-03 11:24 - 00000000 ___RD C:\Programme\Skype
2013-07-25 14:44 - 2011-08-23 07:47 - 00000000 ___RD C:\Dokumente und Einstellungen\Michael\Eigene Dateien\Eigene Musik
2013-07-25 14:38 - 2011-07-29 23:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2229593_0$
2013-07-25 14:08 - 2012-11-14 22:13 - 00000704 _____ C:\WINDOWS\setupact.log
2013-07-24 23:57 - 2011-08-23 09:31 - 00000300 ___SH C:\Dokumente und Einstellungen\marco\ntuser.ini
2013-07-24 21:23 - 2011-07-29 23:36 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-07-24 17:06 - 2013-03-01 18:32 - 00014430 _____ C:\WINDOWS\wmsetup.log
2013-07-24 17:05 - 2012-11-14 20:25 - 00070053 _____ C:\WINDOWS\setupapi.log
2013-07-24 17:01 - 2013-07-24 16:56 - 00014428 _____ C:\WINDOWS\spupdsvc.log
2013-07-24 17:00 - 2013-07-24 17:00 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
2013-07-24 17:00 - 2013-07-24 17:00 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
2013-07-24 17:00 - 2011-07-29 23:10 - 00000778 _____ C:\Dokumente und Einstellungen\Michael\Startmenü\Programme\Windows Media Player.lnk
2013-07-24 17:00 - 2001-08-18 14:00 - 00000877 _____ C:\WINDOWS\win.ini
2013-07-24 16:59 - 2011-08-26 00:29 - 00000000 ____D C:\WINDOWS\SxsCaPendDel
2013-07-24 16:57 - 2013-07-24 16:57 - 00000789 _____ C:\WINDOWS\updspapi.log
2013-07-24 16:57 - 2013-07-24 16:56 - 00028777 _____ C:\WINDOWS\wmp11Uninst.log
2013-07-24 16:57 - 2011-08-24 00:30 - 00000000 ____D C:\Programme\Windows Media Connect 2
2013-07-24 16:57 - 2011-07-30 00:47 - 00000000 ____D C:\WINDOWS\Help
2013-07-24 16:46 - 2011-07-29 23:17 - 00000002 _____ C:\WINDOWS\~sisRslt
2013-07-24 16:45 - 2012-02-04 12:59 - 00000000 ____D C:\Programme\Java
2013-07-24 16:43 - 2012-01-15 23:04 - 00000000 ____D C:\WINDOWS\system32\Adobe
2013-07-24 16:43 - 2011-07-29 23:27 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\Adobe
2013-07-18 16:34 - 2011-08-22 17:37 - 00000000 ___RD C:\Dokumente und Einstellungen\Michael\Eigene Dateien\Eigene Bilder
2013-07-18 15:19 - 2013-07-18 15:19 - 00000000 ____D C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\zulagames
2013-07-16 18:47 - 2013-05-18 18:42 - 00024064 ____H C:\Dokumente und Einstellungen\Michael\Desktop\~WRL0142.tmp
2013-07-10 10:12 - 2011-07-29 23:23 - 00001988 _____ C:\WINDOWS\epplauncher.mif
2013-07-10 09:01 - 2011-07-29 23:51 - 00145216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-07-09 17:08 - 2011-10-04 13:45 - 00025688 _____ C:\Dokumente und Einstellungen\Michael\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2013-07-09 17:07 - 2011-07-30 11:04 - 00000000 ____D C:\Programme\Microsoft Office
2013-07-09 17:07 - 2011-07-29 23:52 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Microsoft Shared
2013-07-09 17:06 - 2013-07-09 17:06 - 00000000 ____D C:\Programme\MSECache
Files to move or delete:
====================
C:\Windows\Tasks\At1.job
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2004-08-04 01:57] - [2008-04-14 04:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e
C:\Windows\System32\winlogon.exe
[2004-08-04 01:58] - [2008-04-14 04:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a
C:\Windows\System32\svchost.exe
[2004-08-04 01:58] - [2008-04-14 04:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366
C:\Windows\System32\services.exe
[2004-08-04 01:58] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc
C:\Windows\System32\User32.dll
[2004-08-04 01:57] - [2008-04-14 04:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd
C:\Windows\System32\userinit.exe
[2004-08-04 01:58] - [2008-04-14 04:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-04 01:44] - [2008-04-14 03:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d
==================== End Of Log =================
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01-08-2013 01
Ran by Michael at 2013-08-02 14:48:55
Running from C:\Dokumente und Einstellungen\Michael\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 11 ActiveX (Version: 11.2.202.235)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Apple Software Update (Version: 2.1.3.127)
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon Kurzwahlprogramm
Canon MP Navigator EX 4.1
Canon MX360 series Benutzerregistrierung
Canon MX360 series MP Drivers
Canon My Printer
Canon Solution Menu EX
CDBurnerXP (Version: 4.4.0.2905)
Compatibility Pack für 2007 Office System (Version: 12.0.6514.5001)
Facebook Video Calling 1.1.1.1 (Version: 1.1.1)
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
HitmanPro 3.7 (Version: 3.7.7.202)
Hotfix für Windows Media Player 11 (KB939683)
Hotfix für Windows XP (KB2443685) (Version: 1)
Hotfix für Windows XP (KB2570791) (Version: 1)
Hotfix für Windows XP (KB2633952) (Version: 1)
Hotfix für Windows XP (KB952287) (Version: 1)
Hotfix für Windows XP (KB961118) (Version: 1)
Hotfix für Windows XP (KB981793) (Version: 1)
Java 7 Update 9 (Version: 7.0.90)
Java Auto Updater (Version: 2.0.6.1)
Java(TM) 6 Update 29 (Version: 6.0.290)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Antimalware (Version: 3.0.8402.2)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Office XP Professional mit FrontPage (Version: 10.0.6626.0)
Microsoft Security Client (Version: 2.1.1116.0)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 2.1.1116.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Philips VLounge
Picasa 3 (Version: 3.9)
PowerDVD
Secure Banking Version 1.5.1 (Version: 1.5.1)
Sicherheitsupdate für Microsoft Windows (KB2564958)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2530548) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2559049) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2586448) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (Version: 1)
Sicherheitsupdate für Windows Media Player (KB2378111)
Sicherheitsupdate für Windows Media Player (KB952069)
Sicherheitsupdate für Windows Media Player (KB954155)
Sicherheitsupdate für Windows Media Player (KB973540)
Sicherheitsupdate für Windows Media Player (KB975558)
Sicherheitsupdate für Windows Media Player (KB978695)
Sicherheitsupdate für Windows Media Player (KB979402)
Sicherheitsupdate für Windows Media Player 11 (KB954154)
Sicherheitsupdate für Windows XP (KB2079403) (Version: 1)
Sicherheitsupdate für Windows XP (KB2115168) (Version: 1)
Sicherheitsupdate für Windows XP (KB2229593) (Version: 1)
Sicherheitsupdate für Windows XP (KB2296011) (Version: 1)
Sicherheitsupdate für Windows XP (KB2347290) (Version: 1)
Sicherheitsupdate für Windows XP (KB2360937) (Version: 1)
Sicherheitsupdate für Windows XP (KB2387149) (Version: 1)
Sicherheitsupdate für Windows XP (KB2393802) (Version: 1)
Sicherheitsupdate für Windows XP (KB2412687) (Version: 1)
Sicherheitsupdate für Windows XP (KB2419632) (Version: 1)
Sicherheitsupdate für Windows XP (KB2423089) (Version: 1)
Sicherheitsupdate für Windows XP (KB2440591) (Version: 1)
Sicherheitsupdate für Windows XP (KB2443105) (Version: 1)
Sicherheitsupdate für Windows XP (KB2476490) (Version: 1)
Sicherheitsupdate für Windows XP (KB2478960) (Version: 1)
Sicherheitsupdate für Windows XP (KB2478971) (Version: 1)
Sicherheitsupdate für Windows XP (KB2479943) (Version: 1)
Sicherheitsupdate für Windows XP (KB2481109) (Version: 1)
Sicherheitsupdate für Windows XP (KB2483185) (Version: 1)
Sicherheitsupdate für Windows XP (KB2485663) (Version: 1)
Sicherheitsupdate für Windows XP (KB2503665) (Version: 1)
Sicherheitsupdate für Windows XP (KB2506212) (Version: 1)
Sicherheitsupdate für Windows XP (KB2507618) (Version: 1)
Sicherheitsupdate für Windows XP (KB2507938) (Version: 1)
Sicherheitsupdate für Windows XP (KB2508272) (Version: 1)
Sicherheitsupdate für Windows XP (KB2508429) (Version: 1)
Sicherheitsupdate für Windows XP (KB2509553) (Version: 1)
Sicherheitsupdate für Windows XP (KB2524375) (Version: 1)
Sicherheitsupdate für Windows XP (KB2535512) (Version: 1)
Sicherheitsupdate für Windows XP (KB2536276) (Version: 1)
Sicherheitsupdate für Windows XP (KB2536276-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2544893) (Version: 1)
Sicherheitsupdate für Windows XP (KB2544893-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2555917) (Version: 1)
Sicherheitsupdate für Windows XP (KB2562937) (Version: 1)
Sicherheitsupdate für Windows XP (KB2566454) (Version: 1)
Sicherheitsupdate für Windows XP (KB2567053) (Version: 1)
Sicherheitsupdate für Windows XP (KB2567680) (Version: 1)
Sicherheitsupdate für Windows XP (KB2570222) (Version: 1)
Sicherheitsupdate für Windows XP (KB2570947) (Version: 1)
Sicherheitsupdate für Windows XP (KB2584146) (Version: 1)
Sicherheitsupdate für Windows XP (KB2592799) (Version: 1)
Sicherheitsupdate für Windows XP (KB2598479) (Version: 1)
Sicherheitsupdate für Windows XP (KB2603381) (Version: 1)
Sicherheitsupdate für Windows XP (KB2618451) (Version: 1)
Sicherheitsupdate für Windows XP (KB2619339) (Version: 1)
Sicherheitsupdate für Windows XP (KB2620712) (Version: 1)
Sicherheitsupdate für Windows XP (KB2624667) (Version: 1)
Sicherheitsupdate für Windows XP (KB2631813) (Version: 1)
Sicherheitsupdate für Windows XP (KB2633171) (Version: 1)
Sicherheitsupdate für Windows XP (KB2639417) (Version: 1)
Sicherheitsupdate für Windows XP (KB2646524) (Version: 1)
Sicherheitsupdate für Windows XP (KB923561) (Version: 1)
Sicherheitsupdate für Windows XP (KB941569)
Sicherheitsupdate für Windows XP (KB946648) (Version: 1)
Sicherheitsupdate für Windows XP (KB950762) (Version: 1)
Sicherheitsupdate für Windows XP (KB950974) (Version: 1)
Sicherheitsupdate für Windows XP (KB951376-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB951748) (Version: 1)
Sicherheitsupdate für Windows XP (KB952004) (Version: 1)
Sicherheitsupdate für Windows XP (KB952954) (Version: 1)
Sicherheitsupdate für Windows XP (KB955069) (Version: 1)
Sicherheitsupdate für Windows XP (KB956572) (Version: 1)
Sicherheitsupdate für Windows XP (KB956744) (Version: 1)
Sicherheitsupdate für Windows XP (KB956802) (Version: 1)
Sicherheitsupdate für Windows XP (KB956803) (Version: 1)
Sicherheitsupdate für Windows XP (KB956844) (Version: 1)
Sicherheitsupdate für Windows XP (KB958644) (Version: 1)
Sicherheitsupdate für Windows XP (KB958869) (Version: 1)
Sicherheitsupdate für Windows XP (KB959426) (Version: 1)
Sicherheitsupdate für Windows XP (KB960225) (Version: 1)
Sicherheitsupdate für Windows XP (KB960803) (Version: 1)
Sicherheitsupdate für Windows XP (KB960859) (Version: 1)
Sicherheitsupdate für Windows XP (KB961501) (Version: 1)
Sicherheitsupdate für Windows XP (KB969059) (Version: 1)
Sicherheitsupdate für Windows XP (KB970238) (Version: 1)
Sicherheitsupdate für Windows XP (KB970430) (Version: 1)
Sicherheitsupdate für Windows XP (KB971468) (Version: 1)
Sicherheitsupdate für Windows XP (KB971657) (Version: 1)
Sicherheitsupdate für Windows XP (KB972270) (Version: 1)
Sicherheitsupdate für Windows XP (KB973507) (Version: 1)
Sicherheitsupdate für Windows XP (KB973869) (Version: 1)
Sicherheitsupdate für Windows XP (KB973904) (Version: 1)
Sicherheitsupdate für Windows XP (KB974112) (Version: 1)
Sicherheitsupdate für Windows XP (KB974318) (Version: 1)
Sicherheitsupdate für Windows XP (KB974392) (Version: 1)
Sicherheitsupdate für Windows XP (KB974571) (Version: 1)
Sicherheitsupdate für Windows XP (KB975025) (Version: 1)
Sicherheitsupdate für Windows XP (KB975467) (Version: 1)
Sicherheitsupdate für Windows XP (KB975560) (Version: 1)
Sicherheitsupdate für Windows XP (KB975561) (Version: 1)
Sicherheitsupdate für Windows XP (KB975562) (Version: 1)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1)
Sicherheitsupdate für Windows XP (KB977816) (Version: 1)
Sicherheitsupdate für Windows XP (KB977914) (Version: 1)
Sicherheitsupdate für Windows XP (KB978037) (Version: 1)
Sicherheitsupdate für Windows XP (KB978338) (Version: 1)
Sicherheitsupdate für Windows XP (KB978542) (Version: 1)
Sicherheitsupdate für Windows XP (KB978601) (Version: 1)
Sicherheitsupdate für Windows XP (KB978706) (Version: 1)
Sicherheitsupdate für Windows XP (KB979309) (Version: 1)
Sicherheitsupdate für Windows XP (KB979482) (Version: 1)
Sicherheitsupdate für Windows XP (KB979559) (Version: 1)
Sicherheitsupdate für Windows XP (KB979683) (Version: 1)
Sicherheitsupdate für Windows XP (KB979687) (Version: 1)
Sicherheitsupdate für Windows XP (KB980195) (Version: 1)
Sicherheitsupdate für Windows XP (KB980218) (Version: 1)
Sicherheitsupdate für Windows XP (KB980232) (Version: 1)
Sicherheitsupdate für Windows XP (KB980436) (Version: 1)
Sicherheitsupdate für Windows XP (KB981322) (Version: 1)
Sicherheitsupdate für Windows XP (KB981997) (Version: 1)
Sicherheitsupdate für Windows XP (KB982132) (Version: 1)
Sicherheitsupdate für Windows XP (KB982381) (Version: 1)
Sicherheitsupdate für Windows XP (KB982665) (Version: 1)
Skype™ 6.6 (Version: 6.6.106)
swMSM (Version: 12.0.0.1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update für Windows Internet Explorer 8 (KB2447568) (Version: 1)
Update für Windows XP (KB2345886) (Version: 1)
Update für Windows XP (KB2467659) (Version: 1)
Update für Windows XP (KB2541763) (Version: 1)
Update für Windows XP (KB2607712) (Version: 1)
Update für Windows XP (KB2616676) (Version: 1)
Update für Windows XP (KB2641690) (Version: 1)
Update für Windows XP (KB951978) (Version: 1)
Update für Windows XP (KB955759) (Version: 1)
Update für Windows XP (KB961503) (Version: 1)
Update für Windows XP (KB967715) (Version: 1)
Update für Windows XP (KB968389) (Version: 1)
Update für Windows XP (KB971029) (Version: 1)
Update für Windows XP (KB971737) (Version: 1)
Update für Windows XP (KB973687) (Version: 1)
Update für Windows XP (KB973815) (Version: 1)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
WebFldrs XP (Version: 9.50.7523)
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray (Version: 1.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Imaging Component (Version: 3.0.0.0)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Format 11 runtime
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows XP Service Pack 3 (Version: 20080414.031514)
WinRAR 4.01 (32-Bit) (Version: 4.01.0)
==================== Restore Points =========================
01-08-2013 18:42:02 ComboFix created restore point
==================== Hosts content: ==========================
2001-08-18 14:00 - 2013-08-01 21:03 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\At1.job => ?
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-861567501-2111687655-725345543-1003Core.job => C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-861567501-2111687655-725345543-1003UA.job => C:\Dokumente und Einstellungen\Michael\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\MP Scheduled Scan.job => c:\Programme\Microsoft Security Client\Antimalware\MpCmdRun.exe
==================== Faulty Device Manager Devices =============
Name: Videocontroller (VGA-kompatibel)
Description: Videocontroller (VGA-kompatibel)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Standardtastatur (101/102 Tasten) oder Microsoft Natural Keyboard (PS/2)
Description: Standardtastatur (101/102 Tasten) oder Microsoft Natural Keyboard (PS/2)
Class Guid: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/02/2013 01:46:31 PM) (Source: Application Error) (User: )
Description: Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.5512, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x0475e290.
Das medienspezifische Ereignis für [explorer.exe!ws!] wird verarbeitet.
Error: (08/02/2013 01:24:31 PM) (Source: Application Error) (User: )
Description: Fehlgeschlagene Anwendung uninstall.exe, Version 2.6.1519.190, fehlgeschlagenes Modul uninstall.exe, Version 2.6.1519.190, Fehleradresse 0x000f42c1.
Das medienspezifische Ereignis für [uninstall.exe!ws!] wird verarbeitet.
Error: (08/02/2013 00:19:35 PM) (Source: Google Update) (User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/02/2013 00:18:05 PM) (Source: Google Update) (User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/02/2013 00:10:03 PM) (Source: Google Update) (User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/02/2013 00:09:22 PM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 8007007e, P2 endsearch, P3 search, P4 3.0.8402.0, P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094), P8 NIL, P9 mptelemetry0, P10 mptelemetry1.
Error: (08/02/2013 02:06:29 AM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 8007007e, P2 endsearch, P3 search, P4 3.0.8402.0, P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094), P8 NIL, P9 mptelemetry0, P10 mptelemetry1.
Error: (08/01/2013 11:37:45 PM) (Source: Google Update) (User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/01/2013 11:33:16 PM) (Source: MPSampleSubmission) (User: )
Description: EventType mptelemetry, P1 8007007e, P2 endsearch, P3 search, P4 3.0.8402.0, P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094), P8 NIL, P9 mptelemetry0, P10 mptelemetry1.
Error: (08/01/2013 11:22:49 PM) (Source: Google Update) (User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
System errors:
=============
Error: (08/01/2013 06:54:41 PM) (Source: Rasman) (User: )
Description: Die RAS-Verbindungsverwaltung konnte nicht gestartet werden, da keine Puffer erstellt werden konnten.
Starten Sie den Computer neu. Zugriff verweigert
Error: (08/01/2013 06:54:41 PM) (Source: Rasman) (User: )
Description: Die RAS-Verbindungsverwaltung konnte nicht gestartet werden, da keine Puffer erstellt werden konnten.
Starten Sie den Computer neu. Zugriff verweigert
Error: (08/01/2013 06:54:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" wurde mit folgendem Fehler beendet:
%%5
Error: (08/01/2013 06:54:37 PM) (Source: Rasman) (User: )
Description: Die RAS-Verbindungsverwaltung konnte nicht gestartet werden, da keine Puffer erstellt werden konnten.
Starten Sie den Computer neu. Zugriff verweigert
Error: (08/01/2013 06:54:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" wurde mit folgendem Fehler beendet:
%%5
Error: (08/01/2013 06:54:34 PM) (Source: Rasman) (User: )
Description: Die RAS-Verbindungsverwaltung konnte nicht gestartet werden, da keine Puffer erstellt werden konnten.
Starten Sie den Computer neu. Zugriff verweigert
Error: (08/01/2013 06:54:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" wurde mit folgendem Fehler beendet:
%%5
Error: (08/01/2013 06:54:31 PM) (Source: Rasman) (User: )
Description: Die RAS-Verbindungsverwaltung konnte nicht gestartet werden, da keine Puffer erstellt werden konnten.
Starten Sie den Computer neu. Zugriff verweigert
Error: (08/01/2013 06:54:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" wurde mit folgendem Fehler beendet:
%%5
Error: (08/01/2013 06:54:31 PM) (Source: Rasman) (User: )
Description: Die RAS-Verbindungsverwaltung konnte nicht gestartet werden, da keine Puffer erstellt werden konnten.
Starten Sie den Computer neu. Zugriff verweigert
Microsoft Office Sessions:
=========================
Error: (08/02/2013 01:46:31 PM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.5512unknown0.0.0.00475e290
Error: (08/02/2013 01:24:31 PM) (Source: Application Error)(User: )
Description: uninstall.exe2.6.1519.190uninstall.exe2.6.1519.190000f42c1
Error: (08/02/2013 00:19:35 PM) (Source: Google Update)(User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/02/2013 00:18:05 PM) (Source: Google Update)(User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/02/2013 00:10:03 PM) (Source: Google Update)(User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/02/2013 00:09:22 PM) (Source: MPSampleSubmission)(User: )
Description: mptelemetry8007007eendsearchsearch3.0.8402.0mpsigdwn.dll3.0.8402.0microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094)NILNILNIL
Error: (08/02/2013 02:06:29 AM) (Source: MPSampleSubmission)(User: )
Description: mptelemetry8007007eendsearchsearch3.0.8402.0mpsigdwn.dll3.0.8402.0microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094)NILNILNIL
Error: (08/01/2013 11:37:45 PM) (Source: Google Update)(User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
Error: (08/01/2013 11:33:16 PM) (Source: MPSampleSubmission)(User: )
Description: mptelemetry8007007eendsearchsearch3.0.8402.0mpsigdwn.dll3.0.8402.0microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094)NILNILNIL
Error: (08/01/2013 11:22:49 PM) (Source: Google Update)(User: PC-FUSI)
Description: Network Request Error.
Error: 0x80040880. Http status code: 200.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040880. Http status code 200.
trying WinHTTP.
Send request returned 0x8007007e. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request r
==================== Memory info ===========================
Percentage of memory in use: 56%
Total physical RAM: 990.95 MB
Available physical RAM: 430.28 MB
Total Pagefile: 2388.42 MB
Available Pagefile: 1891.8 MB
Total Virtual: 2047.88 MB
Available Virtual: 1959.03 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:19.76 GB) (Free:4.7 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (Daten) (Fixed) (Total:54.76 GB) (Free:39.06 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 75 GB) (Disk ID: 90BA2620)
Partition 1: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55 GB) - (Type=OF Extended)
==================== End Of Log =================
|
FRST 32-Bit | FRST 64-Bit