| Stephie87 | 12.10.2013 23:12 |
Guten Abend Schrauber,
vielen dank für Deine schnelle Hilfe!
Hier sind die Ergebnisse des Programmes FRST.txt
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by a (administrator) on A-PC on 12-10-2013 23:47:37
Running from C:\Users\a\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Users\a\AppData\LocalLow\AdobeAir\IE\AdobeAirUpdater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\IB Updater\ExtensionUpdaterService.exe
() C:\Windows\system32\dmwu.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
(SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe
() C:\Windows\SysWOW64\jmdp\stij.exe
() C:\Windows\System32\ljkb\stij.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKCU\...\Run: [AutoStartNPSAgent] - C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-07-16] (Google Inc.)
HKCU\...\Policies\Explorer: [NoInternetOpenWith] 1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-10-04] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [Sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [NPSStartup] - [x]
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1646216 2013-04-01] (Ask)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-01] (Avira Operations GmbH & Co. KG)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9817545DADAECC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.gmx.net/br/ie9_startpage
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File
URLSearchHook: (No Name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - No File
SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {35AAD74D-1BA4-4DF2-95D5-C38867FCE180} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=e6b4ee46-438c-4890-a35a-7398f556e670&apn_sauid=0BB6692A-037F-415C-A713-7C91CED8A635
SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {81CE708B-5104-4C62-B333-94B417473B29} URL = hxxp://go.mail.com/br/ie8_search_web/?su={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = hxxp://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6R8OJ0Pb4s&loc=skw&search={searchTerms}
BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension64.dll ()
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()
BHO-x32: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: AdobeAir - {DCA971EE-CB86-4592-AE52-A45B2E257A12} - C:\Users\a\AppData\LocalLow\AdobeAir\IE\AdobeAir.dll (Adobe Systems Inc.)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKLM-x32 - Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default
FF user.js: detected! => C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\user.js
FF SelectedSearchEngine: Ask.com
FF Homepage: hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE
FF NetworkProxy: "type", 0
FF SearchEngineOrder.1: Ask.com
FF DefaultSearchEngine: Ask.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017325.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\searchplugins\daemon-search.xml
FF SearchPlugin: C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\searchplugins\MyStart.xml
FF SearchPlugin: C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\Extensions\abb@amazon.com
FF Extension: AdobeAir - C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\Extensions\air3@adobe.com
FF Extension: No Name - C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\Extensions\DTToolbar@toolbarnet.com
FF Extension: incredibar.com - C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\Extensions\ffxtlbr@incredibar.com
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\Extensions\toolbar@ask.com
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\a\AppData\Roaming\Mozilla\Firefox\Profiles\62rwwqbf.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://mystart.incredibar.com/?a=6R8OJ0Pb4s&loc=skw", "hxxp://www.google.com/"
CHR DefaultSearchURL: (MyStart) - hxxp://mystart.incredibar.com/?a=6R8OJ0Pb4s&loc=skw&search={searchTerms}
CHR DefaultSuggestURL: (MyStart) - "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017325.dll (Amazon.com, Inc.)
CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdobeAir) - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalfokaihlahnhdieedhgfekidifmfa\3.0.21_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Amazon for Chrome) - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam\2.2.2012.272_0
CHR Extension: (Gmail) - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [gdalfokaihlahnhdieedhgfekidifmfa] - C:\Users\a\AppData\LocalLow\AdobeAir\CHROME\AdobeAir.crx
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\a\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM-x32\...\Chrome\Extension: [niogeckbkdcabhnapjbkeiklablhjoca] - C:\Program Files (x86)\Perion\ChromeInfoBar\ChromeInfoBar.crx
==================== Services (Whitelisted) =================
R2 AdobeAirUpdater; C:\Users\a\AppData\LocalLow\AdobeAir\IE\AdobeAirUpdater.exe [18432 2011-11-03] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2013-01-29] ()
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1762608 2013-09-15] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Updater Service for AMZN; C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-11-29] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U4 SR;
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-12 23:42 - 2013-10-12 23:42 - 00000000 ___DC C:\FRST
2013-10-12 23:40 - 2013-10-12 23:40 - 01954124 _____ (Farbar) C:\Users\a\Desktop\FRST64.exe
2013-10-11 22:45 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 22:45 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 22:45 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-11 22:45 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 22:45 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 22:45 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-11 22:45 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 22:45 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-11 22:45 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 22:45 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 22:45 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 22:45 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-11 12:49 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-11 12:49 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-11 12:49 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-11 12:49 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-11 12:49 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-11 12:49 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-11 12:49 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-11 12:49 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-11 12:49 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-11 12:49 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-11 12:49 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-11 12:49 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-11 12:49 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-11 12:49 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-11 12:49 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-11 12:49 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-11 12:49 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-11 12:49 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-11 12:49 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-11 12:49 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-11 12:49 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-11 12:49 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-11 12:49 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-11 12:49 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-11 12:49 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-11 12:48 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-11 12:48 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-11 12:48 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-11 12:48 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-11 12:48 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-11 12:48 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-11 12:48 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-11 12:48 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-11 12:48 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-11 12:48 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-11 12:48 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-11 12:48 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-11 12:48 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-11 12:48 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-11 12:48 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-11 12:48 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-11 12:48 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-11 12:48 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-11 12:48 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-11 12:48 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-11 12:48 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-11 12:48 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 12:48 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 21:00 - 2013-10-09 21:00 - 00000000 ____D C:\Users\a\AppData\Roaming\Malwarebytes
2013-10-09 20:59 - 2013-10-09 20:59 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-09 20:59 - 2013-10-09 20:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-09 20:59 - 2013-10-09 20:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-09 20:59 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-09 18:33 - 2013-10-12 23:31 - 00000280 _____ C:\Windows\setupact.log
2013-10-09 18:33 - 2013-10-11 12:20 - 00046252 _____ C:\Windows\PFRO.log
2013-10-09 18:33 - 2013-10-09 18:33 - 00000000 _____ C:\Windows\setuperr.log
2013-10-09 18:29 - 2013-10-09 18:30 - 00183036 _____ C:\Windows\fsmsiuninstall.log
2013-10-09 18:29 - 2013-10-09 18:29 - 00003778 _____ C:\Windows\FSGKIAIN.log
2013-10-09 18:29 - 2013-10-09 18:29 - 00001752 _____ C:\Windows\FSLDIN.LOG
2013-10-09 18:29 - 2013-10-09 18:29 - 00001297 _____ C:\Windows\fsdgunst.log
2013-10-09 18:29 - 2013-10-09 18:29 - 00000800 _____ C:\Windows\daasunin.LOG
2013-10-09 18:29 - 2013-10-09 18:29 - 00000603 _____ C:\Windows\HELPINST.LOG
2013-10-09 18:28 - 2013-10-09 18:28 - 00000884 _____ C:\Windows\FSGUIINS.LOG
2013-10-09 18:28 - 2013-10-09 18:28 - 00000681 _____ C:\Windows\fstnbins.LOG
2013-10-09 18:27 - 2013-10-09 18:28 - 00016158 _____ C:\Windows\FSAUA_UN.LOG
2013-10-09 18:26 - 2013-10-09 18:27 - 00028642 _____ C:\Windows\fsavunin.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00006823 _____ C:\Windows\FSSSINST.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00006076 _____ C:\Windows\FSSCINST.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00005629 _____ C:\Windows\fwesinst.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00001979 _____ C:\Windows\FSPSUNI.LOG
2013-10-09 18:26 - 2013-10-09 18:26 - 00000110 _____ C:\Windows\FSAVES_inst.log
2013-10-09 18:25 - 2013-10-09 18:25 - 00005180 _____ C:\Windows\fwinst.log
2013-10-09 18:25 - 2013-10-09 18:25 - 00002713 _____ C:\Windows\FSPCUNIN.LOG
2013-10-09 18:25 - 2013-10-09 18:25 - 00001307 _____ C:\Windows\FSGEMINST.LOG
2013-10-09 18:25 - 2013-10-09 18:25 - 00000154 _____ C:\Windows\fsgadget.log
2013-10-09 18:24 - 2013-10-09 18:30 - 00098823 _____ C:\Windows\uninstaller.log
2013-10-09 18:24 - 2013-10-09 18:29 - 74233362 _____ C:\Windows\FSISU.log
2013-10-09 18:24 - 2013-10-09 18:29 - 00839694 _____ C:\Windows\FSDEPH.log
2013-10-09 18:24 - 2013-10-09 18:29 - 00591835 _____ C:\Windows\FSUNINST.log
2013-10-09 18:24 - 2013-10-09 18:25 - 00001710 _____ C:\Windows\FSASWUNI.LOG
2013-10-09 17:39 - 2013-10-09 17:39 - 00002764 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-09 17:39 - 2013-10-09 17:39 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-09 15:43 - 2013-10-09 15:43 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-08 15:27 - 2013-10-09 18:49 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-08 15:26 - 2013-10-08 15:26 - 00000000 ____D C:\Users\a\AppData\Local\Amazon Browser Bar
2013-10-08 15:24 - 2013-10-08 15:26 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Bar
2013-10-08 15:24 - 2013-10-08 15:24 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.5912.dll
2013-10-08 15:22 - 2013-10-09 18:43 - 00000000 ____D C:\Users\a\AppData\Roaming\Systweak
2013-10-08 15:22 - 2013-08-22 18:36 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2013-10-08 14:57 - 2013-10-08 14:58 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-05 12:44 - 2013-10-05 12:44 - 00000000 ____D C:\Users\a\AppData\Local\webkit
2013-10-05 12:35 - 2013-10-05 12:35 - 00000850 _____ C:\Users\a\AppData\Local\recently-used.xbel
2013-10-05 12:35 - 2013-10-05 12:35 - 00000000 ____D C:\Users\a\AppData\Local\gtk-2.0
2013-10-05 12:31 - 2013-10-05 12:50 - 00000000 ____D C:\Users\a\.gimp-2.8
2013-10-05 12:31 - 2013-10-05 12:31 - 00000000 ____D C:\Users\a\AppData\Local\gegl-0.2
2013-10-05 12:28 - 2013-10-09 18:23 - 00000000 ____D C:\Program Files\GIMP 2
2013-10-03 17:18 - 2013-10-03 17:18 - 00001155 _____ C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2013-10-03 17:04 - 2013-10-03 17:04 - 00000000 ____D C:\Windows\Sun
2013-09-17 16:33 - 2013-09-17 16:33 - 00000000 ____D C:\Windows\SysWOW64\jmdp
2013-09-17 16:33 - 2013-09-17 16:33 - 00000000 ____D C:\Windows\system32\ljkb
==================== One Month Modified Files and Folders =======
2013-10-12 23:46 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-12 23:46 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-12 23:45 - 2012-04-11 22:09 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-12 23:45 - 2011-11-29 17:31 - 01846883 _____ C:\Windows\WindowsUpdate.log
2013-10-12 23:42 - 2013-10-12 23:42 - 00000000 ___DC C:\FRST
2013-10-12 23:40 - 2013-10-12 23:40 - 01954124 _____ (Farbar) C:\Users\a\Desktop\FRST64.exe
2013-10-12 23:39 - 2011-12-02 13:36 - 00003898 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E1F44A7E-8E42-42AB-865E-6B52309A825A}
2013-10-12 23:32 - 2011-11-29 17:49 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-12 23:31 - 2013-10-09 18:33 - 00000280 _____ C:\Windows\setupact.log
2013-10-12 23:31 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-12 20:59 - 2011-11-29 17:49 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-12 19:16 - 2011-11-30 20:17 - 00000000 ____D C:\Neuer Ordner
2013-10-12 11:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-12 09:01 - 2010-11-21 08:50 - 00699738 _____ C:\Windows\system32\perfh007.dat
2013-10-12 09:01 - 2010-11-21 08:50 - 00149600 _____ C:\Windows\system32\perfc007.dat
2013-10-12 09:01 - 2009-07-14 07:13 - 01621320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-12 08:55 - 2011-11-29 17:24 - 00000000 ____D C:\Windows\Panther
2013-10-12 08:52 - 2009-07-14 06:45 - 00298072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-12 08:45 - 2013-03-30 18:32 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-12 08:45 - 2013-03-30 18:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-11 22:40 - 2011-11-29 18:02 - 01599214 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-11 22:30 - 2013-08-15 22:31 - 00000000 ____D C:\Windows\system32\MRT
2013-10-11 22:26 - 2011-12-04 11:46 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-11 12:20 - 2013-10-09 18:33 - 00046252 _____ C:\Windows\PFRO.log
2013-10-09 21:00 - 2013-10-09 21:00 - 00000000 ____D C:\Users\a\AppData\Roaming\Malwarebytes
2013-10-09 20:59 - 2013-10-09 20:59 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-09 20:59 - 2013-10-09 20:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-09 20:59 - 2013-10-09 20:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-09 18:49 - 2013-10-08 15:27 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-10-09 18:49 - 2011-11-29 17:40 - 00000000 ___RD C:\Users\a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-09 18:43 - 2013-10-08 15:22 - 00000000 ____D C:\Users\a\AppData\Roaming\Systweak
2013-10-09 18:33 - 2013-10-09 18:33 - 00000000 _____ C:\Windows\setuperr.log
2013-10-09 18:30 - 2013-10-09 18:29 - 00183036 _____ C:\Windows\fsmsiuninstall.log
2013-10-09 18:30 - 2013-10-09 18:24 - 00098823 _____ C:\Windows\uninstaller.log
2013-10-09 18:29 - 2013-10-09 18:29 - 00003778 _____ C:\Windows\FSGKIAIN.log
2013-10-09 18:29 - 2013-10-09 18:29 - 00001752 _____ C:\Windows\FSLDIN.LOG
2013-10-09 18:29 - 2013-10-09 18:29 - 00001297 _____ C:\Windows\fsdgunst.log
2013-10-09 18:29 - 2013-10-09 18:29 - 00000800 _____ C:\Windows\daasunin.LOG
2013-10-09 18:29 - 2013-10-09 18:29 - 00000603 _____ C:\Windows\HELPINST.LOG
2013-10-09 18:29 - 2013-10-09 18:24 - 74233362 _____ C:\Windows\FSISU.log
2013-10-09 18:29 - 2013-10-09 18:24 - 00839694 _____ C:\Windows\FSDEPH.log
2013-10-09 18:29 - 2013-10-09 18:24 - 00591835 _____ C:\Windows\FSUNINST.log
2013-10-09 18:28 - 2013-10-09 18:28 - 00000884 _____ C:\Windows\FSGUIINS.LOG
2013-10-09 18:28 - 2013-10-09 18:28 - 00000681 _____ C:\Windows\fstnbins.LOG
2013-10-09 18:28 - 2013-10-09 18:27 - 00016158 _____ C:\Windows\FSAUA_UN.LOG
2013-10-09 18:27 - 2013-10-09 18:26 - 00028642 _____ C:\Windows\fsavunin.log
2013-10-09 18:27 - 2011-12-03 16:30 - 00000000 ____D C:\ProgramData\f-secure
2013-10-09 18:26 - 2013-10-09 18:26 - 00006823 _____ C:\Windows\FSSSINST.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00006076 _____ C:\Windows\FSSCINST.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00005629 _____ C:\Windows\fwesinst.log
2013-10-09 18:26 - 2013-10-09 18:26 - 00001979 _____ C:\Windows\FSPSUNI.LOG
2013-10-09 18:26 - 2013-10-09 18:26 - 00000110 _____ C:\Windows\FSAVES_inst.log
2013-10-09 18:25 - 2013-10-09 18:25 - 00005180 _____ C:\Windows\fwinst.log
2013-10-09 18:25 - 2013-10-09 18:25 - 00002713 _____ C:\Windows\FSPCUNIN.LOG
2013-10-09 18:25 - 2013-10-09 18:25 - 00001307 _____ C:\Windows\FSGEMINST.LOG
2013-10-09 18:25 - 2013-10-09 18:25 - 00000154 _____ C:\Windows\fsgadget.log
2013-10-09 18:25 - 2013-10-09 18:24 - 00001710 _____ C:\Windows\FSASWUNI.LOG
2013-10-09 18:23 - 2013-10-05 12:28 - 00000000 ____D C:\Program Files\GIMP 2
2013-10-09 18:00 - 2011-12-04 11:47 - 00000000 ____D C:\Users\a\AppData\Roaming\Media Player Classic
2013-10-09 17:58 - 2013-07-20 22:13 - 00000000 ____D C:\Windows\Minidump
2013-10-09 17:39 - 2013-10-09 17:39 - 00002764 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-10-09 17:39 - 2013-10-09 17:39 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-09 17:39 - 2011-11-29 17:49 - 00000000 ____D C:\Program Files\CCleaner
2013-10-09 15:43 - 2013-10-09 15:43 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-09 15:43 - 2012-04-11 22:09 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 15:43 - 2012-04-11 22:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 15:43 - 2012-04-11 22:09 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 15:26 - 2013-10-08 15:26 - 00000000 ____D C:\Users\a\AppData\Local\Amazon Browser Bar
2013-10-08 15:26 - 2013-10-08 15:24 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Bar
2013-10-08 15:26 - 2011-12-27 20:30 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-10-08 15:24 - 2013-10-08 15:24 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.5912.dll
2013-10-08 14:58 - 2013-10-08 14:57 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-05 12:50 - 2013-10-05 12:31 - 00000000 ____D C:\Users\a\.gimp-2.8
2013-10-05 12:44 - 2013-10-05 12:44 - 00000000 ____D C:\Users\a\AppData\Local\webkit
2013-10-05 12:35 - 2013-10-05 12:35 - 00000850 _____ C:\Users\a\AppData\Local\recently-used.xbel
2013-10-05 12:35 - 2013-10-05 12:35 - 00000000 ____D C:\Users\a\AppData\Local\gtk-2.0
2013-10-05 12:32 - 2011-11-29 17:39 - 00000000 ____D C:\Users\a
2013-10-05 12:31 - 2013-10-05 12:31 - 00000000 ____D C:\Users\a\AppData\Local\gegl-0.2
2013-10-05 12:07 - 2013-07-16 12:30 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-03 17:18 - 2013-10-03 17:18 - 00001155 _____ C:\Users\Public\Desktop\ALDI Bestellsoftware.lnk
2013-10-03 17:18 - 2012-07-18 13:29 - 00000000 ____D C:\Program Files (x86)\ALDI Bestellsoftware
2013-10-03 17:04 - 2013-10-03 17:04 - 00000000 ____D C:\Windows\Sun
2013-10-01 11:05 - 2013-05-07 17:23 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-10-01 11:05 - 2013-04-19 09:40 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-01 11:05 - 2013-04-19 09:40 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-01 11:05 - 2013-04-19 09:40 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-09-23 01:28 - 2013-10-11 22:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-11 22:45 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 01:27 - 2013-10-11 22:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 00:55 - 2013-10-11 22:45 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-11 22:45 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-11 22:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-11 22:45 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-23 00:54 - 2013-10-11 22:45 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-21 05:38 - 2013-10-11 22:45 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-11 22:45 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-11 22:45 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-11 22:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-18 07:49 - 2012-10-22 21:53 - 00000000 ____D C:\Windows\SysWOW64\WNLT
2013-09-17 16:33 - 2013-09-17 16:33 - 00000000 ____D C:\Windows\SysWOW64\jmdp
2013-09-17 16:33 - 2013-09-17 16:33 - 00000000 ____D C:\Windows\system32\ljkb
2013-09-17 16:13 - 2013-04-10 20:58 - 00000000 ____D C:\Windows\SysWOW64\ARFC
2013-09-15 14:21 - 2013-03-29 12:55 - 01762608 _____ C:\Windows\system32\dmwu.exe
2013-09-15 14:16 - 2013-03-29 12:55 - 00033792 _____ (IncrediMail, Ltd.) C:\Windows\system32\ImHttpComm.dll
2013-09-14 03:10 - 2013-10-11 12:48 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-09-12 17:49 - 2011-11-29 17:40 - 00000000 ___RD C:\Users\a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 17:38 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.5912.dll
Some content of TEMP:
====================
C:\Users\a\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-12 11:23
==================== End Of Log ============================
--- --- ---
--- --- ---
[/CODE] Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by a at 2013-10-12 23:49:33
Running from C:\Users\a\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (x32)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Adobe Shockwave Player 11.5 (x32 Version: 11.5.9.620)
ALDI Bestellsoftware 4.12.2 (x32 Version: 4.12.2)
Amazon Browser Bar (x32 Version: 3.0)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)
Amazon Music Importer (x32 Version: 2.0.1)
Ask Toolbar (x32 Version: 1.15.24.0)
Avira Free Antivirus (x32 Version: 14.0.0.383)
Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.5.42066)
AVM FRITZ!Box Dokumentation (x32)
AVM FRITZ!Box Druckeranschluss (x32)
Canon Easy-PhotoPrint EX (x32)
CANON iMAGE GATEWAY MyCamera Download Plugin (x32 Version: 3.1.1.2)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.9.0.9)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32)
Canon MOV Decoder (x32 Version: 1.8.0.7)
Canon MOV Encoder (x32 Version: 1.6.0.1)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.7.0.4)
Canon MP Navigator EX 3.0 (x32)
Canon MP560 series Benutzerregistrierung (x32)
Canon MP560 series MP Drivers
Canon My Printer (x32)
Canon Utilities Digital Photo Professional 3.10 (x32 Version: 3.10.2.0)
Canon Utilities EOS Sample Music (x32 Version: 1.0.0.204)
Canon Utilities EOS Utility (x32 Version: 2.10.2.0)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (x32 Version: 1.0.0.10)
Canon Utilities Movie Uploader for YouTube (x32 Version: 1.2.0.7)
Canon Utilities PhotoStitch (x32 Version: 3.1.22.46)
Canon Utilities Picture Style Editor (x32 Version: 1.9.0.0)
Canon Utilities Solution Menu (x32)
Canon Utilities ZoomBrowser EX (x32 Version: 6.7.0.24)
Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.5.0.9)
CCleaner (Version: 4.06)
DAEMON Tools Lite (x32 Version: 4.40.2.0131)
DAEMON Tools Toolbar (x32 Version: 1.1.4.0024)
Google Chrome (x32 Version: 30.0.1599.69)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.153)
HashCheck Shell Extension (x86-32) (x32 Version: 2.1.11.1)
IB Updater 2.0.0.575 (Version: 2.0.0.575)
IB Updater Service (x32 Version: 4.0.7.3)
Incredibar Toolbar on IE (x32)
Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0004)
Java(TM) 6 Update 24 (x32 Version: 6.0.240)
K-Lite Codec Pack (64-bit) v4.5.0 (Version: 4.5.0)
K-Lite Codec Pack 7.0.0 (Full) (x32 Version: 7.0.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox (3.6.15) (x32 Version: 3.6.15 (de))
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero - Burning Rom (x32 Version: 5.5.9.9)
Picasa 3 (x32 Version: 3.9)
RocketDock 1.3.5 (x32)
Samsung New PC Studio (x32 Version: 1.00.0000)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0)
SpeedCommander 13 (x64) (Version: 13.40.6300)
SweetIM for Messenger 3.7 (x32 Version: 3.7.0007)
SweetPacks bundle uninstaller (x32 Version: 1.0.0000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008)
Visual C++ 9.0 ATL (x86) WinSXS MSM (x32 Version: 9.0)
WinRAR 4.00 (64-Bit) (Version: 4.00.0)
==================== Restore Points =========================
11-10-2013 20:13:25 Windows Update
12-10-2013 19:28:33 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {20AE6C6E-E703-40B9-9345-48F932485AD7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-29] (Google Inc.)
Task: {22807743-235A-4535-BC14-5773377758A9} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-01] ()
Task: {524FAE51-B82A-4F99-A01F-ED415EA55E47} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {5541DA16-7703-4DB2-A7BA-77E6205F3997} - System32\Tasks\{F37821B4-1F1B-4B1D-A1A2-3EA07507929C} => C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
Task: {7F478BD9-F619-4246-B042-DD73EF32DF02} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {920AFF1F-4578-4CA2-BD69-A5AE8A09C844} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {ACE4FEE9-188D-454A-8C1C-A3588E7796A9} - System32\Tasks\{3B2A741B-4572-4677-8F63-75499A66A2E2} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.2.0.169/de/abandoninstall?source=lightinstaller&page=tsMain&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;alreadyoffered
Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe
Task: {D9358542-86E4-4CC5-94FB-F56399F5C2A8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-29] (Google Inc.)
Task: {E6B79F9E-2579-451A-BDFB-9674A6E63783} - System32\Tasks\{D8F4D06C-84F6-49C1-9037-0730447FE437} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.2.0.169&LastError=404
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-15 14:32 - 2013-09-15 14:32 - 01321472 _____ () C:\Windows\System32\ljkb\lmrn.dll
2013-04-19 09:40 - 2013-04-18 20:06 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-09-15 14:30 - 2013-09-15 14:30 - 01062912 _____ () C:\Windows\SysWOW64\jmdp\lmrn.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:DBC416F8
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/12/2013 11:45:34 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 3.3.8.1, Zeitstempel: 0x4f25bafd
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c92c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000035ce6
ID des fehlerhaften Prozesses: 0x578
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3
Error: (10/12/2013 11:44:25 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SweetIM.exe, Version: 3.7.0.7, Zeitstempel: 0x506d9e00
Name des fehlerhaften Moduls: ole32.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0x590
Startzeit der fehlerhaften Anwendung: 0xSweetIM.exe0
Pfad der fehlerhaften Anwendung: SweetIM.exe1
Pfad des fehlerhaften Moduls: SweetIM.exe2
Berichtskennung: SweetIM.exe3
Error: (10/12/2013 11:33:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/12/2013 02:49:25 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SweetIM.exe, Version: 3.7.0.7, Zeitstempel: 0x506d9e00
Name des fehlerhaften Moduls: RPCRT4.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51db9710
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039153
ID des fehlerhaften Prozesses: 0x890
Startzeit der fehlerhaften Anwendung: 0xSweetIM.exe0
Pfad der fehlerhaften Anwendung: SweetIM.exe1
Pfad des fehlerhaften Moduls: SweetIM.exe2
Berichtskennung: SweetIM.exe3
Error: (10/12/2013 08:58:02 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SweetPacksUpdateManager.exe, Version: 1.1.0.8, Zeitstempel: 0x502bc905
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0x7dc
Startzeit der fehlerhaften Anwendung: 0xSweetPacksUpdateManager.exe0
Pfad der fehlerhaften Anwendung: SweetPacksUpdateManager.exe1
Pfad des fehlerhaften Moduls: SweetPacksUpdateManager.exe2
Berichtskennung: SweetPacksUpdateManager.exe3
Error: (10/12/2013 08:53:39 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/12/2013 08:47:28 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/11/2013 10:49:52 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {74C57B6B-FF6E-3825-BED2-78E14E3E0E3C}
Error: (10/11/2013 00:34:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SweetIM.exe, Version: 3.7.0.7, Zeitstempel: 0x506d9e00
Name des fehlerhaften Moduls: ole32.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003aff2
ID des fehlerhaften Prozesses: 0xa84
Startzeit der fehlerhaften Anwendung: 0xSweetIM.exe0
Pfad der fehlerhaften Anwendung: SweetIM.exe1
Pfad des fehlerhaften Moduls: SweetIM.exe2
Berichtskennung: SweetIM.exe3
Error: (10/11/2013 00:22:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (10/12/2013 09:25:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst IPBusEnum erreicht.
Error: (10/12/2013 08:16:58 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
Error: (10/12/2013 10:10:19 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (10/12/2013 08:48:43 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/12/2013 08:48:43 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht.
Error: (10/11/2013 10:51:53 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243)
Error: (10/10/2013 08:25:04 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (10/10/2013 08:25:04 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (10/09/2013 06:48:24 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Computer Backup (MyPC Backup)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/09/2013 06:39:20 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" ist vom Dienst "Peernetzwerkidentitäts-Manager" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1053
Microsoft Office Sessions:
=========================
Error: (10/12/2013 11:45:34 PM) (Source: Application Error)(User: )
Description: FRST64.exe3.3.8.14f25bafdole32.dll6.1.7601.175144ce7c92cc00000050000000000035ce657801cec793f321d973C:\Users\a\Desktop\FRST64.exeC:\Windows\system32\ole32.dll9f2b8df5-3387-11e3-96db-002622d7bd9c
Error: (10/12/2013 11:44:25 PM) (Source: Application Error)(User: )
Description: SweetIM.exe3.7.0.7506d9e00ole32.DLL6.1.7601.175144ce7b96fc00000050003934259001cec792819dc7aaC:\Program Files (x86)\SweetIM\Messenger\SweetIM.exeC:\Windows\syswow64\ole32.DLL75b314af-3387-11e3-96db-002622d7bd9c
Error: (10/12/2013 11:33:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/12/2013 02:49:25 PM) (Source: Application Error)(User: )
Description: SweetIM.exe3.7.0.7506d9e00RPCRT4.dll6.1.7601.1820551db9710c00000050003915389001cec7183f629029C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exeC:\Windows\syswow64\RPCRT4.dllb92d2628-333c-11e3-9865-002622d7bd9c
Error: (10/12/2013 08:58:02 AM) (Source: Application Error)(User: )
Description: SweetPacksUpdateManager.exe1.1.0.8502bc905ole32.dll6.1.7601.175144ce7b96fc0000005000393427dc01cec718401e9cdfC:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exeC:\Windows\syswow64\ole32.dlla2bec440-330b-11e3-9865-002622d7bd9c
Error: (10/12/2013 08:53:39 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/12/2013 08:47:28 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/11/2013 10:49:52 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {74C57B6B-FF6E-3825-BED2-78E14E3E0E3C}(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (10/11/2013 00:34:47 PM) (Source: Application Error)(User: )
Description: SweetIM.exe3.7.0.7506d9e00ole32.DLL6.1.7601.175144ce7b96fc00000050003aff2a8401cec66c3d307875C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exeC:\Windows\syswow64\ole32.DLLbfbddd14-3260-11e3-9ddb-002622d7bd9c
Error: (10/11/2013 00:22:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 73%
Total physical RAM: 984.57 MB
Available physical RAM: 261.43 MB
Total Pagefile: 2040.57 MB
Available Pagefile: 592.26 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:133.31 GB) (Free:63.89 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 35BC8FF5)
Partition 1: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=133 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
Ich danke Dir schonmal vielmals!!!
Viele Grüße
Stephie |
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
SecurityCheck und:
