The DarkSoul | 20.10.2013 15:00 | Hallo,
es wurde nur die FRST.txt Logdatei ausgegeben, da die Addition.txt nicht markiert war.
Daher habe ich nach dem ersten Scan die "Addition.txt" markiert und nochmals gescannt.
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-10-2013
Ran by ******** (administrator) on ASPIRE on 20-10-2013 15:52:07
Running from C:\Users\********\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
( ) C:\Windows\system32\lxdccoms.exe
() C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe
(Secunia) C:\Program Files\Secunia\PSI\PSIA.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Secunia) C:\Program Files\Secunia\PSI\sua.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
() C:\Program Files\Lexmark 1300 Series\lxdcamon.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Panda Security) C:\Program Files\Panda USB Vaccine\USBVaccine.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM\...\Run: [lxdcamon] - C:\Program Files\Lexmark 1300 Series\lxdcamon.exe [20480 2007-04-30] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-03] (Adobe Systems Incorporated)
HKCU\...\Run: [FileHippo.com] - C:\Program Files\FileHippo.com\UpdateChecker.exe [248832 2010-08-09] (FileHippo.com)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Gast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/?rlz=1W4CHBB_deDE549
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB1DC02A1DEC0CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\vqnygk8q.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\vqnygk8q.default\Extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17}.xpi
FF Extension: No Name - C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\vqnygk8q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0
CHR Extension: (Safe Money) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_0
CHR Extension: (Content Blocker) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0
CHR Extension: (Virtual Keyboard) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\********\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_0
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
========================== Services (Whitelisted) =================
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
S2 lxdcCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdcserv.exe [99248 2007-05-25] (Lexmark International, Inc.)
R2 lxdc_device; C:\Windows\system32\lxdccoms.exe [537520 2007-05-25] ( )
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37888 2013-08-28] ()
R2 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [994360 2011-10-14] (Secunia)
R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [399416 2011-10-14] (Secunia)
==================== Drivers (Whitelisted) ====================
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [595552 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [24408 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2013-06-18] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145040 2013-04-23] (Kaspersky Lab ZAO)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf.sys [15544 2010-09-01] (Secunia)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-11-24] (The OpenVPN Project)
R3 TPLINKUDSMBus; C:\Windows\System32\drivers\TplinkUDSMBus.sys [88576 2012-09-21] (Windows (R) Codename Longhorn DDK provider)
S3 TplinkUDSTcpBus; C:\Windows\System32\drivers\TplinkUDSTcpBus.sys [151296 2012-09-21] (Windows (R) Codename Longhorn DDK provider)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2013-04-23] (Kaspersky Lab ZAO)
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-20 15:50 - 2013-10-20 15:50 - 01087515 _____ (Farbar) C:\Users\********\Desktop\FRST.exe
2013-10-20 00:12 - 2013-10-20 00:12 - 00000884 _____ C:\Users\********\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-19 20:59 - 2013-10-19 20:59 - 00000892 _____ C:\Users\********\Desktop\OpenVPN GUI.lnk
2013-10-19 20:59 - 2013-10-19 20:59 - 00000892 _____ C:\Users\Gast\Desktop\OpenVPN GUI.lnk
2013-10-19 20:59 - 2013-10-19 20:59 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
2013-10-19 20:25 - 2013-10-19 20:25 - 00000368 _____ C:\Windows\PFRO.log
2013-10-18 23:06 - 2013-10-20 00:09 - 00001133 _____ C:\Users\********\Desktop\Rico.txt
2013-10-12 22:23 - 2013-09-22 12:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-12 22:23 - 2013-09-22 12:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-12 22:23 - 2013-09-22 12:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-12 22:23 - 2013-09-22 12:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-12 22:23 - 2013-09-22 12:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-12 22:23 - 2013-09-22 12:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-12 22:23 - 2013-09-22 12:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-12 22:23 - 2013-09-22 12:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-12 22:23 - 2013-09-22 12:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-12 22:23 - 2013-09-22 12:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-12 22:23 - 2013-09-22 12:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-12 22:23 - 2013-09-22 12:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-12 22:23 - 2013-09-22 12:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-12 22:23 - 2013-09-22 12:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-12 22:23 - 2013-09-22 12:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-12 22:23 - 2013-09-22 11:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 21:38 - 2013-08-29 09:36 - 02050048 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 21:38 - 2013-08-27 04:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-10-10 21:38 - 2013-08-27 04:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-10 21:38 - 2013-08-27 04:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-10-10 21:38 - 2013-08-27 04:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-10 21:38 - 2013-08-27 03:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-10 21:38 - 2013-08-27 03:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-10 21:38 - 2013-08-27 03:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-10 21:38 - 2013-08-27 03:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-10 21:38 - 2013-08-27 03:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-10 21:38 - 2013-08-01 05:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 21:38 - 2013-08-01 04:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-10-10 21:38 - 2013-07-20 12:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 21:38 - 2013-07-12 11:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 21:38 - 2013-07-12 11:04 - 00073344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-10 21:37 - 2013-08-29 09:56 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2013-10-10 21:37 - 2013-07-04 06:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 21:37 - 2013-07-03 04:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 21:37 - 2013-06-29 04:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-10 21:37 - 2013-06-29 04:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-10 21:37 - 2013-06-29 04:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-10 21:37 - 2013-06-29 04:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-10 21:37 - 2013-06-27 01:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 21:37 - 2013-06-04 06:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 21:37 - 2013-06-04 03:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 21:37 - 2011-05-05 15:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-10 21:37 - 2011-05-05 15:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-06 00:30 - 2013-10-06 00:30 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-06 00:30 - 2013-10-06 00:30 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-06 00:28 - 2013-10-06 00:28 - 00281896 _____ (Mozilla) C:\Users\********\Downloads\Firefox Setup Stub 24.0.exe
2013-10-04 12:55 - 2013-10-20 15:31 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-04 12:55 - 2013-10-09 17:31 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-04 12:55 - 2013-10-09 17:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-04 12:49 - 2013-10-04 12:49 - 00000000 ____D C:\Program Files\Adobe
2013-10-04 12:28 - 2013-10-04 12:28 - 24278649 _____ C:\Users\********\Downloads\vlc-2.1.0-win32.exe
2013-10-02 23:05 - 2013-10-02 23:06 - 00025611 _____ C:\Users\********\Downloads\FRST.txt
2013-10-02 23:03 - 2013-10-02 23:07 - 00020841 _____ C:\Users\********\Downloads\Addition.txt
2013-10-02 23:02 - 2013-10-02 23:02 - 00000000 ____D C:\FRST
2013-10-02 23:01 - 2013-10-02 23:01 - 01087213 _____ (Farbar) C:\Users\********\Downloads\FRST.exe
2013-10-01 17:00 - 2013-10-16 18:50 - 00000232 _____ C:\Users\********\Desktop\Urlaub 2013 2014.txt
2013-09-28 17:18 - 2013-09-28 17:18 - 00000000 ____D C:\Users\********\AppData\Roaming\Nokia Suite
2013-09-28 17:18 - 2013-09-28 17:18 - 00000000 ____D C:\Users\********\AppData\Roaming\Nokia
2013-09-21 21:20 - 2013-09-21 21:20 - 00000000 ____D C:\Users\********\AppData\Roaming\OpenOffice
2013-09-21 20:42 - 2013-09-22 20:45 - 00000000 ____D C:\Users\********\AppData\Roaming\Skype
2013-09-21 20:41 - 2013-09-21 20:42 - 00000000 ____D C:\ProgramData\Skype
2013-09-21 20:41 - 2013-09-21 20:41 - 00000000 ___RD C:\Program Files\Skype
2013-09-21 20:41 - 2013-09-21 20:41 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-09-21 20:38 - 2013-09-21 20:40 - 32782192 _____ (Skype Technologies S.A.) C:\Users\********\Downloads\SkypeSetupFull_6.7.102.exe
==================== One Month Modified Files and Folders =======
2013-10-20 15:50 - 2013-10-20 15:50 - 01087515 _____ (Farbar) C:\Users\********\Desktop\FRST.exe
2013-10-20 15:48 - 2009-04-11 14:37 - 01506319 _____ C:\Windows\WindowsUpdate.log
2013-10-20 15:31 - 2013-10-04 12:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-20 15:16 - 2011-12-21 03:43 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-20 14:46 - 2012-12-11 20:11 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-10-20 10:49 - 2011-12-21 03:43 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-20 10:42 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-20 10:42 - 2006-11-02 14:47 - 00006096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-20 10:42 - 2006-11-02 14:47 - 00006096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-20 01:43 - 2006-11-02 15:01 - 00032538 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-20 00:12 - 2013-10-20 00:12 - 00000884 _____ C:\Users\********\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-20 00:09 - 2013-10-18 23:06 - 00001133 _____ C:\Users\********\Desktop\Rico.txt
2013-10-20 00:01 - 2012-11-25 22:54 - 00000000 ____D C:\Users\********\AppData\Roaming\BOM
2013-10-19 20:59 - 2013-10-19 20:59 - 00000892 _____ C:\Users\********\Desktop\OpenVPN GUI.lnk
2013-10-19 20:59 - 2013-10-19 20:59 - 00000892 _____ C:\Users\Gast\Desktop\OpenVPN GUI.lnk
2013-10-19 20:59 - 2013-10-19 20:59 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
2013-10-19 20:59 - 2011-12-23 02:41 - 00000000 ____D C:\Program Files\OpenVPN
2013-10-19 20:58 - 2012-09-05 20:12 - 01703590 _____ C:\Users\********\Downloads\openvpn-2.2.2-install.exe
2013-10-19 20:25 - 2013-10-19 20:25 - 00000368 _____ C:\Windows\PFRO.log
2013-10-19 20:23 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\tapi
2013-10-19 01:02 - 2011-12-22 22:48 - 00000000 ____D C:\Users\********\AppData\Roaming\ICQ
2013-10-18 21:31 - 2012-06-18 22:06 - 00000000 ____D C:\Windows\pss
2013-10-16 18:50 - 2013-10-01 17:00 - 00000232 _____ C:\Users\********\Desktop\Urlaub 2013 2014.txt
2013-10-15 20:47 - 2013-02-01 03:20 - 00000000 ____D C:\Users\********\Desktop\Dokumente
2013-10-15 18:20 - 2013-09-08 13:09 - 00000000 ____D C:\Program Files\Lx_cats
2013-10-13 17:17 - 2009-04-11 18:55 - 01445224 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-13 14:34 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-13 00:12 - 2013-03-06 00:33 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-13 00:12 - 2006-11-02 14:47 - 00260136 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-12 22:30 - 2013-07-25 20:07 - 00000000 ____D C:\Windows\system32\MRT
2013-10-12 22:27 - 2006-11-02 12:24 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-10-10 18:31 - 2012-12-11 20:11 - 00595552 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-10-10 18:31 - 2012-10-25 13:42 - 00025696 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys
2013-10-10 18:31 - 2012-10-25 13:42 - 00025696 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2013-10-10 18:31 - 2012-06-19 18:28 - 00135776 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2013-10-09 17:31 - 2013-10-04 12:55 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-09 17:31 - 2013-10-04 12:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-06 00:30 - 2013-10-06 00:30 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-06 00:30 - 2013-10-06 00:30 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-06 00:29 - 2012-01-03 12:21 - 00000000 ____D C:\Users\********\Desktop\Programme
2013-10-06 00:28 - 2013-10-06 00:28 - 00281896 _____ (Mozilla) C:\Users\********\Downloads\Firefox Setup Stub 24.0.exe
2013-10-05 21:45 - 2012-11-25 22:54 - 00000000 ____D C:\Program Files\Biet-O-Matic
2013-10-04 18:07 - 2011-12-21 03:43 - 00000000 ____D C:\Users\********\AppData\Local\Google
2013-10-04 18:06 - 2011-12-21 03:43 - 00000000 ____D C:\Program Files\Google
2013-10-04 12:55 - 2011-12-21 03:43 - 00000000 ____D C:\Users\********\AppData\Local\Adobe
2013-10-04 12:54 - 2011-12-21 03:41 - 00000000 ____D C:\ProgramData\Adobe
2013-10-04 12:49 - 2013-10-04 12:49 - 00000000 ____D C:\Program Files\Adobe
2013-10-04 12:49 - 2011-12-21 03:42 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-04 12:28 - 2013-10-04 12:28 - 24278649 _____ C:\Users\********\Downloads\vlc-2.1.0-win32.exe
2013-10-02 23:07 - 2013-10-02 23:03 - 00020841 _____ C:\Users\********\Downloads\Addition.txt
2013-10-02 23:06 - 2013-10-02 23:05 - 00025611 _____ C:\Users\********\Downloads\FRST.txt
2013-10-02 23:02 - 2013-10-02 23:02 - 00000000 ____D C:\FRST
2013-10-02 23:01 - 2013-10-02 23:01 - 01087213 _____ (Farbar) C:\Users\********\Downloads\FRST.exe
2013-10-02 19:18 - 2012-08-26 12:09 - 00000000 ____D C:\Program Files\Nokia
2013-10-02 19:17 - 2012-08-26 12:17 - 00000000 ____D C:\ProgramData\Nokia
2013-10-02 16:22 - 2012-12-29 01:18 - 00000000 ____D C:\Users\********\AppData\Roaming\Media Player Classic
2013-10-02 16:21 - 2012-01-07 15:42 - 00000000 ____D C:\Windows\Minidump
2013-10-01 16:26 - 2013-09-08 12:46 - 00262144 _____ C:\Windows\system32\config\elam
2013-09-30 22:35 - 2012-01-07 00:35 - 00008192 _____ C:\Users\********\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-28 17:18 - 2013-09-28 17:18 - 00000000 ____D C:\Users\********\AppData\Roaming\Nokia Suite
2013-09-28 17:18 - 2013-09-28 17:18 - 00000000 ____D C:\Users\********\AppData\Roaming\Nokia
2013-09-27 18:25 - 2013-09-08 13:14 - 00000731 _____ C:\ProgramData\lxdc
2013-09-22 20:45 - 2013-09-21 20:42 - 00000000 ____D C:\Users\********\AppData\Roaming\Skype
2013-09-22 12:29 - 2013-10-12 22:23 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-22 12:22 - 2013-10-12 22:23 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-22 12:22 - 2013-10-12 22:23 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-22 12:14 - 2013-10-12 22:23 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-22 12:13 - 2013-10-12 22:23 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-22 12:13 - 2013-10-12 22:23 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-22 12:12 - 2013-10-12 22:23 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-22 12:09 - 2013-10-12 22:23 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-22 12:08 - 2013-10-12 22:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-22 12:07 - 2013-10-12 22:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-22 12:06 - 2013-10-12 22:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-22 12:05 - 2013-10-12 22:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 12:03 - 2013-10-12 22:23 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-22 12:03 - 2013-10-12 22:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-22 12:03 - 2013-10-12 22:23 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-22 11:59 - 2013-10-12 22:23 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-21 21:20 - 2013-09-21 21:20 - 00000000 ____D C:\Users\********\AppData\Roaming\OpenOffice
2013-09-21 20:42 - 2013-09-21 20:41 - 00000000 ____D C:\ProgramData\Skype
2013-09-21 20:41 - 2013-09-21 20:41 - 00000000 ___RD C:\Program Files\Skype
2013-09-21 20:41 - 2013-09-21 20:41 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-09-21 20:40 - 2013-09-21 20:38 - 32782192 _____ (Skype Technologies S.A.) C:\Users\********\Downloads\SkypeSetupFull_6.7.102.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-20 10:55
==================== End Of Log ============================ --- --- ---
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-10-2013
Ran by ******** at 2013-10-20 16:03:03
Running from C:\Users\********\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Kaspersky Internet Security (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky Internet Security (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
==================== Installed Programs ======================
7-Zip 9.20
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4)
Adobe Reader X (10.1.8) (Version: 10.1.8)
Biet-O-Matic v2.14.10 (Version: 2.14.10)
CCleaner (Version: 4.05)
Druckerdeinstallation für EPSON Stylus SX200 Series
FileHippo.com Update Checker
Free YouTube to MP3 Converter version 3.12.0.128 (Version: 3.12.0.128)
Google Chrome (Version: 30.0.1599.101)
Google Update Helper (Version: 1.3.21.165)
HDAUDIO Soft Data Fax Modem with SmartCP
ICQ 7.7 Build #6082 Banner Remover 1.0
ICQ7.7 (Version: 7.7)
Kaspersky Internet Security 2013 (Version: 13.0.1.4190)
Lexmark 1300 Series
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Nokia Connectivity Cable Driver (Version: 7.1.78.0)
OpenOffice 4.0.0 (Version: 4.00.9702)
OpenVPN 2.2.2 (Version: 2.2.2)
Panda USB Vaccine 1.0.1.4
PC Connectivity Solution (Version: 12.0.32.0)
Radio.fx
Secunia PSI (2.0.0.4003) (Version: 2.0.0.4003)
Skype™ 6.7 (Version: 6.7.102)
TP-LINK USB Printer Controller (Version: 1.12.0927)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
VLC media player 2.1.0 (Version: 2.1.0)
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
==================== Restore Points =========================
24-09-2013 16:07:50 Geplanter Prüfpunkt
26-09-2013 16:54:10 Geplanter Prüfpunkt
27-09-2013 20:35:44 Geplanter Prüfpunkt
28-09-2013 10:33:11 Geplanter Prüfpunkt
29-09-2013 11:29:55 Geplanter Prüfpunkt
30-09-2013 15:52:33 Geplanter Prüfpunkt
01-10-2013 17:51:01 Geplanter Prüfpunkt
03-10-2013 09:54:02 Geplanter Prüfpunkt
04-10-2013 10:41:25 Removed Adobe Reader X (10.1.8) - Deutsch.
05-10-2013 08:46:14 Geplanter Prüfpunkt
10-10-2013 17:32:52 Geplanter Prüfpunkt
12-10-2013 20:12:28 Windows Update
18-10-2013 18:17:19 Geplanter Prüfpunkt
19-10-2013 15:44:52 Geplanter Prüfpunkt
20-10-2013 12:51:13 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {02ACB3B0-A8E8-4D7F-9FB2-979878E2B978} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-12-21] (Google Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2BB7B20E-CBDA-46F1-B445-117F52FBC7BD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {61837307-A827-4764-B131-BF15245AD7CE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {8A4AF762-3D2D-42BB-87D6-041636EE0371} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-12-21] (Google Inc.)
Task: {92204722-5AFA-4D35-9312-3BCB7C5EAD37} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {95EBB7F2-9B67-442A-BC36-8956CBECA723} - System32\Tasks\PandaUSBVaccine => C:\Program Files\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {F83AD061-D2BE-49DF-842F-B19F91EF519D} - \Desk 365 RunAsStdUser No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-08 13:08 - 2007-01-18 06:18 - 00103936 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\lxdcdrpp.dll
2012-08-17 22:39 - 2012-12-11 20:22 - 01310136 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll
2012-08-17 22:38 - 2012-08-17 22:38 - 00479160 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
2013-09-08 13:04 - 2007-05-02 05:11 - 00040960 _____ () C:\Program Files\Lexmark 1300 Series\App4R.Monitor.Core.dll
2013-09-08 13:04 - 2007-05-02 05:11 - 00028672 _____ () C:\Program Files\Lexmark 1300 Series\App4R.Monitor.Common.dll
2013-09-08 13:04 - 2007-05-02 05:10 - 00057344 _____ () C:\Program Files\Lexmark 1300 Series\App4R.DevMons.MCMDevMon.dll
2013-09-08 13:04 - 2007-04-30 08:19 - 00020480 _____ () C:\Program Files\Lexmark 1300 Series\App4R.DevMons.NetworkCardDevMon.dll
2013-09-08 13:04 - 2007-04-30 08:19 - 00020480 _____ () C:\Program Files\Lexmark 1300 Series\App4R.DevMons.ScanDevMon.dll
2013-09-08 13:04 - 2007-04-30 08:20 - 00011776 _____ () C:\Program Files\Lexmark 1300 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Broadcom NetLink (TM) Gigabit Ethernet
Description: Broadcom NetLink (TM) Gigabit Ethernet
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom
Service: k57nd60x
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/06/2013 00:35:44 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung firefox.exe, Version 24.0.0.5001, Zeitstempel 0x522fd29f, fehlerhaftes Modul xul.dll, Version 24.0.0.5001, Zeitstempel 0x522fd1a4, Ausnahmecode 0xc0000005, Fehleroffset 0x001b72a8,
Prozess-ID 0x1254, Anwendungsstartzeit firefox.exe0.
Error: (10/04/2013 00:33:22 PM) (Source: MsiInstaller) (User: Aspire)
Description: Produkt: Adobe Reader X (10.1.4) - Update "Adobe Reader X (10.1.4)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
Error: (10/04/2013 00:33:22 PM) (Source: MsiInstaller) (User: Aspire)
Description: Product: Adobe Reader X (10.1.4) -- Setup has detected that you already have a more functional product installed. Setup will now terminate.
Error: (10/02/2013 07:14:30 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NokiaSuite.exe, Version 3.5.34.0, Zeitstempel 0x501bcc32, fehlerhaftes Modul MSVCR100.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,
Prozess-ID 0x1090, Anwendungsstartzeit NokiaSuite.exe0.
Error: (10/02/2013 07:13:00 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NokiaSuite.exe, Version 3.5.34.0, Zeitstempel 0x501bcc32, fehlerhaftes Modul MSVCR100.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,
Prozess-ID 0x100, Anwendungsstartzeit NokiaSuite.exe0.
Error: (10/02/2013 04:17:41 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NokiaSuite.exe, Version 3.5.34.0, Zeitstempel 0x501bcc32, fehlerhaftes Modul MSVCR100.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,
Prozess-ID 0xed8, Anwendungsstartzeit NokiaSuite.exe0.
Error: (10/01/2013 04:38:06 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NokiaSuite.exe, Version 3.5.34.0, Zeitstempel 0x501bcc32, fehlerhaftes Modul MSVCR100.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000135, Fehleroffset 0x00009f5d,
Prozess-ID 0xde4, Anwendungsstartzeit NokiaSuite.exe0.
Error: (10/01/2013 04:19:49 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung NokiaSuite.exe, Version 3.5.34.0, Zeitstempel 0x501bcc32, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000043, Fehleroffset 0x00009f5d,
Prozess-ID 0x7e8, Anwendungsstartzeit NokiaSuite.exe0.
Error: (09/30/2013 05:18:56 PM) (Source: Application Hang) (User: )
Description: Programm USBVaccine.exe, Version 1.0.1.4 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 458
Anfangszeit: 01cebde96f8459e1
Zeitpunkt der Beendigung: 6
Error: (09/28/2013 03:27:05 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung firefox.exe, Version 24.0.0.5001, Zeitstempel 0x522fd29f, fehlerhaftes Modul xul.dll, Version 24.0.0.5001, Zeitstempel 0x522fd1a4, Ausnahmecode 0xc0000005, Fehleroffset 0x001b72a8,
Prozess-ID 0x838, Anwendungsstartzeit firefox.exe0.
System errors:
=============
Error: (10/20/2013 02:26:55 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 10.8.12.154 für die Netzwerkkarte mit der Netzwerkadresse 00FF01D03A2D wurde durch den DHCP-Server 10.8.12.205 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).
Error: (10/20/2013 10:51:28 AM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 10.8.12.14 für die Netzwerkkarte mit der Netzwerkadresse 00FF01D03A2D wurde durch den DHCP-Server 10.8.12.153 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).
Error: (10/20/2013 10:44:26 AM) (Source: Service Control Manager) (User: )
Description: lxdcCATSCustConnectService%%1053
Error: (10/20/2013 10:44:26 AM) (Source: Service Control Manager) (User: )
Description: 30000lxdcCATSCustConnectService
Error: (10/20/2013 10:44:26 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (10/20/2013 00:33:37 AM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 10.8.12.54 für die Netzwerkkarte mit der Netzwerkadresse 00FF01D03A2D wurde durch den DHCP-Server 10.8.12.13 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).
Error: (10/19/2013 10:13:43 PM) (Source: Service Control Manager) (User: )
Description: lxdcCATSCustConnectService%%1053
Error: (10/19/2013 10:13:43 PM) (Source: Service Control Manager) (User: )
Description: 30000lxdcCATSCustConnectService
Error: (10/19/2013 10:13:43 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (10/19/2013 08:27:36 PM) (Source: Service Control Manager) (User: )
Description: lxdcCATSCustConnectService%%1053
Microsoft Office Sessions:
=========================
Error: (10/06/2013 00:35:44 AM) (Source: Application Error)(User: )
Description: firefox.exe24.0.0.5001522fd29fxul.dll24.0.0.5001522fd1a4c0000005001b72a8125401cec21a85d59b70
Error: (10/04/2013 00:33:22 PM) (Source: MsiInstaller)(User: Aspire)
Description: Adobe Reader X (10.1.4)Adobe Reader X (10.1.4)1603(NULL)(NULL)
Error: (10/04/2013 00:33:22 PM) (Source: MsiInstaller)(User: Aspire)
Description: Product: Adobe Reader X (10.1.4) -- Setup has detected that you already have a more functional product installed. Setup will now terminate.(NULL)(NULL)(NULL)(NULL)
Error: (10/02/2013 07:14:30 PM) (Source: Application Error)(User: )
Description: NokiaSuite.exe3.5.34.0501bcc32MSVCR100.dll6.0.6002.1888151da3e27c000013500009f5d109001cebf92db2418d6
Error: (10/02/2013 07:13:00 PM) (Source: Application Error)(User: )
Description: NokiaSuite.exe3.5.34.0501bcc32MSVCR100.dll6.0.6002.1888151da3e27c000013500009f5d10001cebf92a391cf26
Error: (10/02/2013 04:17:41 PM) (Source: Application Error)(User: )
Description: NokiaSuite.exe3.5.34.0501bcc32MSVCR100.dll6.0.6002.1888151da3e27c000013500009f5ded801cebf7a18722a16
Error: (10/01/2013 04:38:06 PM) (Source: Application Error)(User: )
Description: NokiaSuite.exe3.5.34.0501bcc32MSVCR100.dll6.0.6002.1888151da3e27c000013500009f5dde401cebeb3cb691307
Error: (10/01/2013 04:19:49 PM) (Source: Application Error)(User: )
Description: NokiaSuite.exe3.5.34.0501bcc32ntdll.dll6.0.6002.1888151da3e27c000004300009f5d7e801cebeb117818227
Error: (09/30/2013 05:18:56 PM) (Source: Application Hang)(User: )
Description: USBVaccine.exe1.0.1.445801cebde96f8459e16
Error: (09/28/2013 03:27:05 PM) (Source: Application Error)(User: )
Description: firefox.exe24.0.0.5001522fd29fxul.dll24.0.0.5001522fd1a4c0000005001b72a883801cebc4d7b0eba14
CodeIntegrity Errors:
===================================
Date: 2013-10-20 16:02:55.799
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klmouflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:55.518
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klmouflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:55.237
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klmouflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:54.957
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klmouflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:54.645
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klkbdflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:54.364
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klkbdflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:54.083
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klkbdflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:53.802
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klkbdflt.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:53.428
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klif.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-20 16:02:53.131
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\klif.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 36%
Total physical RAM: 2999.9 MB
Available physical RAM: 1901.29 MB
Total Pagefile: 6233.98 MB
Available Pagefile: 4965 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.37 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:288.32 GB) (Free:213.69 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: BD87394B)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=288 GB) - (Type=07 NTFS)
==================== End Of Log ============================ |