|
Win 8.1 64bit JRT & Malwarebytes melden unlöschbare Registry Einträge Seitenaufruf Hallo Ihr Helden des Mainboards, :sword2: ich habe mir anscheinend Malware auf den Rechner geholt. Auswirkung war meistens ungewolltes Öffnen von Seiten in Chrome. Vieles habe ich selbst mit JRT, AdwCleaner, MalwareBytes (incl. Rootkit) und Antivir beseitigen können, aber es bleiben immer noch Spuren zurück und MalwareBytes blockt Seiten im Chrome, die im Hintergrund ohne mein Zutun aufgerufen werden. Es wäre fantastisch, wenn sich jemand mit mehr Ahnung als ich meiner annehmen könnte. :applaus: Die Report sind im angehängten ZIP als TXT Dateien. Danke, milonguero00 :daumenhoc |
Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
|
Hallo und danke für den Hinweis. hier die logs: 1. JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.2 (02.20.2014:1) OS: Windows 8.1 x64 Ran by Sven on 28.02.2014 at 12:12:56,26 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 28.02.2014 at 12:19:28,65 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 2. FRST FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02 |
3. FRST AdditionFRST Additions Logfile: Code: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2014 02 |
OTL Logfile: Code: OTL logfile created on: 28.02.2014 12:28:19 - Run 1OTL Extras logfile created on: 28.02.2014 12:28:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sven\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16518) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,91 Gb Total Physical Memory | 1,30 Gb Available Physical Memory | 33,21% Memory free 7,34 Gb Paging File | 2,26 Gb Available in Paging File | 30,83% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 64,24 Gb Total Space | 20,90 Gb Free Space | 32,53% Space Free | Partition Type: NTFS Drive D: | 52,93 Gb Total Space | 18,22 Gb Free Space | 34,42% Space Free | Partition Type: NTFS Drive S: | 60,15 Gb Total Space | 18,68 Gb Free Space | 31,06% Space Free | Partition Type: exFAT Computer Name: SVENSUB | User Name: Sven | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- Reg Error: Key error. File not found .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- Reg Error: Key error. File not found [HKEY_USERS\S-1-5-21-105773088-3583217078-643188840-1001\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- Reg Error: Key error. htmlfile [opennew] -- Reg Error: Key error. http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- Reg Error: Key error. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- Reg Error: Key error. htmlfile [opennew] -- Reg Error: Key error. http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- Reg Error: Key error. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error. ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 "DoNotAllowExceptions" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{60CF4A18-C74E-4D5E-9A86-A5CA246207D9}" = lport=9997 | protocol=6 | dir=in | app=c:\program files\sony\vaio care\vaioshell.exe | "{6D945957-6A59-43D6-8649-75059002B9D9}" = lport=9996 | protocol=6 | dir=in | app=c:\program files\sony\vaio care\vcsystemtray.exe | "{6F540085-D4D0-4E8C-BE6E-A8B6CBD0FD48}" = lport=9998 | protocol=6 | dir=in | app=c:\program files\sony\vaio care\vcadmin.exe | "{A1E7E31F-2194-410F-B419-395AAD7188AD}" = lport=9999 | protocol=6 | dir=in | app=c:\program files\sony\vaio care\vcagent.exe | "{ED3CAE26-77D4-40BC-A866-08AD3D00935A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe | |
========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02ADFC5D-165D-4834-B415-8F4A4A4763B8}" = dir=out | name=sony select | "{0700F8D7-7847-40EF-ACBF-5EA6446620E2}" = dir=in | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} | "{09C6FCCF-0E19-4371-83ED-5CDD1F6F132B}" = dir=in | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | "{0DE9D1B5-EDE8-4A09-8BA8-063577A4EF11}" = dir=in | name=@{bd9b8345.albumbysony_2.1.0.2170_x86__05bme2bjq6sag?ms-resource://bd9b8345.albumbysony/resources/sz_appname} | "{0E988B4C-A2F4-4AAA-8BF7-9BFC52A9DF0F}" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\beamrise\application\31.0.1650.7639\windows-x86-skypekit.exe | "{10C94B6D-AE94-44AA-BC3F-6B9F6E93610D}" = dir=out | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | "{14B35D37-D281-4E10-8672-56A9DE1E7D9F}" = dir=out | name=@{microsoft.bingfinance_1.7.0.38_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | "{156A432F-39C1-4E69-9DD4-4ADE7B44F9E2}" = dir=out | name=windows_ie_ac_001 | "{185B3AB0-504B-46F1-A46E-DF09487173FE}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{1B4B7346-86F5-47C7-8591-68C29931E50F}" = dir=in | name=f5 vpn | "{1D74A868-B1B2-4D3F-9BC9-61AE315DC757}" = protocol=6 | dir=in | app=c:\program files (x86)\pogo games\webupdater.exe | "{229C12F9-3C35-4D20-80F9-395970B9EA1E}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{247122EF-9860-4515-8DAF-B57C66C440B7}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{260F3E9E-85BD-44F8-8550-DDE77749FE73}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{289DD167-E934-457D-804A-9F9C4777DD95}" = dir=out | name=@{microsoft.bingweather_1.7.0.26_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | "{28FD12AF-E76E-4A32-9513-4212A4B37998}" = dir=in | app=c:\program files (x86)\intel\intelappstore\bin\ismagent.exe | "{32A99256-0102-4833-BCAF-FEF7692A8471}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{3663A330-B8EC-4715-B6E7-38E2C92EDE45}" = dir=out | name=@{bd9b8345.albumbysony_2.1.0.2170_x86__05bme2bjq6sag?ms-resource://bd9b8345.albumbysony/resources/sz_appname} | "{396A1A66-0E0D-408F-ACD6-37647EF56619}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{3D005309-48C4-4FF2-A1DB-A3C1873C1EDC}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{3FE73692-3754-4BFC-9B4B-882FDB4C08A6}" = dir=out | name=ebay | "{4053758A-B8C6-4E88-B405-46E635248865}" = dir=out | name=arte tv | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{4327BC1B-C833-42B4-9F01-F24988272952}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{48ABE6D9-062B-4C62-86D3-8104235D9A5D}" = dir=out | name=netzkino | "{4DA7EFDE-43B8-4D1E-80CB-FC964E30213A}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{526AC3EA-CFED-4163-B986-459FD26A74C3}" = dir=out | name=@{microsoft.bingtravel_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{5C3F3BA9-3A90-4839-A719-4A991A1714B0}" = dir=out | name=windows_ie_ac_001 | "{5E132AF7-D1D4-4EF4-9543-02F2D2047CE6}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{61505543-FF54-4865-8505-40F977CE62EF}" = dir=out | name=intel appup® catalogue app – (v) european edition | "{62030481-0EDA-4F7C-B2E1-D8D6DD0FCDCC}" = dir=in | name=arte tv | "{664572AA-289B-497B-950E-5B7E3E0CFCBF}" = dir=out | name=@{microsoft.bingweather_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | "{66C2EC1B-E74F-49DF-B424-ED8E8BC35736}" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\beamrise\application\31.0.1650.7639\services\windows-x86-skypekit.exe | "{6AF2BDA9-8E28-4C9A-BC71-C2CCC871B631}" = dir=out | name=@{microsoft.bingmaps_2.0.2530.2317_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{6C0F7BFD-3457-4BFA-BDC5-EBBA66E27051}" = dir=out | name=@{microsoft.bingsports_1.8.0.51_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | "{71B3524E-922E-4263-9815-5EBADA3B9DE1}" = dir=in | name=intel appup® catalogue app – (v) european edition | "{724D0B77-15E1-4302-BDEE-F613E8A18A06}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{73629B26-E050-4450-8374-DAD54AADF185}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{75336BC2-0AD1-4488-9F4F-A3DC272B31F0}" = protocol=6 | dir=out | app=c:\users\sven\appdata\local\beamrise\application\31.0.1650.7639\windows-x86-skypekit.exe | "{775652FD-AA65-4436-9D57-C84395D9D35E}" = dir=out | name=- games app - | "{79AC1263-BF56-4734-BD76-5F743D9FE935}" = dir=out | name=@{microsoft.zunemusic_1.2.150.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} | "{7D5458A2-C6BF-4708-8B01-1253BE9EE6A4}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{7EE5542D-D681-4B92-A56D-0342FC884AFC}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{820B6FE1-5D06-40E6-98C4-11D54742C892}" = dir=out | name=@{microsoft.xboxlivegames_1.2.143.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{857793CC-A23D-4CF2-AAE9-0A1E70ABABC8}" = dir=out | name=sonicwall mobile connect | "{884A5B62-35CC-4FA3-92A0-0C49440592B7}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{8A3E55D3-DFA4-43C6-A5B6-09A94BECC70E}" = dir=in | name=vaio care | "{8E8E10C6-BC10-4A9F-82C1-289C222EF2ED}" = dir=out | name=@{microsoft.bingmaps_1.5.1.240_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{900150F7-568A-4634-9056-A6CF0FF8FE51}" = dir=out | name=001 national geographic for windows 8 | "{900A9108-8AF4-4A0A-BE40-D496003E1943}" = dir=in | app=c:\program files\intel corporation\intel widi\widiapp.exe | "{994EEBC9-10A6-4CE4-84F2-3D88A3C43CBF}" = protocol=17 | dir=in | app=c:\program files (x86)\pogo games\webupdater.exe | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{A1CB5E3C-00B6-4A85-B65B-51C41DBDC6C5}" = protocol=17 | dir=in | app=c:\program files (x86)\pogo games\pogodgc.exe | "{A43F8A41-B938-454F-ACAD-B9D21A4E178E}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{A49DC85F-57A5-4913-8397-682445D97B1B}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{A6D6BD35-008E-4DD4-B611-40F658AF859E}" = dir=out | name=@{microsoft.zunevideo_1.2.150.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} | "{A8EE5992-29D9-4536-A90E-694C60D1028C}" = dir=in | name=juniper networks junos pulse | "{AA6750DC-0EF5-4FC3-9C76-43E88B777113}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{AA86AAF1-4048-47AE-B7DD-0E15990C9046}" = dir=out | name=f5 vpn | "{B0241C38-A1C0-4287-8C4F-FFA52C1DD731}" = dir=out | name=cut the rope | "{B4BF149F-6B36-4ECF-A43A-993A3D3EBE98}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | "{B5A314E4-34EF-46E8-821D-B01A54E42886}" = dir=out | name=juniper networks junos pulse | "{B921A000-9653-461E-BA1C-F66E1ECA8EBE}" = dir=out | name=check point vpn | "{BB3D8EE1-665E-48D8-8331-7D9B36D4C8EC}" = dir=in | name=check point vpn | "{BB8E359C-60BB-4759-823A-962E58D17A99}" = dir=in | name=@{bd9b8345.musicbysony_1.0.5.8300_x86__05bme2bjq6sag?ms-resource://bd9b8345.musicbysony/resources/q_m_browse_001} | "{BF524F6F-261C-4926-ACA5-75D7DDE0D533}" = dir=out | name=@{bd9b8345.musicbysony_1.0.5.8300_x86__05bme2bjq6sag?ms-resource://bd9b8345.musicbysony/resources/q_m_browse_001} | "{C7DCEFDF-DBC4-41A0-B259-372E10DB7F83}" = protocol=6 | dir=out | app=c:\users\sven\appdata\local\beamrise\application\31.0.1650.7639\services\windows-x86-skypekit.exe | "{CD989DE7-F4AE-4296-BF2D-DC70BF3E1737}" = protocol=6 | dir=in | app=c:\program files (x86)\pogo games\pogodgc.exe | "{D062163F-1001-4428-8F19-2D5DAEACF46B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{D2DFEA92-88FF-46FD-AEF9-491134A1539F}" = dir=out | name=@{microsoft.zunemusic_2.2.704.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{D5C05EE1-372A-4492-9958-A4479BB3BD92}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{DAF80443-1F85-4EF2-BD17-FCA218145AC2}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DBDF530C-4594-49A3-9532-45F9EB670BED}" = dir=out | name=vaio care | "{DECCA817-44A3-4BDF-96AE-1206B358A3DF}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{E0B88551-BA3F-401A-B9F9-5707A548C3E8}" = dir=out | name=@{microsoft.zunevideo_2.2.704.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{E2C9DB38-58E3-4763-86A4-7ED0776D42C5}" = dir=out | name=@{microsoft.bingtravel_1.7.0.26_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | "{E73902B5-6A42-420E-9963-7A546BE34A3C}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{E84E18A3-DD2F-47F6-A34A-284F670E7ECE}" = dir=in | name=sonicwall mobile connect | "{EA103F57-59C6-488B-ACA9-9907F9607A4D}" = dir=out | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} | "{EA46324B-B455-4458-9E9A-A6422BABB5C7}" = dir=out | name=maxdome | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{F1669DEA-2204-4E21-A9B4-3F8DFC028193}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{F5CDF0A8-C668-4A3E-A690-72B7F208D56A}" = dir=out | name=@{microsoft.bingnews_1.7.0.38_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F8F5FC81-A7D0-4E3A-9616-ACBEC4FA28EB}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.2.229_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{F919537E-F860-4447-876D-F43FC09604B9}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | "{F9EF7D0B-6E04-40B3-AB53-C53D25B22D48}" = dir=out | name=@{microsoft.bingnews_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} | "{FC163AE2-6DEB-409B-8FF4-2F1B49B8C038}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{FDCF6A87-2FD9-4608-92DC-A175371A3F3F}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{FDF39097-A0E7-4AAA-998F-1DAB6D5343D4}" = dir=out | name=windows_ie_ac_001 | "TCP Query User{016988F2-E9B4-41B7-86D6-BDC2A7ADE4AA}C:\users\sven\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\akamai\netsession_win.exe | "TCP Query User{23E316BA-2E70-4B16-8571-D0CB9AE7CFA5}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "TCP Query User{3DBBF491-621D-4DC5-85E7-FD3B711FF8FC}C:\program files (x86)\torntv.com\torntv downloader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\torntv.com\torntv downloader.exe | "TCP Query User{60C3E14C-2EB3-4F68-86DD-E8EA3ADA7A43}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "TCP Query User{8955AA46-E45B-4E6D-8207-0D5A5E6630FC}C:\users\sven\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\akamai\netsession_win.exe | "TCP Query User{D6BB5070-3DE1-4CA7-854B-D57AFC1A9DE8}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "TCP Query User{DC008458-F2AB-4FE1-A6F9-CBD48792731F}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{5124585B-EA99-4C18-912D-6613710DC023}C:\program files (x86)\torntv.com\torntv downloader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\torntv.com\torntv downloader.exe | "UDP Query User{5FADBDDC-1001-40F1-8B95-7A8527464974}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{6A6ADD65-F1F8-498D-BCE5-051A133E2AFC}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{A0968903-92E6-480E-953C-AC96A852E1C2}C:\users\sven\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\local\akamai\netsession_win.exe | "UDP Query User{AB85C607-A22B-420E-9751-3B5EC4225FF0}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "UDP Query User{B0CE0C6B-9625-45AD-ABA7-B6FB71B33B11}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "UDP Query User{C134ED52-FE3E-4539-B22D-95DBC4623304}C:\users\sven\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\local\akamai\netsession_win.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}" = iTunes "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{25ECAFCB-DCFB-4FCE-A5B2-772A57F59860}" = VCCx64 "{26A24AE4-039D-4CA4-87B4-2F86417013FF}" = Java 7 Update 13 (64-bit) "{28B4FCD3-1E17-411F-B56A-769DCF9169E0}" = Intel(R) WiDi "{302600C1-6BDF-4FD1-1307-148929CC1385}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) "{312395BC-7CC2-434C-A660-30250276A926}" = SSLx64 "{3181229B-05DA-46F9-B8D4-4966BDA99A74}" = Intel® PROSet/Wireless WiFi Software "{409CB30E-E457-4008-9B1A-ED1B9EA21140}" = Intel(R) Rapid Storage Technology "{44B72151-611E-429D-9765-9BA093D7E48A}" = Intel® Trusted Connect Service Client "{4F31AC31-0A28-4F5A-8416-513972DA1F79}" = VSSTx64 "{62A172B2-550E-499D-9A82-5190D18390AA}" = Einstellungen für VAIO Media Server "{64AEB277-30E8-4C5B-A9D5-66CD8995AF75}" = VAIO Care "{6B7DE186-374B-4873-AEC1-7464DA337DD6}" = VU5x64 "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{6F280399-F8BD-4F2E-BCA4-207BEBCDE33A}" = Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed "{79AB6D9F-7E2B-453F-B10F-9726D9C20848}" = VUx64 "{8A8AB9E1-99B8-42DC-AB2A-946FAA40D616}" = Intel(R) Smart Connect Technology "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010 "{90150000-0015-0407-1000-0000000FF1CE}" = Microsoft Access MUI (German) 2013 "{90150000-0016-0407-1000-0000000FF1CE}" = Microsoft Excel MUI (German) 2013 "{90150000-0018-0407-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (German) 2013 "{90150000-0019-0407-1000-0000000FF1CE}" = Microsoft Publisher MUI (German) 2013 "{90150000-001A-0407-1000-0000000FF1CE}" = Microsoft Outlook MUI (German) 2013 "{90150000-001B-0407-1000-0000000FF1CE}" = Microsoft Word MUI (German) 2013 "{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch "{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English "{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office*- Français "{90150000-001F-0410-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Italiano "{90150000-002C-0407-1000-0000000FF1CE}" = Microsoft Office Proofing (German) 2013 "{90150000-0044-0407-1000-0000000FF1CE}" = Microsoft InfoPath MUI (German) 2013 "{90150000-006E-0407-1000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2013 "{90150000-0090-0407-1000-0000000FF1CE}" = Microsoft DCF MUI (German) 2013 "{90150000-00A1-0407-1000-0000000FF1CE}" = Microsoft OneNote MUI (German) 2013 "{90150000-00BA-0407-1000-0000000FF1CE}" = Microsoft Groove MUI (German) 2013 "{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013 "{90150000-00C1-0407-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (German) 2013 "{90150000-00E1-0407-1000-0000000FF1CE}" = Microsoft Office OSM MUI (German) 2013 "{90150000-00E2-0407-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (German) 2013 "{90150000-012B-0407-1000-0000000FF1CE}" = Microsoft Lync MUI (German) 2013 "{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013 "{93F692D4-0C4D-4EED-9BFE-657C1D5959FE}" = Intel(R) Rapid Storage Technology "{AB447E3B-7A95-4CA6-8ECD-B25C96314B67}" = VCCx64 "{c7565395-3662-4b78-8c42-e7cf02c6edd7}" = Intel(R) PRO/Wireless Driver "{D55EAC07-7207-44BD-B524-0F063F327743}" = VIx64 "{DBEAA361-F8A4-4298-B41C-9E9DCB9AAB84}" = VPMx64 "{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64 "{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}" = Apple Mobile Device Support "GrabRez" = GrabRez "McAfee Anti-Theft" = Intel Anti-Theft Service "Office15.PROPLUSR" = Microsoft Office Professional Plus 2013 "SynTPDeinstKey" = Synaptics Pointing Device Driver "WinRAR archiver" = WinRAR 5.01 (64-Bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{105fa5c4-72e1-41f2-a82c-884d8aa4b381}" = Intel® PROSet/Wireless Software "{1E5C7043-09C5-4974-A69F-A5271FD82BBC}" = PlayMemories Home "{20D9D0D9-1659-4775-992E-5F5650AD9B87}" = Intel(R) Update Manager "{26A24AE4-039D-4CA4-87B4-2F83217051FF}" = Java 7 Update 51 "{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0 "{3490653F-2789-46A1-B1BF-6BD4CF4131AB}" = FDUx86 "{3A26D9BD-0F73-432D-B522-2BA18138F7EF}" = VAIO Improvement "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11 "{5597C927-029A-46A7-A0C0-8DABD9891A50}" = VAIO Image Optimizer "{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool "{5D772F4A-53DE-4E1F-83F5-B08DFF106C60}" = VAIO BIOS Data Transfer Utility "{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}" = VAIO-Support für Übertragungen "{63C43435-F428-42BA-8E7B-5848749D9262}" = SSLx86 "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{692955F2-DE9F-4078-8FAA-858D6F3A1776}" = VAIO Gesture Control "{6C29152D-3FF9-43B2-84E4-9B35FC0BF5C2}" = Vodafone Mobile Broadband "{721F23DC-DD5D-4406-8C3A-0D9736C99C51}" = XperiaLinkx86 "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}" = VAIO Easy Connect "{803E4FA5-A940-4420-B89D-A8BC2E160247}" = "{82F09B1C-F602-4552-9C40-5BD5F8EAF750}" = "{855DDD3C-131E-42A8-BCBD-F9581F80CACB}" = "{8E797841-A110-41FD-B17A-3ABC0641187A}" = VAIO Control Center "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010 "{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010 "{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010 "{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010 "{90140000-00B4-0407-0000-0000000FF1CE}" = Microsoft Office Project MUI (German) 2010 "{91140000-003B-0000-0000-0000000FF1CE}" = Microsoft Office Project Professional 2010 "{9A2CA016-1C4C-4D44-BF70-C2C8639C34A4}" = ESDL "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9CE67959-AF22-4D93-8D49-CB73F015628E}" = VAIO Gesture Control "{9D12A8B5-9D41-4465-BF11-70719EB0CD02}" = VU5x86 "{9D8112DB-3490-4BF1-AAFA-1D224FFB5D3C}" = VHD "{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}" = VAIO Update "{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}" = Apple Application Support "{AC76BA86-7AD7-FFFF-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) MUI "{AFDC0CC0-39E8-42C0-9823-2C1C182676DC}" = VCCx86 "{B24BB74E-8359-43AA-985A-8E80C9219C70}" = VSSTx86 "{B31938C7-7E97-49EE-8F88-951E156268A3}" = VCCx86 "{B8991D99-88FD-41F2-8C32-DB70278D5C30}" = VWSTx86 "{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}" = VAIO*CPU-Lüfterdiagnose "{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}" = VAIO Movie Creator "{C9661090-C134-46E8-90B2-76D72355C2A6}" = Realtek PCIE Card Reader "{CB0D4DD6-1AD1-41B7-98EE-B679FB495F64}" = VUx86 "{D17C2A58-E0EA-4DD7-A2D6-C448FD25B6F6}" = VIx86 "{D91558BF-D1F3-411F-AEFE-8774CB406512}" = VAIO - Xperia Link "{E2121792-B020-48C6-8F2B-15E9A19E5B1F}_is1" = Pflanzen gegen Zombies Version 1.0.4.7924 "{EC153498-00E1-4C9C-89BE-81527C6750BE}" = VAIO Care-Hardwarediagnose-Plugin "{ECCEB4D0-7080-4F8A-B498-E40A32A4FBED}" = Restore "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.188 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{FB77DB0C-6951-47B6-9D80-A0FDBEE0334C}" = "{FBEE3D44-0933-4B84-BB6A-49957F89187F}" = VAIO Sample Music "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package "0E7DAF70-FB54-4B91-B192-7E771C25AEEB" = Intel Collaborative Processor Performance Control "Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin "Avira AntiVir Desktop" = Avira Free Antivirus "EaseUS Partition Master_is1" = EaseUS Partition Master 9.2.2 "Fishdom: Frosty Splash" = Fishdom: Frosty Splash "Free PDF to Word Doc Converter_is1" = Free PDF to Word Doc Converter v1.1 "Google Chrome" = Google Chrome "InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}" = VAIO Image Optimizer "InstallShield_{C2CC5822-32E6-4D21-88EA-DE8CED09EE2F}" = VAIO Movie Creator "Intel AppUp(R) center 41800" = Intel AppUp(R) center "IsoBuster_is1" = IsoBuster 3.2 "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300 "Mozilla Firefox 26.0 (x86 de)" = Mozilla Firefox 26.0 (x86 de) "MozillaMaintenanceService" = Mozilla Maintenance Service "NXPProximityInstaller" = NXPProximityInstaller "Office14.PRJPROR" = Microsoft Project Professional 2010 "PogoDGC" = Pogo Games "Synchredible_is1" = Synchredible "VLC media player" = VLC media player 2.1.2 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-105773088-3583217078-643188840-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Akamai" = Akamai NetSession Interface "Beamrise" = Beamrise ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 27.02.2014 19:00:07 | Computer Name = SvenSub | Source = .NET Runtime | ID = 1026 Description = Error - 27.02.2014 19:00:07 | Computer Name = SvenSub | Source = .NET Runtime | ID = 1026 Description = Error - 27.02.2014 19:00:07 | Computer Name = SvenSub | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: VCSystemTray.exe, Version: 8.3.0.8210, Zeitstempel: 0x521441ef Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.16496, Zeitstempel: 0x52b3f283 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000000000005a88 ID des fehlerhaften Prozesses: 0x1d98 Startzeit der fehlerhaften Anwendung: 0x01cf340fa434fec5 Pfad der fehlerhaften Anwendung: C:\Program Files\Sony\VAIO Care\VCSystemTray.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\KERNELBASE.dll Berichtskennung: e668ba69-a002-11e3-bebc-fc44ee47304b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 27.02.2014 19:00:07 | Computer Name = SvenSub | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.3.0.8210, Zeitstempel: 0x52144236 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.16496, Zeitstempel: 0x52b3f283 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000000000005a88 ID des fehlerhaften Prozesses: 0x2340 Startzeit der fehlerhaften Anwendung: 0x01cf340fa718e713 Pfad der fehlerhaften Anwendung: C:\Program Files\Sony\VAIO Care\VCAgent.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\KERNELBASE.dll Berichtskennung: e674f19e-a002-11e3-bebc-fc44ee47304b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 28.02.2014 07:00:09 | Computer Name = SvenSub | Source = .NET Runtime | ID = 1026 Description = Error - 28.02.2014 07:00:09 | Computer Name = SvenSub | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: VCSystemTray.exe, Version: 8.3.0.8210, Zeitstempel: 0x521441ef Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.16496, Zeitstempel: 0x52b3f283 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000000000005a88 ID des fehlerhaften Prozesses: 0x1644 Startzeit der fehlerhaften Anwendung: 0x01cf34743972f3d2 Pfad der fehlerhaften Anwendung: C:\Program Files\Sony\VAIO Care\VCSystemTray.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\KERNELBASE.dll Berichtskennung: 7c9df414-a067-11e3-bebc-fc44ee47304b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 28.02.2014 07:00:09 | Computer Name = SvenSub | Source = .NET Runtime | ID = 1026 Description = Error - 28.02.2014 07:00:09 | Computer Name = SvenSub | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.3.0.8210, Zeitstempel: 0x52144236 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.16496, Zeitstempel: 0x52b3f283 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000000000005a88 ID des fehlerhaften Prozesses: 0xe68 Startzeit der fehlerhaften Anwendung: 0x01cf34743d81533a Pfad der fehlerhaften Anwendung: C:\Program Files\Sony\VAIO Care\VCAgent.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\KERNELBASE.dll Berichtskennung: 7cd7f336-a067-11e3-bebc-fc44ee47304b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error - 28.02.2014 07:00:33 | Computer Name = SvenSub | Source = .NET Runtime | ID = 1026 Description = Error - 28.02.2014 07:00:33 | Computer Name = SvenSub | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: VCAgent.exe, Version: 8.3.0.8210, Zeitstempel: 0x52144236 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.16496, Zeitstempel: 0x52b3f283 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000000000005a88 ID des fehlerhaften Prozesses: 0x1648 Startzeit der fehlerhaften Anwendung: 0x01cf34744cc0e212 Pfad der fehlerhaften Anwendung: C:\Program Files\Sony\VAIO Care\VCAgent.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\KERNELBASE.dll Berichtskennung: 8b1b1e02-a067-11e3-bebc-fc44ee47304b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: [ ESRV_SVC Events ] Error - 21.02.2014 09:46:19 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 21.02.2014 12:15:39 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 21.02.2014 12:16:29 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 22.02.2014 12:13:37 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 22.02.2014 12:14:27 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 22.02.2014 12:56:02 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 22.02.2014 12:56:52 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 24.02.2014 09:02:49 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 24.02.2014 09:03:39 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = Error - 24.02.2014 10:05:21 | Computer Name = SvenSub | Source = ESRV_SVC | ID = 2 Description = [ System Events ] Error - 24.02.2014 10:03:22 | Computer Name = SvenSub | Source = DCOM | ID = 10016 Description = Error - 24.02.2014 10:06:11 | Computer Name = SvenSub | Source = Service Control Manager | ID = 7034 Description = Dienst "Energy Server Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error - 25.02.2014 05:00:01 | Computer Name = SvenSub | Source = DCOM | ID = 10016 Description = Error - 25.02.2014 18:15:59 | Computer Name = SvenSub | Source = DCOM | ID = 10010 Description = Error - 25.02.2014 18:15:59 | Computer Name = SvenSub | Source = DCOM | ID = 10010 Description = Error - 25.02.2014 18:15:59 | Computer Name = SvenSub | Source = DCOM | ID = 10010 Description = Error - 25.02.2014 18:15:59 | Computer Name = SvenSub | Source = DCOM | ID = 10010 Description = Error - 26.02.2014 07:56:33 | Computer Name = SvenSub | Source = DCOM | ID = 10016 Description = Error - 27.02.2014 08:55:58 | Computer Name = SvenSub | Source = DCOM | ID = 10016 Description = Error - 28.02.2014 05:00:01 | Computer Name = SvenSub | Source = DCOM | ID = 10016 Description = [ USER_ESRV_SVC Events ] Error - 04.12.2013 14:10:32 | Computer Name = SvenSub | Source = USER_ESRV_SVC | ID = 2 Description = < End of report > |
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
und ein frisches FRST log bitte. |
Hallo Schrauber, hier schon mal das AdwCleaner Log:AdwCleaner Logfile: Code: # AdwCleaner v3.020 - Bericht erstellt am 02/03/2014 um 22:16:22Und dann noch FRST: FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2014 02--- --- --- |
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? :) |
Hallo Schrauber, danke für Deine Mühe :-) Nach Scans mit Antivir, Malwarebytes und JRT scheint jetzt wieder alles in Ordnung zu sein. Kannst Du einem DAU in ein / zwei Worten beschreiben, was es war? Lieben Gruß, milonguero00 hier noch die Logs: ESET log: ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5da6bf3f24f65d4eb5d4ad825e0be9e6 # engine=17301 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-03-04 12:17:37 # local_time=2014-03-04 01:17:37 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.2.9200 NT # compatibility_mode=1799 16775165 100 94 35659 8777784 28416 0 # compatibility_mode=5893 16776573 100 94 42474 16725959 0 0 # scanned=205658 # found=0 # cleaned=0 # scan_time=14700 Security Check: Results of screen317's Security Check version 0.99.79 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender WMI entry may not exist for antivirus; attempting automatic update. Avira successfully updated! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Adobe Flash Player 12.0.0.70 Adobe Reader XI Mozilla Firefox (26.0) Google Chrome 33.0.1750.117 Google Chrome 33.0.1750.146 ````````Process Check: objlist.exe by Laurent```````` Windows Defender MSMpEng.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST log: FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2014 02--- --- --- |
2 Wörter: nervige Adware :) Fertig :) Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :) Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 21:51 Uhr. |
Copyright ©2000-2025, Trojaner-Board
