Trojaner-Board - QuickShare & Snap.do auf Rechner: Deinstallation nicht möglich

AdwCleaner Logfile:

Code:

# AdwCleaner v2.303 - Datei am 20/06/2013 um 21:42:21 erstellt

# Aktualisiert am 08/06/2013 von Xplode

# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

# Benutzer : tafi - TAFI-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\tafi\Downloads\adwcleaner(3).exe

# Option [Suche]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Ordner Gefunden : C:\Users\tafi\AppData\Local\Temp\Smartbar
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gefunden : HKCU\Software\SmartBar
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16490
 

[OK] Die Registrierungsdatenbank ist sauber.
 

-\\ Mozilla Firefox v21.0 (de)
 

Datei : C:\Users\tafi\AppData\Roaming\Mozilla\Firefox\Profiles\ki4slih7.default\prefs.js
 

[OK] Die Datei ist sauber.
 

-\\ Google Chrome v27.0.1453.110
 

Datei : C:\Users\tafi\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[R1].txt - [18579 octets] - [18/06/2013 21:53:43]

AdwCleaner[R2].txt - [1253 octets] - [18/06/2013 22:27:22]

AdwCleaner[R3].txt - [1653 octets] - [18/06/2013 22:46:22]

AdwCleaner[R4].txt - [1167 octets] - [20/06/2013 21:42:21]

AdwCleaner[S1].txt - [18601 octets] - [18/06/2013 21:54:20]

AdwCleaner[S2].txt - [1315 octets] - [18/06/2013 22:27:45]

AdwCleaner[S3].txt - [1554 octets] - [18/06/2013 22:46:46]
 

########## EOF - C:\AdwCleaner[R4].txt - [1408 octets] ##########

--- --- ---
________________________________________
DDS Logfile:

Code:

DDS (Ver_2012-11-20.01) - NTFS_x86 

Internet Explorer: 9.0.8112.16490

Run by tafi at 21:53:22 on 2013-06-20

Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.2038.871 [GMT 2:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}

SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}

.

============== Running Processes ================

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\Windows\system32\SLsvc.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Windows\System32\WUDFHost.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\SecureW2\sw2_tray.exe

C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Samsung\Kies\Kies.exe

C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Users\tafi\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\System32\mobsync.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\servicing\TrustedInstaller.exe

c:\Program Files\Microsoft Security Client\MpCmdRun.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=hp&installDate=07/05/2013

uSearch Bar = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&q={searchTerms}&installDate=07/05/2013

uSearch Page = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&q={searchTerms}&installDate=07/05/2013

uSearchAssistant = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&q={searchTerms}&installDate=07/05/2013

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

uRun: [Easy Driver Pro] c:\program files\probit software\easy driver pro\DPLauncher.exe

uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe

uRun: [KiesPreload] c:\program files\samsung\kies\Kies.exe /preload

uRun: [KiesAirMessage] c:\program files\samsung\kies\KiesAirMessage.exe -startup

uRun: [] c:\program files\samsung\kies\external\firmwareupdate\KiesPDLR.exe

mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide

mRun: [IgfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey

mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [SecureW2 Tray] c:\program files\securew2\sw2_tray.exe

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe

StartupFolder: c:\users\tafi\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\tafi\appdata\roaming\dropbox\bin\Dropbox.exe

StartupFolder: c:\users\tafi\appdata\roaming\micros~1\windows\startm~1\programs\startup\recort~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE

mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xportar a Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000

IE: Free YouTube Download - c:\program files\common files\dvdvideosoft\plugins\freeytvdownloader.htm

IE: Free YouTube to MP3 Converter - c:\program files\common files\dvdvideosoft\plugins\freeytmp3downloader.htm

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

TCP: NameServer = 10.1.63.1

TCP: Interfaces\{8713FB3D-D6FC-417D-858F-F20C85C1FC92} : NameServer = 192.168.1.1

TCP: Interfaces\{C71BB12E-A432-4011-BCDE-387D7EA2F6BD} : DHCPNameServer = 10.1.63.1

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll

Notify: igfxcui - igfxdev.dll

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\27.0.1453.110\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\users\tafi\appdata\roaming\mozilla\firefox\profiles\ki4slih7.default\

FF - prefs.js: browser.startup.homepage - www.google.de

FF - prefs.js: keyword.URL - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&installDate=07/05/2013&q=

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\google\update\1.3.21.145\npGoogleUpdate3.dll

FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: c:\program files\microsoft\office live\npOLW.dll

FF - ExtSQL: 2013-06-18 08:33; {95760ee6-3f5e-4f59-baa0-f36be222c1c1}; c:\users\tafi\appdata\roaming\mozilla\firefox\profiles\ki4slih7.default\extensions\{95760ee6-3f5e-4f59-baa0-f36be222c1c1}

.

============= SERVICES / DRIVERS ===============

.

R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-1-20 195296]

R2 FontCache;Windows-Dienst für Schriftartencache;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2012-6-9 21504]

R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-6-18 418376]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2013-6-18 701512]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-6-18 22856]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-28 161384]

S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-1-20 100328]

S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\microsoft security client\NisSrv.exe [2013-1-27 295232]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2013-06-20 07:41:21        7068072        ----a-w-        c:\programdata\microsoft\microsoft antimalware\definition updates\{aed99175-6b09-4967-93bb-7895f38aa816}\mpengine.dll

2013-06-18 21:02:28        --------        d-----w-        c:\users\tafi\appdata\roaming\Malwarebytes

2013-06-18 21:02:09        --------        d-----w-        c:\programdata\Malwarebytes

2013-06-18 21:02:06        22856        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-06-18 21:02:06        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware

2013-06-18 18:15:07        7068072        ------w-        c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll

2013-06-12 23:00:13        905576        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-06-12 23:00:09        443904        ----a-w-        c:\windows\system32\win32spl.dll

2013-06-12 23:00:09        37376        ----a-w-        c:\windows\system32\printcom.dll

2013-06-12 23:00:03        985600        ----a-w-        c:\windows\system32\crypt32.dll

2013-06-12 23:00:03        812544        ----a-w-        c:\windows\system32\certutil.exe

2013-06-12 23:00:02        98304        ----a-w-        c:\windows\system32\cryptnet.dll

2013-06-12 23:00:02        41984        ----a-w-        c:\windows\system32\certenc.dll

2013-06-12 23:00:02        133120        ----a-w-        c:\windows\system32\cryptsvc.dll

2013-06-12 22:59:22        3603832        ----a-w-        c:\windows\system32\ntkrnlpa.exe

2013-06-12 22:59:20        3551096        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-06-12 22:58:58        24576        ----a-w-        c:\windows\system32\cryptdlg.dll

.

==================== Find3M  ====================

.

2013-05-16 22:39:39        1800704        ----a-w-        c:\windows\system32\jscript9.dll

2013-05-16 22:28:26        1129472        ----a-w-        c:\windows\system32\wininet.dll

2013-05-16 22:27:30        1427968        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-05-16 22:21:37        142848        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-05-16 22:20:30        420864        ----a-w-        c:\windows\system32\vbscript.dll

2013-05-16 22:16:57        2382848        ----a-w-        c:\windows\system32\mshtml.tlb

2013-05-02 15:28:50        238872        ------w-        c:\windows\system32\MpSigStub.exe

2013-04-18 17:08:14        4659712        ----a-w-        c:\windows\system32\Redemption.dll

2013-04-18 17:07:00        90112        ----a-w-        c:\windows\MAMCityDownload.ocx

2013-04-18 17:07:00        330240        ----a-w-        c:\windows\MASetupCaller.dll

2013-04-18 17:07:00        30568        ----a-w-        c:\windows\MusiccityDownload.exe

2013-04-15 14:20:04        638328        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys

2013-04-13 10:56:44        37376        ----a-w-        c:\windows\system32\cdd.dll

2013-04-09 01:36:18        2049024        ----a-w-        c:\windows\system32\win32k.sys

2013-04-03 10:01:59        35840        ----a-w-        c:\windows\system32\imgutil.dll

2013-04-03 10:01:58        110592        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-04-03 09:58:54        4096        ----a-w-        c:\windows\system32\drivers\de-de\dxgkrnl.sys.mui

2013-04-03 09:58:52        369664        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-04-03 09:58:52        252928        ----a-w-        c:\windows\system32\dxdiag.exe

2013-04-03 09:58:52        195584        ----a-w-        c:\windows\system32\dxdiagn.dll

2013-04-03 09:58:51        974848        ----a-w-        c:\windows\system32\WindowsCodecs.dll

2013-04-03 09:58:51        519680        ----a-w-        c:\windows\system32\d3d11.dll

2013-04-03 09:58:51        321024        ----a-w-        c:\windows\system32\PhotoMetadataHandler.dll

2013-04-03 09:58:51        189440        ----a-w-        c:\windows\system32\WindowsCodecsExt.dll

.

============= FINISH: 21:54:11,77 ===============

--- --- ---

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 03.06.2012 14:01:06
System Uptime: 20.06.2013 21:44:40 (0 hours ago)
.
Motherboard: PACKARD BELL BV | | EasyNote_BG45
Processor: Intel(R) Pentium(R) Dual CPU T2390 @ 1.86GHz | Socket 478 | 1867/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 137 GiB total, 73,289 GiB free.
E: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft-6zu4-Adapter
Device ID: ROOT\*6TO4MP\0008
Manufacturer: Microsoft
Name: Microsoft-6zu4-Adapter #9
PNP Device ID: ROOT\*6TO4MP\0008
Service: tunnel
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
Adobe Reader X (10.1.7) - Deutsch
Amazon Kindle
Apple Application Support
Apple Mobile Device Support
Auslogics Disk Defrag
BRAINYOO 2.0
Dropbox
Free YouTube Download version 3.2.0.128
Google Chrome
Google Earth
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678)
Intel(R) Graphics Media Accelerator Driver
Malwarebytes Anti-Malware Version 1.75.0.1300
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile DEU Language Pack
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (Spanish) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel MUI (Spanish) 2007
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (Spanish) 2007
Microsoft Office InfoPath MUI (Spanish) 2007
Microsoft Office Live Add-in 1.5
Microsoft Office OneNote MUI (Spanish) 2007
Microsoft Office Outlook 2007 Help Actualización (KB963677)
Microsoft Office Outlook MUI (Spanish) 2007
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office PowerPoint MUI (Spanish) 2007
Microsoft Office Proof (Basque) 2007
Microsoft Office Proof (Catalan) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Galician) 2007
Microsoft Office Proof (Portuguese (Brazil)) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (Spanish) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (Spanish) 2007
Microsoft Office Shared MUI (Spanish) 2007
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word MUI (Spanish) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mobipocket Reader 6.2
Mozilla Firefox 21.0 (x86 de)
Mozilla Maintenance Service
QuickShare
Samsung Kies
SAMSUNG USB Driver for Mobile Phones
SecureW2 Enterprise Client 3.5.5
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
Skype™ 6.3
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition
.
==== End Of File ===========================

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-06-2013

Ran by tafi at 2013-06-20 23:01:10 Run:

Running from C:\Users\tafi\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

 Update for Microsoft Office 2007 (KB2508958)

Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)

Amazon Kindle

Apple Application Support (Version: 2.3.2)

Apple Mobile Device Support (Version: 6.0.1.3)

Auslogics Disk Defrag (Version: version 3.4)

BRAINYOO 2.0 (Version: 2.0)

Dropbox (Version: 2.0.22)

Free YouTube Download version 3.2.0.128 (Version: 3.2.0.128)

Google Chrome (Version: 27.0.1453.110)

Google Earth (Version: 7.0.3.8542)

Google Update Helper (Version: 1.3.21.145)

Intel(R) Graphics Media Accelerator Driver

Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)

Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (Version: 12.0.4518.1014)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)

Microsoft Office Excel 2007 Help Actualización (KB963678)

Microsoft Office Excel MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)

Microsoft Office Groove MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office InfoPath MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)

Microsoft Office OneNote MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Outlook 2007 Help Actualización (KB963677)

Microsoft Office Outlook MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Powerpoint 2007 Help Actualización (KB963669)

Microsoft Office PowerPoint MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Basque) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Catalan) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Galician) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proofing (Spanish) 2007 (Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Office Word 2007 Help Actualización (KB963665)

Microsoft Office Word MUI (Spanish) 2007 (Version: 12.0.6612.1000)

Microsoft Security Client (Version: 4.2.0223.1)

Microsoft Security Essentials (Version: 4.2.223.1)

Microsoft Silverlight (Version: 5.1.20125.0)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Mobipocket Reader 6.2 (Version: 6.2.608)

Mozilla Firefox 21.0 (x86 de) (Version: 21.0)

Mozilla Maintenance Service (Version: 21.0)

QuickShare (Version: 1.38.61.10911)

Samsung Kies (Version: 2.5.3.13043_14)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.23.0)

SecureW2 Enterprise Client 3.5.5

Skype™ 6.3 (Version: 6.3.105)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition
 

==================== Restore Points  =========================
 

22-05-2013 08:39:40 Geplanter Prüfpunkt

24-05-2013 18:21:27 Windows Update

28-05-2013 15:08:23 Windows Update

01-06-2013 14:38:34 Windows Update

05-06-2013 21:58:56 Windows Update

10-06-2013 11:54:59 Windows Update

13-06-2013 05:57:11 Windows Update

17-06-2013 12:40:14 Windows Update

18-06-2013 19:29:25 Removed QuickShare

18-06-2013 19:32:30 Removed QuickShare

18-06-2013 19:44:27 Removed QuickShare

18-06-2013 20:02:31 Removed QuickShare

18-06-2013 20:05:22 Removed Bonjour

18-06-2013 20:06:17 Removed Apple Software Update

18-06-2013 20:06:54 Removed QuickTime

18-06-2013 20:08:45 Removed iTunes

18-06-2013 20:12:19 Removed QuickShare

18-06-2013 20:14:25 Removed QuickShare

18-06-2013 20:20:40 Removed QuickShare

18-06-2013 20:33:57 Removed QuickShare

18-06-2013 20:43:01 Removed QuickShare

18-06-2013 21:14:36 Removed QuickShare

18-06-2013 21:16:13 Removed QuickShare

18-06-2013 21:23:53 Removed QuickShare

18-06-2013 21:39:08 Removed QuickShare

19-06-2013 08:20:11 Removed QuickShare

19-06-2013 08:29:37 Removed QuickShare

19-06-2013 19:49:26 Removed QuickShare

20-06-2013 17:51:22 Removed QuickShare

20-06-2013 19:18:06 Removed QuickShare
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {042B60F4-EDEC-40D9-8A49-E94AEA2F6E20} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-07] (Google Inc.)

Task: {1687EED6-3E8D-490F-9D7D-C198CD57D7A9} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {2FDBDC47-7148-49DB-9D32-32E6A003C996} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\rundll32 No File

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)

Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs [2008-01-05] ()

Task: {62A28384-81F7-455D-B097-E6F27E2F36A4} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)

Task: {9485649E-22F7-4F95-8223-06D74898CB4F} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - tafi => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)

Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-19] (Microsoft Corporation)

Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)

Task: {AF0341B7-63EA-417A-A371-81B6AF8E3751} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-07] (Google Inc.)

Task: {BA9E886A-E7BE-4C58-9FF6-B09B25336DA0} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3758862711-895469567-3585208590-1000 => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)

Task: {C03B78FA-0E1F-43C8-8401-FBD0CE35200C} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)

Task: {CD6C64F3-9C8B-494E-AFF8-5CA226A4F4B7} - System32\Tasks\DealPly => C:\Users\tafi\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File

Task: {D5687D0D-2D32-4805-A6D4-75944F0B0701} - System32\Tasks\{DEB08174-19DE-44E6-8D60-F33DADA90878} => c:\program files\mozilla firefox\firefox.exe [2013-05-17] (Mozilla Corporation)

Task: {E14E0C1D-89A0-4450-8587-62DDB3D05D53} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2012-06-03] ()

Task: {E9C13A35-6148-4C9D-930E-0F163B414CF7} - System32\Tasks\SecureW2 Task => C:\Program Files\SecureW2\sw2_tray.exe [2011-09-27] (SecureW2 B.V.)

Task: {F8D6E476-24FE-4649-A4D7-985706B29128} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\rundll32 No File
 

==================== Faulty Device Manager Devices =============
 

Name: Microsoft-6zu4-Adapter #9

Description: Microsoft-6zu4-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/18/2013 10:58:19 PM) (Source: Application Hang) (User: )

Description: Programm Explorer.EXE, Version 6.0.6002.18005 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.

Prozess-ID: 72c

Anfangszeit: 01ce6c65987ddf7b

Zeitpunkt der Beendigung: 78
 

Error: (06/18/2013 04:22:13 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 10156
 

Error: (06/18/2013 04:22:13 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 10156
 

Error: (06/18/2013 04:22:13 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (06/18/2013 04:22:12 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9142
 

Error: (06/18/2013 04:22:12 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 9142
 

Error: (06/18/2013 04:22:12 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (06/18/2013 04:07:39 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 5618423
 

Error: (06/18/2013 04:07:39 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 5618423
 

Error: (06/18/2013 04:07:39 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 
 

System errors:

=============

Error: (06/20/2013 09:46:42 PM) (Source: Service Control Manager) (User: )

Description: cdrom
 

Error: (06/20/2013 09:13:05 PM) (Source: Service Control Manager) (User: )

Description: cdrom
 

Error: (06/20/2013 08:05:03 PM) (Source: Service Control Manager) (User: )

Description: cdrom
 

Error: (06/20/2013 07:51:00 PM) (Source: Service Control Manager) (User: )

Description: cdrom
 

Error: (06/20/2013 09:44:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: 0x80070643Definitionsupdate für Microsoft Security Essentials – KB2310138 (Definition 1.153.222.0){ECB3BCF2-0773-4CC0-84FE-24C2E422524F}201
 

Error: (06/20/2013 09:43:26 AM) (Source: Microsoft Antimalware) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 0.0.0.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT51
 

        Aktualisierungsphase: 4.2.0223.00
 

        Quellpfad: 4.2.0223.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (06/20/2013 09:43:25 AM) (Source: Microsoft Antimalware) (User: )

Description: Beim Aktualisieren des Moduls wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Modulversion: 
 

        Vorherige Modulversion: 
 

        Modultyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Fehlercode: %NT-AUTORITÄT601
 

        Fehlerbeschreibung: %NT-AUTORITÄT602
 

Error: (06/20/2013 09:43:25 AM) (Source: Microsoft Antimalware) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 
 

        Aktualisierungsquelle: %NT-AUTORITÄT15
 

        Aktualisierungsphase: 4.2.0223.00
 

        Quellpfad: 4.2.0223.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\NETZWERKDIENST
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (06/20/2013 09:42:54 AM) (Source: Microsoft Antimalware) (User: )

Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Signaturversion: 
 

        Vorherige Signaturversion: 1.153.222.0
 

        Aktualisierungsquelle: %NT-AUTORITÄT59
 

        Aktualisierungsphase: 4.2.0223.00
 

        Quellpfad: 4.2.0223.01
 

        Signaturtyp: %NT-AUTORITÄT602
 

        Aktualisierungstyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\SYSTEM
 

        Aktuelle Modulversion: %NT-AUTORITÄT605
 

        Vorherige Modulversion: %NT-AUTORITÄT606
 

        Fehlercode: %NT-AUTORITÄT607
 

        Fehlerbeschreibung: %NT-AUTORITÄT608
 

Error: (06/20/2013 09:42:49 AM) (Source: Microsoft Antimalware) (User: )

Description: Beim Aktualisieren des Moduls wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
 

        Neue Modulversion: 
 

        Vorherige Modulversion: 
 

        Modultyp: %NT-AUTORITÄT604
 

        Benutzer: NT-AUTORITÄT\SYSTEM
 

        Fehlercode: %NT-AUTORITÄT601
 

        Fehlerbeschreibung: %NT-AUTORITÄT602
 
 

Microsoft Office Sessions:

=========================

Error: (06/05/2012 11:03:03 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 852 seconds with 780 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-06-20 23:00:11.741

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 23:00:11.476

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 23:00:11.211

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 23:00:10.946

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 20:28:04.482

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 20:28:04.238

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 20:28:03.979

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 20:28:03.728

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 20:28:03.473

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-20 20:28:03.217

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\NisDrvWFP.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 58%

Total physical RAM: 2038.48 MB

Available physical RAM: 846.75 MB

Total Pagefile: 4316.23 MB

Available Pagefile: 2872.01 MB

Total Virtual: 2047.88 MB

Available Virtual: 1900.24 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:137.04 GB) (Free:73.18 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: E6CAF080)

Partition 1: (Not Active) - (Size=12 GB) - (Type=27)

Partition 2: (Active) - (Size=137 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-06-2013

Ran by tafi (administrator) on 20-06-2013 22:59:11

Running from C:\Users\tafi\Downloads

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(SecureW2 B.V.) C:\Program Files\SecureW2\sw2_tray.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Samsung) C:\Program Files\Samsung\Kies\Kies.exe

(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(Dropbox, Inc.) C:\Users\tafi\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\mobsync.exe

(Microsoft Corporation) C:\Windows\system32\conime.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-19] (Microsoft Corporation)

HKLM\...\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [947152 2013-01-27] (Microsoft Corporation)

HKLM\...\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [30040 2009-02-26] (Microsoft Corporation)

HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [SecureW2 Tray] C:\Program Files\SecureW2\sw2_tray.exe [265608 2011-09-27] (SecureW2 B.V.)

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-11-28] (Apple Inc.)

HKLM\...\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-04-23] (Samsung Electronics Co., Ltd.)

HKCU\...\Run: [Easy Driver Pro] C:\Program Files\Probit Software\Easy Driver Pro\DPLauncher.exe [x]

HKCU\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)

HKCU\...\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload [1561968 2013-04-23] (Samsung)

HKCU\...\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKCU\...\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-04-23] (Samsung)

MountPoints2: {45faf1ac-3e44-11e2-a434-0022159b7909} - E:\DPFMate.exe

Startup: C:\Users\tafi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\tafi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\tafi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de pantalla e Inicio rápido de OneNote 2007.lnk

ShortcutTarget: Recorte de pantalla e Inicio rápido de OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=hp&installDate=07/05/2013

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&q={searchTerms}&installDate=07/05/2013

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 10.1.63.1

Tcpip\..\Interfaces\{8713FB3D-D6FC-417D-858F-F20C85C1FC92}: [NameServer]192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\tafi\AppData\Roaming\Mozilla\Firefox\Profiles\ki4slih7.default

FF Homepage: www.google.de

FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&installDate=07/05/2013&q=

FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\tafi\AppData\Roaming\Mozilla\Firefox\Profiles\ki4slih7.default\Extensions\{95760ee6-3f5e-4f59-baa0-f36be222c1c1}
 

Chrome: 

=======

CHR HomePage: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=hp&installDate=07/05/2013

CHR RestoreOnStartup: "hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=hp&installDate=07/05/2013"

CHR DefaultSearchURL: (Web) - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=95760ee6-3f5e-4f59-baa0-f36be222c1c1&searchtype=ds&q={searchTerms}&installDate=07/05/2013

CHR DefaultSuggestURL: (Web) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\27.0.1453.110\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File

CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Extension: (YouTube) - C:\Users\tafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1

CHR Extension: (Google Search) - C:\Users\tafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Gmail) - C:\Users\tafi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
 

========================== Services (Whitelisted) =================
 

R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)

S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)

R1 MpKslf3eab8a7; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AED99175-6B09-4967-93BB-7895F38AA816}\MpKslf3eab8a7.sys [29904 2013-06-20] (Microsoft Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

U3 mbr; \??\C:\Users\tafi\AppData\Local\Temp\mbr.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-20 22:58 - 2013-06-20 22:58 - 01368263 ____A (Farbar) C:\Users\tafi\Downloads\FRST.exe

2013-06-20 22:58 - 2013-06-20 22:58 - 00000000 ____D C:\FRST

2013-06-20 21:51 - 2013-06-20 21:52 - 00700783 ____R (Swearware) C:\Users\tafi\Downloads\dds+(1).exe

2013-06-20 21:43 - 2013-06-20 21:43 - 00001539 ____A C:\AdwCleaner[S4].txt

2013-06-20 21:42 - 2013-06-20 21:42 - 00001477 ____A C:\AdwCleaner[R4].txt

2013-06-20 21:38 - 2013-06-20 21:39 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner(3).exe

2013-06-20 21:37 - 2013-06-20 21:39 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner(2).exe

2013-06-18 23:02 - 2013-06-18 23:02 - 00000906 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-06-18 23:02 - 2013-06-18 23:02 - 00000000 ____D C:\Users\tafi\AppData\Roaming\Malwarebytes

2013-06-18 23:02 - 2013-06-18 23:02 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-06-18 23:02 - 2013-06-18 23:02 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-06-18 23:02 - 2013-04-04 14:50 - 00022856 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys

2013-06-18 23:00 - 2013-06-20 22:01 - 00012085 ____A C:\Users\tafi\Documents\DDS.txt

2013-06-18 23:00 - 2013-06-18 23:01 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\tafi\Downloads\mbam-setup-1.75.0.1300.exe

2013-06-18 22:59 - 2013-06-20 22:01 - 00006931 ____A C:\Users\tafi\Documents\Attach.txt

2013-06-18 22:52 - 2013-06-18 22:52 - 00700783 ____R (Swearware) C:\Users\tafi\Downloads\dds+.exe

2013-06-18 22:46 - 2013-06-18 22:47 - 00001554 ____A C:\AdwCleaner[S3].txt

2013-06-18 22:46 - 2013-06-18 22:46 - 00001653 ____A C:\AdwCleaner[R3].txt

2013-06-18 22:45 - 2013-06-18 22:45 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner(1).exe

2013-06-18 22:39 - 2013-06-18 22:39 - 00448512 ____A (OldTimer Tools) C:\Users\tafi\Downloads\TFC.exe

2013-06-18 22:27 - 2013-06-18 22:28 - 00001315 ____A C:\AdwCleaner[S2].txt

2013-06-18 22:27 - 2013-06-18 22:27 - 00001253 ____A C:\AdwCleaner[R2].txt

2013-06-18 22:26 - 2013-06-18 22:26 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner.exe

2013-06-18 21:54 - 2013-06-18 21:54 - 00018601 ____A C:\AdwCleaner[S1].txt

2013-06-18 21:53 - 2013-06-18 21:54 - 00018579 ____A C:\AdwCleaner[R1].txt

2013-06-18 21:52 - 2013-06-18 21:53 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner2303(1).exe

2013-06-18 21:51 - 2013-06-18 21:52 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner2303.exe

2013-06-18 21:48 - 2013-06-18 21:48 - 02787720 ____A (www.PerfectUninstaller.com                                  ) C:\Users\tafi\Downloads\PerfectUninstaller_Setup(welcomeu).exe

2013-06-13 08:05 - 2013-05-17 01:08 - 12329984 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-13 08:05 - 2013-05-17 00:49 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-13 08:05 - 2013-05-17 00:39 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-06-13 08:05 - 2013-05-17 00:28 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-06-13 08:05 - 2013-05-17 00:28 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-13 08:05 - 2013-05-17 00:27 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2013-06-13 08:05 - 2013-05-17 00:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll

2013-06-13 08:05 - 2013-05-17 00:23 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-06-13 08:05 - 2013-05-17 00:21 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-06-13 08:05 - 2013-05-17 00:21 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2013-06-13 08:05 - 2013-05-17 00:20 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2013-06-13 08:05 - 2013-05-17 00:19 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-06-13 08:05 - 2013-05-17 00:17 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-13 08:05 - 2013-05-17 00:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2013-06-13 08:05 - 2013-05-17 00:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-13 08:05 - 2013-05-17 00:12 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-13 01:00 - 2013-05-08 06:37 - 00905576 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-13 01:00 - 2013-05-02 06:04 - 00443904 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-13 01:00 - 2013-05-02 06:03 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\printcom.dll

2013-06-13 01:00 - 2013-04-24 06:00 - 00985600 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-13 01:00 - 2013-04-24 06:00 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-13 01:00 - 2013-04-24 06:00 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-13 01:00 - 2013-04-24 06:00 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-13 01:00 - 2013-04-24 03:46 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-13 00:59 - 2013-05-03 00:03 - 03603832 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe

2013-06-13 00:59 - 2013-05-03 00:03 - 03551096 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2013-06-13 00:58 - 2013-04-17 14:30 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
 

==================== One Month Modified Files and Folders ========
 

2013-06-20 22:58 - 2013-06-20 22:58 - 01368263 ____A (Farbar) C:\Users\tafi\Downloads\FRST.exe

2013-06-20 22:58 - 2013-06-20 22:58 - 00000000 ____D C:\FRST

2013-06-20 22:25 - 2012-06-07 11:06 - 00001094 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-20 22:01 - 2013-06-18 23:00 - 00012085 ____A C:\Users\tafi\Documents\DDS.txt

2013-06-20 22:01 - 2013-06-18 22:59 - 00006931 ____A C:\Users\tafi\Documents\Attach.txt

2013-06-20 21:52 - 2013-06-20 21:51 - 00700783 ____R (Swearware) C:\Users\tafi\Downloads\dds+(1).exe

2013-06-20 21:50 - 2006-11-02 14:52 - 01660019 ____A C:\Windows\WindowsUpdate.log

2013-06-20 21:47 - 2012-07-25 21:51 - 00000000 ____D C:\Users\tafi\AppData\Roaming\Dropbox

2013-06-20 21:46 - 2012-07-25 21:57 - 00000000 ___RD C:\Users\tafi\Dropbox

2013-06-20 21:45 - 2012-06-07 11:06 - 00001090 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-20 21:45 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-20 21:45 - 2006-11-02 14:47 - 00004784 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-06-20 21:45 - 2006-11-02 14:47 - 00004784 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-06-20 21:44 - 2013-05-05 22:28 - 00000012 ____A C:\Windows\bthservsdp.dat

2013-06-20 21:44 - 2006-11-02 15:01 - 00032534 ____A C:\Windows\Tasks\SCHEDLGU.TXT

2013-06-20 21:43 - 2013-06-20 21:43 - 00001539 ____A C:\AdwCleaner[S4].txt

2013-06-20 21:42 - 2013-06-20 21:42 - 00001477 ____A C:\AdwCleaner[R4].txt

2013-06-20 21:39 - 2013-06-20 21:38 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner(3).exe

2013-06-20 21:39 - 2013-06-20 21:37 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner(2).exe

2013-06-18 23:02 - 2013-06-18 23:02 - 00000906 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-06-18 23:02 - 2013-06-18 23:02 - 00000000 ____D C:\Users\tafi\AppData\Roaming\Malwarebytes

2013-06-18 23:02 - 2013-06-18 23:02 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-06-18 23:02 - 2013-06-18 23:02 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-06-18 23:01 - 2013-06-18 23:00 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\tafi\Downloads\mbam-setup-1.75.0.1300.exe

2013-06-18 22:52 - 2013-06-18 22:52 - 00700783 ____R (Swearware) C:\Users\tafi\Downloads\dds+.exe

2013-06-18 22:51 - 2012-06-05 10:38 - 00023214 ____A C:\Windows\PFRO.log

2013-06-18 22:47 - 2013-06-18 22:46 - 00001554 ____A C:\AdwCleaner[S3].txt

2013-06-18 22:46 - 2013-06-18 22:46 - 00001653 ____A C:\AdwCleaner[R3].txt

2013-06-18 22:45 - 2013-06-18 22:45 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner(1).exe

2013-06-18 22:39 - 2013-06-18 22:39 - 00448512 ____A (OldTimer Tools) C:\Users\tafi\Downloads\TFC.exe

2013-06-18 22:28 - 2013-06-18 22:27 - 00001315 ____A C:\AdwCleaner[S2].txt

2013-06-18 22:27 - 2013-06-18 22:27 - 00001253 ____A C:\AdwCleaner[R2].txt

2013-06-18 22:26 - 2013-06-18 22:26 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner.exe

2013-06-18 22:11 - 2012-12-17 14:29 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-06-18 22:11 - 2012-09-11 16:00 - 00000000 ____D C:\ProgramData\Apple Computer

2013-06-18 22:11 - 2012-09-11 15:56 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-06-18 21:54 - 2013-06-18 21:54 - 00018601 ____A C:\AdwCleaner[S1].txt

2013-06-18 21:54 - 2013-06-18 21:53 - 00018579 ____A C:\AdwCleaner[R1].txt

2013-06-18 21:53 - 2013-06-18 21:52 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner2303(1).exe

2013-06-18 21:52 - 2013-06-18 21:51 - 00648201 ____A C:\Users\tafi\Downloads\adwcleaner2303.exe

2013-06-18 21:48 - 2013-06-18 21:48 - 02787720 ____A (www.PerfectUninstaller.com                                  ) C:\Users\tafi\Downloads\PerfectUninstaller_Setup(welcomeu).exe

2013-06-18 17:41 - 2012-06-05 11:24 - 00000000 ____D C:\Users\tafi\Documents\Studium

2013-06-17 18:00 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-06-17 14:48 - 2006-11-02 12:33 - 01468532 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-13 09:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache

2013-06-13 08:11 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\System32\de-DE

2013-06-13 08:08 - 2012-06-03 20:54 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-06-13 08:01 - 2006-11-02 12:24 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe

2013-05-29 15:20 - 2012-07-25 21:57 - 00000953 ____A C:\Users\tafi\Desktop\Dropbox.lnk
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-06-20 21:50
 

==================== End Of Log ============================

--- --- ---

--- --- ---