Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Sehr viel Werbung und langsames Internet? (https://www.trojaner-board.de/139218-sehr-viel-werbung-langsames-internet.html)

NikEi 02.08.2013 15:48
Sehr viel Werbung und langsames Internet?
 
Hallo,

ich habe seit Tagen sehr viel Werbung auf allen Seiten, auch auf Facebook, Youtube etc.
Mein Internet ist außerdem viel viel langsamer als sonst.
Habe schon den Viren Scanner von Kapersky und mein Viren Programm von Norten durchlaufen lassen- Hat aber nichts gebracht..:daumenrunter:
Außerdem öffnet sich immer ein externes Werbe Fenster

Vielen Dank im vorraus:)

markusg 02.08.2013 15:51
Hi,
ich werde dir gleich eine Anleitung posten, dort wird eine Additions.txt erstellt, bearbeite diese, wie beschrieben.
1. Frage:
sind Kaspersky und Norton gleichzeitig instaliert? dann deinstaliere eines davon.
2.
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Empfehlungen fürs Deinstallieren
Bitte kopiere die Liste der installierten Programme aus der additions.txt hier in deinen Thread. Notiere mir bitte
hinter jede Zeile, ob folgendes Kategorie zutrifft: Unbekannt, Nötig, Unnötig

NikEi 02.08.2013 16:03
danke für die schnelle Antwort:)
FRST.txt
Code:
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Spotify Ltd) C:\Users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-13] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-29] (Synaptics Incorporated)
HKCU\...\Run: [Spotify] - C:\Users\Niklas\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-03] (Spotify Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-03] (Spotify Ltd)
HKCU\...\Run: [Google Update] - C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-14] (Google Inc.)
HKCU\...\Run: [GoogleChromeAutoLaunch_17B538142C689CA6298E80C28D1C2356] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [846288 2013-07-25] (Google Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BtTray] - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [363520 2012-08-02] (IVT Corporation)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491320 2012-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [580512 2012-07-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-25] (APN)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM13/10
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM13/10
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM13/10
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM13/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM13/10
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM13/10
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM - {3D997360-C236-438F-95A0-27066D3656BF} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM-x32 - {3D997360-C236-438F-95A0-27066D3656BF} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKCU - {3D997360-C236-438F-95A0-27066D3656BF} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO-x32: Ask Toolbar - {41545534-2D56-3700-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll (APN LLC.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Ask Toolbar - {41545534-2D56-3700-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {41545534-2D56-3700-76A7-7A786E7484D7} -  No File
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.96.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\..\Interfaces\{F11F0661-D0F5-4A57-867B-A38D0FA3FE3A}: [NameServer]8.8.8.8

Chrome:
=======
CHR Extension: (Ask Toolbar) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaajfocmnnhjaajccaelhippajhaeod\20.52309_0
CHR Extension: (Google Docs) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (MagniPIc) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhakbbaancdpnohkiihbobfabdnedkfg\1
CHR Extension: (Norton Identity Protection) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0
CHR Extension: (Hangouts) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2013.717.433.1_0
CHR Extension: (Battlefield Play4Free) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0
CHR Extension: (Gmail) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [aaaajfocmnnhjaajccaelhippajhaeod] - C:\ProgramData\AskPartnerNetwork\Toolbar\ATU4-V7\CRX\ToolbarCR.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-25] (APN LLC.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1544192 2012-08-02] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-07-10] (IVT Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-26] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-06-20] (Symantec Corporation)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-06-20] (Symantec Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg;
U4 BthHFEnum;
U4 bthhfhid;
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-08] (Ralink Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-06-24] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-06-24] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-06-24] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130801.001\IDSvia64.sys [513184 2013-06-22] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130801.001\IDSvia64.sys [513184 2013-06-22] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\ENG64.SYS [126040 2013-06-24] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\ENG64.SYS [126040 2013-06-24] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\EX64.SYS [2098776 2013-06-24] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\EX64.SYS [2098776 2013-06-24] (Symantec Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-09] (Ralink Technology, Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-29] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-29] (Synaptics Incorporated)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-21] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-26] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Development Company, L.P.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-02 16:56 - 2013-08-02 16:56 - 00000000 ____D C:\FRST
2013-08-02 16:55 - 2013-08-02 16:55 - 01781485 _____ (Farbar) C:\Users\Niklas\Downloads\FRST64.exe
2013-08-02 00:23 - 2013-08-02 16:28 - 00001142 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job
2013-08-02 00:23 - 2013-08-02 00:28 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job
2013-08-02 00:23 - 2013-08-02 00:23 - 00004090 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA
2013-08-02 00:23 - 2013-08-02 00:23 - 00003710 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core
2013-08-02 00:23 - 2013-08-02 00:23 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Mozilla
2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0.exe
2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0 (1).exe
2013-08-01 01:17 - 2013-08-02 01:11 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Skype
2013-08-01 01:16 - 2013-08-01 01:17 - 00000000 ____D C:\ProgramData\Skype
2013-08-01 01:16 - 2013-08-01 01:16 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-08-01 01:16 - 2013-08-01 01:16 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-01 01:15 - 2013-08-01 01:15 - 32782192 _____ (Skype Technologies S.A.) C:\Users\Niklas\Downloads\SkypeSetupFull_6.7.102.exe
2013-07-27 20:43 - 2013-07-27 20:44 - 00000000 ____D C:\Users\Niklas\Desktop\Bilder Türkei
2013-07-27 02:12 - 2013-07-27 02:12 - 00000000 ____D C:\ProgramData\StarApp
2013-07-27 02:11 - 2013-08-01 01:54 - 00000000 ____D C:\ProgramData\MagniPIc
2013-07-27 02:11 - 2013-08-01 01:54 - 00000000 ____D C:\ProgramData\InstallMate
2013-07-27 02:10 - 2013-07-27 02:10 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\Lego_Racers_secure (1).exe
2013-07-27 02:09 - 2013-07-27 02:09 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\GTA_SAN_ANDREAS_secure.exe
2013-07-27 02:03 - 2013-07-27 02:03 - 01329488 _____ (Conduit) C:\Users\Niklas\Downloads\Lego_Racers.exe
2013-07-22 20:55 - 2013-07-22 20:55 - 551076950 _____ C:\Windows\MEMORY.DMP
2013-07-22 20:55 - 2013-07-22 20:55 - 00279888 _____ C:\Windows\Minidump\072213-32401-01.dmp
2013-07-22 20:55 - 2013-07-22 20:55 - 00000000 ____D C:\Windows\Minidump
2013-07-19 21:40 - 2013-07-31 03:21 - 00000000 ___RD C:\Users\Niklas\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2013-07-17 16:40 - 2013-07-17 16:40 - 00000000 ____D C:\Users\Niklas\AppData\Local\AskPartnerNetwork
2013-07-17 02:44 - 2013-05-16 01:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-17 01:31 - 2013-07-17 01:31 - 00002114 _____ C:\Users\Public\Desktop\Video Search.lnk
2013-07-17 01:31 - 2013-07-17 01:31 - 00001186 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-07-17 01:30 - 2013-06-06 23:41 - 00489392 _____ (Ask Partner Network) C:\Users\Niklas\Documents\APNSetup.exe
2013-07-17 01:16 - 2013-07-17 01:16 - 00000000 ____D C:\Users\Niklas\aTubeCatcher
2013-07-16 13:48 - 2013-07-16 13:48 - 00281248 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-15 02:20 - 2013-07-17 01:30 - 00000000 ____D C:\Program Files (x86)\DsNET Corp
2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\APN
2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-15 02:18 - 2013-07-15 02:19 - 11797360 _____ (DsNET Corp) C:\Users\Niklas\Downloads\aTubeCatcher1482.exe
2013-07-12 00:54 - 2013-06-12 02:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 00:54 - 2013-06-12 02:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 00:54 - 2013-06-12 02:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 00:54 - 2013-06-12 02:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 00:54 - 2013-06-12 02:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 00:54 - 2013-06-12 02:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 00:54 - 2013-06-12 02:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 00:54 - 2013-06-12 02:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 00:54 - 2013-06-12 02:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 00:54 - 2013-06-12 02:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 00:54 - 2013-06-12 02:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 00:54 - 2013-06-12 02:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 00:54 - 2013-06-12 02:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 00:54 - 2013-06-12 02:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-12 00:54 - 2013-06-12 02:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 00:54 - 2013-06-12 02:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-12 00:54 - 2013-06-12 02:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 00:54 - 2013-06-01 12:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-12 00:54 - 2013-06-01 12:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 00:54 - 2013-05-31 02:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 00:54 - 2013-04-12 01:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-12 00:54 - 2013-04-12 01:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-12 00:53 - 2013-05-04 09:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-12 00:53 - 2013-05-04 07:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 17:00 - 2013-07-22 18:03 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Apple Computer
2013-07-11 17:00 - 2013-07-11 17:00 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-11 17:00 - 2013-07-11 17:00 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple Computer
2013-07-11 17:00 - 2012-08-21 14:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-07-11 16:58 - 2013-07-11 16:59 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-11 16:58 - 2013-07-11 16:59 - 00000000 ____D C:\Program Files\iTunes
2013-07-11 16:58 - 2013-07-11 16:59 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files\iPod
2013-07-11 16:57 - 2013-07-11 16:57 - 02378368 _____ () C:\Users\Niklas\Downloads\angling_setup.exe
2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple
2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-11 16:49 - 2013-07-11 16:49 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-11 16:44 - 2013-07-11 16:46 - 90917712 _____ (Apple Inc.) C:\Users\Niklas\Downloads\iTunes64Setup.exe
2013-07-06 02:10 - 2013-07-06 02:10 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Utherverse
2013-07-04 01:21 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-07-04 01:21 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-07-04 01:21 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-07-04 01:21 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-07-04 01:21 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-07-04 01:21 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-07-04 01:21 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-07-04 01:21 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-07-04 01:21 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-07-04 01:21 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-07-04 01:21 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-07-04 01:21 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-07-04 01:21 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-07-04 01:21 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-07-04 01:21 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-07-04 01:21 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-07-04 01:21 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-07-04 01:21 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-07-04 01:21 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-07-04 01:21 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-07-04 01:21 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-07-04 01:21 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-07-04 01:21 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-07-04 01:21 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-07-04 01:21 - 2008-10-10 05:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-07-04 01:21 - 2008-10-10 05:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-07-04 01:21 - 2008-10-10 05:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-07-04 01:21 - 2008-10-10 05:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-07-04 01:21 - 2008-10-10 05:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-07-04 01:21 - 2008-10-10 05:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-07-04 01:21 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-07-04 01:21 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-07-04 01:21 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-07-04 01:21 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-07-04 01:21 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-07-04 01:21 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-07-04 01:21 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-07-04 01:21 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-07-04 01:21 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-07-04 01:21 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-07-04 01:21 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-07-04 01:21 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-07-04 01:21 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-07-04 01:21 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-07-04 01:21 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-07-04 01:21 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-07-04 01:21 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-07-04 01:21 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-07-04 01:21 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-07-04 01:21 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-07-04 01:21 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-07-04 01:21 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-07-04 01:21 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-07-04 01:21 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-07-04 01:21 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-07-04 01:21 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-07-04 01:21 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-07-04 01:21 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-07-04 01:21 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-07-04 01:21 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-07-04 01:20 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-07-04 01:20 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-07-04 01:20 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-07-04 01:20 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-07-04 01:20 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-07-04 01:20 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-07-04 01:20 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-07-04 01:20 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-07-04 01:20 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-07-04 01:20 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-07-04 01:20 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-07-04 01:20 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-07-04 01:20 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-07-04 01:20 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-07-04 01:20 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-07-04 01:20 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-07-04 01:20 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-07-04 01:20 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-07-04 01:20 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-07-04 01:20 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-07-04 01:20 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-07-04 01:20 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-07-04 01:20 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-07-04 01:20 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-07-04 01:20 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-07-04 01:20 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-07-04 01:20 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-07-04 01:20 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-07-04 01:20 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-07-04 01:20 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-07-04 01:20 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-07-04 01:20 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-07-04 01:20 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-07-04 01:20 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-07-04 01:20 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-07-04 01:20 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-07-04 01:20 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-07-04 01:20 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-07-04 01:20 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-07-04 01:20 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-07-04 01:20 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-07-04 01:20 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-07-04 01:20 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-07-04 01:20 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-07-04 01:20 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-07-04 01:20 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-07-04 01:20 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-07-04 01:20 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-07-04 01:20 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-07-04 01:20 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-07-04 01:20 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-07-04 01:20 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-07-04 01:20 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-07-04 01:20 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-07-04 01:20 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-07-04 01:20 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-07-04 01:20 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-07-04 01:20 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-07-04 01:20 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-07-04 01:20 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-07-04 01:20 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-07-04 01:20 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-07-04 01:20 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-07-04 01:20 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-07-04 01:20 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-07-04 01:20 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-07-04 01:20 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-07-04 01:20 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-07-04 01:20 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-07-04 01:20 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-07-04 01:20 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-07-04 01:20 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-07-04 01:20 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-07-04 01:20 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-07-04 01:20 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-07-04 01:20 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-07-04 01:20 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-07-04 01:20 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-07-04 01:20 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-07-04 01:20 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-07-04 01:20 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-07-04 01:20 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-07-04 01:20 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-07-04 01:20 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-07-04 01:16 - 2013-07-04 01:21 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-04 01:16 - 2013-07-04 01:19 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-04 01:04 - 2013-07-11 16:43 - 00000000 ____D C:\Program Files (x86)\Utherverse Digital Inc
2013-07-03 22:22 - 2013-07-03 22:56 - 00000000 ____D C:\Users\Niklas\Documents\Harry Potter II
2013-07-03 22:19 - 2013-07-03 22:19 - 00002243 _____ C:\Users\Public\Desktop\Harry Potter und die Kammer des Schreckens.lnk
2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-07-03 21:26 - 2013-07-03 21:26 - 00000060 _____ C:\Windows\wininit.ini
2013-07-03 15:16 - 2013-07-03 22:40 - 00000354 _____ C:\Windows\Tasks\HPCeeScheduleForNiklas.job
2013-07-03 15:16 - 2013-07-03 15:16 - 00003170 _____ C:\Windows\System32\Tasks\HPCeeScheduleForNiklas

==================== One Month Modified Files and Folders =======

2013-08-02 16:56 - 2013-08-02 16:56 - 00000000 ____D C:\FRST
2013-08-02 16:55 - 2013-08-02 16:55 - 01781485 _____ (Farbar) C:\Users\Niklas\Downloads\FRST64.exe
2013-08-02 16:28 - 2013-08-02 00:23 - 00001142 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job
2013-08-02 16:21 - 2013-06-24 20:09 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-1002
2013-08-02 16:20 - 2012-08-17 22:13 - 00830120 _____ C:\Windows\system32\perfh007.dat
2013-08-02 16:20 - 2012-08-17 22:13 - 00188224 _____ C:\Windows\system32\perfc007.dat
2013-08-02 16:20 - 2012-07-26 10:28 - 01949368 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-02 16:18 - 2013-06-26 11:52 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Spotify
2013-08-02 16:18 - 2012-08-10 19:45 - 00000838 _____ C:\Windows\SysWOW64\bscs.ini
2013-08-02 16:16 - 2013-06-27 14:52 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-02 16:16 - 2013-03-21 09:44 - 00004524 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
2013-08-02 16:15 - 2013-03-21 09:44 - 00000061 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
2013-08-02 16:15 - 2012-07-26 10:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-02 16:14 - 2012-08-04 01:23 - 00016574 _____ C:\Windows\PFRO.log
2013-08-02 01:11 - 2013-08-01 01:17 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Skype
2013-08-02 01:03 - 2013-06-27 14:52 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 01:00 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\sru
2013-08-02 00:28 - 2013-08-02 00:23 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job
2013-08-02 00:25 - 2013-06-24 19:53 - 01126418 _____ C:\Windows\WindowsUpdate.log
2013-08-02 00:23 - 2013-08-02 00:23 - 00004090 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA
2013-08-02 00:23 - 2013-08-02 00:23 - 00003710 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core
2013-08-02 00:23 - 2013-08-02 00:23 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Mozilla
2013-08-02 00:23 - 2013-06-27 14:52 - 00000000 ____D C:\Users\Niklas\AppData\Local\Google
2013-08-01 15:54 - 2013-06-26 11:37 - 00000094 _____ C:\Windows\SysWOW64\REMOTEDEVICE.INI
2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0.exe
2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0 (1).exe
2013-08-01 02:28 - 2013-06-27 14:53 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-01 02:23 - 2012-07-26 10:21 - 00038932 _____ C:\Windows\setupact.log
2013-08-01 01:54 - 2013-07-27 02:11 - 00000000 ____D C:\ProgramData\MagniPIc
2013-08-01 01:54 - 2013-07-27 02:11 - 00000000 ____D C:\ProgramData\InstallMate
2013-08-01 01:17 - 2013-08-01 01:16 - 00000000 ____D C:\ProgramData\Skype
2013-08-01 01:16 - 2013-08-01 01:16 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-08-01 01:16 - 2013-08-01 01:16 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-01 01:15 - 2013-08-01 01:15 - 32782192 _____ (Skype Technologies S.A.) C:\Users\Niklas\Downloads\SkypeSetupFull_6.7.102.exe
2013-08-01 01:10 - 2013-06-24 20:30 - 00000000 ____D C:\Users\Niklas\Documents\Youcam
2013-07-31 03:21 - 2013-07-19 21:40 - 00000000 ___RD C:\Users\Niklas\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App
2013-07-31 00:49 - 2012-07-26 08:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-07-28 01:23 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-27 20:44 - 2013-07-27 20:43 - 00000000 ____D C:\Users\Niklas\Desktop\Bilder Türkei
2013-07-27 02:12 - 2013-07-27 02:12 - 00000000 ____D C:\ProgramData\StarApp
2013-07-27 02:10 - 2013-07-27 02:10 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\Lego_Racers_secure (1).exe
2013-07-27 02:09 - 2013-07-27 02:09 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\GTA_SAN_ANDREAS_secure.exe
2013-07-27 02:03 - 2013-07-27 02:03 - 01329488 _____ (Conduit) C:\Users\Niklas\Downloads\Lego_Racers.exe
2013-07-27 00:58 - 2013-06-24 19:53 - 00000000 ____D C:\Users\Niklas\AppData\Local\Packages
2013-07-23 17:59 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\NDF
2013-07-22 20:55 - 2013-07-22 20:55 - 551076950 _____ C:\Windows\MEMORY.DMP
2013-07-22 20:55 - 2013-07-22 20:55 - 00279888 _____ C:\Windows\Minidump\072213-32401-01.dmp
2013-07-22 20:55 - 2013-07-22 20:55 - 00000000 ____D C:\Windows\Minidump
2013-07-22 18:03 - 2013-07-11 17:00 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Apple Computer
2013-07-20 21:28 - 2013-06-26 11:37 - 00001182 _____ C:\Windows\SysWOW64\SHORTCUT.INI
2013-07-20 17:38 - 2012-07-26 08:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-07-19 21:55 - 2012-07-26 08:37 - 00000000 ____D C:\Windows\servicing
2013-07-19 18:25 - 2013-06-26 13:11 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-17 18:54 - 2013-06-26 11:24 - 00000000 ____D C:\Users\Niklas\Desktop\Bilder
2013-07-17 17:44 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-07-17 16:40 - 2013-07-17 16:40 - 00000000 ____D C:\Users\Niklas\AppData\Local\AskPartnerNetwork
2013-07-17 16:12 - 2013-06-26 13:56 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-07-17 16:12 - 2013-06-26 13:56 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-07-17 01:31 - 2013-07-17 01:31 - 00002114 _____ C:\Users\Public\Desktop\Video Search.lnk
2013-07-17 01:31 - 2013-07-17 01:31 - 00001186 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-07-17 01:30 - 2013-07-15 02:20 - 00000000 ____D C:\Program Files (x86)\DsNET Corp
2013-07-17 01:22 - 2013-06-24 19:53 - 00000000 ____D C:\Users\Niklas\AppData\Local\VirtualStore
2013-07-17 01:16 - 2013-07-17 01:16 - 00000000 ____D C:\Users\Niklas\aTubeCatcher
2013-07-17 01:16 - 2013-06-24 19:53 - 00000000 ____D C:\Users\Niklas
2013-07-16 13:48 - 2013-07-16 13:48 - 00281248 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-15 19:07 - 2012-07-26 10:52 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\APN
2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-07-15 02:19 - 2013-07-15 02:18 - 11797360 _____ (DsNET Corp) C:\Users\Niklas\Downloads\aTubeCatcher1482.exe
2013-07-14 04:58 - 2013-06-27 14:52 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-14 04:58 - 2013-06-27 14:52 - 00003864 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 17:00 - 2013-07-11 17:00 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-11 17:00 - 2013-07-11 17:00 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple Computer
2013-07-11 16:59 - 2013-07-11 16:58 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-11 16:59 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files\iTunes
2013-07-11 16:59 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files\iPod
2013-07-11 16:57 - 2013-07-11 16:57 - 02378368 _____ () C:\Users\Niklas\Downloads\angling_setup.exe
2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple
2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-11 16:50 - 2013-03-21 09:19 - 00000000 ____D C:\ProgramData\Apple
2013-07-11 16:49 - 2013-07-11 16:49 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-11 16:46 - 2013-07-11 16:44 - 90917712 _____ (Apple Inc.) C:\Users\Niklas\Downloads\iTunes64Setup.exe
2013-07-11 16:43 - 2013-07-04 01:04 - 00000000 ____D C:\Program Files (x86)\Utherverse Digital Inc
2013-07-08 18:58 - 2013-06-26 11:53 - 00000000 ____D C:\Users\Niklas\AppData\Local\Spotify
2013-07-07 00:46 - 2013-06-26 15:13 - 00282104 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-07-07 00:46 - 2013-06-26 15:04 - 00282104 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-07-07 00:46 - 2013-06-26 15:04 - 00234768 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-07-06 02:10 - 2013-07-06 02:10 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Utherverse
2013-07-04 01:21 - 2013-07-04 01:16 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-07-04 01:21 - 2012-08-17 13:12 - 00010049 _____ C:\Windows\DirectX.log
2013-07-04 01:19 - 2013-07-04 01:16 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-07-03 23:42 - 2013-06-26 15:05 - 00000000 ____D C:\Users\Niklas\Documents\Battlefield Play4Free
2013-07-03 22:56 - 2013-07-03 22:22 - 00000000 ____D C:\Users\Niklas\Documents\Harry Potter II
2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ___RD C:\Windows\ToastData
2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\en-GB
2013-07-03 22:43 - 2012-07-26 08:38 - 00000000 ____D C:\Windows\system32\oobe
2013-07-03 22:40 - 2013-07-03 15:16 - 00000354 _____ C:\Windows\Tasks\HPCeeScheduleForNiklas.job
2013-07-03 22:19 - 2013-07-03 22:19 - 00002243 _____ C:\Users\Public\Desktop\Harry Potter und die Kammer des Schreckens.lnk
2013-07-03 22:15 - 2013-06-26 14:39 - 00000000 ____D C:\Program Files (x86)\EA Games
2013-07-03 22:15 - 2012-08-17 13:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-07-03 21:26 - 2013-07-03 21:26 - 00000060 _____ C:\Windows\wininit.ini
2013-07-03 21:26 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-07-03 15:16 - 2013-07-03 15:16 - 00003170 _____ C:\Windows\System32\Tasks\HPCeeScheduleForNiklas
2013-07-03 15:16 - 2013-06-26 00:18 - 00000000 ____D C:\Users\Niklas\AppData\Local\Hewlett-Packard

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-23 10:41

==================== End Of Log ============================
Addition.txt
Code:
==================== Installed Programs =======================

 
Adobe Flash Player ActiveX (x32 Version: 9.0.47.0)
Adobe Shockwave Player (x32 Version: 10.2.0.22)
AMD APP SDK Runtime (Version: 10.0.938.2)
AMD Catalyst Install Manager (Version: 8.0.881.0)
AMD Fuel (Version: 2012.0806.1156.19437)
AMD Quick Stream (Version: 3.3.26.0)
AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
aptics Pointing Device Driver (Version: 16.2.10.12)
Ask Toolbar (x32 Version: 12.2.2.588)
aTube Catcher (x32 Version: 2.9.1482)
Battlefield Play4Free (Niklas) (HKCU)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437)
CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437)
CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437)
CCC Help Czech (x32 Version: 2012.0806.1155.19437)
CCC Help Danish (x32 Version: 2012.0806.1155.19437)
CCC Help Dutch (x32 Version: 2012.0806.1155.19437)
CCC Help English (x32 Version: 2012.0806.1155.19437)
CCC Help Finnish (x32 Version: 2012.0806.1155.19437)
CCC Help French (x32 Version: 2012.0806.1155.19437)
CCC Help German (x32 Version: 2012.0806.1155.19437)
CCC Help Greek (x32 Version: 2012.0806.1155.19437)
CCC Help Hungarian (x32 Version: 2012.0806.1155.19437)
CCC Help Italian (x32 Version: 2012.0806.1155.19437)
CCC Help Japanese (x32 Version: 2012.0806.1155.19437)
CCC Help Korean (x32 Version: 2012.0806.1155.19437)
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437)
CCC Help Polish (x32 Version: 2012.0806.1155.19437)
CCC Help Portuguese (x32 Version: 2012.0806.1155.19437)
CCC Help Russian (x32 Version: 2012.0806.1155.19437)
CCC Help Spanish (x32 Version: 2012.0806.1155.19437)
CCC Help Swedish (x32 Version: 2012.0806.1155.19437)
CCC Help Thai (x32 Version: 2012.0806.1155.19437)
CCC Help Turkish (x32 Version: 2012.0806.1155.19437)
ccc-utility64 (Version: 2012.0806.1156.19437)
CyberLink LabelPrint (x32 Version: 2.5.1.5407)
CyberLink Media Suite 10 (x32 Version: 10.0.1.1916)
CyberLink Power2Go 8 (x32 Version: 8.0.1.1926)
CyberLink PowerDVD (x32 Version: 10.0.6.4319)
CyberLink YouCam (x32 Version: 3.5.4.5527)
D3DX10 (x32 Version: 15.4.2368.0902)
Electronic Arts Product Registration (x32 Version: 1.01.0000)
Energy Star (Version: 1.0.8)
Google Chrome (x32 Version: 28.0.1500.95)
Google Talk Plugin (x32 Version: 4.2.1.14031)
Google Update Helper (x32 Version: 1.3.21.153)
Harry Potter II (x32)
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP Documentation (x32 Version: 1.1.0.0)
HP Postscript Converter (Version: 3.1.3554)
HP Quick Launch (x32 Version: 3.0.3)
HP Recovery Manager (x32 Version: 7.00)
HP Registration Service (Version: 1.0.5976.4186)
HP Software Framework (x32 Version: 4.6.8.1)
HP Support Assistant (x32 Version: 7.0.32.44)
HP Utility Center (x32 Version: 1.0.7)
HP Wireless Button Driver (x32 Version: 1.0.5.1)
iTunes (Version: 11.0.4.4)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
MSVCRT (x32 Version: 15.4.2862.0708)
Norton Internet Security (x32 Version: 20.4.0.40)
PunkBuster Services (x32 Version: 0.990)
Ralink Bluetooth Stack64 (Version: 9.0.715.0)
Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.2.0)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)
Realtek PCIE Card Reader (x32 Version: 6.2.8400.29029)
Skype™ 6.7 (x32 Version: 6.7.102)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
swMSM (x32 Version: 12.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

01-07-2013 21:50:30 Windows Modules Installer
03-07-2013 18:25:50 Installed ProductName
11-07-2013 13:50:46 Installed iTunes
14-07-2013 14:07:57 Windows Update
17-07-2013 22:28:55 Windows Update

==================== Hosts content: ==========================

2012-07-26 08:26 - 2012-07-26 08:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {08693854-8A78-4248-9D28-BB1A23271FF7} - System32\Tasks\HPCeeScheduleForNiklas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {0B327ECB-7F47-4D59-9AD9-0F7FD28389A6} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {0E686442-7E8D-462C-B79D-2DD576644E45} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1A756FB0-23BA-4094-AB41-3801F6BD9EEC} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {1FA52BBA-FD5F-483D-A1CB-5478715212A9} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {26896A6E-9F2F-4FB6-ACE1-58C1459688B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {318151E4-2F8F-45C9-850D-48A3A1E9DD8E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3BF13592-9B41-4BF6-B158-E0BC734B12B8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-1002
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {3DAB9783-B465-4F8D-9DFA-189C420A633A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {3DACA30C-4C90-4747-99E6-D7DDF6683695} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {4810B636-6906-469C-8224-FF4235C4B241} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company)
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation)
Task: {4A8F3598-321B-4E79-A069-A43A2324EE83} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {540D53EE-138C-4E7E-8CEE-EBBAD0A32E6F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {69DC7F2A-5E72-4474-90C1-DA806FA464F5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {69E2FD35-6227-413D-A18B-3A75C23375DE} - System32\Tasks\WPD\SqmUpload_S-1-5-21-374219310-3835530781-1746485344-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7CEC5F28-8686-4848-827F-E628508601F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {8247C2D0-E232-49C5-AC70-320C774488DE} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {9372E794-6243-4507-B98E-E0D1C306CBF8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-500
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {A1679E89-CECF-452C-B63D-EB2D3DD39843} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B6F5F4C6-F3A7-4C9D-AFAB-AD062CDA55B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.)
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {BCDE5AF1-2571-4A7C-868C-0ACB74D0E963} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.)
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {D4F8E3A5-6775-4B23-A62D-4EB8CEDFE7B0} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {D6372BED-E934-421D-8B82-F65A5293D11C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {D8FC6763-FA6A-41EA-BD1D-D2386C97E0AC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F230337C-3241-4548-9127-8E4C5F8DA67C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForNiklas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/02/2013 04:36:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 28.0.1500.95, Zeitstempel: 0x51f05c5f
Name des fehlerhaften Moduls: SYMHTML.DLL_unloaded, Version: 0.0.0.0, Zeitstempel: 0x51a45fb3
Ausnahmecode: 0xc000041d
Fehleroffset: 0x6205b9a2
ID des fehlerhaften Prozesses: 0xcdc
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (08/02/2013 04:36:00 PM) (Source: Chrome) (User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088


System errors:
=============
Error: (08/02/2013 04:15:14 PM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.102 mit dem Computer mit der
Netzwerkhardwareadresse D0-C1-B1-D2-86-D7 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (08/02/2013 04:15:01 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎02.‎08.‎2013 um 01:14:37 unerwartet heruntergefahren.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.

Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.

Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.


Microsoft Office Sessions:
=========================
Error: (08/02/2013 04:36:00 PM) (Source: Application Error)(User: )
Description: chrome.exe28.0.1500.9551f05c5fSYMHTML.DLL_unloaded0.0.0.051a45fb3c000041d6205b9a2cdc01ce8f827f660b6eC:\Program Files (x86)\Google\Chrome\Application\chrome.exeSYMHTML.DLL77b336cc-fb78-11e2-be90-b8763f62a696

Error: (08/02/2013 04:36:00 PM) (Source: Chrome)(User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088


==================== Memory info ===========================

Percentage of memory in use: 42%
Total physical RAM: 3682.26 MB
Available physical RAM: 2116.34 MB
Total Pagefile: 7394.26 MB
Available Pagefile: 5527.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:450.81 GB) (Free:394.16 GB) NTFS (Disk=0 Partition=4) ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.18 GB) (Free:1.87 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 37DACB8A)

Partition: GPT Partition Type
==================== End Of Log ============================

markusg 02.08.2013 16:04
Hi, hatte ich nicht darum gebeten, etwas in der additions.txt zu überarbeiten, bitte mach das.
es Reicht, wenn du nur noch mal den passenen Abschnitt postest

NikEi 02.08.2013 16:11
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013
Ran by Niklas at 2013-08-02 16:58:43
Running from C:\Users\Niklas\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 
Adobe Flash Player ActiveX (x32 Version: 9.0.47.0)
Adobe Shockwave Player (x32 Version: 10.2.0.22)
AMD APP SDK Runtime (Version: 10.0.938.2)
AMD Catalyst Install Manager (Version: 8.0.881.0)
AMD Fuel (Version: 2012.0806.1156.19437)
AMD Quick Stream (Version: 3.3.26.0)
AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
aptics Pointing Device Driver (Version: 16.2.10.12)
Ask Toolbar (x32 Version: 12.2.2.588)
aTube Catcher (x32 Version: 2.9.1482)
Battlefield Play4Free (Niklas) (HKCU)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437)
CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437)
CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437)
CCC Help Czech (x32 Version: 2012.0806.1155.19437)
CCC Help Danish (x32 Version: 2012.0806.1155.19437)
CCC Help Dutch (x32 Version: 2012.0806.1155.19437)
CCC Help English (x32 Version: 2012.0806.1155.19437)
CCC Help Finnish (x32 Version: 2012.0806.1155.19437)
CCC Help French (x32 Version: 2012.0806.1155.19437)
CCC Help German (x32 Version: 2012.0806.1155.19437)
CCC Help Greek (x32 Version: 2012.0806.1155.19437)
CCC Help Hungarian (x32 Version: 2012.0806.1155.19437)
CCC Help Italian (x32 Version: 2012.0806.1155.19437)
CCC Help Japanese (x32 Version: 2012.0806.1155.19437)
CCC Help Korean (x32 Version: 2012.0806.1155.19437)
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437)
CCC Help Polish (x32 Version: 2012.0806.1155.19437)
CCC Help Portuguese (x32 Version: 2012.0806.1155.19437)
CCC Help Russian (x32 Version: 2012.0806.1155.19437)
CCC Help Spanish (x32 Version: 2012.0806.1155.19437)
CCC Help Swedish (x32 Version: 2012.0806.1155.19437)
CCC Help Thai (x32 Version: 2012.0806.1155.19437)
CCC Help Turkish (x32 Version: 2012.0806.1155.19437)
ccc-utility64 (Version: 2012.0806.1156.19437)
CyberLink LabelPrint (x32 Version: 2.5.1.5407)
CyberLink Media Suite 10 (x32 Version: 10.0.1.1916)
CyberLink Power2Go 8 (x32 Version: 8.0.1.1926)
CyberLink PowerDVD (x32 Version: 10.0.6.4319)
CyberLink YouCam (x32 Version: 3.5.4.5527)
D3DX10 (x32 Version: 15.4.2368.0902)
Electronic Arts Product Registration (x32 Version: 1.01.0000)
Energy Star (Version: 1.0.8)
Google Chrome (x32 Version: 28.0.1500.95)
Google Talk Plugin (x32 Version: 4.2.1.14031)
Google Update Helper (x32 Version: 1.3.21.153)
Harry Potter II (x32)
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)
HP Documentation (x32 Version: 1.1.0.0)
HP Postscript Converter (Version: 3.1.3554)
HP Quick Launch (x32 Version: 3.0.3)
HP Recovery Manager (x32 Version: 7.00)
HP Registration Service (Version: 1.0.5976.4186)
HP Software Framework (x32 Version: 4.6.8.1)
HP Support Assistant (x32 Version: 7.0.32.44)
HP Utility Center (x32 Version: 1.0.7)
HP Wireless Button Driver (x32 Version: 1.0.5.1)
iTunes (Version: 11.0.4.4)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
MSVCRT (x32 Version: 15.4.2862.0708)
Norton Internet Security (x32 Version: 20.4.0.40)
PunkBuster Services (x32 Version: 0.990)
Ralink Bluetooth Stack64 (Version: 9.0.715.0)
Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.2.0)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)
Realtek PCIE Card Reader (x32 Version: 6.2.8400.29029)
Skype™ 6.7 (x32 Version: 6.7.102)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
swMSM (x32 Version: 12.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

==================== Restore Points  =========================

01-07-2013 21:50:30 Windows Modules Installer
03-07-2013 18:25:50 Installed ProductName
11-07-2013 13:50:46 Installed iTunes
14-07-2013 14:07:57 Windows Update
17-07-2013 22:28:55 Windows Update

==================== Hosts content: ==========================

2012-07-26 08:26 - 2012-07-26 08:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {08693854-8A78-4248-9D28-BB1A23271FF7} - System32\Tasks\HPCeeScheduleForNiklas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {0B327ECB-7F47-4D59-9AD9-0F7FD28389A6} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {0E686442-7E8D-462C-B79D-2DD576644E45} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1A756FB0-23BA-4094-AB41-3801F6BD9EEC} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {1FA52BBA-FD5F-483D-A1CB-5478715212A9} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {26896A6E-9F2F-4FB6-ACE1-58C1459688B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {318151E4-2F8F-45C9-850D-48A3A1E9DD8E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3BF13592-9B41-4BF6-B158-E0BC734B12B8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-1002
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {3DAB9783-B465-4F8D-9DFA-189C420A633A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {3DACA30C-4C90-4747-99E6-D7DDF6683695} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {4810B636-6906-469C-8224-FF4235C4B241} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company)
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation)
Task: {4A8F3598-321B-4E79-A069-A43A2324EE83} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {540D53EE-138C-4E7E-8CEE-EBBAD0A32E6F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {69DC7F2A-5E72-4474-90C1-DA806FA464F5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {69E2FD35-6227-413D-A18B-3A75C23375DE} - System32\Tasks\WPD\SqmUpload_S-1-5-21-374219310-3835530781-1746485344-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7CEC5F28-8686-4848-827F-E628508601F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {8247C2D0-E232-49C5-AC70-320C774488DE} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {9372E794-6243-4507-B98E-E0D1C306CBF8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-500
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {A1679E89-CECF-452C-B63D-EB2D3DD39843} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B6F5F4C6-F3A7-4C9D-AFAB-AD062CDA55B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.)
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {BCDE5AF1-2571-4A7C-868C-0ACB74D0E963} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.)
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {D4F8E3A5-6775-4B23-A62D-4EB8CEDFE7B0} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {D6372BED-E934-421D-8B82-F65A5293D11C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {D8FC6763-FA6A-41EA-BD1D-D2386C97E0AC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F230337C-3241-4548-9127-8E4C5F8DA67C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForNiklas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/02/2013 04:36:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 28.0.1500.95, Zeitstempel: 0x51f05c5f
Name des fehlerhaften Moduls: SYMHTML.DLL_unloaded, Version: 0.0.0.0, Zeitstempel: 0x51a45fb3
Ausnahmecode: 0xc000041d
Fehleroffset: 0x6205b9a2
ID des fehlerhaften Prozesses: 0xcdc
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (08/02/2013 04:36:00 PM) (Source: Chrome) (User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088


System errors:
=============
Error: (08/02/2013 04:15:14 PM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.102 mit dem Computer mit der
Netzwerkhardwareadresse D0-C1-B1-D2-86-D7 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (08/02/2013 04:15:01 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎02.‎08.‎2013 um 01:14:37 unerwartet heruntergefahren.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.

Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.

Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC)
Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat.

Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552.


Microsoft Office Sessions:
=========================
Error: (08/02/2013 04:36:00 PM) (Source: Application Error)(User: )
Description: chrome.exe28.0.1500.9551f05c5fSYMHTML.DLL_unloaded0.0.0.051a45fb3c000041d6205b9a2cdc01ce8f827f660b6eC:\Program Files (x86)\Google\Chrome\Application\chrome.exeSYMHTML.DLL77b336cc-fb78-11e2-be90-b8763f62a696

Error: (08/02/2013 04:36:00 PM) (Source: Chrome)(User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2013

Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1794

Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088


==================== Memory info ===========================

Percentage of memory in use: 42%
Total physical RAM: 3682.26 MB
Available physical RAM: 2116.34 MB
Total Pagefile: 7394.26 MB
Available Pagefile: 5527.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:450.81 GB) (Free:394.16 GB) NTFS (Disk=0 Partition=4) ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.18 GB) (Free:1.87 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 37DACB8A)

Partition: GPT Partition Type
==================== End Of Log ============================

markusg 02.08.2013 16:13
ich habe dich gebeten, die liste der Programme durchzugehen und sie zu beschriften

NikEi 02.08.2013 16:19
jetzt nochmal das richtige:


==================== Installed Programs =======================


Adobe Flash Player ActiveX (x32 Version: 9.0.47.0) nötig
Adobe Shockwave Player (x32 Version: 10.2.0.22) nötig
AMD APP SDK Runtime (Version: 10.0.938.2) treiber
AMD Catalyst Install Manager (Version: 8.0.881.0) treiber
AMD Fuel (Version: 2012.0806.1156.19437) treiber
AMD Quick Stream (Version: 3.3.26.0) treiber
AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437) treiber
Apple Application Support (x32 Version: 2.3.4) nötig
Apple Mobile Device Support (Version: 6.1.0.13) nötig
Apple Software Update (x32 Version: 2.1.3.127) nötig
aptics Pointing Device Driver (Version: 16.2.10.12) nötig
Ask Toolbar (x32 Version: 12.2.2.588) unötig
aTube Catcher (x32 Version: 2.9.1482) nötig
Battlefield Play4Free (Niklas) (HKCU) nötig
Bonjour (Version: 3.0.0.10) unötig
Catalyst Control Center - Branding (x32 Version: 1.00.0000) nötig
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437) nötihg
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437) nötig
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437) nötig
CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437) ?
CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437) ?
CCC Help Czech (x32 Version: 2012.0806.1155.19437)?
CCC Help Danish (x32 Version: 2012.0806.1155.19437)
CCC Help Dutch (x32 Version: 2012.0806.1155.19437)
CCC Help English (x32 Version: 2012.0806.1155.19437)
CCC Help Finnish (x32 Version: 2012.0806.1155.19437)
CCC Help French (x32 Version: 2012.0806.1155.19437)
CCC Help German (x32 Version: 2012.0806.1155.19437)
CCC Help Greek (x32 Version: 2012.0806.1155.19437)
CCC Help Hungarian (x32 Version: 2012.0806.1155.19437)
CCC Help Italian (x32 Version: 2012.0806.1155.19437)
CCC Help Japanese (x32 Version: 2012.0806.1155.19437)
CCC Help Korean (x32 Version: 2012.0806.1155.19437)
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437)
CCC Help Polish (x32 Version: 2012.0806.1155.19437)
CCC Help Portuguese (x32 Version: 2012.0806.1155.19437)
CCC Help Russian (x32 Version: 2012.0806.1155.19437)
CCC Help Spanish (x32 Version: 2012.0806.1155.19437)
CCC Help Swedish (x32 Version: 2012.0806.1155.19437)
CCC Help Thai (x32 Version: 2012.0806.1155.19437)
CCC Help Turkish (x32 Version: 2012.0806.1155.19437)
ccc-utility64 (Version: 2012.0806.1156.19437) ????????????????????
CyberLink LabelPrint (x32 Version: 2.5.1.5407)
CyberLink Media Suite 10 (x32 Version: 10.0.1.1916) nötig
CyberLink Power2Go 8 (x32 Version: 8.0.1.1926) nötig
CyberLink PowerDVD (x32 Version: 10.0.6.4319) nötig
CyberLink YouCam (x32 Version: 3.5.4.5527) nötig
D3DX10 (x32 Version: 15.4.2368.0902) ?
Electronic Arts Product Registration (x32 Version: 1.01.0000) nötig
Energy Star (Version: 1.0.8) nötig
Google Chrome (x32 Version: 28.0.1500.95) nötig
Google Talk Plugin (x32 Version: 4.2.1.14031) nötig
Google Update Helper (x32 Version: 1.3.21.153) nötig
Harry Potter II (x32) nötig
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000) n
HP Customer Experience Enhancements (x32 Version: 6.0.1.7)n
HP Documentation (x32 Version: 1.1.0.0)n
HP Postscript Converter (Version: 3.1.3554)nn
HP Quick Launch (x32 Version: 3.0.3)n
HP Recovery Manager (x32 Version: 7.00)n
HP Registration Service (Version: 1.0.5976.4186)n
HP Software Framework (x32 Version: 4.6.8.1)n
HP Support Assistant (x32 Version: 7.0.32.44)
HP Utility Center (x32 Version: 1.0.7)n
HP Wireless Button Driver (x32 Version: 1.0.5.1)n
iTunes (Version: 11.0.4.4)n
Microsoft Application Error Reporting (Version: 12.0.6015.5000)n
Microsoft Office (x32 Version: 14.0.6120.5004)n
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
MSVCRT (x32 Version: 15.4.2862.0708)??
Norton Internet Security (x32 Version: 20.4.0.40)n
PunkBuster Services (x32 Version: 0.990)?
Ralink Bluetooth Stack64 (Version: 9.0.715.0)
Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.2.0)nn
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)n
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)nn
Realtek PCIE Card Reader (x32 Version: 6.2.8400.29029)n
Skype™ 6.7 (x32 Version: 6.7.102)n
Spotify (HKCU Version: 0.9.1.57.ge7405149) n
swMSM (x32 Version: 12.0.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
windows live alle nötig
=================[/CODE]

markusg 02.08.2013 16:24
Hi,
es sind 2 Logs zu erstellen, poste diese möglichst gleichzeitig.
1.
Deinstaliere:
Ask
Norton Internet Security : prüfe mal, ob du die Version 2013 nutzt, falls nicht, Upgraden:
Norton Antivirus und Internet Security Software | Norton.de

2.
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


3.
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



poste:
- Combofix.txt
Malwarebytes Log.

NikEi 01.09.2013 21:26
Combofix Logfile:
Code:
ComboFix 13-08-02.01 - Niklas 01.09.2013  23:00:39.2.2 - x64
Microsoft Windows 8  6.2.9200.0.1252.49.1031.18.3682.2595 [GMT 3:00]
ausgeführt von:: c:\users\Niklas\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
---- Vorheriger Suchlauf -------
.
c:\programdata\MagniPIc
c:\programdata\MagniPIc\51f3022f9ca61.dll
c:\programdata\MagniPIc\51f3022f9ca61.tlb
c:\programdata\MagniPIc\settings.ini
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-08-01 bis 2013-09-01  ))))))))))))))))))))))))))))))
.
.
2013-09-01 20:14 . 2013-09-01 20:14        --------        d-----w-        c:\users\Niklas\AppData\Local\temp
2013-09-01 20:14 . 2013-09-01 20:14        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-08-23 21:39 . 2013-08-23 21:39        --------        d-----w-        c:\users\Niklas\AppData\Local\Luka und der verborgene Schatz
2013-08-22 20:17 . 2013-08-22 20:17        --------        d-----w-        c:\program files (x86)\CASIO
2013-08-22 20:16 . 2013-08-22 20:16        --------        d-----w-        c:\users\Niklas\AppData\Roaming\CASIO
2013-08-20 19:27 . 2013-08-20 19:27        240304        ----a-w-        c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10214.bin
2013-08-18 18:13 . 2013-08-18 18:13        --------        d-----w-        c:\program files (x86)\Common Files\Adobe
2013-08-18 18:10 . 2013-08-18 18:29        --------        d-----w-        c:\users\Niklas\AppData\Local\Adobe
2013-08-18 10:29 . 2013-08-18 10:32        --------        d-----w-        c:\windows\system32\MRT
2013-08-18 10:20 . 2013-08-18 10:20        --------        d-----w-        c:\users\Niklas\AppData\Roaming\WebApp
2013-08-17 11:43 . 2013-07-26 05:13        53760        ----a-w-        c:\windows\system32\UXInit.dll
2013-08-17 11:42 . 2013-07-26 05:12        2647040        ----a-w-        c:\windows\system32\iertutil.dll
2013-08-17 11:42 . 2013-07-26 05:12        3958784        ----a-w-        c:\windows\system32\jscript9.dll
2013-08-17 11:41 . 2013-07-26 03:12        2877440        ----a-w-        c:\windows\SysWow64\jscript9.dll
2013-08-17 11:41 . 2013-07-26 03:12        108032        ----a-w-        c:\program files (x86)\Internet Explorer\jsdebuggeride.dll
2013-08-17 00:35 . 2013-05-23 23:02        1314816        ----a-w-        c:\windows\system32\rpcrt4.dll
2013-08-17 00:35 . 2013-05-23 22:25        694272        ----a-w-        c:\windows\SysWow64\rpcrt4.dll
2013-08-17 00:03 . 2013-07-09 06:07        2233168        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-08-16 23:57 . 2013-07-13 06:16        1889280        ----a-w-        c:\windows\system32\crypt32.dll
2013-08-16 23:57 . 2013-07-13 04:23        1568256        ----a-w-        c:\windows\SysWow64\crypt32.dll
2013-08-16 23:57 . 2013-07-13 06:18        337408        ----a-w-        c:\windows\system32\wintrust.dll
2013-08-16 23:57 . 2013-07-13 06:15        124416        ----a-w-        c:\windows\system32\apprepapi.dll
2013-08-16 23:57 . 2013-07-13 04:24        261120        ----a-w-        c:\windows\SysWow64\wintrust.dll
2013-08-16 23:57 . 2013-07-13 04:23        87040        ----a-w-        c:\windows\SysWow64\apprepapi.dll
2013-08-16 23:57 . 2013-07-13 06:16        68096        ----a-w-        c:\windows\system32\cryptsvc.dll
2013-08-16 23:57 . 2013-07-13 06:15        98304        ----a-w-        c:\windows\system32\apprepsync.dll
2013-08-16 23:57 . 2013-07-13 04:23        74240        ----a-w-        c:\windows\SysWow64\apprepsync.dll
2013-08-05 10:28 . 2013-08-05 10:28        --------        d-----w-        C:\sources
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-18 10:29 . 2013-06-26 10:11        78161360        ----a-w-        c:\windows\system32\MRT.exe
2013-07-06 21:46 . 2013-06-26 12:13        282104        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr
2013-07-06 21:46 . 2013-06-26 12:04        282104        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe
2013-07-06 21:46 . 2013-06-26 12:04        234768        ----a-w-        c:\windows\SysWow64\PnkBstrB.ex0
2013-06-27 22:04 . 2012-07-26 08:14        78200        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-27 22:04 . 2012-07-26 08:14        693112        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-26 15:20 . 2013-03-21 07:14        177312        ----a-w-        c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-06-26 12:17 . 2013-06-26 12:04        76888        ----a-w-        c:\windows\SysWow64\PnkBstrA.exe
2013-06-25 21:16 . 2013-06-25 21:16        50784        ----a-w-        c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2013-06-25 21:16 . 2013-06-25 21:16        17536        ----a-w-        c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2013-06-24 17:25 . 2012-07-26 08:13        22240        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-06-16 22:41 . 2013-07-24 20:21        997632        ----a-w-        c:\windows\system32\drivers\ndis.sys
2013-06-04 06:15 . 2013-06-04 06:15        708168        ----a-w-        c:\windows\system32\WinUSBCoInstaller.dll
2013-06-04 06:15 . 2013-06-04 06:15        103448        ----a-w-        c:\windows\system32\drivers\ssudbus.sys
2013-06-04 06:15 . 2013-06-04 06:15        203672        ----a-w-        c:\windows\system32\drivers\ssudmdm.sys
2013-06-04 06:15 . 2013-06-04 06:15        1490656        ----a-w-        c:\windows\system32\WdfCoInstaller01007.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-03 1104384]
"Spotify"="c:\users\Niklas\AppData\Roaming\Spotify\spotify.exe" [2013-07-03 4640768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-08-06 642216]
"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-08-02 363520]
"CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2012-07-26 491320]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-07-09 580512]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\System32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\System32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 SymELAM;Symantec ELAM Driver;c:\windows\system32\drivers\NISx64\1404000.028\SymELAM.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SymELAM.sys [x]
S0 amd_sata;amd_sata;c:\windows\System32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\System32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 APXACC;AppEx Networks Accelerator LWF;c:\windows\system32\DRIVERS\appexDrv.sys;c:\windows\SYSNATIVE\DRIVERS\appexDrv.sys [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW86.sys;c:\windows\SYSNATIVE\drivers\AtihdW86.sys [x]
S3 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [x]
S3 BtAudioBusSrv;IVT Bluetooth Audio Bus Service;c:\windows\System32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\System32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]
S3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\System32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]
S3 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130822.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130822.001\IDSvia64.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\System32\drivers\rtbth.sys;c:\windows\SYSNATIVE\drivers\rtbth.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x]
S3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x]
S3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x]
S3 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1404000.028\SYMNETS.SYS [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
apphost        REG_MULTI_SZ          apphostsvc
iissvcs        REG_MULTI_SZ          w3svc was
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-29 19:04        1177552        ----a-w-        c:\program files (x86)\Google\Chrome\Application\29.0.1547.62\Installer\chrmstp.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2013-05-11 10:37        215264        ----a-w-        c:\program files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27 11:52]
.
2013-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27 11:52]
.
2013-08-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job
- c:\users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-01 01:58]
.
2013-09-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job
- c:\users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-01 01:58]
.
2013-08-30 c:\windows\Tasks\HPCeeScheduleForNiklas.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-06-12 6548112]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
TCP: Interfaces\{F11F0661-D0F5-4A57-867B-A38D0FA3FE3A}: NameServer = 8.8.8.8
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
WebBrowser-{41545534-2D56-3700-76A7-7A786E7484D7} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-{B8019B54-F9BE-490A-9619-6D06F18F129F} - c:\program files (x86)\InstallShield Installation Information\{B8019B54-F9BE-490A-9619-6D06F18F129F}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2013-09-01  23:19:19
ComboFix-quarantined-files.txt  2013-09-01 20:19
.
Vor Suchlauf: 16 Verzeichnis(se), 424.485.117.952 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 424.404.541.440 Bytes frei
.
- - End Of File - - E0C860CE772C8DCDE74D26233EF66009
--- --- ---
5FB38429D5D77768867C76DCBDB35194


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131