Hallo schrauber,
danke Dir herzlich für die Auskunft und Deine nette Hilfe.
Hier kommt zuerst die FST.txt Datei.
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-02-2014 01
Ran by Renate (administrator) on THE-WITCH on 10-02-2014 23:31:19
Running from C:\Users\Renate\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe
(HiTRSUT) C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Windows\system32\PSIService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
(acer) C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Acer\Empowering Technology\eAudio\eAudio.exe
(HiTRUST) C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor Corp.) C:\Users\Renate\AppData\Local\Temp\RtkBtMnt.exe
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
() C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
() C:\Program Files\HSPA USB MODEM\ModemListener.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Spotify Ltd) C:\Users\Renate\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(Convesoft) C:\Convesoft\Orion\Messenger.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
() C:\Program Files\FindRight\updateFindRight.exe
(Google Inc.) C:\Users\Renate\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Renate\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Renate\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Renate\AppData\Local\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\avscan.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4468736 2007-05-10] (Realtek Semiconductor)
HKLM\...\Run: [NvSvc] - C:\Windows\system32\nvsvc.dll [86016 2007-06-06] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [8433664 2007-06-06] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [81920 2007-06-06] (NVIDIA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [833072 2007-06-04] (Synaptics, Inc.)
HKLM\...\Run: [PLFSet] - C:\Windows\PLFSet.dll [45056 2007-04-24] ( )
HKLM\...\Run: [Acer Tour Reminder] - C:\Acer\AcerTour\Reminder.exe [151552 2007-05-22] (Acer Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [40048 2007-03-08] (Adobe Systems Incorporated)
HKLM\...\Run: [eAudio] - C:\Acer\Empowering Technology\eAudio\eAudio.exe [1286144 2007-06-11] (CyberLink)
HKLM\...\Run: [eDataSecurity Loader] - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [457216 2007-04-25] (HiTRUST)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [174872 2007-05-08] (Intel Corporation)
HKLM\...\Run: [PlayMovie] - C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe [200704 2007-12-05] (CyberLink Corp.)
HKLM\...\Run: [WarReg_PopUp] - C:\Acer\WR_PopUp\WarReg_PopUp.exe [57344 2006-11-05] (Acer Inc.)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [784904 2007-06-28] (Dritek System Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS5ServiceManager] - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM\...\Run: [Corel Photo Downloader] - "C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel PhotoDownloader.exe" -startup
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2516296 2010-03-24] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [4shared Update] - C:\Program Files\4shared Desktop\checkUpdate.exe [1587712 2013-01-16] ()
HKLM\...\Run: [Corel File Shell Monitor] - C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [16200 2007-10-30] ()
HKLM\...\Run: [ModemListener] - C:\Program Files\HSPA USB MODEM\ModemListener.exe [110248 2012-12-10] ()
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Runonce: [Del26280427] - cmd.exe /Q /D /c del "C:\Users\Renate\AppData\Local\Temp\0.del"
HKLM\...\Runonce: [Del26394682] - cmd.exe /Q /D /c del "C:\Users\Renate\AppData\Local\Temp\0.del"
HKLM\...\Runonce: [DelTr27824587] - cmd.exe /c rd /s /q "C:\Users\Renate\AppData\Roaming\mysearchdial"
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\Run: [Google Update] - C:\Users\Renate\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-10-17] (Google Inc.)
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\Run: [Spotify] - C:\Users\Renate\AppData\Roaming\Spotify\Spotify.exe [6118400 2014-01-31] (Spotify Ltd)
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\Run: [Spotify Web Helper] - C:\Users\Renate\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-31] (Spotify Ltd)
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\RunOnce: [DelTr27824587] - cmd.exe /c rd /s /q "C:\Users\Renate\AppData\Roaming\mysearchdial"
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: G - G:\autorun.exe
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {2eb8aa7a-c761-11e0-b341-00a0d1a37e52} - "G:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {3e579a60-fa72-11e2-8912-00a0d1a37e52} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {3e579a9b-fa72-11e2-8912-00a0d1a37e52} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {820b75e4-f603-11e2-a434-00a0d1a37e52} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {820b76d3-f603-11e2-a434-00a0d1a37e52} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {d38c30ab-f93f-11e2-8f7a-001e101fabdd} - G:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-2610825137-1899131733-96405576-1000\...\MountPoints2: {d559ed6b-f9c8-11e2-9d1a-00a0d1a37e52} - D:\autorun.exe
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Orion.lnk
ShortcutTarget: Orion.lnk -> C:\Convesoft\Orion\Messenger.exe (Convesoft)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,SEARCH PAGE = hxxp://search.b1.org/?bsrc=hmior&chid=c162341
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtD0AtD0DtC0AtAyB0EyDtB0DyDtDzztN0D0Tzu0SyByBtBtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=246043075&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page Before = hxxp://de.rd.yahoo.com/customize/ycomp/defaults/sp/*hxxp://de.yahoo.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtD0AtD0DtC0AtAyB0EyDtB0DyDtDzztN0D0Tzu0SyByBtBtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=246043075&ir=
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =
SearchScopes: HKCU - DefaultScope {D0D22E06-73BF-4820-95FE-7310C528AD5E} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtD0AtD0DtC0AtAyB0EyDtB0DyDtDzztN0D0Tzu0SyByBtBtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=246043075&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {9521F5B2-4EF5-4C50-B200-822D6860830B} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
SearchScopes: HKCU - {9DC5699B-BB94-47C1-8245-65D629786F8A} URL = hxxp://websearch.search-results.com/redirect?client=ie&tb=STC-SRS&o=41648033&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=96&apn_dtid=YYYYYYYYDE&apn_uid=2E26BAEC-4934-4F11-94CA-73B0F4C7403B&apn_sauid=54EE20CA-B893-4973-B6D0-1B20DCC36A8C&
SearchScopes: HKCU - {D0D22E06-73BF-4820-95FE-7310C528AD5E} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtD0AtD0DtC0AtAyB0EyDtB0DyDtDzztN0D0Tzu0SyByBtBtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=246043075&ir=
SearchScopes: HKCU - {FA30D0D9-A7FD-42A5-8430-9EB922954120} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=63250a37-12c5-4b79-8a6f-92eccd9f0367&apn_sauid=E42EE350-6D7C-4BED-9D83-0170BD21ABA1
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO: Re-Markable - {0f2d17c2-38a4-4b64-8427-faf3326ccc3e} - C:\Program Files\Re-Markable\150.dll ()
BHO: Feven 2.2 - {11111111-1111-1111-1111-110411901112} - C:\Program Files\Feven 2.2\Feven 2.2-bho.dll (Feven)
BHO: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files\FindRight\FindRightbho.dll (FindRight)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll (HiTRUST)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll (HiTRUST)
Toolbar: HKLM - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default
FF user.js: detected! => C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\user.js
FF DefaultSearchEngine: Mysearchdial
FF SearchEngineOrder.1: Mysearchdial
FF SelectedSearchEngine: Mysearchdial
FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtD0AtD0DtC0AtAyB0EyDtB0DyDtDzztN0D0Tzu0SyByBtBtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=246043075&ir=
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Renate\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Renate\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\searchplugins\search-results.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Feven 2.2 - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\Extensions\15d84a30-fc9d-4fca-80a7-e5797da621a2@b2cb2d04-e262-4863-aee7-9d0e4333b550.com [2014-02-03]
FF Extension: MySearchDial NewTab - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-02-10]
FF Extension: 4shared Desktop Plugin - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\Extensions\4sharedCopyLinks.xpi [2013-01-16]
FF Extension: FindRight - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\vw98qcu0.default\Extensions\{42e50651-9669-456e-9081-d5a836274274}.xpi [2014-02-10]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011-10-25]
FF HKCU\...\Firefox\Extensions: [{80776f9b-5ddd-4527-8ae6-83efcc54c7e7}] - C:\Program Files\Re-Markable\150.xpi
FF Extension: Re-Markable - C:\Program Files\Re-Markable\150.xpi [2014-01-04]
Chrome:
=======
CHR HomePage: hxxp://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtD0AtD0DtC0AtAyB0EyDtB0DyDtDzztN0D0Tzu0SyByBtBtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=246043075&ir=
CHR DefaultSearchProvider: "name": "Mysearchdial"
CHR Plugin: (Shockwave Flash) - C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Norton Identity Safe) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.1.1.4_0\npcoplgn.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Google Update) - C:\Users\Renate\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-10-14]
CHR Extension: (Google-Suche) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-10-14]
CHR Extension: (Re-Markable) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdfidgapfiokiphmcjpmmjbdndepoja [2014-01-04]
CHR Extension: (Improved Search) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahpjplbmicfkmoccokbjejahjjpnena [2013-03-25]
CHR Extension: (Google Wallet) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
CHR Extension: (Google Mail) - C:\Users\Renate\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-10-14]
CHR HKLM\...\Chrome\Extension: [ejdfidgapfiokiphmcjpmmjbdndepoja] - C:\Program Files\Re-Markable\150.crx [2014-01-04]
========================== Services (Whitelisted) =================
R2 ALDITALKVerbindungsassistent_Service; C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2013-08-01] ()
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 DeviceManager; C:\Program Files\Common Files\DeviceHelper\DeviceManager.exe [40960 2012-10-12] ()
R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512 2007-04-25] (HiTRSUT)
S2 eLockService; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576 2007-04-23] (Acer Inc.)
S4 eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [135168 2007-06-13] (Acer Inc.)
R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.)
R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-10] ()
S2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [107008 2006-11-24] ()
U2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [266343 2007-01-23] ()
R2 Update FindRight; C:\Program Files\FindRight\updateFindRight.exe [80160 2014-02-10] ()
R2 WMIService; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936 2007-10-30] (acer)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 DritekPortIO; C:\Program Files\Launch Manager\DPortIO.sys [20112 2006-11-02] (Dritek System Inc.)
R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [15392 2007-07-03] (Acer, Inc.)
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [49664 2007-06-20] (Windows (R) Codename Longhorn DDK provider)
S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [107904 2012-03-31] (TCT International Mobile Ltd.)
R0 PSDFilter; C:\Windows\System32\DRIVERS\psdfilter.sys [20776 2007-04-25] (HiTRUST)
R0 PSDNServ; C:\Windows\System32\drivers\PSDNServ.sys [16680 2007-04-25] (HiTRUST)
R0 psdvdisk; C:\Windows\System32\drivers\psdvdisk.sys [60712 2007-04-25] (HiTRUST)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1729152 2007-02-07] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-18] (Avira GmbH)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [41456 2007-12-05] (Cyberlink Corp.)
S1 MpKsl012468af; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AC87CF1E-4D32-4F11-AB28-AF388E8FF90B}\MpKsl012468af.sys [X]
S1 MpKsl0219abbc; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3BF084EF-C620-41E9-8886-4039588CF05B}\MpKsl0219abbc.sys [X]
S1 MpKsl068c9254; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3D14740F-0B02-4108-BF2E-52D6DEC675B7}\MpKsl068c9254.sys [X]
S1 MpKsl0cda3f08; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{45C5F445-ECE6-4031-9600-BC1235816A8F}\MpKsl0cda3f08.sys [X]
S1 MpKsl0f11e6af; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D5DC320B-C8F3-4669-A02E-A0F5E4B601D8}\MpKsl0f11e6af.sys [X]
S1 MpKsl124011d6; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{32B70367-30D4-4356-B5B3-7729932617F4}\MpKsl124011d6.sys [X]
S1 MpKsl13e58462; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D0F4C818-B31B-46BA-9136-0DD854570D01}\MpKsl13e58462.sys [X]
S1 MpKsl1f3e812b; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{74E41428-80A1-4729-8FE1-F404F079AE01}\MpKsl1f3e812b.sys [X]
S1 MpKsl262b42d1; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{72DF0F50-F6E4-4555-A9D5-D04BCE9F58B2}\MpKsl262b42d1.sys [X]
S1 MpKsl2a9edbb1; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{17CE1D3D-2D34-4265-859F-FF0E92A2D9C6}\MpKsl2a9edbb1.sys [X]
S1 MpKsl38685676; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5BC8912F-6520-432A-B591-EBCF7F63A62A}\MpKsl38685676.sys [X]
S1 MpKsl43920047; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E25AB93A-EF90-4F2E-94D8-6D8D3C19D53C}\MpKsl43920047.sys [X]
S1 MpKsl4d90892b; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C2A819D0-9123-4FEA-88A3-1E93FCFA227F}\MpKsl4d90892b.sys [X]
S1 MpKsl4dadcfc2; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2D508C73-BEF3-4DD2-8E40-306B67C6E5B3}\MpKsl4dadcfc2.sys [X]
S1 MpKsl58915c7e; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E25AB93A-EF90-4F2E-94D8-6D8D3C19D53C}\MpKsl58915c7e.sys [X]
S1 MpKsl5b55719f; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{51E76638-84C4-416E-A838-357781182D11}\MpKsl5b55719f.sys [X]
S1 MpKsl5e69badc; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3CAFAFFF-9676-4C33-B939-CE3BDA402AE6}\MpKsl5e69badc.sys [X]
S1 MpKsl5f2f0e69; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{83FD4B35-7F48-483F-94C5-B28C708DCCFB}\MpKsl5f2f0e69.sys [X]
S1 MpKsl68304336; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0125993E-5FA0-4F19-89F8-731A36F1D7F3}\MpKsl68304336.sys [X]
S1 MpKsl76902e18; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5FC20223-11B0-43F7-8068-A623424EACE8}\MpKsl76902e18.sys [X]
S1 MpKsl7b878b86; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{65D3AC92-481B-4F54-9B3F-D40BA9494907}\MpKsl7b878b86.sys [X]
S1 MpKsl7cd488c0; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D0F4C818-B31B-46BA-9136-0DD854570D01}\MpKsl7cd488c0.sys [X]
S1 MpKsl84f3da6e; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9D52278F-4D41-46A7-844F-C7D014785B62}\MpKsl84f3da6e.sys [X]
S1 MpKsl8ad35669; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3D14740F-0B02-4108-BF2E-52D6DEC675B7}\MpKsl8ad35669.sys [X]
S1 MpKsl9396219d; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A72996FA-BDBC-46E2-A1D5-D9387770501F}\MpKsl9396219d.sys [X]
S1 MpKsl99dcd0ef; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1CF5B49B-6FD7-4A50-9D1D-EA584467907B}\MpKsl99dcd0ef.sys [X]
S1 MpKsl9fb86e6a; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{53A9F5BD-B97F-41E5-9D46-528A4BF88027}\MpKsl9fb86e6a.sys [X]
S1 MpKslb2a25753; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BE6793F2-7914-40AE-AD51-B06913F34579}\MpKslb2a25753.sys [X]
S1 MpKslb7fa71c4; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{53A9F5BD-B97F-41E5-9D46-528A4BF88027}\MpKslb7fa71c4.sys [X]
S1 MpKslbec97c0c; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E3EF4C35-66A7-47F6-8B67-CDCCA57356BD}\MpKslbec97c0c.sys [X]
S1 MpKslcd262ae3; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{909F4FDD-F0FE-4E71-8EBC-CD9FD0BF3219}\MpKslcd262ae3.sys [X]
S1 MpKsld417914b; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{76DA998D-3003-4BCC-92E6-267BCF23C2DA}\MpKsld417914b.sys [X]
S1 MpKsld913f3d5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{28C77495-A337-4364-B9B1-78097C524A31}\MpKsld913f3d5.sys [X]
S1 MpKsle0ed9b68; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{53A9F5BD-B97F-41E5-9D46-528A4BF88027}\MpKsle0ed9b68.sys [X]
S1 MpKsle3445921; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D7FE714E-6FCA-45BA-933A-D69174B41BC6}\MpKsle3445921.sys [X]
S1 MpKslfacea136; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{51E76638-84C4-416E-A838-357781182D11}\MpKslfacea136.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-10 23:31 - 2014-02-10 23:31 - 00029171 _____ () C:\Users\Renate\Desktop\FRST.txt
2014-02-10 23:31 - 2014-02-10 23:31 - 00000000 ____D () C:\FRST
2014-02-10 23:24 - 2014-02-10 23:24 - 01139712 _____ (Farbar) C:\Users\Renate\Downloads\FRST.exe
2014-02-10 23:24 - 2014-02-10 23:24 - 01139712 _____ (Farbar) C:\Users\Renate\Desktop\FRST.exe
2014-02-10 23:05 - 2014-02-10 23:05 - 00000045 _____ () C:\Users\Renate\AppData\Roaming\WB.CFG
2014-02-10 23:05 - 2014-02-10 23:05 - 00000000 ____D () C:\Program Files\FindRight
2014-02-10 23:04 - 2014-02-10 23:05 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\mysearchdial
2014-02-10 23:03 - 2014-02-10 23:09 - 00000296 _____ () C:\Windows\Tasks\Digital Sites.job
2014-02-10 23:03 - 2014-02-10 23:03 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\DigitalSites
2014-02-10 23:02 - 2014-02-10 23:02 - 00670920 _____ () C:\Users\Renate\Downloads\ZipExtractorSetup.exe
2014-02-10 23:02 - 2014-02-10 23:02 - 00670920 _____ () C:\Users\Renate\Desktop\ZipExtractorSetup (1).exe
2014-02-10 18:15 - 2014-02-10 18:15 - 00000102 _____ () C:\Users\Renate\Desktop\Problem mit dem Shockwave Flash - Trojaner-Board.url
2014-02-10 17:42 - 2014-02-10 17:42 - 00000086 _____ () C:\Users\Renate\Desktop\Trojaner-Board - Neues Thema erstellen.url
2014-02-07 18:58 - 2014-02-07 18:58 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\Avira
2014-02-07 18:57 - 2014-02-07 18:57 - 00002016 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-02-07 18:56 - 2014-02-07 18:56 - 00000000 ____D () C:\Program Files\Avira
2014-02-07 18:56 - 2013-12-18 09:32 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-07 18:56 - 2013-12-18 09:32 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-07 18:56 - 2013-12-18 09:32 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-07 18:56 - 2013-12-18 09:32 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-02-07 18:48 - 2014-02-07 18:55 - 130658432 _____ () C:\Users\Renate\Downloads\avira_free_antivirus_de.exe
2014-02-07 18:35 - 2014-02-07 18:36 - 20100397 _____ () C:\Users\Renate\Downloads\Nicht bestätigt 16626.crdownload
2014-02-07 16:24 - 2014-02-07 16:24 - 00320448 _____ () C:\Users\Renate\Downloads\Player.exe
2014-02-07 16:22 - 2014-02-07 16:23 - 00861600 _____ (AirInstaller ) C:\Users\Renate\Downloads\setup(1).exe
2014-02-03 20:00 - 2014-02-10 20:05 - 00002200 _____ () C:\Windows\Tasks\Feven 2.2-firefoxinstaller.job
2014-02-03 20:00 - 2014-02-10 20:00 - 00002374 _____ () C:\Windows\Tasks\Feven 2.2-validator.job
2014-02-03 20:00 - 2014-02-10 20:00 - 00001486 _____ () C:\Windows\Tasks\Feven 2.2-updater.job
2014-02-03 20:00 - 2014-02-10 20:00 - 00001442 _____ () C:\Windows\Tasks\Feven 2.2-codedownloader.job
2014-02-03 20:00 - 2014-02-10 20:00 - 00001340 _____ () C:\Windows\Tasks\Feven 2.2-enabler.job
2014-02-03 20:00 - 2014-02-03 20:00 - 00000000 ____D () C:\Users\Renate\Documents\Optimizer Pro
2014-02-03 20:00 - 2014-02-03 20:00 - 00000000 ____D () C:\Program Files\Feven 2.2
2014-02-03 19:59 - 2014-02-03 21:04 - 00000000 ____D () C:\Users\Renate\AppData\Local\WeatherAlerts
2014-02-03 19:59 - 2014-02-03 20:09 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\VOPackage
2014-02-03 19:59 - 2014-02-03 19:59 - 00001867 _____ () C:\Users\Renate\Desktop\Configure VO Package.lnk
2014-02-03 19:57 - 2014-02-03 19:57 - 00319904 _____ () C:\Users\Renate\Downloads\JFileManager.exe
2014-01-15 16:10 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 16:10 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 16:10 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 16:10 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 16:10 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 16:10 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 16:10 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 16:10 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 16:10 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2014-02-10 23:31 - 2014-02-10 23:31 - 00029171 _____ () C:\Users\Renate\Desktop\FRST.txt
2014-02-10 23:31 - 2014-02-10 23:31 - 00000000 ____D () C:\FRST
2014-02-10 23:27 - 2013-08-19 21:24 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\Systweak
2014-02-10 23:26 - 2011-10-17 18:54 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2610825137-1899131733-96405576-1000UA.job
2014-02-10 23:24 - 2014-02-10 23:24 - 01139712 _____ (Farbar) C:\Users\Renate\Downloads\FRST.exe
2014-02-10 23:24 - 2014-02-10 23:24 - 01139712 _____ (Farbar) C:\Users\Renate\Desktop\FRST.exe
2014-02-10 23:09 - 2014-02-10 23:03 - 00000296 _____ () C:\Windows\Tasks\Digital Sites.job
2014-02-10 23:05 - 2014-02-10 23:05 - 00000045 _____ () C:\Users\Renate\AppData\Roaming\WB.CFG
2014-02-10 23:05 - 2014-02-10 23:05 - 00000000 ____D () C:\Program Files\FindRight
2014-02-10 23:05 - 2014-02-10 23:04 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\mysearchdial
2014-02-10 23:03 - 2014-02-10 23:03 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\DigitalSites
2014-02-10 23:02 - 2014-02-10 23:02 - 00670920 _____ () C:\Users\Renate\Downloads\ZipExtractorSetup.exe
2014-02-10 23:02 - 2014-02-10 23:02 - 00670920 _____ () C:\Users\Renate\Desktop\ZipExtractorSetup (1).exe
2014-02-10 23:00 - 2011-08-15 17:37 - 00010048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-10 23:00 - 2011-08-15 17:37 - 00010048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-10 22:47 - 2012-10-14 21:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-10 22:45 - 2011-08-15 17:59 - 01611063 _____ () C:\Windows\WindowsUpdate.log
2014-02-10 20:05 - 2014-02-03 20:00 - 00002200 _____ () C:\Windows\Tasks\Feven 2.2-firefoxinstaller.job
2014-02-10 20:00 - 2014-02-03 20:00 - 00002374 _____ () C:\Windows\Tasks\Feven 2.2-validator.job
2014-02-10 20:00 - 2014-02-03 20:00 - 00001486 _____ () C:\Windows\Tasks\Feven 2.2-updater.job
2014-02-10 20:00 - 2014-02-03 20:00 - 00001442 _____ () C:\Windows\Tasks\Feven 2.2-codedownloader.job
2014-02-10 20:00 - 2014-02-03 20:00 - 00001340 _____ () C:\Windows\Tasks\Feven 2.2-enabler.job
2014-02-10 18:38 - 2014-01-04 18:48 - 00000372 _____ () C:\Windows\Tasks\Re-Markable Update.job
2014-02-10 18:29 - 2013-03-18 23:30 - 00000000 ____D () C:\Users\Renate\Desktop\Annemarie_scripte_topgirlz
2014-02-10 18:15 - 2014-02-10 18:15 - 00000102 _____ () C:\Users\Renate\Desktop\Problem mit dem Shockwave Flash - Trojaner-Board.url
2014-02-10 17:43 - 2011-08-15 12:59 - 00027430 _____ () C:\Users\Renate\AppData\Roaming\nvModes.001
2014-02-10 17:42 - 2014-02-10 17:42 - 00000086 _____ () C:\Users\Renate\Desktop\Trojaner-Board - Neues Thema erstellen.url
2014-02-10 16:26 - 2011-10-17 18:54 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2610825137-1899131733-96405576-1000Core.job
2014-02-10 16:18 - 2011-08-15 12:35 - 00027430 _____ () C:\Users\Renate\AppData\Roaming\nvModes.dat
2014-02-10 15:48 - 2014-01-04 18:48 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\Spotify
2014-02-10 15:46 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-10 15:46 - 2009-07-14 05:39 - 03937703 _____ () C:\Windows\setupact.log
2014-02-08 09:42 - 2011-08-15 17:48 - 00661520 _____ () C:\Windows\PFRO.log
2014-02-07 18:58 - 2014-02-07 18:58 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\Avira
2014-02-07 18:57 - 2014-02-07 18:57 - 00002016 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-02-07 18:56 - 2014-02-07 18:56 - 00000000 ____D () C:\Program Files\Avira
2014-02-07 18:55 - 2014-02-07 18:48 - 130658432 _____ () C:\Users\Renate\Downloads\avira_free_antivirus_de.exe
2014-02-07 18:42 - 2011-11-02 11:21 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-02-07 18:40 - 2007-08-01 09:21 - 00000000 ____D () C:\Users\Public\Documents\.GamesData
2014-02-07 18:40 - 2007-08-01 09:21 - 00000000 ____D () C:\Program Files\Acer GameZone
2014-02-07 18:36 - 2014-02-07 18:35 - 20100397 _____ () C:\Users\Renate\Downloads\Nicht bestätigt 16626.crdownload
2014-02-07 18:36 - 2013-08-19 21:28 - 00000000 ____D () C:\Program Files\Amazon
2014-02-07 16:24 - 2014-02-07 16:24 - 00320448 _____ () C:\Users\Renate\Downloads\Player.exe
2014-02-07 16:23 - 2014-02-07 16:22 - 00861600 _____ (AirInstaller ) C:\Users\Renate\Downloads\setup(1).exe
2014-02-06 18:47 - 2012-10-14 21:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-06 18:47 - 2011-08-15 20:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-06 17:18 - 2012-10-14 22:38 - 00000000 ____D () C:\Users\Renate\AppData\Local\CrashDumps
2014-02-04 21:31 - 2011-10-17 18:54 - 00002366 _____ () C:\Users\Renate\Desktop\Google Chrome.lnk
2014-02-03 21:57 - 2011-08-15 12:32 - 00000000 ____D () C:\Program Files\Yahoo!
2014-02-03 21:04 - 2014-02-03 19:59 - 00000000 ____D () C:\Users\Renate\AppData\Local\WeatherAlerts
2014-02-03 20:09 - 2014-02-03 19:59 - 00000000 ____D () C:\Users\Renate\AppData\Roaming\VOPackage
2014-02-03 20:00 - 2014-02-03 20:00 - 00000000 ____D () C:\Users\Renate\Documents\Optimizer Pro
2014-02-03 20:00 - 2014-02-03 20:00 - 00000000 ____D () C:\Program Files\Feven 2.2
2014-02-03 19:59 - 2014-02-03 19:59 - 00001867 _____ () C:\Users\Renate\Desktop\Configure VO Package.lnk
2014-02-03 19:57 - 2014-02-03 19:57 - 00319904 _____ () C:\Users\Renate\Downloads\JFileManager.exe
2014-02-03 18:17 - 2011-08-15 18:23 - 00000000 ____D () C:\Users\Renate\AppData\Local\Adobe
2014-02-03 16:19 - 2012-07-05 15:49 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-02-03 15:51 - 2014-01-04 18:50 - 00000000 ____D () C:\Users\Renate\AppData\Local\Spotify
2014-01-27 15:51 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-16 15:44 - 2009-07-14 05:33 - 03743488 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 09:59 - 2011-08-15 15:15 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-15 23:29 - 2013-07-26 00:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 23:27 - 2011-09-19 09:46 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1580.dll
Some content of TEMP:
====================
C:\Users\Renate\AppData\Local\Temp\55500uninstall.exe
C:\Users\Renate\AppData\Local\Temp\avgnt.exe
C:\Users\Renate\AppData\Local\Temp\BackupSetup.exe
C:\Users\Renate\AppData\Local\Temp\fmt7zcpw.dll
C:\Users\Renate\AppData\Local\Temp\ICReinstall_Setup.exe
C:\Users\Renate\AppData\Local\Temp\INST01.dll
C:\Users\Renate\AppData\Local\Temp\INST011.dll
C:\Users\Renate\AppData\Local\Temp\InstallAX.exe
C:\Users\Renate\AppData\Local\Temp\InstallPlugin.exe
C:\Users\Renate\AppData\Local\Temp\mfc80.dll
C:\Users\Renate\AppData\Local\Temp\mfc80u.dll
C:\Users\Renate\AppData\Local\Temp\mfcm80.dll
C:\Users\Renate\AppData\Local\Temp\mfcm80u.dll
C:\Users\Renate\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Renate\AppData\Local\Temp\msvcm80.dll
C:\Users\Renate\AppData\Local\Temp\msvcp80.dll
C:\Users\Renate\AppData\Local\Temp\msvcr80.dll
C:\Users\Renate\AppData\Local\Temp\OSU.exe
C:\Users\Renate\AppData\Local\Temp\rslquvxq.dll
C:\Users\Renate\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Renate\AppData\Local\Temp\setup.exe
C:\Users\Renate\AppData\Local\Temp\Sqlite3.dll
C:\Users\Renate\AppData\Local\Temp\Uninstaller.exe
C:\Users\Renate\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Renate\AppData\Local\Temp\VersionUpdater.exe
C:\Users\Renate\AppData\Local\Temp\WtgDriverInstallX.dll
C:\Users\Renate\AppData\Local\Temp\WTGXMLUtil.dll
C:\Users\Renate\AppData\Local\Temp\WtgZip.dll
C:\Users\Renate\AppData\Local\Temp\xtxhyuxn.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 00:19
==================== End Of Log ============================
--- --- ---
Und jetzt kommt die Addition.txt Datei. Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-02-2014 01
Ran by Renate at 2014-02-10 23:32:20
Running from C:\Users\Renate\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
4shared Desktop (Version: - )
Acer Arcade Deluxe (Version: 1.13.4811 - CyberLink Corporation)
Acer Crystal Eye webcam (Version: 1.0.11 - SUYIN)
Acer Crystal Eye webcam (Version: 5.7.28.500-1.0 - Sonix)
Acer eAudio Management (Version: 2.5.4012 - )
Acer eDataSecurity Management (Version: 2.5.4241 - HiTRUST Inc.)
Acer eLock Management (Version: 2.5.4008 - Acer Inc.)
Acer Empowering Technology (Version: 2.5.4010 - Acer Inc.)
Acer eNet Management (Version: 2.6.4008 - Acer Inc.)
Acer ePower Management (Version: 2.5.4024 - Acer Inc.)
Acer ePresentation Management (Version: 2.5.4002 - Acer Inc.)
Acer eSettings Management (Version: 2.5.4016 - Acer Inc.)
Acer GridVista (Version: 2.68.622 - )
Acer Mobility Center Plug-In (Version: 1.0.3003 - Acer Inc.)
Acer ScreenSaver (Version: 1.23.20070515 - Acer Inc.)
Acer Tour (Version: 2.0.1003 - Acer Inc.)
Activation Assistant for the 2007 Microsoft Office suites (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Community Help (Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Community Help (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Master Collection (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 12 ActiveX (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Media Player (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Reader 8.1.0 (Version: 8.1.0 - Adobe Systems Incorporated)
ALDI TALK Verbindungsassistent (Version: ALDI TALK 4.0 - ALDI TALK Verbindungsassistent)
Alien Skin Eye Candy 5 Impact (Version: - )
Alien Skin Eye Candy 5 Nature (Version: - )
Alien Skin Eye Candy 5 Textures (Version: - )
Alien Skin Xenofex 2.0 (Version: - )
Avira Free Antivirus (Version: 14.0.2.344 - Avira)
Broadcom Gigabit Integrated Controller (Version: 10.15.13 - Broadcom Corporation)
Canon Easy-PhotoPrint EX (Version: - )
Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data (Version: - )
Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data (Version: - )
Canon Easy-PhotoPrint Pro (Version: - )
Canon Easy-WebPrint EX (Version: - )
Canon MG6100 series Benutzerregistrierung (Version: - )
Canon MG6100 series MP Drivers (Version: - )
Canon MP Navigator EX 4.0 (Version: - )
Canon My Printer (Version: - )
Canon Solution Menu EX (Version: - )
CD-LabelPrint (Version: - )
Corel Paint Shop Pro Photo X2 (Version: 12.010.0000 - Corel Corporation)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version: - Microsoft)
Eye Candy 4000 (Version: - )
Feven 2.2 (Version: 1.34.1.29 - Feven) <==== ATTENTION
Filters Unlimited 2.0 (Version: - )
FindRight (Version: 2014.02.10.165809 - FindRight)
Google Chrome (HKCU Version: 32.0.1700.107 - Google Inc.)
HDAUDIO Soft Data Fax Modem with SmartCP (Version: - )
HSPA USB MODEM (Version: - Alcatel)
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.02.0000 - Intel(R) Corporation)
Intel® Matrix Storage Manager (Version: - )
ITECIR Driver (Version: 1.00.000 - ITE)
Jasc Paint Shop Pro 8 (Version: 8.03.0000 - Ihr Firmenname)
Launch Manager (Version: - )
LightScribe 1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden
Macromedia Contribute 3 (Version: 3.0.2.2326 - Macromedia, Inc.)
Macromedia Dreamweaver 8 (Version: 8.0.0.2751 - Macromedia)
Macromedia Extension Manager (Version: 1.7.270 - Ihr Firmenname)
Macromedia Fireworks 8 (Version: 8.0.0.777 - Macromedia)
Macromedia Flash 8 (Version: 8.00.0000 - Macromedia)
Macromedia Flash 8 Video Encoder (Version: 1.00.0000 - Macromedia)
Macromedia Flash Player 8 (Version: 8.0.22.0 - Macromedia)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (Version: 08.05.0822 - Microsoft Corporation)
Microsoft_VC80_ATL_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
NTI Backup NOW! 4.7 (Version: 1.00.0000 - NewTech Infosystems)
NTI Backup NOW! 4.7 (Version: 1.00.0000 - NewTech Infosystems) Hidden
NTI CD & DVD-Maker (Version: 7 - NewTech Infosystems)
NTI CD & DVD-Maker (Version: 7 - NewTech Infosystems) Hidden
NVIDIA Drivers (Version: - )
Orion (Version: 1.0.214 - Convesoft)
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
PowerProducer 3.72 (Version: 074117(3.7)_Vista_Acer - CyberLink Corporation)
PxMergeModule (Version: 1.00.0000 - Your Company Name) Hidden
QuickTime (Version: 7.71.80.42 - Apple Inc.)
Realtek High Definition Audio Driver (Version: - )
Re-Markable (Version: - Re-Markable Software)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version: - Microsoft) Hidden
Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB)
Synaptics Pointing Device Driver (Version: 9.1.11.1 - Synaptics)
TeamViewer 6 (Version: 6.0.10722 - TeamViewer GmbH)
Total Commander (Remove or Repair) (Version: 7.56a - Ghisler Software GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version: - Microsoft)
Update for Zip Extractor (HKCU Version: - Update for Zip Extractor) <==== ATTENTION
VO Package (Version: 1.0.0.0 - )
Windows-Treiberpaket - ITE Tech.Inc. (itecir) HIDClass (06/20/2007 5.0.0004.2) (Version: 06/20/2007 5.0.0004.2 - ITE Tech.Inc.)
WinRAR 4.01 (32-Bit) (Version: 4.01.0 - win.rar GmbH)
WinZip 17.5 (Version: 17.5.10480 - WinZip Computing, S.L. )
==================== Restore Points =========================
03-02-2014 17:48:22 Geplanter Prüfpunkt
07-02-2014 17:41:02 Removed iTunes
07-02-2014 17:42:44 Removed Bonjour
07-02-2014 17:45:41 Removed Apple Application Support
07-02-2014 17:46:20 Removed Apple Software Update
07-02-2014 17:46:48 Removed Apple Mobile Device Support
07-02-2014 17:52:06 Windows Update
10-02-2014 14:57:51 Windows-Sicherung
==================== Hosts content: ==========================
2006-11-02 11:23 - 2011-09-05 20:31 - 00437206 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {083AD3AF-5A9F-4BFF-BF1F-C3BEB380521F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)
Task: {12CCBB12-637C-4CDC-8B1D-CA9360CD4B6E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3DBC6445-DD35-48C3-8D8B-EA49937B7DC7} - System32\Tasks\Feven 2.2-enabler => C:\Program Files\Feven 2.2\Feven 2.2-enabler.exe [2014-02-03] (Feven) <==== ATTENTION
Task: {435D411B-6CBB-4AA7-8645-F81F1EAB04AF} - System32\Tasks\Feven 2.2-updater => C:\Program Files\Feven 2.2\Feven 2.2-updater.exe [2014-02-03] (Feven) <==== ATTENTION
Task: {45B9B655-489E-45E9-983F-40B4FC2774B1} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe
Task: {47959508-F62B-4746-902D-BFDE70078EF4} - System32\Tasks\Feven 2.2-codedownloader => C:\Program Files\Feven 2.2\Feven 2.2-codedownloader.exe [2014-02-03] (Feven) <==== ATTENTION
Task: {549AAE77-DC48-4D2D-AC5D-4A008EFAA7B8} - System32\Tasks\AdobeAAMUpdater-1.0-The-Witch-Renate => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {7A8537A5-BC0A-49E0-B6C2-8448B1721FBF} - System32\Tasks\Re-Markable Update => C:\Program Files\Re-Markable\ReMarkableup.exe [2014-01-04] ()
Task: {7BF8D31F-214B-45AC-B445-A2F9EDF7DA8E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2610825137-1899131733-96405576-1000Core => C:\Users\Renate\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-17] (Google Inc.)
Task: {7CF326A5-14C0-4B18-883A-B65763F7291D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2610825137-1899131733-96405576-1000UA => C:\Users\Renate\AppData\Local\Google\Update\GoogleUpdate.exe [2011-10-17] (Google Inc.)
Task: {AA86730A-6BB6-478C-B275-463B5BCCEA1B} - System32\Tasks\Feven 2.2-validator => C:\Program Files\Feven 2.2\Feven 2.2-validator.exe [2014-02-03] (Feven) <==== ATTENTION
Task: {C099F954-EC63-4C3C-AFDB-CA8693B22F44} - System32\Tasks\Digital Sites => C:\Users\Renate\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {E67BF954-40D3-43D5-AF22-451FD38FEA83} - System32\Tasks\Feven 2.2-firefoxinstaller => C:\Program Files\Feven 2.2\Feven 2.2-firefoxinstaller.exe [2014-02-03] (Feven) <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Renate\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-codedownloader.job => C:\Program Files\Feven 2.2\Feven 2.2-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-enabler.job => C:\Program Files\Feven 2.2\Feven 2.2-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-firefoxinstaller.job => C:\Program Files\Feven 2.2\Feven 2.2-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-updater.job => C:\Program Files\Feven 2.2\Feven 2.2-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven 2.2-validator.job => C:\Program Files\Feven 2.2\Feven 2.2-validator.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2610825137-1899131733-96405576-1000Core.job => C:\Users\Renate\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2610825137-1899131733-96405576-1000UA.job => C:\Users\Renate\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Re-Markable Update.job => C:\Program Files\Re-Markable\ReMarkableup.exe
==================== Loaded Modules (whitelisted) =============
2007-04-25 15:30 - 2007-04-25 15:30 - 00063488 _____ () C:\Windows\system32\ShowErrMsg.dll
2007-04-25 15:31 - 2007-04-25 15:31 - 00028672 _____ () C:\Windows\system32\BatchCrypto.dll
2007-08-01 08:19 - 2003-06-07 06:30 - 00057344 _____ () C:\Program Files\Launch Manager\PowerUtl.dll
2007-10-30 18:52 - 2007-10-30 18:52 - 00016200 _____ () C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
2013-07-31 11:12 - 2012-12-10 18:07 - 00110248 _____ () C:\Program Files\HSPA USB MODEM\ModemListener.exe
2013-08-01 07:37 - 2013-08-01 07:39 - 00510520 _____ () C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
2007-08-31 18:41 - 2007-08-31 18:41 - 00385024 _____ () C:\Convesoft\Orion\Core.dll
2007-01-16 10:41 - 2007-01-16 10:41 - 00811008 _____ () C:\Convesoft\Orion\log4cxx.dll
2007-08-31 18:40 - 2007-08-31 18:40 - 00196608 _____ () C:\Convesoft\Orion\d.dll
2007-08-31 18:41 - 2007-08-31 18:41 - 00581632 _____ () C:\Convesoft\Orion\a.dll
2007-08-31 18:40 - 2007-08-31 18:40 - 00172032 _____ () C:\Convesoft\Orion\b.dll
2007-08-31 18:40 - 2007-08-31 18:40 - 00188416 _____ () C:\Convesoft\Orion\c.dll
2014-02-04 21:31 - 2014-02-02 00:42 - 04055368 _____ () C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-04 21:31 - 2014-02-02 00:42 - 00399688 _____ () C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-04 21:31 - 2014-02-02 00:41 - 01634632 _____ () C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-04 21:31 - 2014-02-02 00:42 - 13616456 _____ () C:\Users\Renate\AppData\Local\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: MpKslfacea136
Description: MpKslfacea136
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKslfacea136
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsld417914b
Description: MpKsld417914b
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsld417914b
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl9fb86e6a
Description: MpKsl9fb86e6a
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl9fb86e6a
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl5e69badc
Description: MpKsl5e69badc
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl5e69badc
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl0f11e6af
Description: MpKsl0f11e6af
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl0f11e6af
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl5f2f0e69
Description: MpKsl5f2f0e69
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl5f2f0e69
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl38685676
Description: MpKsl38685676
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl38685676
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsld913f3d5
Description: MpKsld913f3d5
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsld913f3d5
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl124011d6
Description: MpKsl124011d6
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl124011d6
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKslb2a25753
Description: MpKslb2a25753
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKslb2a25753
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl7b878b86
Description: MpKsl7b878b86
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl7b878b86
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl13e58462
Description: MpKsl13e58462
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl13e58462
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKslb7fa71c4
Description: MpKslb7fa71c4
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKslb7fa71c4
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl7cd488c0
Description: MpKsl7cd488c0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl7cd488c0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl012468af
Description: MpKsl012468af
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl012468af
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsle0ed9b68
Description: MpKsle0ed9b68
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsle0ed9b68
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl68304336
Description: MpKsl68304336
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl68304336
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl4d90892b
Description: MpKsl4d90892b
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl4d90892b
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsle3445921
Description: MpKsle3445921
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsle3445921
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKslbec97c0c
Description: MpKslbec97c0c
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKslbec97c0c
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl84f3da6e
Description: MpKsl84f3da6e
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl84f3da6e
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl0219abbc
Description: MpKsl0219abbc
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl0219abbc
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl4dadcfc2
Description: MpKsl4dadcfc2
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl4dadcfc2
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl8ad35669
Description: MpKsl8ad35669
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl8ad35669
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl1f3e812b
Description: MpKsl1f3e812b
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl1f3e812b
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl9396219d
Description: MpKsl9396219d
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl9396219d
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl068c9254
Description: MpKsl068c9254
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl068c9254
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKslcd262ae3
Description: MpKslcd262ae3
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKslcd262ae3
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl58915c7e
Description: MpKsl58915c7e
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl58915c7e
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl262b42d1
Description: MpKsl262b42d1
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl262b42d1
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl99dcd0ef
Description: MpKsl99dcd0ef
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl99dcd0ef
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl76902e18
Description: MpKsl76902e18
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl76902e18
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl5b55719f
Description: MpKsl5b55719f
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl5b55719f
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl2a9edbb1
Description: MpKsl2a9edbb1
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl2a9edbb1
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MpKsl0cda3f08
Description: MpKsl0cda3f08
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl0cda3f08
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (02/10/2014 04:17:56 PM) (Source: MobilityService) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen
Error: (02/08/2014 00:37:23 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
Error: (02/08/2014 00:30:56 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (02/07/2014 06:46:10 PM) (Source: Microsoft-Windows-RestartManager) (User: The-Witch)
Description: Die Anwendung oder der Dienst "Apple Mobile Device" konnte nicht neu gestartet werden.
Error: (02/07/2014 00:32:32 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
Error: (02/07/2014 00:30:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (02/06/2014 05:57:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
Error: (02/06/2014 05:50:45 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (02/06/2014 05:18:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: GenericAskToolbar.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52ebf386
Ausnahmecode: 0xc0000005
Fehleroffset: 0x64febef2
ID des fehlerhaften Prozesses: 0x1718
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3
Error: (02/06/2014 04:29:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.7601.17514, Zeitstempel: 0x4ce792c4
Name des fehlerhaften Moduls: MSIB2D7.tmp, Version: 0.0.0.0, Zeitstempel: 0x52ebf30f
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00018464
ID des fehlerhaften Prozesses: 0xe84
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3
System errors:
=============
Error: (02/10/2014 04:18:00 PM) (Source: Service Control Manager) (User: )
Description: Dienst "MobilityService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (02/07/2014 06:46:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (02/07/2014 06:46:10 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.
Error: (02/04/2014 04:01:00 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (02/04/2014 03:59:18 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (02/03/2014 09:53:35 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (02/03/2014 09:53:35 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (02/03/2014 09:53:35 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (02/03/2014 09:53:35 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (02/03/2014 09:53:35 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Microsoft Office Sessions:
=========================
Error: (02/10/2014 04:17:56 PM) (Source: MobilityService)(User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen
Error: (02/08/2014 00:37:23 AM) (Source: SideBySide)(User: )
Description: c:\program files\Adobe\adobe media encoder cs5\PhotoshopServer.exec:\program files\Adobe\adobe media encoder cs5\PhotoshopServer.exe2
Error: (02/08/2014 00:30:56 AM) (Source: SideBySide)(User: )
Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2
Error: (02/07/2014 06:46:10 PM) (Source: Microsoft-Windows-RestartManager)(User: The-Witch)
Description: 0AppleMobileDeviceService.exeApple Mobile Device03026217816400
Error: (02/07/2014 00:32:32 AM) (Source: SideBySide)(User: )
Description: c:\program files\Adobe\adobe media encoder cs5\PhotoshopServer.exec:\program files\Adobe\adobe media encoder cs5\PhotoshopServer.exe2
Error: (02/07/2014 00:30:13 AM) (Source: SideBySide)(User: )
Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2
Error: (02/06/2014 05:57:14 PM) (Source: SideBySide)(User: )
Description: c:\program files\Adobe\adobe media encoder cs5\PhotoshopServer.exec:\program files\Adobe\adobe media encoder cs5\PhotoshopServer.exe2
Error: (02/06/2014 05:50:45 PM) (Source: SideBySide)(User: )
Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2
Error: (02/06/2014 05:18:43 PM) (Source: Application Error)(User: )
Description: iexplore.exe11.0.9600.16428525b664cGenericAskToolbar.dll_unloaded0.0.0.052ebf386c000000564febef2171801cf235711769454C:\Program Files\Internet Explorer\iexplore.exeGenericAskToolbar.dll583da37d-8f4a-11e3-a398-00a0d1a37e52
Error: (02/06/2014 04:29:21 PM) (Source: Application Error)(User: )
Description: MsiExec.exe5.0.7601.175144ce792c4MSIB2D7.tmp0.0.0.052ebf30fc000041700018464e8401cf2350340c41f1C:\Windows\system32\MsiExec.exeC:\Windows\Installer\MSIB2D7.tmp731d53b3-8f43-11e3-a398-00a0d1a37e52
==================== Memory info ===========================
Percentage of memory in use: 54%
Total physical RAM: 3070.43 MB
Available physical RAM: 1382.2 MB
Total Pagefile: 6139.14 MB
Available Pagefile: 3973.57 MB
Total Virtual: 2047.88 MB
Available Virtual: 1893.32 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:142.29 GB) (Free:44.81 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:298.09 GB) (Free:119.18 GB) NTFS
Drive e: (DATA) (Fixed) (Total:138.79 GB) (Free:134.36 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: C93713A3)
Partition 1: (Not Active) - (Size=14 GB) - (Type=12)
Partition 2: (Active) - (Size=142 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=139 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=3 GB) - (Type=12)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 89CD2DB7)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Das wars erst mal. Ich danke Dir herzlich für Deine Hilfe.
Sei herzlich gegrüßt von
Renate |
FRST 32-Bit | FRST 64-Bit
So funktioniert es:
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
