Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
TR/ATRAPS.Gen2

TR/ATRAPS.Gen2


Log-Analyse und Auswertung: TR/ATRAPS.Gen2

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Seite 1 von 2 1 2
Alt 05.09.2013, 06:36   #1
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Guten Morgen zusammen,

habe seit Montag immer wieder die Meldung von Avira, dass Zugriff auf Datei C:/ProgrammFiles/Google/Desktop/.../80000032.@ verweigert wird, da sie ein Virus enthält. Dieser lässt sich zwar entfernen bzw. in die Quarantäne schieben, die Meldung kommt aber teilweise währenddessen nochmal. Ich konnte zwar ins Internet, aber nicht das Mailfach von Freenet aufrufen, seit gestern abend auch nicht von WEB.de; die Links lassen sich nicht mehr aufrufen, direkte Internetseitenaufrufe gehen. Habe versucht Malware-Software (FRST)runterzuladen, das geht aber nicht zu speichen oder auszuführen, da die Dateien Virus enthalten sollen; kann Avira aber nicht deaktivieren, Echtzeitscanner ist inaktiv. Was kann ich machen? können Sie mir helfen? Kann leider keine Berichte mitsenden, weil ich mich gerade von anderen PC angemeldet habe, um das Konto hier zu aktivieren.

Vielen Dank.

Alt 05.09.2013, 07:21   #2
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 05.09.2013, 07:50   #3
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hi, danke für die Antwort. Das habe ich versucht, geht nicht, weil Avira sich zwischenschaltet:-( Kann ich es über einen USB-stick versuchen?
__________________
Alt 05.09.2013, 10:38   #4
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Avira deaktivieren. Ist eh Müll.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.09.2013, 11:31   #5
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hi, sorry, hat etwas gedauert. Nun ist FRST gelaufen.FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-09-2013
Ran by tavisol at 2013-09-05 12:25:39
Running from F:\
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Reader 9.5.4 - Deutsch (Version: 9.5.4)
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.10.94)
ArcSoft Panorama Maker 4
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Brochures & Flyers
ArcSoft Print Creations - Funhouse II
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Photo Prints
ArcSoft Print Creations - Poster Creator
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ArcSoft Print Creations (Version: 3.0.255.407)
ArcSoft WebCam Companion 3 (Version: 3.0.32.221)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BurnRecovery (Version: 3.0.911.1701)
Catalyst Control Center Core Implementation (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full Existing (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full New (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Light (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Previews Vista (Version: 2009.0729.2227.38498)
Catalyst Control Center InstallProxy (Version: 2009.0729.2227.38498)
Catalyst Control Center Localization All (Version: 2009.0729.2227.38498)
CCC Help Chinese Standard (Version: 2009.0729.2226.38498)
CCC Help English (Version: 2009.0729.2226.38498)
CCC Help French (Version: 2009.0729.2226.38498)
CCC Help German (Version: 2009.0729.2226.38498)
CCC Help Italian (Version: 2009.0729.2226.38498)
CCC Help Japanese (Version: 2009.0729.2226.38498)
CCC Help Portuguese (Version: 2009.0729.2226.38498)
CCC Help Spanish (Version: 2009.0729.2226.38498)
ccc-core-static (Version: 2009.0729.2227.38498)
ccc-utility (Version: 2009.0729.2227.38498)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
File Uploader (Version: 1.1.1)
Java Auto Updater (Version: 2.0.6.1)
Java(TM) 6 Update 29 (Version: 6.0.290)
Junk Mail filter update (Version: 14.0.8089.726)
LingoPad 2.5.1 (Build 325) (Version: 2.5.1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (Arabic) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Basque) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Catalan) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Galician) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (Italian) 2007 (Version: 12.0.4518.1018)
Microsoft Office Proofing (Spanish) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word 2007 Help - Aggiornamento (KB963665)
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
MSI Software Install (Version: 3.0.908.2001)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nikon Message Center (Version: 0.92.000)
Nikon Transfer (Version: 1.3.0)
QuickTime (Version: 7.3.1.70)
Realtek High Definition Audio Driver (Version: 6.0.1.5880)
Realtek USB 2.0 Card Reader (Version: 6.1.7100.30093)
Skype™ 6.6 (Version: 6.6.106)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
System Control Manager (Version: 2.209.0724.004.10)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Toolbar (Version: 14.0.8064.206)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows-Treiberpaket - Ralink Technology, Corp. (netr28) Net  (02/09/2010 3.00.17.0000) (Version: 02/09/2010 3.00.17.0000)
WinRAR archiver
 

==================== Restore Points  =========================

06-08-2013 16:32:21 Windows Update
09-08-2013 17:10:36 Windows Update
14-08-2013 18:47:55 Windows Update
15-08-2013 19:42:42 Windows Update
19-08-2013 17:08:57 Windows Update
19-08-2013 18:08:23 Windows Update
25-08-2013 08:46:09 Windows Update
01-09-2013 10:40:09 Windows Update
02-09-2013 20:39:35 Windows-Sicherung
02-09-2013 21:27:13 Windows Update
02-09-2013 21:58:37 Windows Defender Checkpoint
03-09-2013 17:06:56 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {037C76CC-CFF5-4125-B212-F011A3A06BD4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {16E6912B-146B-4071-AE31-B04500DA5E82} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] ()
Task: {2209BB81-D615-4001-8828-C69F8C0246D0} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {27DAA811-8B31-4FE5-B2EF-4530A3B6FD5C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {A5EC2628-D5EA-49A7-BAC6-8CD7055123BB} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {E23C361B-2054-4613-A138-59BC411518CA} - System32\Tasks\{41E3EFF5-FD8A-4C22-AD84-11B8F041DC2D} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {F04B8420-8D06-4F05-B5D0-A11FC8F26397} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ () C:\Windows\system32\MSWSOCK.dll
2009-12-18 19:25 - 2010-03-18 11:19 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcBmh.dll
2006-09-14 09:20 - 2006-09-14 09:20 - 00126464 _____ () C:\Program Files\WinRAR 3.61 Multi\rarext.dll
2009-12-18 19:19 - 2009-07-17 23:46 - 00007680 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGKBHook.dll
2009-12-18 19:19 - 2009-07-10 01:48 - 00217600 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIWmiAcpi.dll
2010-11-27 21:51 - 2010-10-27 20:17 - 00408128 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\ArcCon.dll
2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ () C:\Windows\system32\mswsock.dll
2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ (Microsoft Corporation) \\.\globalroot\systemroot\system32\mswsock.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00106496 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38572__90ba9c70f846762e\MOM.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38571__90ba9c70f846762e\LOG.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00019456 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38572__90ba9c70f846762e\CCC.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00035328 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagCore.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagPCMac.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00203264 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommon.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00305664 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIEngine.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00154112 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommonET.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00092672 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIInter.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00104960 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIImage.dll
2009-12-18 19:25 - 2008-08-02 00:31 - 00125440 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\magPltfm.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38483__90ba9c70f846762e\CLI.Component.SkinFactory.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38481__90ba9c70f846762e\CLI.Component.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38480__90ba9c70f846762e\AEM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38584__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00339968 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38484__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00098304 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38539__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38558__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38493__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38509__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38537__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38543__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00081920 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38481__90ba9c70f846762e\APM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38479__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00552960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3497.38567__90ba9c70f846762e\CLI.Component.Systemtray.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00405504 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38498__90ba9c70f846762e\CLI.Component.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38499__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00491520 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38578__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ ( ) C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00409600 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38552__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00307200 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38510__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01736704 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38503__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00204800 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01212416 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38489__90ba9c70f846762e\CLI.Component.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00651264 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3497.38603__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38493__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38579__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00196608 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00950272 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38605__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00393216 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00315392 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38538__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00360448 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3497.38525__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00331776 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00573440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38506__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00782336 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38531__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00118784 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/05/2013 00:21:14 PM) (Source: Application Hang) (User: )
Description: Programm avscan.exe, Version 13.6.20.2100 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fd0

Startzeit: 01ceaa2040e3c3ce

Endzeit: 60000

Anwendungspfad: c:\program files\avira\antivir desktop\avscan.exe

Berichts-ID: af7018f9-1614-11e3-bf1b-4061861967c4

Error: (09/05/2013 00:16:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xd8c
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/05/2013 00:15:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/05/2013 00:14:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe98
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/04/2013 11:58:09 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16660 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 738

Startzeit: 01cea9b9292462ce

Endzeit: 15

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (09/04/2013 08:54:32 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (09/04/2013 08:54:32 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{a302a0b3-22ba-11df-bb0e-806e6f6e6963} - 0000010C,0x0053c010,00AE8C78,0,00AEAC88,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (09/03/2013 07:04:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xf68
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/03/2013 07:01:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x274
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/03/2013 07:00:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe80
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3


System errors:
=============
Error: (09/05/2013 00:20:33 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:22 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:19 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:17 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:11 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:11 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:04 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:19:57 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DisplayName" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:19:46 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DisplayName" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:15:03 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 66%
Total physical RAM: 1791.3 MB
Available physical RAM: 594.43 MB
Total Pagefile: 3582.61 MB
Available Pagefile: 2022.62 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.71 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:133.67 GB) (Free:82.74 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:89.11 GB) (Free:86.76 GB) NTFS
Drive f: () (Removable) (Total:7.45 GB) (Free:3.04 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 52ABB8F6)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=100 MB) - (Type=27)
Partition 3: (Active) - (Size=134 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=89 GB) - (Type=07 NTFS)

=====================================================

===
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================


Teil 2

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-09-2013
Ran by tavisol at 2013-09-05 12:25:39
Running from F:\
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Reader 9.5.4 - Deutsch (Version: 9.5.4)
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.10.94)
ArcSoft Panorama Maker 4
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Brochures & Flyers
ArcSoft Print Creations - Funhouse II
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Photo Prints
ArcSoft Print Creations - Poster Creator
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ArcSoft Print Creations (Version: 3.0.255.407)
ArcSoft WebCam Companion 3 (Version: 3.0.32.221)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BurnRecovery (Version: 3.0.911.1701)
Catalyst Control Center Core Implementation (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full Existing (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full New (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Light (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Previews Vista (Version: 2009.0729.2227.38498)
Catalyst Control Center InstallProxy (Version: 2009.0729.2227.38498)
Catalyst Control Center Localization All (Version: 2009.0729.2227.38498)
CCC Help Chinese Standard (Version: 2009.0729.2226.38498)
CCC Help English (Version: 2009.0729.2226.38498)
CCC Help French (Version: 2009.0729.2226.38498)
CCC Help German (Version: 2009.0729.2226.38498)
CCC Help Italian (Version: 2009.0729.2226.38498)
CCC Help Japanese (Version: 2009.0729.2226.38498)
CCC Help Portuguese (Version: 2009.0729.2226.38498)
CCC Help Spanish (Version: 2009.0729.2226.38498)
ccc-core-static (Version: 2009.0729.2227.38498)
ccc-utility (Version: 2009.0729.2227.38498)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
File Uploader (Version: 1.1.1)
Java Auto Updater (Version: 2.0.6.1)
Java(TM) 6 Update 29 (Version: 6.0.290)
Junk Mail filter update (Version: 14.0.8089.726)
LingoPad 2.5.1 (Build 325) (Version: 2.5.1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (Arabic) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Basque) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Catalan) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Galician) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (Italian) 2007 (Version: 12.0.4518.1018)
Microsoft Office Proofing (Spanish) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word 2007 Help - Aggiornamento (KB963665)
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
MSI Software Install (Version: 3.0.908.2001)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nikon Message Center (Version: 0.92.000)
Nikon Transfer (Version: 1.3.0)
QuickTime (Version: 7.3.1.70)
Realtek High Definition Audio Driver (Version: 6.0.1.5880)
Realtek USB 2.0 Card Reader (Version: 6.1.7100.30093)
Skype™ 6.6 (Version: 6.6.106)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
System Control Manager (Version: 2.209.0724.004.10)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Toolbar (Version: 14.0.8064.206)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows-Treiberpaket - Ralink Technology, Corp. (netr28) Net  (02/09/2010 3.00.17.0000) (Version: 02/09/2010 3.00.17.0000)
WinRAR archiver
 

==================== Restore Points  =========================

06-08-2013 16:32:21 Windows Update
09-08-2013 17:10:36 Windows Update
14-08-2013 18:47:55 Windows Update
15-08-2013 19:42:42 Windows Update
19-08-2013 17:08:57 Windows Update
19-08-2013 18:08:23 Windows Update
25-08-2013 08:46:09 Windows Update
01-09-2013 10:40:09 Windows Update
02-09-2013 20:39:35 Windows-Sicherung
02-09-2013 21:27:13 Windows Update
02-09-2013 21:58:37 Windows Defender Checkpoint
03-09-2013 17:06:56 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {037C76CC-CFF5-4125-B212-F011A3A06BD4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {16E6912B-146B-4071-AE31-B04500DA5E82} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] ()
Task: {2209BB81-D615-4001-8828-C69F8C0246D0} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {27DAA811-8B31-4FE5-B2EF-4530A3B6FD5C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {A5EC2628-D5EA-49A7-BAC6-8CD7055123BB} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {E23C361B-2054-4613-A138-59BC411518CA} - System32\Tasks\{41E3EFF5-FD8A-4C22-AD84-11B8F041DC2D} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {F04B8420-8D06-4F05-B5D0-A11FC8F26397} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ () C:\Windows\system32\MSWSOCK.dll
2009-12-18 19:25 - 2010-03-18 11:19 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcBmh.dll
2006-09-14 09:20 - 2006-09-14 09:20 - 00126464 _____ () C:\Program Files\WinRAR 3.61 Multi\rarext.dll
2009-12-18 19:19 - 2009-07-17 23:46 - 00007680 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGKBHook.dll
2009-12-18 19:19 - 2009-07-10 01:48 - 00217600 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIWmiAcpi.dll
2010-11-27 21:51 - 2010-10-27 20:17 - 00408128 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\ArcCon.dll
2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ () C:\Windows\system32\mswsock.dll
2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ (Microsoft Corporation) \\.\globalroot\systemroot\system32\mswsock.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00106496 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38572__90ba9c70f846762e\MOM.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38571__90ba9c70f846762e\LOG.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00019456 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38572__90ba9c70f846762e\CCC.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00035328 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagCore.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagPCMac.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00203264 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommon.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00305664 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIEngine.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00154112 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommonET.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00092672 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIInter.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00104960 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIImage.dll
2009-12-18 19:25 - 2008-08-02 00:31 - 00125440 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\magPltfm.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38483__90ba9c70f846762e\CLI.Component.SkinFactory.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38481__90ba9c70f846762e\CLI.Component.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38480__90ba9c70f846762e\AEM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38584__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00339968 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38484__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00098304 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38539__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38558__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38493__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38509__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38537__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38543__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00081920 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38481__90ba9c70f846762e\APM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38479__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00552960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3497.38567__90ba9c70f846762e\CLI.Component.Systemtray.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00405504 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38498__90ba9c70f846762e\CLI.Component.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38499__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00491520 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38578__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ ( ) C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00409600 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38552__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00307200 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38510__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01736704 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38503__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00204800 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01212416 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38489__90ba9c70f846762e\CLI.Component.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00651264 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3497.38603__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38493__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38579__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00196608 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00950272 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38605__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00393216 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00315392 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38538__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00360448 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3497.38525__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00331776 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00573440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38506__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00782336 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38531__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00118784 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/05/2013 00:21:14 PM) (Source: Application Hang) (User: )
Description: Programm avscan.exe, Version 13.6.20.2100 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fd0

Startzeit: 01ceaa2040e3c3ce

Endzeit: 60000

Anwendungspfad: c:\program files\avira\antivir desktop\avscan.exe

Berichts-ID: af7018f9-1614-11e3-bf1b-4061861967c4

Error: (09/05/2013 00:16:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xd8c
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/05/2013 00:15:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/05/2013 00:14:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe98
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/04/2013 11:58:09 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16660 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 738

Startzeit: 01cea9b9292462ce

Endzeit: 15

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (09/04/2013 08:54:32 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (09/04/2013 08:54:32 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{a302a0b3-22ba-11df-bb0e-806e6f6e6963} - 0000010C,0x0053c010,00AE8C78,0,00AEAC88,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (09/03/2013 07:04:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xf68
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/03/2013 07:01:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x274
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/03/2013 07:00:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe80
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3


System errors:
=============
Error: (09/05/2013 00:20:33 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:22 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:19 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:17 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:11 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:11 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:04 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:19:57 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DisplayName" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:19:46 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DisplayName" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:15:03 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 66%
Total physical RAM: 1791.3 MB
Available physical RAM: 594.43 MB
Total Pagefile: 3582.61 MB
Available Pagefile: 2022.62 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.71 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:133.67 GB) (Free:82.74 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:89.11 GB) (Free:86.76 GB) NTFS
Drive f: () (Removable) (Total:7.45 GB) (Free:3.04 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 52ABB8F6)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=100 MB) - (Type=27)
Partition 3: (Active) - (Size=134 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=89 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================
--- --- ---
Alt 05.09.2013, 13:46   #6
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


und die FRST.txt?
__________________
--> TR/ATRAPS.Gen2

Alt 05.09.2013, 16:16   #7
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hi, sorry, leider kann ich tagsüber nur sporadisch;-) bin auch echt verzweifelt. Bin mir nicht ganz sicher, ob das jetzt DAS ist, was du meinst... Addition-Datei dahinter. oder gibt es noch etwas?! habe auch gerade von der Telekom Post bekommen, dass von hier aus Gehackt wurde:-( Hoffe, es geht zu reparieren:-) Schönen Gruß
FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-09-2013
Ran by tavisol (administrator) on TAVISOL-MSI on 05-09-2013 12:23:49
Running from F:\
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGSysCtrl.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Nikon Corporation) C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIService.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avrestart.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7596576 2009-06-24] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [MGSysCtrl] - C:\Program Files\System Control Manager\MGSysCtrl.exe [2068480 2009-07-24] (Micro-Star International Co., Ltd.)
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [286720 2007-12-11] (Apple Inc.)
HKLM\...\Run: [Nikon Transfer Monitor] - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [485208 2008-09-30] (Nikon Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2011-06-09] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [Ezuhakpuu] - C:\Users\tavisol\AppData\Roaming\Vyunk\tuot.exe [281793 2012-12-09] (Аукегви_=+nUE)
HKCU\...\Run: [Policies] - C:\Users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe [29716 2010-11-20] ()
HKCU\...\Run: [Google Update*] -  [x] <===== ATTENTION (ZeroAccess rootkit hidden path)
Startup: C:\Users\tavisol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.wer-kennt-wen.de/start
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://msi.msn.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {7F77F6B5-4340-4DBA-85AE-481A163DF458} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - {7F77F6B5-4340-4DBA-85AE-481A163DF458} URL = 
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU -&Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 06 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog9 01 mswsock.dll File Not found ()
Winsock: Catalog9 02 mswsock.dll File Not found ()
Winsock: Catalog9 03 mswsock.dll File Not found ()
Winsock: Catalog9 04 mswsock.dll File Not found ()
Winsock: Catalog9 05 mswsock.dll File Not found ()
Winsock: Catalog9 06 mswsock.dll File Not found ()
Winsock: Catalog9 07 mswsock.dll File Not found ()
Winsock: Catalog9 08 mswsock.dll File Not found ()
Winsock: Catalog9 09 mswsock.dll File Not found ()
Winsock: Catalog9 10 mswsock.dll File Not found ()
Winsock: Catalog9 11 mswsock.dll File Not found ()
Winsock: Catalog9 12 mswsock.dll File Not found ()
Winsock: Catalog9 13 mswsock.dll File Not found ()
Winsock: Catalog9 14 mswsock.dll File Not found ()
Winsock: Catalog9 15 mswsock.dll File Not found ()
Winsock: Catalog9 16 mswsock.dll File Not found ()
Winsock: Catalog9 17 mswsock.dll File Not found ()
Winsock: Catalog9 18 mswsock.dll File Not found ()
Winsock: Catalog9 19 mswsock.dll File Not found ()
Winsock: Catalog9 20 mswsock.dll File Not found ()
Winsock: Catalog9 21 mswsock.dll File Not found ()
Winsock: Catalog9 22 mswsock.dll File Not found ()
Winsock: Catalog9 23 mswsock.dll File Not found ()
Winsock: Catalog9 24 mswsock.dll File Not found ()
Winsock: Catalog9 25 mswsock.dll File Not found ()
Winsock: Catalog9 26 mswsock.dll File Not found ()
Winsock: Catalog9 27 mswsock.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (Gmail) - C:\Users\tavisol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-05] (Avira Operations GmbH & Co. KG)
R2 Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [160768 2009-07-10] (Micro-Star International Co., Ltd.)
U2 *etadpug; "C:\Program Files\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\   \...\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [17408 2009-05-27] (ArcSoft, Inc.)
U2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-05] (Avira Operations GmbH & Co. KG)
U1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-04-03] (Avira Operations GmbH & Co. KG)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-02 18:30 - 2013-09-02 20:21 - 00000000 ____D C:\Users\tavisol\Downloads\2013BE-oberland
2013-08-20 18:43 - 2013-09-05 12:09 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Yvnu
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Xenu
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Vyunk
2013-08-19 19:41 - 2013-08-19 19:46 - 00000000 ____D C:\Users\tavisol\Downloads\Alsace2013
2013-08-19 19:37 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-19 19:21 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-19 19:21 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-19 19:20 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-19 19:20 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-19 19:20 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-19 19:20 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-19 19:13 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-19 19:13 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-19 19:13 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-19 19:13 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-19 19:13 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-19 19:12 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-19 19:07 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-19 19:07 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 21:55 - 2013-08-15 22:01 - 00000000 ____D C:\Windows\system32\MRT

==================== One Month Modified Files and Folders =======

2013-09-05 12:22 - 2013-09-05 12:22 - 00000000 ____D C:\FRST
2013-09-05 12:20 - 2012-10-11 19:22 - 00002022 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-09-05 12:19 - 2009-12-18 19:12 - 01512054 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 12:16 - 2013-05-07 22:11 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-05 12:16 - 2012-10-11 19:22 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-05 12:16 - 2010-02-27 17:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-05 12:09 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Yvnu
2013-09-05 12:08 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-05 12:08 - 2009-07-14 06:39 - 00126026 _____ C:\Windows\setupact.log
2013-09-04 23:53 - 2009-07-14 06:34 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-04 23:53 - 2009-07-14 06:34 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-04 23:26 - 2012-04-02 12:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-04 23:03 - 2009-12-18 19:21 - 00355626 _____ C:\Windows\PFRO.log
2013-09-04 23:02 - 2010-02-26 19:51 - 01800385 _____ C:\Windows\WindowsUpdate.log
2013-09-04 20:28 - 2010-02-28 16:38 - 00000000 ____D C:\Program Files\Google
2013-09-03 19:50 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-03 19:12 - 2010-02-26 19:53 - 00000000 ____D C:\Users\tavisol
2013-09-03 19:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-09-03 19:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-09-02 22:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-02 20:27 - 2013-07-18 21:39 - 00000000 ____D C:\Users\tavisol\Downloads\Martin
2013-09-02 20:21 - 2013-09-02 18:30 - 00000000 ____D C:\Users\tavisol\Downloads\2013BE-oberland
2013-09-02 19:59 - 2010-02-28 16:38 - 00000000 ____D C:\Users\tavisol\AppData\Local\Google
2013-09-02 18:30 - 2010-05-14 14:43 - 00000020 ____H C:\ProgramData\PKP_DLdu.DAT
2013-08-21 19:27 - 2012-04-02 12:24 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 19:27 - 2011-05-20 21:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Xenu
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Vyunk
2013-08-19 20:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-19 19:46 - 2013-08-19 19:41 - 00000000 ____D C:\Users\tavisol\Downloads\Alsace2013
2013-08-19 19:18 - 2009-12-18 19:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 22:01 - 2013-08-15 21:55 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 21:55 - 2011-11-15 22:28 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

ZeroAccess:
C:\Windows\assembly\GAC\Desktop.ini

Files to move or delete:
====================
ZeroAccess:
C:\Users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}
ZeroAccess:
C:\Program Files\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}
C:\Users\tavisol\AppData\Local\Temp\2SKKKKKKK.exe
C:\Users\tavisol\AppData\Local\Temp\AskSLib.dll
C:\Users\tavisol\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\tavisol\AppData\Local\Temp\GoogleToolbarInstaller.exe
C:\Users\tavisol\AppData\Local\Temp\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\tavisol\AppData\Local\Temp\SearchWithGoogleUpdate.exe
C:\Users\tavisol\AppData\Local\Temp\SkypeSetup.exe
C:\Users\tavisol\AppData\Local\Temp\{FD85FECB-E54F-4C33-9030-1F2A7B6F1E5C}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{F02BA4DA-2801-414C-8E90-9B726CF19EBE}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{A115619B-EF1F-467F-8955-695D90B39406}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{77B084CD-1998-4A36-AB2E-A35D691E6EB5}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{72837D9D-7880-4C2C-80D6-083CF79DAC84}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{7098C094-620B-4F40-AC68-5D27693E4A18}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{6BE7DC98-9519-40F9-8C09-BAE7708C5E3E}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{5B069C26-0132-4894-98F0-1B958BBEAB30}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{4FA2A504-093A-4D7D-9354-FB4906119A74}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{4F6A50A6-B775-442F-AA5D-63E407F6ADEF}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\{3B999D76-4C36-4B62-985E-0CF825E95AA8}\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\tmp0547d5ca\24305530.exe
C:\Users\tavisol\AppData\Local\Temp\Temporary Internet Files\Content.IE5\KMRAJGY7\JavaSetup6u26[1].exe
C:\Users\tavisol\AppData\Local\Temp\F3F0.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\DBDE.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\CA03.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\C330.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\A812.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\A573.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\9DF4.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\6307.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\626B.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\5E07.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\530F.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\4E3F.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\4366.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\3F70.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\2EAE.dir\InstallFlashPlayer.exe
C:\Users\tavisol\AppData\Local\Temp\2C0F.dir\InstallFlashPlayer.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender


LastRegBack: 2013-09-01 13:03

==================== End Of Log ============================
--- --- ---
FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-09-2013
Ran by tavisol at 2013-09-05 12:25:39
Running from F:\
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Reader 9.5.4 - Deutsch (Version: 9.5.4)
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.10.94)
ArcSoft Panorama Maker 4
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Brochures & Flyers
ArcSoft Print Creations - Funhouse II
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Photo Prints
ArcSoft Print Creations - Poster Creator
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ArcSoft Print Creations (Version: 3.0.255.407)
ArcSoft WebCam Companion 3 (Version: 3.0.32.221)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BurnRecovery (Version: 3.0.911.1701)
Catalyst Control Center Core Implementation (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full Existing (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full New (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Light (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Previews Vista (Version: 2009.0729.2227.38498)
Catalyst Control Center InstallProxy (Version: 2009.0729.2227.38498)
Catalyst Control Center Localization All (Version: 2009.0729.2227.38498)
CCC Help Chinese Standard (Version: 2009.0729.2226.38498)
CCC Help English (Version: 2009.0729.2226.38498)
CCC Help French (Version: 2009.0729.2226.38498)
CCC Help German (Version: 2009.0729.2226.38498)
CCC Help Italian (Version: 2009.0729.2226.38498)
CCC Help Japanese (Version: 2009.0729.2226.38498)
CCC Help Portuguese (Version: 2009.0729.2226.38498)
CCC Help Spanish (Version: 2009.0729.2226.38498)
ccc-core-static (Version: 2009.0729.2227.38498)
ccc-utility (Version: 2009.0729.2227.38498)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
File Uploader (Version: 1.1.1)
Java Auto Updater (Version: 2.0.6.1)
Java(TM) 6 Update 29 (Version: 6.0.290)
Junk Mail filter update (Version: 14.0.8089.726)
LingoPad 2.5.1 (Build 325) (Version: 2.5.1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (Arabic) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Basque) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Catalan) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Galician) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (Italian) 2007 (Version: 12.0.4518.1018)
Microsoft Office Proofing (Spanish) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word 2007 Help - Aggiornamento (KB963665)
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
MSI Software Install (Version: 3.0.908.2001)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nikon Message Center (Version: 0.92.000)
Nikon Transfer (Version: 1.3.0)
QuickTime (Version: 7.3.1.70)
Realtek High Definition Audio Driver (Version: 6.0.1.5880)
Realtek USB 2.0 Card Reader (Version: 6.1.7100.30093)
Skype™ 6.6 (Version: 6.6.106)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
System Control Manager (Version: 2.209.0724.004.10)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Toolbar (Version: 14.0.8064.206)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows-Treiberpaket - Ralink Technology, Corp. (netr28) Net  (02/09/2010 3.00.17.0000) (Version: 02/09/2010 3.00.17.0000)
WinRAR archiver
 

==================== Restore Points  =========================

06-08-2013 16:32:21 Windows Update
09-08-2013 17:10:36 Windows Update
14-08-2013 18:47:55 Windows Update
15-08-2013 19:42:42 Windows Update
19-08-2013 17:08:57 Windows Update
19-08-2013 18:08:23 Windows Update
25-08-2013 08:46:09 Windows Update
01-09-2013 10:40:09 Windows Update
02-09-2013 20:39:35 Windows-Sicherung
02-09-2013 21:27:13 Windows Update
02-09-2013 21:58:37 Windows Defender Checkpoint
03-09-2013 17:06:56 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {037C76CC-CFF5-4125-B212-F011A3A06BD4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {16E6912B-146B-4071-AE31-B04500DA5E82} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] ()
Task: {2209BB81-D615-4001-8828-C69F8C0246D0} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {27DAA811-8B31-4FE5-B2EF-4530A3B6FD5C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {A5EC2628-D5EA-49A7-BAC6-8CD7055123BB} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {E23C361B-2054-4613-A138-59BC411518CA} - System32\Tasks\{41E3EFF5-FD8A-4C22-AD84-11B8F041DC2D} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {F04B8420-8D06-4F05-B5D0-A11FC8F26397} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ () C:\Windows\system32\MSWSOCK.dll
2009-12-18 19:25 - 2010-03-18 11:19 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcBmh.dll
2006-09-14 09:20 - 2006-09-14 09:20 - 00126464 _____ () C:\Program Files\WinRAR 3.61 Multi\rarext.dll
2009-12-18 19:19 - 2009-07-17 23:46 - 00007680 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGKBHook.dll
2009-12-18 19:19 - 2009-07-10 01:48 - 00217600 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIWmiAcpi.dll
2010-11-27 21:51 - 2010-10-27 20:17 - 00408128 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\ArcCon.dll
2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ () C:\Windows\system32\mswsock.dll
2011-07-03 17:06 - 2010-11-20 14:19 - 00232448 _____ (Microsoft Corporation) \\.\globalroot\systemroot\system32\mswsock.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00106496 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38572__90ba9c70f846762e\MOM.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38571__90ba9c70f846762e\LOG.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00019456 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38572__90ba9c70f846762e\CCC.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00035328 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagCore.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagPCMac.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00203264 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommon.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00305664 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIEngine.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00154112 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommonET.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00092672 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIInter.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00104960 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIImage.dll
2009-12-18 19:25 - 2008-08-02 00:31 - 00125440 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\magPltfm.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38483__90ba9c70f846762e\CLI.Component.SkinFactory.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38481__90ba9c70f846762e\CLI.Component.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38480__90ba9c70f846762e\AEM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38584__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00339968 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38484__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00098304 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38539__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38558__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38493__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38509__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38537__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38543__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00081920 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38481__90ba9c70f846762e\APM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38479__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00552960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3497.38567__90ba9c70f846762e\CLI.Component.Systemtray.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00405504 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38498__90ba9c70f846762e\CLI.Component.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38499__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00491520 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38578__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ ( ) C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00409600 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38552__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00307200 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38510__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01736704 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38503__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00204800 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01212416 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38489__90ba9c70f846762e\CLI.Component.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00651264 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3497.38603__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38493__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38579__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00196608 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00950272 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38605__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00393216 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00315392 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38538__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00360448 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3497.38525__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00331776 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00573440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38506__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00782336 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38531__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00118784 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/05/2013 00:21:14 PM) (Source: Application Hang) (User: )
Description: Programm avscan.exe, Version 13.6.20.2100 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fd0

Startzeit: 01ceaa2040e3c3ce

Endzeit: 60000

Anwendungspfad: c:\program files\avira\antivir desktop\avscan.exe

Berichts-ID: af7018f9-1614-11e3-bf1b-4061861967c4

Error: (09/05/2013 00:16:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xd8c
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/05/2013 00:15:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x790
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/05/2013 00:14:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe98
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/04/2013 11:58:09 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16660 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 738

Startzeit: 01cea9b9292462ce

Endzeit: 15

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (09/04/2013 08:54:32 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (09/04/2013 08:54:32 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{a302a0b3-22ba-11df-bb0e-806e6f6e6963} - 0000010C,0x0053c010,00AE8C78,0,00AEAC88,4096,[0]).


Vorgang:
   Schattenkopien werden übertragen

Kontext:
   Ausführungskontext: System Provider

Error: (09/03/2013 07:04:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xf68
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/03/2013 07:01:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x274
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3

Error: (09/03/2013 07:00:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0xe80
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3


System errors:
=============
Error: (09/05/2013 00:20:33 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:22 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:19 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:17 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:11 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:11 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:20:04 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:19:57 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DisplayName" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:19:46 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DisplayName" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (09/05/2013 00:15:03 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 66%
Total physical RAM: 1791.3 MB
Available physical RAM: 594.43 MB
Total Pagefile: 3582.61 MB
Available Pagefile: 2022.62 MB
Total Virtual: 2047.88 MB
Available Virtual: 1904.71 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:133.67 GB) (Free:82.74 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:89.11 GB) (Free:86.76 GB) NTFS
Drive f: () (Removable) (Total:7.45 GB) (Free:3.04 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 52ABB8F6)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=100 MB) - (Type=27)
Partition 3: (Active) - (Size=134 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=89 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================
--- --- ---
Alt 06.09.2013, 08:00   #8
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.09.2013, 19:48   #9
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hallo!

Danke für den Link, habe combofix ausgeführt, es kamen noch Avira-Meldungen, aber ist durchgelaufen. Anbei ist die Logfile. Hat es funktioniert? Ich habe bereits meine Passwörter auf einem sauberen PC geändert. Was muss ich weiter machen? Schönen Gruß!

Combofix Logfile:
Code:
ATTFilter
ComboFix 13-09-06.01 - tavisol 06.09.2013  12:36:30.1.1 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.1791.1032 [GMT 2:00]
ausgeführt von:: c:\users\tavisol\Downloads\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\tavisol\AppData\Local\Google\Desktop\Install
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\GoogleUpdate.exe
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\L\00000004.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\L\76603ac3
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\00000008.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\000000cb.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\???\???\???\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\80000000.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\GoogleUpdate.exe
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\L\00000004.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\L\76603ac3
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\00000008.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\000000cb.@
c:\users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\80000000.@
c:\users\tavisol\AppData\Roaming\Vyunk
c:\users\tavisol\AppData\Roaming\Vyunk\tuot.exe
c:\windows\assembly\GAC\Desktop.ini
c:\windows\PFRO.log
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-06 bis 2013-09-06  ))))))))))))))))))))))))))))))
.
.
2013-09-06 10:45 . 2013-09-06 10:49	--------	d-----w-	c:\users\tavisol\AppData\Local\temp
2013-09-06 10:45 . 2013-09-06 10:45	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-09-03 17:29 . 2013-08-06 07:28	7166848	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CAE4AAF8-2479-44F2-A371-30E39AD350C6}\mpengine.dll
2013-08-20 16:43 . 2013-09-06 10:21	--------	d-----w-	c:\users\tavisol\AppData\Roaming\Yvnu
2013-08-20 16:43 . 2013-08-20 16:43	--------	d-----w-	c:\users\tavisol\AppData\Roaming\Xenu
2013-08-19 17:37 . 2013-06-15 03:38	31232	----a-w-	c:\windows\system32\drivers\tssecsrv.sys
2013-08-19 17:21 . 2013-07-06 05:05	1293760	----a-w-	c:\windows\system32\drivers\tcpip.sys
2013-08-19 17:21 . 2013-07-09 04:52	175104	----a-w-	c:\windows\system32\wintrust.dll
2013-08-19 17:21 . 2013-07-09 04:46	140288	----a-w-	c:\windows\system32\cryptsvc.dll
2013-08-19 17:21 . 2013-07-09 04:46	1166848	----a-w-	c:\windows\system32\crypt32.dll
2013-08-19 17:21 . 2013-07-09 04:46	103936	----a-w-	c:\windows\system32\cryptnet.dll
2013-08-19 17:20 . 2013-07-09 05:03	3913664	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-08-19 17:20 . 2013-07-09 05:03	3968960	----a-w-	c:\windows\system32\ntkrnlpa.exe
2013-08-19 17:20 . 2013-07-09 04:53	1289096	----a-w-	c:\windows\system32\ntdll.dll
2013-08-19 17:20 . 2013-07-09 04:50	652800	----a-w-	c:\windows\system32\rpcrt4.dll
2013-08-19 17:07 . 2013-07-25 08:57	1620992	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-08-19 17:07 . 2013-07-19 01:41	2048	----a-w-	c:\windows\system32\tzres.dll
2013-08-15 19:55 . 2013-08-15 20:01	--------	d-----w-	c:\windows\system32\MRT
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-21 17:27 . 2012-04-02 10:24	692104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2013-08-21 17:27 . 2011-05-20 19:14	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Policies"="c:\users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe" [2010-11-20 29716]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-06-24 7596576]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-30 98304]
"MGSysCtrl"="c:\program files\System Control Manager\MGSysCtrl.exe" [2009-07-24 2068480]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2007-12-11 286720]
"Nikon Transfer Monitor"="c:\program files\Common Files\Nikon\Monitor\NkMonitor.exe" [2008-09-30 485208]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-12-19 41208]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
.
c:\users\tavisol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-04 166912]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-13 1343400]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-30 176128]
S2 Micro Star SCM;Micro Star SCM;c:\program files\System Control Manager\MSIService.exe [2009-07-09 160768]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 17408]
S3 netr28;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28.sys [2010-02-09 722720]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-05-22 167936]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 17:27]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.wer-kennt-wen.de/start
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKCU-Run-Ezuhakpuu - c:\users\tavisol\AppData\Roaming\Vyunk\tuot.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\atieclxx.exe
c:\windows\system32\atibtmon.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conhost.exe
c:\program files\Microsoft Office\Office12\ONENOTEM.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
c:\windows\system32\wbem\unsecapp.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-09-06  12:58:00 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-09-06 10:57
.
Vor Suchlauf: 5 Verzeichnis(se), 88.329.273.344 Bytes frei
Nach Suchlauf: 10 Verzeichnis(se), 89.615.216.640 Bytes frei
.
- - End Of File - - 0D5444B9D67DE71A20653E9D92D7092C
--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

Alt 07.09.2013, 07:44   #10
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 07.09.2013, 12:32   #11
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hi, habe eins nach dem anderen ausgeführt, suche jetzt die Berichte zusammen;-) fange aber hinten an...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.8 (09.05.2013:1)
OS: Windows 7 Home Premium x86
Ran by tavisol on 07.09.2013 at 12:54:21,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.09.2013 at 12:57:48,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





undFRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-09-2013
Ran by tavisol at 2013-09-07 13:04:56
Running from F:\
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Reader 9.5.4 - Deutsch (Version: 9.5.4)
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.10.94)
ArcSoft Panorama Maker 4
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Brochures & Flyers
ArcSoft Print Creations - Funhouse II
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Photo Prints
ArcSoft Print Creations - Poster Creator
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ArcSoft Print Creations (Version: 3.0.255.407)
ArcSoft WebCam Companion 3 (Version: 3.0.32.221)
ATI Catalyst Install Manager (Version: 3.0.732.0)
BurnRecovery (Version: 3.0.911.1701)
Catalyst Control Center Core Implementation (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full Existing (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Full New (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Light (Version: 2009.0729.2227.38498)
Catalyst Control Center Graphics Previews Vista (Version: 2009.0729.2227.38498)
Catalyst Control Center InstallProxy (Version: 2009.0729.2227.38498)
Catalyst Control Center Localization All (Version: 2009.0729.2227.38498)
CCC Help Chinese Standard (Version: 2009.0729.2226.38498)
CCC Help English (Version: 2009.0729.2226.38498)
CCC Help French (Version: 2009.0729.2226.38498)
CCC Help German (Version: 2009.0729.2226.38498)
CCC Help Italian (Version: 2009.0729.2226.38498)
CCC Help Japanese (Version: 2009.0729.2226.38498)
CCC Help Portuguese (Version: 2009.0729.2226.38498)
CCC Help Spanish (Version: 2009.0729.2226.38498)
ccc-core-static (Version: 2009.0729.2227.38498)
ccc-utility (Version: 2009.0729.2227.38498)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
File Uploader (Version: 1.1.1)
Java Auto Updater (Version: 2.0.6.1)
Java(TM) 6 Update 29 (Version: 6.0.290)
Junk Mail filter update (Version: 14.0.8089.726)
LingoPad 2.5.1 (Build 325) (Version: 2.5.1)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (Arabic) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Basque) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Catalan) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Galician) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (Italian) 2007 (Version: 12.0.4518.1018)
Microsoft Office Proofing (Spanish) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Suite Activation Assistant (Version: 2.9)
Microsoft Office Word 2007 Help - Aggiornamento (KB963665)
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
MSI Software Install (Version: 3.0.908.2001)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nikon Message Center (Version: 0.92.000)
Nikon Transfer (Version: 1.3.0)
QuickTime (Version: 7.3.1.70)
Realtek High Definition Audio Driver (Version: 6.0.1.5880)
Realtek USB 2.0 Card Reader (Version: 6.1.7100.30093)
Skype™ 6.6 (Version: 6.6.106)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
System Control Manager (Version: 2.209.0724.004.10)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Toolbar (Version: 14.0.8064.206)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows-Treiberpaket - Ralink Technology, Corp. (netr28) Net  (02/09/2010 3.00.17.0000) (Version: 02/09/2010 3.00.17.0000)
WinRAR archiver
 

==================== Restore Points  =========================

09-08-2013 17:10:36 Windows Update
14-08-2013 18:47:55 Windows Update
15-08-2013 19:42:42 Windows Update
19-08-2013 17:08:57 Windows Update
19-08-2013 18:08:23 Windows Update
25-08-2013 08:46:09 Windows Update
01-09-2013 10:40:09 Windows Update
02-09-2013 20:39:35 Windows-Sicherung
02-09-2013 21:27:13 Windows Update
02-09-2013 21:58:37 Windows Defender Checkpoint
03-09-2013 17:06:56 Wiederherstellungsvorgang
06-09-2013 10:33:00 ComboFix created restore point

==================== Hosts content: ==========================

2009-07-14 04:04 - 2013-09-06 12:48 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {037C76CC-CFF5-4125-B212-F011A3A06BD4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {16E6912B-146B-4071-AE31-B04500DA5E82} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe
Task: {2209BB81-D615-4001-8828-C69F8C0246D0} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {27DAA811-8B31-4FE5-B2EF-4530A3B6FD5C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {A5EC2628-D5EA-49A7-BAC6-8CD7055123BB} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {E23C361B-2054-4613-A138-59BC411518CA} - System32\Tasks\{41E3EFF5-FD8A-4C22-AD84-11B8F041DC2D} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {F04B8420-8D06-4F05-B5D0-A11FC8F26397} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2009-12-18 19:19 - 2009-07-10 01:48 - 00217600 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIWmiAcpi.dll
2009-12-18 19:19 - 2009-07-17 23:46 - 00007680 _____ (Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGKBHook.dll
2010-11-27 21:51 - 2010-10-27 20:17 - 00408128 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\ArcCon.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00106496 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38572__90ba9c70f846762e\MOM.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38571__90ba9c70f846762e\LOG.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00019456 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38572__90ba9c70f846762e\CCC.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00035328 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagCore.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00055808 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagPCMac.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00203264 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommon.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00305664 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIEngine.dll
2009-12-18 19:25 - 2009-07-06 23:59 - 00154112 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUICommonET.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00092672 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIInter.dll
2009-12-18 19:25 - 2009-07-06 23:58 - 00104960 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\MagUIImage.dll
2009-12-18 19:25 - 2008-08-02 00:31 - 00125440 _____ (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Bin\magPltfm.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38483__90ba9c70f846762e\CLI.Component.SkinFactory.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00057344 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38481__90ba9c70f846762e\CLI.Component.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38480__90ba9c70f846762e\AEM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38584__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (ATI Technologies Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00339968 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38484__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00098304 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38539__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00077824 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38558__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38493__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38509__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00036864 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00032768 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38537__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38529__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38543__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00081920 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00053248 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00028672 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38481__90ba9c70f846762e\APM.Server.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38479__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00552960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3497.38567__90ba9c70f846762e\CLI.Component.Systemtray.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00405504 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38498__90ba9c70f846762e\CLI.Component.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38499__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00651264 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3497.38603__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00491520 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38578__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00007168 _____ ( ) C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00409600 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38552__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00307200 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38510__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01736704 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38503__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00204800 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 01212416 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38489__90ba9c70f846762e\CLI.Component.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00024576 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38493__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00016384 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00045056 _____ (Advanced Mirco Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38579__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00196608 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38505__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00950272 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38605__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00094208 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38536__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00393216 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38530__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00315392 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38538__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00360448 _____ (Advanced Micro Devices, Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3497.38525__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00331776 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38544__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00573440 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38506__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00782336 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38531__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2009-12-18 19:18 - 2009-12-18 19:18 - 00118784 _____ (Advanced Micro Devices Inc.) C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38577__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 41%
Total physical RAM: 1791.3 MB
Available physical RAM: 1041.12 MB
Total Pagefile: 3582.61 MB
Available Pagefile: 2612.78 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.09 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:133.67 GB) (Free:83.35 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:89.11 GB) (Free:86.76 GB) NTFS
Drive f: () (Removable) (Total:7.45 GB) (Free:3.04 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 52ABB8F6)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=100 MB) - (Type=27)
Partition 3: (Active) - (Size=134 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=89 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================
--- --- ---


AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.002 - Bericht erstellt am 07/09/2013 um 12:47:15
# Updated 01/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : tavisol - TAVISOL-MSI
# Gestartet von : C:\Users\tavisol\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Google Chrome v

[ Datei : C:\Users\tavisol\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1171 octets] - [07/09/2013 12:45:01]
AdwCleaner[S0].txt - [1092 octets] - [07/09/2013 12:47:15]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1152 octets] ##########
--- --- ---

2013/09/07 10:27:57 +0200 TAVISOL-MSI tavisol MESSAGE Starting protection
2013/09/07 10:27:57 +0200 TAVISOL-MSI tavisol MESSAGE Protection started successfully
2013/09/07 10:27:57 +0200 TAVISOL-MSI tavisol MESSAGE Starting IP protection
2013/09/07 10:28:34 +0200 TAVISOL-MSI tavisol MESSAGE IP Protection started successfully
2013/09/07 10:29:05 +0200 TAVISOL-MSI tavisol MESSAGE Starting database refresh
2013/09/07 10:29:05 +0200 TAVISOL-MSI tavisol MESSAGE Stopping IP protection
2013/09/07 10:29:09 +0200 TAVISOL-MSI tavisol MESSAGE IP Protection stopped successfully
2013/09/07 10:29:15 +0200 TAVISOL-MSI tavisol MESSAGE Database refreshed successfully
2013/09/07 10:29:15 +0200 TAVISOL-MSI tavisol MESSAGE Starting IP protection
2013/09/07 10:29:26 +0200 TAVISOL-MSI tavisol MESSAGE IP Protection started successfully
2013/09/07 12:37:07 +0200 TAVISOL-MSI tavisol MESSAGE Starting protection
2013/09/07 12:37:07 +0200 TAVISOL-MSI tavisol MESSAGE Protection started successfully
2013/09/07 12:37:07 +0200 TAVISOL-MSI tavisol MESSAGE Starting IP protection
2013/09/07 12:37:15 +0200 TAVISOL-MSI tavisol MESSAGE IP Protection started successfully
2013/09/07 12:49:10 +0200 TAVISOL-MSI tavisol MESSAGE Starting protection
2013/09/07 12:49:10 +0200 TAVISOL-MSI tavisol MESSAGE Protection started successfully
2013/09/07 12:49:10 +0200 TAVISOL-MSI tavisol MESSAGE Starting IP protection
2013/09/07 12:49:24 +0200 TAVISOL-MSI tavisol MESSAGE IP Protection started successfully

habe ich jetzt alle Berichte? hoffe, doch:-)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.8 (09.05.2013:1)
OS: Windows 7 Home Premium x86
Ran by tavisol on 07.09.2013 at 12:54:21,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.09.2013 at 12:57:48,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 07.09.2013, 21:04   #12
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 08.09.2013, 12:26   #13
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hi, das nimmt ja kein Ende;-)

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b08aa9ba7ac9b549b07de5e89825f454
# engine=15049
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-08 09:29:59
# local_time=2013-09-08 11:29:59 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 80 403220 2858503 0 0
# scanned=24418
# found=0
# cleaned=0
# scan_time=1035
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b08aa9ba7ac9b549b07de5e89825f454
# engine=15049
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-08 11:04:45
# local_time=2013-09-08 01:04:45 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 80 408906 2864189 0 0
# scanned=257686
# found=2
# cleaned=0
# scan_time=5583
sh=2587B2A16644839CBF08F2943FA21CC0C8DD6E5D ft=1 fh=1aeb32f3d5992c2a vn="Win32/Conedex.T trojan" ac=I fn="C:\Qoobox\Quarantine\C\Users\tavisol\AppData\Local\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\2E2F~1\28F0~1\E628~1\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}\U\00000008.@.vir"
sh=90F3D6FF1C80B66B4722EFC332CD70342DFE5C80 ft=1 fh=64df79db96d02fef vn="Win32/Sirefef.EZ trojan" ac=I fn="C:\Qoobox\Quarantine\C\Windows\assembly\GAC\Desktop.ini.vir"

Results of screen317's Security Check version 0.99.72
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware Version 1.75.0.1300
Java(TM) 6 Update 29
Java version out of Date!
Adobe Reader 9 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````

Gleich kommt FRST.

Was ich nicht verstehe, ist: ESET hat 2 Trojaner gefunden, aber nicht gelöscht, oder? ESET sollte deinstalliert und gelöscht werden, wie du sagtest. Was ist mit anderen Downloads? kann ich diese auch runterschmeissen? Du meintest Avira wäre Müll;-), was findest du besser? und was brauche ich noch? Schönen Restsonntag:-)
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-09-2013
Ran by tavisol (administrator) on TAVISOL-MSI on 08-09-2013 13:20:32
Running from F:\
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGSysCtrl.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Nikon Corporation) C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIService.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7596576 2009-06-24] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [MGSysCtrl] - C:\Program Files\System Control Manager\MGSysCtrl.exe [2068480 2009-07-24] (Micro-Star International Co., Ltd.)
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [286720 2007-12-11] (Apple Inc.)
HKLM\...\Run: [Nikon Transfer Monitor] - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [485208 2008-09-30] (Nikon Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2011-06-09] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [Policies] - C:\Users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe [29716 2010-11-20] ()
HKCU\...\Policies\Explorer: [NoDrives] 0
Startup: C:\Users\tavisol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trojaner-board.de/141025-...ps-gen2-2.html
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7F77F6B5-4340-4DBA-85AE-481A163DF458} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - {7F77F6B5-4340-4DBA-85AE-481A163DF458} URL = 
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU -&Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (Gmail) - C:\Users\tavisol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [160768 2009-07-10] (Micro-Star International Co., Ltd.)
S4 RemoteAccess; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S2 WinDefend; %ProgramFiles%\Windows Defender\mpsvc.dll [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [17408 2009-05-27] (ArcSoft, Inc.)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\tavisol\AppData\Local\Temp\catchme.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-07 13:04 - 2013-09-07 13:04 - 00000000 ____D C:\FRST
2013-09-07 13:03 - 2013-09-07 13:03 - 01081887 _____ (Farbar) C:\Users\tavisol\Downloads\FRST.exe
2013-09-07 12:57 - 2013-09-07 12:57 - 00000627 _____ C:\Users\tavisol\Desktop\JRT.txt
2013-09-07 12:54 - 2013-09-07 12:54 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 12:53 - 2013-09-07 12:53 - 01028823 _____ (Thisisu) C:\Users\tavisol\Downloads\JRT.exe
2013-09-07 12:44 - 2013-09-07 12:47 - 00000000 ____D C:\AdwCleaner
2013-09-07 12:43 - 2013-09-07 12:43 - 01037222 _____ C:\Users\tavisol\Downloads\adwcleaner.exe
2013-09-07 12:36 - 2013-09-07 12:36 - 00002234 _____ C:\Windows\PFRO.log
2013-09-07 10:27 - 2013-09-07 10:27 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-07 10:27 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-07 10:24 - 2013-09-07 10:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tavisol\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-06 12:58 - 2013-09-06 12:58 - 00011145 _____ C:\ComboFix.txt
2013-09-06 12:32 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-06 12:32 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-06 12:32 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-06 12:27 - 2013-09-06 12:58 - 00000000 ____D C:\Qoobox
2013-09-06 12:27 - 2013-09-06 12:54 - 00000000 ____D C:\Windows\erdnt
2013-09-06 12:26 - 2013-09-06 12:26 - 05120615 ____R (Swearware) C:\Users\tavisol\Downloads\ComboFix.exe
2013-09-05 17:20 - 2013-09-05 12:26 - 00043940 _____ C:\Users\tavisol\Desktop\Addition.txt
2013-09-05 17:20 - 2013-09-05 12:26 - 00021463 _____ C:\Users\tavisol\Desktop\FRST.txt
2013-09-02 18:30 - 2013-09-02 20:21 - 00000000 ____D C:\Users\tavisol\Downloads\2013BE-oberland
2013-08-20 18:43 - 2013-09-06 12:21 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Yvnu
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Xenu
2013-08-19 19:41 - 2013-08-19 19:46 - 00000000 ____D C:\Users\tavisol\Downloads\Alsace2013
2013-08-19 19:37 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-19 19:21 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-19 19:21 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-19 19:20 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-19 19:20 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-19 19:20 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-19 19:20 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-19 19:13 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-19 19:13 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-19 19:13 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-19 19:13 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-19 19:13 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-19 19:12 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-19 19:07 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-19 19:07 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 21:55 - 2013-08-15 22:01 - 00000000 ____D C:\Windows\system32\MRT

==================== One Month Modified Files and Folders =======

2013-09-08 13:14 - 2013-09-08 13:14 - 00891115 _____ C:\Users\tavisol\Downloads\SecurityCheck.exe
2013-09-08 12:53 - 2010-02-26 19:51 - 01900844 _____ C:\Windows\WindowsUpdate.log
2013-09-08 12:26 - 2012-04-02 12:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-08 11:07 - 2009-07-14 06:34 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-08 11:07 - 2009-07-14 06:34 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-08 11:00 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-08 11:00 - 2009-07-14 06:39 - 00126698 _____ C:\Windows\setupact.log
2013-09-07 13:04 - 2013-09-07 13:04 - 00000000 ____D C:\FRST
2013-09-07 13:03 - 2013-09-07 13:03 - 01081887 _____ (Farbar) C:\Users\tavisol\Downloads\FRST.exe
2013-09-07 12:57 - 2013-09-07 12:57 - 00000627 _____ C:\Users\tavisol\Desktop\JRT.txt
2013-09-07 12:54 - 2013-09-07 12:54 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 12:53 - 2013-09-07 12:53 - 01028823 _____ (Thisisu) C:\Users\tavisol\Downloads\JRT.exe
2013-09-07 12:47 - 2013-09-07 12:44 - 00000000 ____D C:\AdwCleaner
2013-09-07 12:43 - 2013-09-07 12:43 - 01037222 _____ C:\Users\tavisol\Downloads\adwcleaner.exe
2013-09-07 12:36 - 2013-09-07 12:36 - 00002234 _____ C:\Windows\PFRO.log
2013-09-07 12:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\L2Schemas
2013-09-07 10:27 - 2013-09-07 10:27 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-07 10:25 - 2013-09-07 10:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tavisol\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-06 12:58 - 2013-09-06 12:58 - 00011145 _____ C:\ComboFix.txt
2013-09-06 12:58 - 2013-09-06 12:27 - 00000000 ____D C:\Qoobox
2013-09-06 12:58 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2013-09-06 12:58 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-09-06 12:54 - 2013-09-06 12:27 - 00000000 ____D C:\Windows\erdnt
2013-09-06 12:48 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-06 12:26 - 2013-09-06 12:26 - 05120615 ____R (Swearware) C:\Users\tavisol\Downloads\ComboFix.exe
2013-09-06 12:21 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Yvnu
2013-09-05 12:26 - 2013-09-05 17:20 - 00043940 _____ C:\Users\tavisol\Desktop\Addition.txt
2013-09-05 12:26 - 2013-09-05 17:20 - 00021463 _____ C:\Users\tavisol\Desktop\FRST.txt
2013-09-05 12:19 - 2009-12-18 19:12 - 01512054 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-04 20:28 - 2010-02-28 16:38 - 00000000 ____D C:\Program Files\Google
2013-09-03 19:50 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-03 19:12 - 2010-02-26 19:53 - 00000000 ____D C:\Users\tavisol
2013-09-03 19:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-09-03 19:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-09-02 22:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-02 20:27 - 2013-07-18 21:39 - 00000000 ____D C:\Users\tavisol\Downloads\Martin
2013-09-02 20:21 - 2013-09-02 18:30 - 00000000 ____D C:\Users\tavisol\Downloads\2013BE-oberland
2013-09-02 19:59 - 2010-02-28 16:38 - 00000000 ____D C:\Users\tavisol\AppData\Local\Google
2013-09-02 18:30 - 2010-05-14 14:43 - 00000020 ____H C:\ProgramData\PKP_DLdu.DAT
2013-08-21 19:27 - 2012-04-02 12:24 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 19:27 - 2011-05-20 21:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Xenu
2013-08-19 20:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-19 19:46 - 2013-08-19 19:41 - 00000000 ____D C:\Users\tavisol\Downloads\Alsace2013
2013-08-19 19:18 - 2009-12-18 19:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 22:01 - 2013-08-15 21:55 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 21:55 - 2011-11-15 22:28 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
ZeroAccess:
C:\Program Files\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}
C:\Users\tavisol\AppData\Local\Temp\Quarantine.exe
C:\Users\tavisol\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 13:03

==================== End Of Log ============================
--- --- ---

--- --- ---

Alt 09.09.2013, 05:55   #14
schrauber
/// the machine
/// TB-Ausbilder
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Avast oder Emsisoft. ESET Funde sind schon in Quarantäne.
Java und Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKCU\...\Run: [Policies] - C:\Users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe [29716 2010-11-20] ()
C:\Users\tavisol\AppData\Roaming\dsitwuji
2013-08-20 18:43 - 2013-09-06 12:21 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Yvnu
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Xenu
ZeroAccess:
C:\Program Files\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}
C:\Users\tavisol\AppData\Local\Temp\Quarantine.exe
C:\Users\tavisol\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 09.09.2013, 16:23   #15
tavisol
 
TR/ATRAPS.Gen2 - Standard

TR/ATRAPS.Gen2


Hallo:-)

habe Avast installiert, JAVA+Adobe upgedatet und FRST fix gemacht. War´s das etwa? ;-) Gruß

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 05-09-2013
Ran by tavisol at 2013-09-09 17:07:55 Run:1
Running from F:\
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKCU\...\Run: [Policies] - C:\Users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe [29716 2010-11-20] ()
C:\Users\tavisol\AppData\Roaming\dsitwuji
2013-08-20 18:43 - 2013-09-06 12:21 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Yvnu
2013-08-20 18:43 - 2013-08-20 18:43 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Xenu
ZeroAccess:
C:\Program Files\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96}
C:\Users\tavisol\AppData\Local\Temp\Quarantine.exe
C:\Users\tavisol\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Policies => Value deleted successfully.

"C:\Users\tavisol\AppData\Roaming\dsitwuji" directory move:

Could not move "C:\Users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe" => Scheduled to move on reboot.
C:\Users\tavisol\AppData\Roaming\dsitwuji\dsitwuji => Moved successfully.
Could not move "C:\Users\tavisol\AppData\Roaming\dsitwuji" directory. => Scheduled to move on reboot.

C:\Users\tavisol\AppData\Roaming\Yvnu => Moved successfully.
C:\Users\tavisol\AppData\Roaming\Xenu => Moved successfully.
C:\Program Files\Google\Desktop\Install\{896bed8a-271c-cbc9-bcb1-7f1d07ef8d96} => Moved successfully.
C:\Users\tavisol\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\tavisol\AppData\Local\Temp\jrt\erunt\ERUNT.EXE => Moved successfully.

=========== Result of Scheduled Files to move ===========

C:\Users\tavisol\AppData\Roaming\dsitwuji\daicejsv.exe => Moved successfully.
"C:\Users\tavisol\AppData\Roaming\dsitwuji" => Directory could not move.

==== End of Fixlog ====


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-09-2013
Ran by tavisol (administrator) on TAVISOL-MSI on 09-09-2013 17:21:10
Running from F:\
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MGSysCtrl.exe
(Nikon Corporation) C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Micro-Star International Co., Ltd.) C:\Program Files\System Control Manager\MSIService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7596576 2009-06-24] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [MGSysCtrl] - C:\Program Files\System Control Manager\MGSysCtrl.exe [2068480 2009-07-24] (Micro-Star International Co., Ltd.)
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [286720 2007-12-11] (Apple Inc.)
HKLM\...\Run: [Nikon Transfer Monitor] - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [485208 2008-09-30] (Nikon Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Policies\Explorer: [NoDrives] 0
Startup: C:\Users\tavisol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trojaner-board.de/141025-...ps-gen2-2.html
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7F77F6B5-4340-4DBA-85AE-481A163DF458} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - {7F77F6B5-4340-4DBA-85AE-481A163DF458} URL = 
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -&Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (Gmail) - C:\Users\tavisol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [160768 2009-07-10] (Micro-Star International Co., Ltd.)
S4 RemoteAccess; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S2 WinDefend; %ProgramFiles%\Windows Defender\mpsvc.dll [x]

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [17408 2009-05-27] (ArcSoft, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\tavisol\AppData\Local\Temp\catchme.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-09 17:03 - 2013-09-09 17:03 - 00000532 _____ C:\Users\tavisol\Desktop\fixlist.txt
2013-09-09 16:49 - 2013-09-09 16:49 - 00002085 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-09 16:49 - 2013-08-30 09:48 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-09-09 16:49 - 2013-08-30 09:48 - 00061680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-09-09 16:49 - 2013-08-30 09:48 - 00029816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-09-09 16:48 - 2013-08-30 09:48 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-09-09 16:48 - 2013-08-30 09:48 - 00177864 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-09-09 16:48 - 2013-08-30 09:48 - 00066336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-09-09 16:48 - 2013-08-30 09:48 - 00056080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-09-09 16:48 - 2013-08-30 09:48 - 00049376 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-09-09 16:48 - 2013-08-30 09:47 - 00229648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-09-09 16:47 - 2013-09-09 16:47 - 00000000 ____D C:\Program Files\AVAST Software
2013-09-09 16:47 - 2013-08-30 09:47 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-09-09 16:46 - 2013-09-09 16:47 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-09 12:18 - 2013-09-09 16:45 - 131918888 _____ C:\Users\tavisol\Downloads\avast_free_antivirus_setup.exe
2013-09-09 12:18 - 2013-09-09 12:18 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-09 12:17 - 2013-09-09 12:17 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-09 12:17 - 2013-09-09 12:17 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-09 12:17 - 2013-09-09 12:17 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-09 12:17 - 2013-09-09 12:17 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-09 12:17 - 2013-09-09 12:17 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-09-09 12:14 - 2013-09-09 12:14 - 00903080 _____ (Oracle Corporation) C:\Users\tavisol\Downloads\JavaSetup7u25.exe
2013-09-09 12:11 - 2013-09-09 12:11 - 00001999 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-09-09 12:11 - 2013-09-09 12:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-09-08 13:14 - 2013-09-08 13:14 - 00891115 _____ C:\Users\tavisol\Downloads\SecurityCheck.exe
2013-09-07 13:04 - 2013-09-09 17:12 - 00000000 ____D C:\FRST
2013-09-07 13:03 - 2013-09-07 13:03 - 01081887 _____ (Farbar) C:\Users\tavisol\Downloads\FRST.exe
2013-09-07 12:57 - 2013-09-07 12:57 - 00000627 _____ C:\Users\tavisol\Desktop\JRT.txt
2013-09-07 12:54 - 2013-09-07 12:54 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 12:53 - 2013-09-07 12:53 - 01028823 _____ (Thisisu) C:\Users\tavisol\Downloads\JRT.exe
2013-09-07 12:44 - 2013-09-07 12:47 - 00000000 ____D C:\AdwCleaner
2013-09-07 12:43 - 2013-09-07 12:43 - 01037222 _____ C:\Users\tavisol\Downloads\adwcleaner.exe
2013-09-07 12:36 - 2013-09-09 17:09 - 00004088 _____ C:\Windows\PFRO.log
2013-09-07 10:27 - 2013-09-07 10:27 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-07 10:27 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-07 10:24 - 2013-09-07 10:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tavisol\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-06 12:58 - 2013-09-06 12:58 - 00011145 _____ C:\ComboFix.txt
2013-09-06 12:32 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-06 12:32 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-06 12:32 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-06 12:32 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-06 12:27 - 2013-09-06 12:58 - 00000000 ____D C:\Qoobox
2013-09-06 12:27 - 2013-09-06 12:54 - 00000000 ____D C:\Windows\erdnt
2013-09-06 12:26 - 2013-09-06 12:26 - 05120615 ____R (Swearware) C:\Users\tavisol\Downloads\ComboFix.exe
2013-09-05 17:20 - 2013-09-05 12:26 - 00043940 _____ C:\Users\tavisol\Desktop\Addition.txt
2013-09-05 17:20 - 2013-09-05 12:26 - 00021463 _____ C:\Users\tavisol\Desktop\FRST.txt
2013-09-02 18:30 - 2013-09-02 20:21 - 00000000 ____D C:\Users\tavisol\Downloads\2013BE-oberland
2013-08-19 19:41 - 2013-08-19 19:46 - 00000000 ____D C:\Users\tavisol\Downloads\Alsace2013
2013-08-19 19:37 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-19 19:21 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-19 19:21 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-19 19:21 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-19 19:20 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-19 19:20 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-19 19:20 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-19 19:20 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-19 19:13 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-19 19:13 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-19 19:13 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-19 19:13 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-19 19:13 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-19 19:13 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-19 19:13 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-19 19:12 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-19 19:07 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-19 19:07 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 21:55 - 2013-08-15 22:01 - 00000000 ____D C:\Windows\system32\MRT

==================== One Month Modified Files and Folders =======

2013-09-09 17:18 - 2009-07-14 06:34 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-09 17:18 - 2009-07-14 06:34 - 00017600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-09 17:12 - 2013-09-07 13:04 - 00000000 ____D C:\FRST
2013-09-09 17:12 - 2011-07-03 17:07 - 00000000 __SHD C:\Users\tavisol\AppData\Roaming\dsitwuji
2013-09-09 17:11 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-09 17:11 - 2009-07-14 06:39 - 00127146 _____ C:\Windows\setupact.log
2013-09-09 17:09 - 2013-09-07 12:36 - 00004088 _____ C:\Windows\PFRO.log
2013-09-09 17:08 - 2010-02-26 19:51 - 01991424 _____ C:\Windows\WindowsUpdate.log
2013-09-09 17:03 - 2013-09-09 17:03 - 00000532 _____ C:\Users\tavisol\Desktop\fixlist.txt
2013-09-09 16:49 - 2013-09-09 16:49 - 00002085 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-09-09 16:48 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt
2013-09-09 16:47 - 2013-09-09 16:47 - 00000000 ____D C:\Program Files\AVAST Software
2013-09-09 16:47 - 2013-09-09 16:46 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-09 16:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-09-09 16:45 - 2013-09-09 12:18 - 131918888 _____ C:\Users\tavisol\Downloads\avast_free_antivirus_setup.exe
2013-09-09 16:44 - 2012-04-02 12:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-09 12:18 - 2013-09-09 12:18 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-09 12:17 - 2013-09-09 12:17 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-09 12:17 - 2013-09-09 12:17 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-09 12:17 - 2013-09-09 12:17 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-09 12:17 - 2013-09-09 12:17 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-09 12:17 - 2013-09-09 12:17 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-09-09 12:17 - 2011-07-14 07:26 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-09 12:17 - 2011-07-14 07:26 - 00000000 ____D C:\Program Files\Java
2013-09-09 12:14 - 2013-09-09 12:14 - 00903080 _____ (Oracle Corporation) C:\Users\tavisol\Downloads\JavaSetup7u25.exe
2013-09-09 12:12 - 2010-02-26 20:53 - 00000000 ____D C:\Users\tavisol\AppData\Local\Adobe
2013-09-09 12:11 - 2013-09-09 12:11 - 00001999 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-09-09 12:11 - 2013-09-09 12:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-09-09 12:11 - 2011-10-21 21:08 - 00000000 ____D C:\Program Files\Adobe
2013-09-09 12:11 - 2010-02-26 20:20 - 00000000 ____D C:\ProgramData\Adobe
2013-09-08 21:52 - 2012-05-31 20:37 - 00000000 ____D C:\Users\tavisol\Documents\BD
2013-09-08 13:14 - 2013-09-08 13:14 - 00891115 _____ C:\Users\tavisol\Downloads\SecurityCheck.exe
2013-09-07 13:03 - 2013-09-07 13:03 - 01081887 _____ (Farbar) C:\Users\tavisol\Downloads\FRST.exe
2013-09-07 12:57 - 2013-09-07 12:57 - 00000627 _____ C:\Users\tavisol\Desktop\JRT.txt
2013-09-07 12:54 - 2013-09-07 12:54 - 00000000 ____D C:\Windows\ERUNT
2013-09-07 12:53 - 2013-09-07 12:53 - 01028823 _____ (Thisisu) C:\Users\tavisol\Downloads\JRT.exe
2013-09-07 12:47 - 2013-09-07 12:44 - 00000000 ____D C:\AdwCleaner
2013-09-07 12:43 - 2013-09-07 12:43 - 01037222 _____ C:\Users\tavisol\Downloads\adwcleaner.exe
2013-09-07 12:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\L2Schemas
2013-09-07 10:27 - 2013-09-07 10:27 - 00001077 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Users\tavisol\AppData\Roaming\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-07 10:27 - 2013-09-07 10:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-07 10:25 - 2013-09-07 10:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tavisol\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-06 12:58 - 2013-09-06 12:58 - 00011145 _____ C:\ComboFix.txt
2013-09-06 12:58 - 2013-09-06 12:27 - 00000000 ____D C:\Qoobox
2013-09-06 12:58 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2013-09-06 12:58 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-09-06 12:54 - 2013-09-06 12:27 - 00000000 ____D C:\Windows\erdnt
2013-09-06 12:48 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-06 12:26 - 2013-09-06 12:26 - 05120615 ____R (Swearware) C:\Users\tavisol\Downloads\ComboFix.exe
2013-09-05 12:26 - 2013-09-05 17:20 - 00043940 _____ C:\Users\tavisol\Desktop\Addition.txt
2013-09-05 12:26 - 2013-09-05 17:20 - 00021463 _____ C:\Users\tavisol\Desktop\FRST.txt
2013-09-05 12:19 - 2009-12-18 19:12 - 01512054 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-04 20:28 - 2010-02-28 16:38 - 00000000 ____D C:\Program Files\Google
2013-09-03 19:50 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-03 19:12 - 2010-02-26 19:53 - 00000000 ____D C:\Users\tavisol
2013-09-03 19:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-09-03 19:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-09-02 22:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-02 20:27 - 2013-07-18 21:39 - 00000000 ____D C:\Users\tavisol\Downloads\Martin
2013-09-02 20:21 - 2013-09-02 18:30 - 00000000 ____D C:\Users\tavisol\Downloads\2013BE-oberland
2013-09-02 19:59 - 2010-02-28 16:38 - 00000000 ____D C:\Users\tavisol\AppData\Local\Google
2013-09-02 18:30 - 2010-05-14 14:43 - 00000020 ____H C:\ProgramData\PKP_DLdu.DAT
2013-08-30 09:48 - 2013-09-09 16:49 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-09-09 16:49 - 00061680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-09-09 16:49 - 00029816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:48 - 2013-09-09 16:48 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-09-09 16:48 - 00177864 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-09-09 16:48 - 00066336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-09-09 16:48 - 00056080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-09-09 16:48 - 00049376 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:47 - 2013-09-09 16:48 - 00229648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2013-09-09 16:47 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-21 19:27 - 2012-04-02 12:24 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 19:27 - 2011-05-20 21:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-19 20:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-19 19:46 - 2013-08-19 19:41 - 00000000 ____D C:\Users\tavisol\Downloads\Alsace2013
2013-08-19 19:18 - 2009-12-18 19:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 22:01 - 2013-08-15 21:55 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 21:55 - 2011-11-15 22:28 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 13:03

==================== End Of Log ============================
--- --- ---

--- --- ---

Antwort
Seite 1 von 2 1 2

Themen zu TR/ATRAPS.Gen2
anderen, angemeldet, avira, datei, dateien, deaktivieren, entfernen, free, freenet, guten, internet, internetseite, konto, links, meldung, nicht mehr, quarantäne, scan, scanner, seite, senden, tr/atraps.gen, tr/atraps.gen2 tr/atraps.gen windows vista, virus, zugriff, zusammen


« Zeus/ZBot laut Telekom Abuse-Brief, der dritte Rechner XP | Programm UniPDF --> Nach Programmdownload Schädlingsbefall & gesamtes System (XP) & Firefox langsam »


Ähnliche Themen: TR/ATRAPS.Gen2


  1. Trojaner: tr/atraps.gen2, tr/atraps.gen, tr/atraps.gen3, tr/atraps.gen4, tr/atraps.gen5, tr/atraps.gen7 und services.exe virus
    Plagegeister aller Art und deren Bekämpfung - 11.01.2013 (29)
  2. TR/ATRAPS.Gen und TR/ATRAPS.Gen2 von Avira gemeldet und dort nicht zu entfernen
    Log-Analyse und Auswertung - 10.10.2012 (13)
  3. TR/ATRAPS.Gen2 und TR/ATRAPS.Gen wird alle paar Minuten von Antivir gemeldet
    Plagegeister aller Art und deren Bekämpfung - 21.08.2012 (22)
  4. Antivir meldet TR/ATRAPS.Gen2 und TR/ATRAPS.Gen angebl. Shockwave Installation
    Log-Analyse und Auswertung - 17.08.2012 (5)
  5. Avira: 800000cb.@ TR/ATRAPS.Gen und TR/ATRAPS.Gen2 in C:\Windows\Installer\.. und weitere Pfaden
    Plagegeister aller Art und deren Bekämpfung - 16.08.2012 (25)
  6. antivir meldet alle paar minuten den fund TR/ATRAPS.Gen und TR/ATRAPS.Gen2
    Log-Analyse und Auswertung - 01.08.2012 (4)
  7. Von Avira gefundene Trojaner - TR/Crypt.ZPACK.Gen, TR/ATRAPS.Gen, TR/ATRAPS.Gen2 und BDS/ZAccess.T
    Log-Analyse und Auswertung - 27.07.2012 (25)
  8. Viren,BDS/ZAccess.T,TR/ATRAPS.gen,TR/ATRAPS.gen2 in C:/Dokumente/Einstellungen/Administrator..
    Alles rund um Windows - 22.07.2012 (1)
  9. TR/Atraps.gen - TR/Atraps.gen2 - BDS/ZAccess.T - über AVIRA Antivirus entdeckt
    Plagegeister aller Art und deren Bekämpfung - 19.07.2012 (4)
  10. Trojaner Atraps.Gen, Atraps.Gen2 und Sirefef.AB.20 - gelöscht, aber auch sicher?
    Log-Analyse und Auswertung - 14.07.2012 (23)
  11. TR/ATRAPS.GEN, TR/ATRAPS.Gen2 6 seit ein paar Minuten auch noch ein Sirefef.P.528
    Plagegeister aller Art und deren Bekämpfung - 13.07.2012 (1)
  12. Antivir findet 4 Trojaner: TR/ATRAPS.Gen, TR/ATRAPS.Gen2, Sirefef.P.342, Dldr.Phdet.E.41
    Log-Analyse und Auswertung - 11.07.2012 (1)
  13. TR/ATRAPS.GEN, TR/ATRAPS.GEN2 in C:\Windows\Installer\{...} und JAVA/Dldr.Lamar.CI
    Mülltonne - 09.07.2012 (2)
  14. Nach Befall tr/atraps.gen tr/atraps.gen2 formatiert - Computer startet selbständig neu
    Log-Analyse und Auswertung - 09.07.2012 (1)
  15. Virus (Rootkit.0Access, TR/ATRAPS.Gen, TR/ATRAPS.Gen2) entfernt; tatsächlich clean?
    Plagegeister aller Art und deren Bekämpfung - 04.07.2012 (7)
  16. Und noch einer: Trojaner TR/ATRAPS.Gen2 und TR/ATRAPS.Gen und W32/Patched.UA HILFE!!!
    Log-Analyse und Auswertung - 28.06.2012 (7)
  17. Antivir meldet ständig wiederholten Fund von TR/ATRAPS.Gen, TR/ATRAPS.Gen2
    Plagegeister aller Art und deren Bekämpfung - 03.06.2012 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema TR/ATRAPS.Gen2 - Guten Morgen zusammen, habe seit Montag immer wieder die Meldung von Avira, dass Zugriff auf Datei C:/ProgrammFiles/Google/Desktop/.../80000032.@ verweigert wird, da sie ein Virus enthält. Dieser lässt sich zwar entfernen bzw. - TR/ATRAPS.Gen2...
Archiv
Du betrachtest: TR/ATRAPS.Gen2 auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129