| |
| |||||||
Log-Analyse und Auswertung: Virus National ZoomWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
17.12.2013, 14:53
| #1 |
| |  Virus National Zoom ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=c5ca5b9dfd87104b8ccd4b47beadc8a7 # engine=16292 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-17 12:49:23 # local_time=2013-12-17 01:49:23 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776574 100 94 10332796 138914413 0 0 # scanned=453915 # found=8 # cleaned=7 # scan_time=18838 sh=781F4FF9E7A03A9CCD4C9DFA5579F176BC5F5AB1 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.A application" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.3_0\yl.js" sh=E726D8BAED9714F2CCF9E8EE01DA76F32716870A ft=1 fh=3a4d9e1ea77ed494 vn="a variant of Win32/SpeedingUpMyPC application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe" sh=DDD2974F59F7DBB2C99557C05FB33787C7B27748 ft=1 fh=b62022df389e395a vn="a variant of Win32/Adware.SpeedingUpMyPC.C application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe" sh=A87B7647DC34B5B6186209377786E946B677C574 ft=1 fh=c2834f18f25710d9 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Peter\AppData\Local\Temp\{B7F529F5-CB1D-45AE-84CE-0A65CBCEC4A1}\setup.exe" sh=CB2FF168D7D47FD7DD433F97EDCF98BCFDB469D4 ft=0 fh=0000000000000000 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Peter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\517d8a42-79c7067e" sh=046E7B67C8A37F08D41F62F1EAE2D6ED3B4AFA8B ft=0 fh=0000000000000000 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Peter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\29e35203-1e381f47" sh=3B5B332096326A69DFF1BBE7AD55C4B3E274C8C6 ft=0 fh=0000000000000000 vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Peter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\5d7701b6-70453667" sh=781F4FF9E7A03A9CCD4C9DFA5579F176BC5F5AB1 ft=0 fh=0000000000000000 vn="JS/Adware.Yontoo.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\System32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.3_0\yl.js" FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2013 01
Ran by Peter (administrator) on PETER-PC on 17-12-2013 14:44:40
Running from C:\Users\Peter\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Optimizer Pro\OptProCrash.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WButton.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe
(Wistron) C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-05] (Intel(R) Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Microsoft] - C:\Program Files (x86)\MSBuild\Microsoft\MSServices.lnk [818 2012-07-14] ()
HKCU\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [134648 2013-10-28] ()
HKCU\...\Winlogon: [Shell] explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
HKCU\...\Policies\system: [NoDispCPL] 0
HKCU\...\Policies\Explorer: [NoInstrumentation] 1
HKCU\...\Policies\Explorer: [NoSetTaskbar] 0
MountPoints2: {4f074593-2ab2-11e3-87e2-bc773720077d} - G:\setup.exe
MountPoints2: {ce70016b-fc2c-11e1-aaeb-806e6f6e6963} - E:\Setup.exe
MountPoints2: {ec1868e0-02aa-11e1-946a-bc773720077d} - F:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {ec1868e8-02aa-11e1-946a-bc773720077d} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [Wbutton] - C:\Program Files (x86)\Launch Manager\WButton.exe [436264 2010-06-21] (Wistron Corp.)
HKLM-x32\...\Run: [LMgrVolOSD] - C:\Program Files (x86)\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM-x32\...\Run: [HotkeyApp] - C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [207400 2010-12-15] (Wistron)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs
HKU\NeroMediaHomeUser.4\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\NeroMediaHomeUser.4\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs
AppInit_DLLs: C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll [1791384 2012-03-12] (Bandoo Media, inc)
AppInit_DLLs-x32: c:\progra~2\search~1\datamngr\datamngr.dll c:\progra~2\search~1\datamngr\iebho.dll c:\progra~2\optimi~1\optpro~1.dll [2869720 2013-10-29] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=e6159275-8d6e-4f93-a4d5-08e40075301b&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Nation Zoom
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=e6159275-8d6e-4f93-a4d5-08e40075301b&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Nation Zoom
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Nation Zoom
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Nation Zoom
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Nation Zoom
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe Nation Zoom
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=109&systemid=431&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=e6159275-8d6e-4f93-a4d5-08e40075301b&searchtype=ds&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=161&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=109&systemid=431&sr=0&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2431} URL =
BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media, inc)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
BHO-x32: AOL Deutschland Toolbar Loader - {2d3b1910-86c2-4d4b-b1db-124b3ea35bef} - C:\Program Files (x86)\AOL Deutschland Toolbar\aoldetb.dll (AOL Inc.)
BHO-x32: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM - No Name - !{567d4d94-8077-4682-b887-945f3d644116} - No File
Toolbar: HKLM - No Name - !{8dcb7100-df86-4384-8842-8fa844297b3f} - No File
Toolbar: HKLM - No Name - !{95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM - No Name - !{977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File
Toolbar: HKLM - No Name - !{D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - No Name - !{567d4d94-8077-4682-b887-945f3d644116} - No File
Toolbar: HKLM-x32 - No Name - !{8dcb7100-df86-4384-8842-8fa844297b3f} - No File
Toolbar: HKLM-x32 - No Name - !{95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM-x32 - No Name - !{977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File
Toolbar: HKLM-x32 - No Name - !{D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKLM-x32 - AOL Deutschland Toolbar - {567d4d94-8077-4682-b887-945f3d644116} - C:\Program Files (x86)\AOL Deutschland Toolbar\aoldetb.dll (AOL Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @viewpoint.com/VMP - C:\Program Files (x86)\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Peter\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Peter\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Extension: ftdownloader - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
Chrome:
=======
CHR HomePage: hxxp://www.nationzoom.com/?type=hp&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX
CHR RestoreOnStartup: "hxxp://www.nationzoom.com/?type=hp&ts=1387159673&from=tugs&uid=HitachiXHTS547575A9E384_J2540054GGTL7EGGTL7EX"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (AVG Internet Security) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (D'Fusion @Home Web Plug-In (3.10.17859)) - C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll No File
CHR Plugin: (MetaStream 3 Plugin) - C:\Program Files (x86)\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Peter\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Extended Protection) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0
CHR Extension: (Google Search) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Skype Click to Call) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Nation Zoom
==================== Services (Whitelisted) =================
R2 70e6ca8c; C:\Program Files (x86)\Optimizer Pro\OptProCrash.exe [143488 2013-12-16] ()
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-05] ()
S4 NeroMediaHomeService.4; C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-03-08] (Nero AG)
S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-12-14] ()
S4 VMCService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [9216 2009-09-11] (Vodafone)
R3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2009-10-23] (Wistron Corp.)
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)
S2 HitmanPro37CrusaderBoot; "F:\HitmanPro_x64.exe" /crusader:boot [x]
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-01] (DT Soft Ltd)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)
S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [1077416 2010-09-16] (DiBcom SA)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [32792 2009-05-13] (X10 Wireless Technology, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-17 14:44 - 2013-12-17 14:45 - 00027755 _____ C:\Users\Peter\Desktop\FRST.txt
2013-12-17 14:44 - 2013-12-17 14:44 - 00000000 ____D C:\FRST
2013-12-17 14:43 - 2013-12-17 14:43 - 01928078 _____ (Farbar) C:\Users\Peter\Desktop\FRST64.exe
2013-12-17 14:41 - 2013-12-17 14:41 - 01928078 _____ (Farbar) C:\Users\Peter\Downloads\FRST64.exe
2013-12-17 08:33 - 2013-12-17 08:33 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-17 07:25 - 2013-12-17 07:25 - 00093533 _____ C:\Users\Peter\Desktop\HP Installationsfehler beheben – Netzwerk.hta
2013-12-17 05:31 - 2013-12-17 05:31 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-12-17 05:08 - 2013-12-17 05:08 - 00007481 _____ C:\Windows\Scan.ini
2013-12-16 18:47 - 2013-12-16 18:47 - 00000093 _____ C:\Users\Peter\AppData\Local\fusioncache.dat
2013-12-16 17:39 - 2013-12-16 17:39 - 00282024 _____ C:\Windows\Minidump\121613-52431-01.dmp
2013-12-16 17:06 - 2013-12-16 17:06 - 00281880 _____ C:\Windows\Minidump\121613-48672-01.dmp
2013-12-16 03:48 - 2013-12-16 03:48 - 00281832 _____ C:\Windows\Minidump\121613-158309-01.dmp
2013-12-16 03:14 - 2013-12-16 03:14 - 00281880 _____ C:\Windows\Minidump\121613-64397-01.dmp
2013-12-16 03:11 - 2013-12-17 05:11 - 00000000 ____D C:\Users\Peter\Documents\Optimizer Pro
2013-12-16 03:10 - 2013-12-16 03:10 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Optimizer Pro
2013-12-16 03:09 - 2013-12-17 13:48 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-12-16 03:09 - 2013-12-16 18:48 - 00000000 ____D C:\ProgramData\WPM
2013-12-16 03:09 - 2013-12-16 18:47 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-16 03:09 - 2013-12-16 03:09 - 00001030 _____ C:\Users\Peter\Desktop\Optimizer Pro.lnk
2013-12-16 03:04 - 2013-12-16 03:04 - 00518976 _____ C:\Users\Peter\Downloads\ccleaner.exe
2013-12-15 17:19 - 2013-12-15 17:21 - 00000060 _____ C:\Users\Peter\Desktop\tipps.txt
2013-12-15 03:42 - 2013-12-15 03:42 - 00178633 _____ C:\Users\Peter\Desktop\Joghurt's Techblog Wansview NC541-W Setup.htm
2013-12-15 03:42 - 2013-12-15 03:42 - 00000000 ____D C:\Users\Peter\Desktop\Joghurt's Techblog Wansview NC541-W Setup-Dateien
2013-12-14 20:11 - 2013-12-14 20:11 - 00010305 _____ C:\Users\Peter\Desktop\Abrechnung Catryn 29-10-2013.xlsx
2013-12-14 03:19 - 2013-12-14 03:19 - 00282064 _____ C:\Windows\Minidump\121413-80652-01.dmp
2013-12-12 18:28 - 2013-12-12 20:22 - 00000000 ____D C:\Program Files\IPCMonitor_en
2013-12-12 18:28 - 2013-12-12 18:28 - 00000000 ____D C:\Program Files (x86)\IPCMonitor_en
2013-12-12 16:32 - 2013-12-12 16:33 - 00281904 _____ C:\Windows\Minidump\121213-65676-01.dmp
2013-12-11 03:12 - 2013-12-11 03:12 - 00281880 _____ C:\Windows\Minidump\121113-71339-01.dmp
2013-12-03 16:40 - 2013-12-03 16:40 - 00281872 _____ C:\Windows\Minidump\120313-115830-01.dmp
2013-12-03 03:03 - 2013-12-03 03:03 - 00281848 _____ C:\Windows\Minidump\120313-63866-01.dmp
2013-12-03 02:26 - 2013-12-03 02:26 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ceefc6aa728c40.job
2013-12-02 04:29 - 2013-11-25 15:17 - 00210193 _____ C:\Users\Peter\Desktop\Konto Posthaus 2012.xlsx
2013-12-02 04:29 - 2013-11-15 13:21 - 00141582 _____ C:\Users\Peter\Desktop\Konto Posthaus 2013.xlsx
2013-12-02 04:29 - 2013-11-15 13:21 - 00141582 _____ C:\Users\Peter\Desktop\Konto Posthaus 2012-2013.xlsx
2013-12-02 04:29 - 2013-11-13 06:42 - 00135710 _____ C:\Users\Peter\Desktop\Konto Posthaus 2011.xlsm
2013-12-02 04:29 - 2013-11-13 06:42 - 00122680 _____ C:\Users\Peter\Desktop\Konto Posthaus 2010.xlsm
2013-12-02 03:06 - 2013-12-02 03:06 - 00282168 _____ C:\Windows\Minidump\120213-64553-01.dmp
2013-11-29 05:00 - 2013-11-29 05:01 - 00281848 _____ C:\Windows\Minidump\112913-70559-01.dmp
2013-11-28 03:19 - 2013-11-28 03:19 - 00281840 _____ C:\Windows\Minidump\112813-60185-01.dmp
2013-11-27 21:37 - 2013-11-27 21:37 - 00281848 _____ C:\Windows\Minidump\112713-66581-01.dmp
2013-11-24 16:34 - 2013-11-24 16:34 - 00000000 ___RD C:\Users\Peter\Desktop\APPLICATION
2013-11-24 16:30 - 2013-11-24 16:30 - 00000000 ___RD C:\Users\Peter\Desktop\2013-11-24
2013-11-24 14:14 - 2013-11-24 16:30 - 00000000 ___RD C:\Users\Peter\Desktop\2013-11-23
2013-11-23 10:39 - 2013-11-23 10:40 - 00000000 ____D C:\Users\Peter\Desktop\i-Phone
2013-11-23 04:48 - 2013-11-23 04:49 - 00281904 _____ C:\Windows\Minidump\112313-76986-01.dmp
2013-11-21 03:07 - 2013-11-21 03:07 - 00283104 _____ C:\Windows\Minidump\112113-65114-01.dmp
2013-11-20 16:45 - 2013-11-20 16:45 - 00006616 _____ C:\Users\Peter\Desktop\Windows-Kompatibilitätsbericht.htm
2013-11-20 16:37 - 2013-11-20 16:53 - 00002562 _____ C:\Windows\diagwrn.xml
2013-11-20 16:37 - 2013-11-20 16:53 - 00001908 _____ C:\Windows\diagerr.xml
2013-11-20 16:36 - 2013-11-20 16:36 - 00000000 ____D C:\Windows\system32\EventProviders
2013-11-20 06:14 - 2013-11-20 06:14 - 00889416 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\dotNetFx40_Full_setup (2).exe
2013-11-20 06:13 - 2013-11-20 06:13 - 00889416 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\dotNetFx40_Full_setup.exe
2013-11-20 06:13 - 2013-11-20 06:13 - 00889416 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\dotNetFx40_Full_setup (1).exe
2013-11-20 06:04 - 2013-11-20 06:04 - 24277024 _____ (Microsoft) C:\Users\Peter\Downloads\dotnetfx (1).exe
2013-11-20 06:03 - 2013-11-20 06:04 - 24277024 _____ (Microsoft) C:\Users\Peter\Downloads\dotnetfx.exe
2013-11-20 05:43 - 2013-11-20 05:43 - 00280204 _____ C:\Users\Peter\Downloads\WindowsUpdateDiagnostic.diagcab
2013-11-20 05:30 - 2013-11-20 05:30 - 00347304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\MicrosoftFixit.wu.RNP.6330834772255127.5.1.Run.exe
2013-11-20 05:10 - 2013-11-20 05:10 - 00347304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\MicrosoftFixit.wu.FISC.6330834772255127.1.2.Run.exe
2013-11-20 05:09 - 2013-11-20 05:09 - 00347304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\MicrosoftFixit.wu.FISC.6330834772255127.1.1.Run.exe
2013-11-20 05:04 - 2013-11-20 05:04 - 00985600 _____ C:\Users\Peter\Downloads\MicrosoftFixit50123.msi
2013-11-20 02:38 - 2013-11-20 02:38 - 00282072 _____ C:\Windows\Minidump\112013-43181-01.dmp
2013-11-19 04:37 - 2013-11-19 04:38 - 00281840 _____ C:\Windows\Minidump\111913-63757-01.dmp
2013-11-19 03:14 - 2013-12-17 03:15 - 00396984 _____ C:\Windows\IE11_main.log
2013-11-18 03:39 - 2013-11-18 03:39 - 00274152 _____ C:\Windows\Minidump\111813-50684-01.dmp
2013-11-17 17:26 - 2013-11-17 17:27 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-17 06:27 - 2013-11-17 06:27 - 00281840 _____ C:\Windows\Minidump\111713-53321-01.dmp
2013-11-17 05:36 - 2013-11-17 05:36 - 00875304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\NetFxRepairTool.exe
2013-11-17 05:04 - 2013-11-17 05:05 - 00282128 _____ C:\Windows\Minidump\111713-55692-01.dmp
2013-11-17 03:04 - 2013-11-17 03:04 - 00282160 _____ C:\Windows\Minidump\111713-62962-01.dmp
==================== One Month Modified Files and Folders =======
2013-12-17 14:45 - 2013-12-17 14:44 - 00027755 _____ C:\Users\Peter\Desktop\FRST.txt
2013-12-17 14:44 - 2013-12-17 14:44 - 00000000 ____D C:\FRST
2013-12-17 14:43 - 2013-12-17 14:43 - 01928078 _____ (Farbar) C:\Users\Peter\Desktop\FRST64.exe
2013-12-17 14:41 - 2013-12-17 14:41 - 01928078 _____ (Farbar) C:\Users\Peter\Downloads\FRST64.exe
2013-12-17 14:36 - 2012-05-08 20:33 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-17 14:24 - 2011-09-11 08:38 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-17 14:00 - 2011-09-11 08:36 - 01908394 _____ C:\Windows\WindowsUpdate.log
2013-12-17 13:48 - 2013-12-16 03:09 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro
2013-12-17 13:21 - 2011-10-09 22:30 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2178155218-1004089860-1406755679-1000UA.job
2013-12-17 09:02 - 2013-09-16 16:44 - 00000000 ____D C:\ProgramData\MFAData
2013-12-17 08:33 - 2013-12-17 08:33 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-17 07:25 - 2013-12-17 07:25 - 00093533 _____ C:\Users\Peter\Desktop\HP Installationsfehler beheben – Netzwerk.hta
2013-12-17 07:25 - 2011-10-04 17:59 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-17 05:31 - 2013-12-17 05:31 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-12-17 05:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-17 05:12 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-17 05:12 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-17 05:11 - 2013-12-16 03:11 - 00000000 ____D C:\Users\Peter\Documents\Optimizer Pro
2013-12-17 05:08 - 2013-12-17 05:08 - 00007481 _____ C:\Windows\Scan.ini
2013-12-17 04:59 - 2012-09-21 21:05 - 00000000 ____D C:\Users\Peter\Desktop\Protest
2013-12-17 04:59 - 2012-02-01 17:56 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Afikqi
2013-12-17 04:59 - 2011-11-27 05:12 - 00000000 ____D C:\Users\Peter\Autoca
2013-12-17 04:59 - 2011-10-20 17:17 - 00000000 ____D C:\Users\Peter\Documents\Youcam
2013-12-17 03:15 - 2013-11-19 03:14 - 00396984 _____ C:\Windows\IE11_main.log
2013-12-17 03:12 - 2013-06-18 02:04 - 02284042 _____ C:\Windows\IE10_main.log
2013-12-17 03:02 - 2013-01-14 21:41 - 00397220 _____ C:\Windows\msxml4-KB2758694-enu.LOG
2013-12-16 21:09 - 2013-04-12 20:33 - 00004155 _____ C:\Windows\setupact.log
2013-12-16 21:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-16 21:08 - 2010-11-21 04:47 - 00151740 _____ C:\Windows\PFRO.log
2013-12-16 19:21 - 2011-10-09 22:30 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2178155218-1004089860-1406755679-1000Core.job
2013-12-16 18:48 - 2013-12-16 03:09 - 00000000 ____D C:\ProgramData\WPM
2013-12-16 18:47 - 2013-12-16 18:47 - 00000093 _____ C:\Users\Peter\AppData\Local\fusioncache.dat
2013-12-16 18:47 - 2013-12-16 03:09 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-12-16 18:47 - 2011-09-11 08:44 - 00000000 ___RD C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-16 17:39 - 2013-12-16 17:39 - 00282024 _____ C:\Windows\Minidump\121613-52431-01.dmp
2013-12-16 17:39 - 2011-10-24 18:47 - 00000000 ____D C:\Windows\Minidump
2013-12-16 17:06 - 2013-12-16 17:06 - 00281880 _____ C:\Windows\Minidump\121613-48672-01.dmp
2013-12-16 03:50 - 2009-07-14 05:45 - 05151408 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-16 03:48 - 2013-12-16 03:48 - 00281832 _____ C:\Windows\Minidump\121613-158309-01.dmp
2013-12-16 03:39 - 2013-10-01 17:29 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-16 03:39 - 2012-12-21 23:56 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
2013-12-16 03:38 - 2011-09-11 08:45 - 00174240 _____ C:\Users\Peter\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-16 03:14 - 2013-12-16 03:14 - 00281880 _____ C:\Windows\Minidump\121613-64397-01.dmp
2013-12-16 03:10 - 2013-12-16 03:10 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Optimizer Pro
2013-12-16 03:09 - 2013-12-16 03:09 - 00001030 _____ C:\Users\Peter\Desktop\Optimizer Pro.lnk
2013-12-16 03:09 - 2011-09-11 08:44 - 00001665 _____ C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-16 03:09 - 2011-09-11 08:44 - 00001643 _____ C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-12-16 03:04 - 2013-12-16 03:04 - 00518976 _____ C:\Users\Peter\Downloads\ccleaner.exe
2013-12-15 17:21 - 2013-12-15 17:19 - 00000060 _____ C:\Users\Peter\Desktop\tipps.txt
2013-12-15 09:34 - 2011-04-24 00:02 - 00711716 _____ C:\Windows\system32\perfh007.dat
2013-12-15 09:34 - 2011-04-24 00:02 - 00154670 _____ C:\Windows\system32\perfc007.dat
2013-12-15 09:34 - 2009-07-14 06:13 - 01653174 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-15 03:42 - 2013-12-15 03:42 - 00178633 _____ C:\Users\Peter\Desktop\Joghurt's Techblog Wansview NC541-W Setup.htm
2013-12-15 03:42 - 2013-12-15 03:42 - 00000000 ____D C:\Users\Peter\Desktop\Joghurt's Techblog Wansview NC541-W Setup-Dateien
2013-12-14 20:11 - 2013-12-14 20:11 - 00010305 _____ C:\Users\Peter\Desktop\Abrechnung Catryn 29-10-2013.xlsx
2013-12-14 12:43 - 2011-09-22 04:28 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Apple Computer
2013-12-14 04:27 - 2011-09-22 04:25 - 00000000 ____D C:\Users\Peter\AppData\Local\Apple
2013-12-14 04:17 - 2012-12-01 22:15 - 00000000 ____D C:\Users\Peter\Desktop\01-12-2012
2013-12-14 03:19 - 2013-12-14 03:19 - 00282064 _____ C:\Windows\Minidump\121413-80652-01.dmp
2013-12-14 03:06 - 2013-08-15 02:11 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 03:02 - 2011-04-24 00:44 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 03:15 - 2011-09-11 10:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 20:22 - 2013-12-12 18:28 - 00000000 ____D C:\Program Files\IPCMonitor_en
2013-12-12 18:28 - 2013-12-12 18:28 - 00000000 ____D C:\Program Files (x86)\IPCMonitor_en
2013-12-12 16:33 - 2013-12-12 16:32 - 00281904 _____ C:\Windows\Minidump\121213-65676-01.dmp
2013-12-11 03:12 - 2013-12-11 03:12 - 00281880 _____ C:\Windows\Minidump\121113-71339-01.dmp
2013-12-03 16:40 - 2013-12-03 16:40 - 00281872 _____ C:\Windows\Minidump\120313-115830-01.dmp
2013-12-03 03:03 - 2013-12-03 03:03 - 00281848 _____ C:\Windows\Minidump\120313-63866-01.dmp
2013-12-03 03:03 - 2011-09-11 08:43 - 00000000 ____D C:\Users\Peter
2013-12-03 02:26 - 2013-12-03 02:26 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ceefc6aa728c40.job
2013-12-02 20:27 - 2011-04-24 12:51 - 00000000 ____D C:\Program Files (x86)\Launch Manager
2013-12-02 03:06 - 2013-12-02 03:06 - 00282168 _____ C:\Windows\Minidump\120213-64553-01.dmp
2013-11-29 05:01 - 2013-11-29 05:00 - 00281848 _____ C:\Windows\Minidump\112913-70559-01.dmp
2013-11-28 03:19 - 2013-11-28 03:19 - 00281840 _____ C:\Windows\Minidump\112813-60185-01.dmp
2013-11-27 21:37 - 2013-11-27 21:37 - 00281848 _____ C:\Windows\Minidump\112713-66581-01.dmp
2013-11-25 15:17 - 2013-12-02 04:29 - 00210193 _____ C:\Users\Peter\Desktop\Konto Posthaus 2012.xlsx
2013-11-25 02:01 - 2013-06-02 08:44 - 00000000 ____D C:\Users\Peter\Desktop\02-06-2013
2013-11-24 16:34 - 2013-11-24 16:34 - 00000000 ___RD C:\Users\Peter\Desktop\APPLICATION
2013-11-24 16:30 - 2013-11-24 16:30 - 00000000 ___RD C:\Users\Peter\Desktop\2013-11-24
2013-11-24 16:30 - 2013-11-24 14:14 - 00000000 ___RD C:\Users\Peter\Desktop\2013-11-23
2013-11-24 09:05 - 2012-02-15 19:46 - 00000000 ____D C:\Users\Peter\Desktop\Bilder aus dem internet
2013-11-23 10:40 - 2013-11-23 10:39 - 00000000 ____D C:\Users\Peter\Desktop\i-Phone
2013-11-23 04:49 - 2013-11-23 04:48 - 00281904 _____ C:\Windows\Minidump\112313-76986-01.dmp
2013-11-21 03:07 - 2013-11-21 03:07 - 00283104 _____ C:\Windows\Minidump\112113-65114-01.dmp
2013-11-20 16:53 - 2013-11-20 16:37 - 00002562 _____ C:\Windows\diagwrn.xml
2013-11-20 16:53 - 2013-11-20 16:37 - 00001908 _____ C:\Windows\diagerr.xml
2013-11-20 16:53 - 2013-04-12 20:33 - 00000000 _____ C:\Windows\setuperr.log
2013-11-20 16:45 - 2013-11-20 16:45 - 00006616 _____ C:\Users\Peter\Desktop\Windows-Kompatibilitätsbericht.htm
2013-11-20 16:36 - 2013-11-20 16:36 - 00000000 ____D C:\Windows\system32\EventProviders
2013-11-20 16:35 - 2013-10-01 17:37 - 00000000 ____D C:\Users\Peter\AppData\Roaming\DAEMON Tools Lite
2013-11-20 16:35 - 2013-10-01 17:36 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-11-20 06:23 - 2012-02-01 17:25 - 01631068 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-20 06:14 - 2013-11-20 06:14 - 00889416 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\dotNetFx40_Full_setup (2).exe
2013-11-20 06:13 - 2013-11-20 06:13 - 00889416 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\dotNetFx40_Full_setup.exe
2013-11-20 06:13 - 2013-11-20 06:13 - 00889416 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\dotNetFx40_Full_setup (1).exe
2013-11-20 06:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-20 06:04 - 2013-11-20 06:04 - 24277024 _____ (Microsoft) C:\Users\Peter\Downloads\dotnetfx (1).exe
2013-11-20 06:04 - 2013-11-20 06:03 - 24277024 _____ (Microsoft) C:\Users\Peter\Downloads\dotnetfx.exe
2013-11-20 05:43 - 2013-11-20 05:43 - 00280204 _____ C:\Users\Peter\Downloads\WindowsUpdateDiagnostic.diagcab
2013-11-20 05:30 - 2013-11-20 05:30 - 00347304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\MicrosoftFixit.wu.RNP.6330834772255127.5.1.Run.exe
2013-11-20 05:10 - 2013-11-20 05:10 - 00347304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\MicrosoftFixit.wu.FISC.6330834772255127.1.2.Run.exe
2013-11-20 05:09 - 2013-11-20 05:09 - 00347304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\MicrosoftFixit.wu.FISC.6330834772255127.1.1.Run.exe
2013-11-20 05:04 - 2013-11-20 05:04 - 00985600 _____ C:\Users\Peter\Downloads\MicrosoftFixit50123.msi
2013-11-20 02:38 - 2013-11-20 02:38 - 00282072 _____ C:\Windows\Minidump\112013-43181-01.dmp
2013-11-19 04:38 - 2013-11-19 04:37 - 00281840 _____ C:\Windows\Minidump\111913-63757-01.dmp
2013-11-18 03:39 - 2013-11-18 03:39 - 00274152 _____ C:\Windows\Minidump\111813-50684-01.dmp
2013-11-17 17:27 - 2013-11-17 17:26 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-17 17:27 - 2013-11-16 01:34 - 00000000 ____D C:\Program Files\iTunes
2013-11-17 17:27 - 2013-11-16 01:34 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-17 17:27 - 2013-10-25 20:04 - 00001747 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-17 06:27 - 2013-11-17 06:27 - 00281840 _____ C:\Windows\Minidump\111713-53321-01.dmp
2013-11-17 05:36 - 2013-11-17 05:36 - 00875304 _____ (Microsoft Corporation) C:\Users\Peter\Downloads\NetFxRepairTool.exe
2013-11-17 05:05 - 2013-11-17 05:04 - 00282128 _____ C:\Windows\Minidump\111713-55692-01.dmp
2013-11-17 04:15 - 2012-05-08 20:33 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-17 04:15 - 2011-10-04 20:00 - 00000000 ____D C:\Users\Peter\AppData\Local\Adobe
2013-11-17 04:15 - 2011-09-22 15:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-17 03:04 - 2013-11-17 03:04 - 00282160 _____ C:\Windows\Minidump\111713-62962-01.dmp
Files to move or delete:
====================
C:\Users\Peter\AppData\Roaming\cache.ini
Some content of TEMP:
====================
C:\Users\Peter\AppData\Local\Temp\autorun.dll
C:\Users\Peter\AppData\Local\Temp\BackupSetup.exe
C:\Users\Peter\AppData\Local\Temp\de_ww_Package.exe
C:\Users\Peter\AppData\Local\Temp\EAD23F4.exe
C:\Users\Peter\AppData\Local\Temp\EAD2B15.exe
C:\Users\Peter\AppData\Local\Temp\EAD3477.exe
C:\Users\Peter\AppData\Local\Temp\EAD3C15.exe
C:\Users\Peter\AppData\Local\Temp\EAD405.exe
C:\Users\Peter\AppData\Local\Temp\EAD6067.exe
C:\Users\Peter\AppData\Local\Temp\EAD784A.exe
C:\Users\Peter\AppData\Local\Temp\EAD891C.exe
C:\Users\Peter\AppData\Local\Temp\EAD9839.exe
C:\Users\Peter\AppData\Local\Temp\EADA8FB.exe
C:\Users\Peter\AppData\Local\Temp\EADA929.exe
C:\Users\Peter\AppData\Local\Temp\EADAA52.exe
C:\Users\Peter\AppData\Local\Temp\EADAD2F.exe
C:\Users\Peter\AppData\Local\Temp\EADAEE4.exe
C:\Users\Peter\AppData\Local\Temp\EADAFDD.exe
C:\Users\Peter\AppData\Local\Temp\EADB385.exe
C:\Users\Peter\AppData\Local\Temp\EADB3F3.exe
C:\Users\Peter\AppData\Local\Temp\EADBA59.exe
C:\Users\Peter\AppData\Local\Temp\EADBBEE.exe
C:\Users\Peter\AppData\Local\Temp\EADBFD5.exe
C:\Users\Peter\AppData\Local\Temp\EADC3F9.exe
C:\Users\Peter\AppData\Local\Temp\EADC59F.exe
C:\Users\Peter\AppData\Local\Temp\EADCCB0.exe
C:\Users\Peter\AppData\Local\Temp\EADCE84.exe
C:\Users\Peter\AppData\Local\Temp\EADDC59.exe
C:\Users\Peter\AppData\Local\Temp\EADDE9B.exe
C:\Users\Peter\AppData\Local\Temp\mpegc.dll
C:\Users\Peter\AppData\Local\Temp\procexp64.exe
C:\Users\Peter\AppData\Local\Temp\UninstallEADM.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-10 00:22
==================== End Of Log ============================
--- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-12-2013 01
Ran by Peter at 2013-12-17 14:45:25
Running from C:\Users\Peter\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
Adobe AIR (x32 Version: 2.6.0.19140)
Adobe Community Help (x32 Version: 3.4.980)
Adobe Content Viewer (x32 Version: 1.4.0)
Adobe Creative Suite 5.5 Master Collection (x32 Version: 5.5)
Adobe Download Assistant (x32 Version: 1.0.6)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Premiere Pro CS5.5 (x32 Version: 5.5)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Story (x32 Version: 1.0.571)
Adobe Widget Browser (x32 Version: 2.0 Build 230)
Adobe Widget Browser (x32 Version: 2.0.230)
Advertising Center (x32 Version: 0.0.0.2)
AMI VR-pulse OS Switcher (Version: 1.1)
AOL Deutschland Toolbar (HKCU)
AOL Deutschland Toolbar (x32)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft BizScanner (x32 Version: 1.0.1.59)
Ashampoo Burning Studio (x32 Version: 9.23.0)
Ashampoo Photo Commander (x32 Version: 8.3.2)
Ashampoo Photo Optimizer (x32 Version: 3.12.0)
Ashampoo Snap (x32 Version: 3.4.1)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.39)
AutoCAD LT 2012 - Deutsch (Version: 18.2.51.0)
AutoCAD LT 2012 Language Pack - Deutsch (Version: 18.2.51.0)
Autodesk Content Service (x32 Version: 2.0.90)
Autodesk Material Library 2012 (x32 Version: 2.5.0.8)
Autodesk Material Library Base Resolution Image Library 2012 (x32 Version: 2.5.0.8)
AVG 2014 (Version: 14.0.3658)
AVG 2014 (Version: 14.0.4259)
AVG 2014 (Version: 2014.0.4259)
Bonjour (Version: 3.0.0.10)
Complément Messenger (x32 Version: 15.4.3502.0922)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.0.6904)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (x32 Version: 8.0.4020)
CyberLink PowerDVD 10 (x32 Version: 10.0.2731.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink YouCam (x32 Version: 3.1.4013)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Die Sims™ 3 (x32 Version: 1.57.62)
Dolby Home Theater v4 (x32 Version: 7.2.7000.4)
Download Updater (AOL Inc.) (x32)
ElsterFormular (x32 Version: 13.4.1.10296)
ESET Online Scanner v3 (x32)
Facebook Messenger 2.1.4814.0 (x32 Version: 2.1.4814.0)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 5.7.6.1015 (x32 Version: 5.7.6.1015)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 31.0.1650.63)
Google Earth (x32 Version: 6.1.0.5001)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Update Helper (x32 Version: 1.3.22.3)
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Officejet Pro 8500 A910 Hilfe (x32 Version: 140.0.2.2)
HP Officejet Pro 8600 - Grundlegende Software für das Gerät (Version: 25.0.619.0)
HP Officejet Pro 8600 Hilfe (x32 Version: 140.0.2.2)
HP Update (x32 Version: 5.003.000.004)
HPDiagnosticCoreDll (x32 Version: 1.0.15.0)
I.R.I.S. OCR (x32 Version: 12.3.4.0)
iCloud (Version: 3.1.0.40)
iDevice Manager (x32 Version: 1.6.0.0)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2353)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.0.2.0518)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.0.3000)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008)
Intel(R) WiDi (x32 Version: 2.1.35.0)
Intel(R) Wireless Display
IPCMonitor_en version 1.0.1.7 (x32 Version: 1.0.1.7)
iTunes (Version: 11.1.3.8)
Java Auto Updater (x32 Version: 2.0.3.1)
Java(TM) 6 Update 24 (64-bit) (Version: 6.0.240)
Java(TM) 6 Update 24 (x32 Version: 6.0.240)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Launch Manager (x32 Version: 1.5.1.3)
Marketsplash Drucksoftware (x32 Version: 1.0.1.31)
Marketsplash Schnellzugriffe (x32 Version: 1.0.1.7)
Medion Home Cinema (x32 Version: 8.0.2608)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Messenger kísérő (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (x32 Version: 14.0.7015.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office O MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook Connector (x32 Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (Portuguese (Brazil)) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office X MUI (Portuguese (Brazil)) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft VC9 runtime libraries (x32 Version: 2.0.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero Installer (x32 Version: 4.4.9.0)
Nero MediaHome 4 (x32 Version: 4.5.8.0)
Nero MediaHome 4 Essentials (x32)
Nero MediaHome 4 Help (x32 Version: 4.5.5.0)
Nero Online Upgrade (x32 Version: 1.3.0.0)
Optimizer Pro v3.2 (x32) <==== ATTENTION
Paint.NET v3.5.10 (Version: 3.60.0)
PDF Settings CS5 (x32 Version: 10.0)
Picasa 3 (x32 Version: 3.8)
PlayReady PC Runtime amd64 (Version: 1.3.0)
PMB (x32 Version: 5.5.02.12220)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PxMergeModule (x32 Version: 1.00.0000)
QuickTime (x32 Version: 7.74.80.86)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6334)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10010)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0)
Safari (x32 Version: 5.34.57.2)
Scan To PC (x32)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 32-Bit Edition (x32)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (x32)
Skype Click to Call (x32 Version: 6.3.11079)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Spremljevalec Messenger (x32 Version: 15.4.3502.0922)
Studie zur Verbesserung von HP Officejet Pro 8500 A910 Produkten (Version: 22.50.231.0)
Studie zur Verbesserung von HP Officejet Pro 8600 Produkten (Version: 25.0.619.0)
Synaptics Pointing Device Driver (Version: 15.1.12.0)
TouchCopy 12 (x32 Version: 12.05)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Versandhelfer (x32 Version: 0.9.511)
Viewpoint Media Player (x32)
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
Vodafone Mobile Connect Lite (x32 Version: 9.4.3.17550)
VR-pulse Installer (Version: 1.4.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Media Encoder 9 Series (x32 Version: 9.00.2980)
Windows Media Encoder 9 Series (x32)
WinRAR 5.00 (64-bit) (Version: 5.00.0)
WISO Hausverwalter 2012 (x32 Version: 6.00.7549)
X10 Hardware(TM) (x32)
==================== Restore Points =========================
13-12-2013 03:40:34 Windows Update
14-12-2013 02:00:23 Windows Update
15-12-2013 02:00:21 Windows Update
15-12-2013 07:16:40 Windows Update
15-12-2013 10:26:53 Windows Update
15-12-2013 20:01:26 Windows Update
16-12-2013 02:00:26 Windows Update
16-12-2013 02:25:53 Windows Update
16-12-2013 03:36:54 Windows Update
16-12-2013 19:54:12 Windows Update
17-12-2013 02:00:29 Windows Update
17-12-2013 06:24:48 Installed HPDiagnosticCoreDll
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
Task: {09753560-0060-4745-BB23-133730577321} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2178155218-1004089860-1406755679-1000UA => C:\Users\Peter\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-01] (Facebook Inc.)
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
Task: {0DB1EBD4-04DC-46C4-99FF-7BF16B1C6146} - System32\Tasks\{1935FDCE-57FC-4BC6-8F4D-5A3D49737794} => E:\Setup.exe [2011-09-09] (Hewlett-Packard Co.)
Task: {0E1A047C-5681-472B-96A8-D0855867CA9B} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {195E864F-C130-43D8-9099-83061D4614B6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-17] (Adobe Systems Incorporated)
Task: {1E553703-5106-4852-AD3B-82601EEA4D88} - System32\Tasks\HPCustParticipation HP Officejet Pro 8500 A910 => C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {20BD347E-5F2B-491D-A0E2-F0316BB62375} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
Task: {2B79F606-4FE3-4C38-BEB4-A05C9FB648B0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-11] (Google Inc.)
Task: {3A2C34E5-0421-4AEE-BCEA-728DD0F72DEE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-11] (Google Inc.)
Task: {514DF871-1E4D-436E-8D95-F6030ECAA0B1} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2178155218-1004089860-1406755679-1000 => Rundll32.exe portabledeviceapi.dll,#1
Task: {5E215BE8-802F-4169-B300-0AC1D2EA8876} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6CF092D6-F7F5-42F9-9E84-824AA1A1E908} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2178155218-1004089860-1406755679-1000Core => C:\Users\Peter\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-01] (Facebook Inc.)
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => Rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate
Task: {BC5031FA-8C15-4FBC-9B6D-1C9317838732} - System32\Tasks\4693 => Wscript.exe C:\Users\Peter\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations
Task: {E1A0549D-346C-4A99-B5D1-278CB808E19E} - System32\Tasks\HPCustParticipation HP Officejet Pro 8600 => C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPCustPartic.exe [2011-09-09] (Hewlett-Packard Co.)
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
Task: {F179548F-F4E3-42FF-961E-AAE09C61A8CF} - System32\Tasks\{1F294EC4-797B-41A3-83AC-6F598059F119} => E:\Setup.exe [2011-09-09] (Hewlett-Packard Co.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2178155218-1004089860-1406755679-1000Core.job => C:\Users\Peter\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2178155218-1004089860-1406755679-1000UA.job => C:\Users\Peter\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ceefc6aa728c40.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-02-04 23:42 - 2011-02-04 23:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2013-12-16 03:09 - 2013-10-29 14:08 - 02869720 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
2011-09-27 06:23 - 2011-09-27 06:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 06:22 - 2011-09-27 06:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-18 03:50 - 2012-11-18 03:50 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\0ee312cdae6a18e040f873e6419f3db4\IsdiInterop.ni.dll
2011-04-24 11:58 - 2010-11-06 07:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
AlternateDataStreams: C:\Users\Peter\Downloads\Brasilien Bilder und Video (1).eml:OECustomProperty
AlternateDataStreams: C:\Users\Peter\Downloads\Brasilien Bilder und Video.eml:OECustomProperty
AlternateDataStreams: C:\Users\Peter\Downloads\No Subject.eml:OECustomProperty
AlternateDataStreams: C:\Users\Peter\AppData\Local\Temp:wGb1wKeoMduqZmo1lPB
AlternateDataStreams: C:\Users\Peter\AppData\Local\Temporary Internet Files:NdjU2DozhGpfeLYLviEPOupN
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/17/2013 01:57:18 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/17/2013 08:33:25 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/17/2013 03:02:30 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP3 Parser (KB2758694) -- Error 1935. An error occured during the installation of assembly component {74910135-7980-398A-A06B-D6B9ABF34537}. HRESULT: 0x800736B3. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.30.2117.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"
Error: (12/17/2013 01:00:58 AM) (Source: Microsoft-Windows-Defrag) (User: )
Description: Volume "Boot (C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)
Error: (12/16/2013 09:10:51 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/16/2013 08:56:03 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP3 Parser (KB2758694) -- Error 1935. An error occured during the installation of assembly component {74910135-7980-398A-A06B-D6B9ABF34537}. HRESULT: 0x800736B3. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.30.2117.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"
Error: (12/16/2013 05:44:15 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/16/2013 05:13:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/16/2013 04:52:56 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/16/2013 04:38:48 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: MSXML 4.0 SP3 Parser (KB2758694) -- Error 1935. An error occured during the installation of assembly component {74910135-7980-398A-A06B-D6B9ABF34537}. HRESULT: 0x800736B3. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.30.2117.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"
System errors:
=============
Error: (12/17/2013 02:46:00 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:55 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:50 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:45 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:40 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:35 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:29 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:24 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:19 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Error: (12/17/2013 02:45:14 PM) (Source: Ntfs) (User: )
Description: Auf dem Volume "C:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
Microsoft Office Sessions:
=========================
Error: (01/21/2013 08:17:49 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 148 seconds with 120 seconds of active time. This session ended with a crash.
Error: (05/02/2012 03:51:20 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 87 seconds with 60 seconds of active time. This session ended with a crash.
Error: (02/01/2012 09:37:45 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 87 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/01/2012 09:24:12 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 38 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/01/2012 09:22:30 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/01/2012 09:21:46 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 89 seconds with 60 seconds of active time. This session ended with a crash.
Error: (02/01/2012 09:19:51 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 26 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/01/2012 09:01:09 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1194 seconds with 120 seconds of active time. This session ended with a crash.
Error: (02/01/2012 08:38:16 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 225 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/01/2012 08:34:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 738 seconds with 240 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-06-22 08:53:26.803
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-22 08:53:26.793
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-22 08:53:26.793
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-22 08:53:26.793
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-04-09 01:10:45.991
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-04-09 01:10:45.991
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-04-09 01:10:45.991
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-04-09 01:10:45.991
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-02 10:20:01.214
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-02 10:20:01.214
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 63%
Total physical RAM: 4003.01 MB
Available physical RAM: 1456.05 MB
Total Pagefile: 8004.21 MB
Available Pagefile: 5857.25 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:657.54 GB) (Free:22.04 GB) NTFS
Drive d: (Recover) (Fixed) (Total:37.99 GB) (Free:15.98 GB) NTFS
Drive e: (HP OJ8600) (CDROM) (Total:0.33 GB) (Free:0 GB) CDFS
Drive f: (2.Festplatte) (Fixed) (Total:465.76 GB) (Free:465.62 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=101 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=658 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 92814BAA)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
17.12.2013, 15:54
| #2 |
| /// the machine /// TB-Ausbilder    | Virus National Zoom hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.
und ein frisches FRST log bitte.
__________________ |
|
17.12.2013, 16:14
| #3 |
| | Virus National Zoom hier der text aus dem sc cleaner.txt
__________________Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler) Bleeping Computer - Technical Support and Computer Help Copyright 2008-2013 BleepingComputer.com More Information about Shortcut Cleaner can be found at this link: Shortcut Cleaner Download Windows Version: Windows 7 Home Premium Service Pack 1 Program started at: 12/17/2013 04:12:28 PM. Scanning for registry hijacks: * No issues found in the Registry. Searching for Hijacked Shortcuts: Searching C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\ * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe Nation Zoom * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk => C:\Program Files\Internet Explorer\iexplore.exe Nation Zoom * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe Nation Zoom Searching C:\ProgramData\Microsoft\Windows\Start Menu\ * Shortcut Cleaned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Nation Zoom * Shortcut Cleaned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Nation Zoom Searching C:\Users\Peter\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Nation Zoom * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe Nation Zoom * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Nation Zoom * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (2).lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe Nation Zoom * Shortcut Cleaned: C:\Users\Peter\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe Nation Zoom Searching C:\Users\Public\Desktop\ Searching C:\Users\Peter\Desktop 10 bad shortcuts found. Program finished at: 12/17/2013 04:12:44 PM Execution time: 0 hours(s), 0 minute(s), and 16 seconds(s) hoffe das bringt uns der lösung etwas näher. |
|
17.12.2013, 17:53
| #4 |
| | Virus National Zoom Vielen Dank scheint alles geklappt zu haben anbei die 3 Listen ich hoffe das ging mit dem anhang  |
|
18.12.2013, 10:23
| #5 |
| /// the machine /// TB-Ausbilder | Virus National Zoom Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Virus National Zoom |
| appdata, askbar, avg antivirus, c:\windows, chromium, config, device driver, downloader, engine, found, google, installer, js/adware.yontoo.a, klelam.sys, launch, minidump, msiinstaller, national, officejet, onlinescan, optimierung, optimizer, plug-in, remove, richtlinie, service, system32, variant, version, virus, wanted, win32/adware.speedingupmypc.c, windows, wscript.exe |
