| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Alle Browser spinnen, Kasperky hat 1 FundWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
15.09.2014, 09:48
| #1 |
 |  Alle Browser spinnen, Kasperky hat 1 Fund Hallo Leute, vorab wie der Nick schon sagt: Ich bin absolute DAU was Computer angeht. Ich kann die Kiste anschalten, Programme installieren u. deinstallieren, meinen Drucker ins w-lan einbuchen... aber dann hörts auch schon auf. Wegen meines aktuellen Problems habe ich schon hier im Board gelesen, aber nun trotzdem beschlossen, ein eigenes Thema zu eröffnen. BS ist Vista, der Rechner 6 Jahre alt. Kasperksy ist installiert, immer auf dem aktuellen Stand, Windows Firewall ist aktiv, CCleaner installiert und lasse ich gelegentlich laufen, TuneUp ist ebenfalls installiert (und ich habe schon gelesen, dass hier davon nicht so viel gehalten wird). Angefangen hat alles vor etwa 10 Tagen damit, dass der Rechner plötzlich nicht mehr startete. Schwarzer Bildschirm mit 4 Optionen - u.a. "windows normal starten, "im abgesicherten Modus", alle 4 Optionen durchprobiert, nichts. Rechner ließ sich dann nur noch über ein Reparaturtool auf der InstallationsCD starten. Kaspersky-Untersuchung besagte keine Schadsoftware auf dem Rechner. Seither spinnen sämtliche Browser. Die Verbindung bricht immer wieder ab, je nach Browser unterschiedliche Fehlermeldungen (Chrome sagt: keine Daten empfangen, IE so ähnlich), wenn ich dann auf 'neu laden' klicke geht es mal, mal geht es auch nicht. An der w-lan-Verbindung zum Router liegt es eher nicht, die ist da und ich kann auch meine Mails per thunderbird störungsfrei abrufen. Firefox geht überhaupt nicht mehr, es gibt eine Fehlermeldung "couldn't find XPCOM'. Diese fehlende Datei habe ich manuell zu installieren versucht (runtergeladen bei dll-files.com), ging nicht. Dann mithilfe eines Tools von dll-files-com, angeblich auch erfolgreich. Fehler besteht aber weiterhin. Ich bin nun nicht sicher, ob ich mir womöglich mit TuneUP irgendwas zerschossen habe, oder doch Schadsoftware auf dem Rechner ist oder ein anderes Problem vorliegt. Andere Programme wie OpenOffice funktionieren. Gestern hat Kaspersky dann beim erneuten Suchlauf auch was gefunden. Leider kann ich nicht mehr genau sagen, wie das Ding hieß, denn nach zwischenzeitlichem runterfahren lässt sich der Rechner jetzt erneut wieder nicht starten. Es war irgendwas mit 'not-v-virus Win32'. Erste Frage: Wenn Kaspersky mir sagt, der Rechner sei nicht mehr bedroht, die Datei nicht mehr vorhanden, reicht das dann wirklich aus um ein sauberes System zu haben oder müssen weitere Maßnahmen ergriffen werden? Das nächste Problem ist ein weiterer Rechner im Haus (mit meinem kein Netzwerk, läuft nur über den gleichen Router und nutzt den gleichen Drucker) und der zickte gestern nun auch und ließ sich nicht starten. Es kam ein schwarzer Bildschirm und dann startete etwas, das nach Windows-Diagnosetool aussah. Wurde abgebrochen und mit "Windows normal starten" fuhr der Rechner dann auch hoch. Hier hat dann Kaspersky im Suchlauf ebenfalls angeschlagen (leider habe ich keine Details, ist nicht mein Rechner) aber die Frage ist auch hier, ob es ausreicht, dass Kaspersky besagt, die Bedrohung sei eliminiert. Weitere Frage: Ein Bekannter hat mir geraten, für meinen Rechner ein Upgrade auf Win7 zu kaufen und das zu installieren, wobei ich dann meine Dateien und Programme behalten würde. Das klingt zwar hübsch und praktisch, aber ich frage mich, ob das überhaupt Sinn macht. Gesetzt den Fall, ich habe irgendwelche Schadsoftware, verschwindet die dann doch nicht einfach durch das Upgrade, oder? Soweit erst mal zu meinen Fragen bzw. Angaben, die ich zum Rechner machen kann bzw. zur Problembeschreibung. Schon im Voraus vielen Dank für eure Hilfe! |
|
15.09.2014, 10:08
| #2 |
| /// the machine /// TB-Ausbilder    | Alle Browser spinnen, Kasperky hat 1 Fund hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
15.09.2014, 12:41
| #3 |
| | Alle Browser spinnen, Kasperky hat 1 Fund 32-Bit, sorry die Angabe hatte ich vergessen.
__________________Ich muss schauen, ob ich den Rechner heute nachmittag mit der InstallationsCD überhaupt wieder in die Gänge bekomme Muss ich Kaspersky u. WinFirewall erst deaktivieren, bevor ich das Programm runterladen und arbeiten lassen kann? |
|
15.09.2014, 14:24
| #4 |
| | Alle Browser spinnen, Kasperky hat 1 Fund Geschafft, hier die Ergebnisse (die .... habe ich eingefügt statt des Namens) Editor: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by I.... (administrator) on I.....-PC on 15-09-2014 13:25:29
Running from C:\Users\I....\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BWYYEZH0
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
() C:\Program Files\Digital Trends Club\HI-epanel-Reporting.exe
() C:\Program Files\Digital Trends Club\HI-epanel-Updater.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Corel, Inc.) C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\HI-epanelLSPService\HI-epanel-WatchDog.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIJBE.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Sun Microsystems, Inc.) C:\Program Files\StarOffice7\program\soffice.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files\Google\Update\Install\{A201DE93-749B-40FC-B854-87E8377FC18D}\37.0.2062.120_chrome_installer.exe
(Google Inc.) C:\Windows\Temp\CR_59E80.tmp\setup.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_15_0_0_152_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\wmi32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-04] (Synaptics, Inc.)
HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\HomeCinema\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Program Files\HomeCinema\PowerDVD\Language\Language.exe [52256 2007-01-08] ()
HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\HomeCinema\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2008-02-21] (CyberLink Corp.)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\HomeCinema\YouCam\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6294048 2008-09-18] (Realtek Semiconductor)
HKLM\...\Run: [toolbar_eula_launcher] => C:\Program Files\GoogleEULA\EULALauncher.exe [16896 2007-02-09] ( )
HKLM\...\Run: [Corel Photo Downloader] => C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe [112208 2007-02-21] (Corel, Inc.)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-09-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [HI-epanel-WatchDog] => C:\Program Files\HI-epanelLSPService\HI-epanel-WatchDog.exe [60544 2014-02-20] ()
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [ControlLSP] => C:\Program Files\HI-epanelLSPService\ControlLSP.exe [110720 2014-02-20] ()
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIJBE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\MountPoints2: {ac7ea7dd-da3e-11dd-9675-806e6f6e6963} - E:\autorun.exe
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [146432 2008-10-26] (Google)
Startup: C:\Users\I...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\I...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StarOffice 7.lnk
ShortcutTarget: StarOffice 7.lnk -> C:\Program Files\StarOffice7\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {043C5167-00BB-4324-AF7E-62013FAEDACF} URL = hxxp://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
BHO: Winamp Toolbar Loader -> {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} -> C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
BHO: Digital Trends Club -> {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} -> C:\Program Files\Digital Trends Club\Gacela2.dll (HI-epanel)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Softonic Helper Object -> {E87806B5-E908-45FD-AF5E-957D83E58E68} -> C:\Program Files\Softonic\Softonic\1.8.21.14\bh\Softonic.dll (Softonic.com)
Toolbar: HKLM - Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\Softonic\1.8.21.14\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No File
Toolbar: HKCU - Winamp Toolbar - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Winsock: Catalog9 01 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 02 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 03 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 04 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 15 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default
FF DefaultSearchEngine: WEB.DE Suche
FF SelectedSearchEngine: WEB.DE Suche
FF Homepage: www.ixquick.de
FF NetworkProxy: "user_pref("extension.gacela.network.proxy.autoconfig_url", "");
FF NetworkProxy: "user_pref("extension.gacela.network.proxy.type", 5);
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\2.0.31005.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\I..\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdnu.dll (AOL LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdnupdater2.dll (AOL LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\aol-web-search.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\ixquick-https.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\webde-suche.xml
FF Extension: Winamp Toolbar - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012-05-16]
FF Extension: WOT - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2012-08-31]
FF Extension: Styles Tuner - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\Artem@Demchenkov.Colors.xpi [2011-08-21]
FF Extension: AutoPager - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\autopager@mozilla.org.xpi [2011-05-01]
FF Extension: Dictionary (EN/DE) - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\dictlookup@arnhold.com.xpi [2012-05-06]
FF Extension: Shorten URL - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\ShortenURL@loucypher.xpi [2011-05-11]
FF Extension: WEB.DE MailCheck - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\toolbar@web.de.xpi [2012-12-15]
FF Extension: Stylish - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2011-06-23]
FF Extension: ReloadEvery - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2011-05-21]
FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-14]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\autopager@mozilla.org [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\cbsf-config@com.extensions.mattiasschlenker.de [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\CompactMenuCE@Merci.chao [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\lazarus@interclue.com [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\metaswitcher@com.extensions.mattiasschlenker.de [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\printpdf@pavlov.net [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{398e77b8-2304-11dc-8314-0800200c9a66} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2014-06-11]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-12]
FF HKLM\...\Firefox\Extensions: [gacela2@nurago.com] - C:\Program Files\Digital Trends Club\FirefoxAddon.xpi
FF Extension: No Name - C:\Program Files\Digital Trends Club\FirefoxAddon.xpi [2014-09-02]
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM\...\Firefox\Extensions: - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-01-08]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
Chrome:
=======
CHR HomePage: Default -> hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=48&cc=&mi=54504794000000000000002220032110
CHR StartupUrls: Default -> "hxxp://ixquick.de/"
CHR DefaultSearchKeyword: Default -> E278D6FE1C2D80F8800A019E3DAB946B53FD7D3CB8FAE5F9464CD99F74ABE61B
CHR DefaultSearchURL: Default -> CF393058AA8D172D1DA4D6552A6ECAB9FFAAFE906C84BD9687582A52BF0F396F
CHR CustomProfile: C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-10]
CHR Extension: (Kaspersky Protection) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-09-10]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\I....\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-01-04]
CHR Extension: (No Name) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf [2013-10-30]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-01-26]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-01-26]
CHR Extension: (Digital Trends Club) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-26]
CHR Extension: (Virtual Keyboard) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-01-04]
CHR Extension: (Google Wallet) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-26]
CHR Extension: (Anti-Banner) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-01-04]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa []
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files\Softonic\Softonic\1.8.21.14\Softonic.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\Digital Trends Club\Chrome Extension\extension.crx [2011-08-17]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R3 avp; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-12] (Seiko Epson Corporation)
S3 GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe [69120 2008-10-26] (Google) [File not signed]
R2 HI-epanel-Reporting-Service; C:\Program Files\Digital Trends Club\HI-epanel-Reporting.exe [3292288 2014-08-05] ()
R2 HI-epanel-Update-Service; C:\Program Files\Digital Trends Club\HI-epanel-Updater.exe [1357952 2014-08-05] ()
S2 HI-epanelLSPService; C:\Program Files\HI-epanelLSPService\HI-epanelLSPService.exe [3302528 2014-02-20] (HI-epanel)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [241734 2008-06-28] () [File not signed]
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [611840 2010-04-27] (Nokia) [File not signed]
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2011-11-19] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1044808 2009-12-09] (TuneUp Software)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) [File not signed]
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2014-01-08] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576608 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2014-01-08] (Kaspersky Lab ZAO)
S3 NxpCap; C:\Windows\System32\DRIVERS\NxpCap.sys [1332576 2008-09-25] (NXP Semiconductors Germany GmbH)
S3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908896 2007-07-31] (NXP Semiconductors Germany GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2009-10-14] (TuneUp Software)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [94304 2014-03-24] (Kaspersky Lab ZAO)
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-15 13:22 - 2014-09-15 13:23 - 00024929 _____ () C:\Users\I...\Downloads\FRST.txt
2014-09-15 13:20 - 2014-09-15 13:25 - 00000000 ____D () C:\FRST
2014-09-15 13:19 - 2014-09-15 13:20 - 01097728 _____ (Farbar) C:\Users\I...\Downloads\FRST.exe
2014-09-14 15:31 - 2014-09-14 15:31 - 00000544 _____ () C:\Windows\PFRO.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setupact.log
2014-09-13 14:14 - 2014-09-13 14:16 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-09-13 13:09 - 2014-06-27 00:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-09-13 13:09 - 2014-06-27 00:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-09-13 13:09 - 2014-06-27 00:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-09-13 13:09 - 2014-06-06 06:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-09-13 13:08 - 2014-08-15 16:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-13 13:08 - 2014-08-15 16:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-13 13:08 - 2014-08-15 16:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-13 13:08 - 2014-08-15 16:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-13 13:08 - 2014-08-15 16:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-13 13:08 - 2014-08-15 16:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-13 13:08 - 2014-08-15 16:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-13 13:08 - 2014-08-15 16:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-09-13 13:08 - 2014-08-15 16:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-13 13:08 - 2014-08-15 16:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-13 13:08 - 2014-08-15 16:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-13 13:08 - 2014-08-15 16:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-09-13 13:08 - 2014-08-15 16:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-09-13 13:01 - 2014-08-23 03:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-13 13:01 - 2014-08-23 01:26 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-13 12:19 - 2014-06-02 12:31 - 02263552 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-09-13 12:19 - 2014-06-02 12:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-09-13 12:18 - 2014-07-08 02:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-13 12:18 - 2014-06-14 02:44 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-09-13 12:18 - 2014-06-14 02:33 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-09-13 12:18 - 2014-06-02 12:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-09-13 12:18 - 2014-06-02 12:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-09-13 12:18 - 2014-06-02 10:56 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Users\I....\AppData\Roaming\dll-files.com
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Program Files\Dll-Files.com Fixer
2014-09-10 14:48 - 2014-09-10 14:48 - 00010930 _____ () C:\Users\I....\Downloads\xpcom.zip
2014-09-10 14:32 - 2013-02-28 14:00 - 00001163 ____N () C:\Users\I...\Desktop\readme.txt
2014-09-10 14:30 - 2014-09-10 14:30 - 00009797 _____ () C:\Users\I...\Dents\xpcom.zip
2014-09-10 14:30 - 2014-09-10 14:30 - 00000000 ____D () C:\Users\I...\Documents\xpcom
2014-09-10 14:28 - 2014-09-10 14:28 - 00009797 _____ () C:\Users\I...\Desktop\xpcom.zip
2014-09-10 14:27 - 2014-09-10 14:27 - 00000000 ____D () C:\Program Files\7-Zip
2014-09-08 15:11 - 2014-09-10 16:07 - 00004611 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-07 14:30 - 2014-09-07 14:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox(403)
2014-08-24 14:28 - 2014-09-13 12:37 - 00000000 ____D () C:\Users\I...\AppData\Local\Adobe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-15 13:55 - 2013-01-04 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-15 13:55 - 2012-01-29 13:41 - 00000000 ____D () C:\Program Files\Digital Trends Club
2014-09-15 13:55 - 2009-01-04 11:22 - 00000000 ____D () C:\Users\I...
2014-09-15 13:55 - 2008-10-26 05:06 - 00000000 ____D () C:\Program Files\Google
2014-09-15 13:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2014-09-15 13:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-09-15 13:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2014-09-15 13:55 - 2006-11-02 12:22 - 52428800 _____ () C:\Windows\system32\config\software_previous
2014-09-15 13:55 - 2006-11-02 12:22 - 103022592 _____ () C:\Windows\system32\config\system_previous
2014-09-15 13:43 - 2006-11-02 12:22 - 55312384 _____ () C:\Windows\system32\config\components_previous
2014-09-15 13:43 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-09-15 13:25 - 2014-09-15 13:20 - 00000000 ____D () C:\FRST
2014-09-15 13:25 - 2008-10-25 05:29 - 00000438 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
2014-09-15 13:24 - 2012-08-10 09:54 - 01163259 _____ () C:\Windows\WindowsUpdate.log
2014-09-15 13:23 - 2014-09-15 13:22 - 00024929 _____ () C:\Users\I:::\Downloads\FRST.txt
2014-09-15 13:20 - 2014-09-15 13:19 - 01097728 _____ (Farbar) C:\Users\I....\Downloads\FRST.exe
2014-09-15 13:18 - 2012-07-19 14:06 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-15 13:16 - 2008-10-25 05:12 - 00043034 _____ () C:\ProgramData\nvModes.001
2014-09-15 13:07 - 2012-08-16 18:47 - 00000000 ____D () C:\Program Files\HI-epanelLSPService
2014-09-15 13:06 - 2009-01-04 11:22 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema
2014-09-15 12:59 - 2014-06-02 10:31 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-15 12:59 - 2008-10-25 05:12 - 00043034 _____ () C:\ProgramData\nvModes.dat
2014-09-15 12:58 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-15 12:58 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-15 12:58 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-14 17:26 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\default_previous
2014-09-14 17:26 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-09-14 15:31 - 2014-09-14 15:31 - 00000544 _____ () C:\Windows\PFRO.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setupact.log
2014-09-13 15:09 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-13 14:29 - 2008-10-22 05:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-13 14:16 - 2014-09-13 14:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-09-13 13:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\rescache
2014-09-13 13:40 - 2012-05-27 12:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-13 13:39 - 2006-11-02 12:33 - 01656994 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-13 13:33 - 2012-08-16 18:47 - 00003168 _____ () C:\Windows\system32\HI-epanelLSPService.ini
2014-09-13 13:33 - 2012-08-16 18:47 - 00001864 _____ () C:\Windows\system32\GacelaLSPServiceOff.ini
2014-09-13 13:31 - 2006-11-02 14:47 - 00366368 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-13 13:27 - 2006-11-02 15:01 - 00032534 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-13 13:26 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-13 13:00 - 2013-08-04 14:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-13 12:40 - 2014-05-14 09:40 - 17903792 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2014-09-13 12:40 - 2012-05-27 12:14 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-13 12:40 - 2011-06-08 14:20 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-13 12:37 - 2014-08-24 14:28 - 00000000 ____D () C:\Users\I...\AppData\Local\Adobe
2014-09-13 11:53 - 2011-12-21 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series
2014-09-13 11:19 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\twain_32
2014-09-13 11:19 - 2006-11-02 13:18 - 00000000 __RSD () C:\Windows\Media
2014-09-13 11:18 - 2014-06-11 10:55 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-13 11:18 - 2014-03-21 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-13 11:18 - 2013-10-30 10:52 - 00000000 ____D () C:\Program Files\Softonic
2014-09-13 11:18 - 2013-10-30 10:51 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Softonic
2014-09-13 11:18 - 2013-08-04 13:28 - 00000000 ____D () C:\Program Files\Opera
2014-09-13 11:18 - 2013-01-04 17:31 - 00000000 ____D () C:\Users\I...\AppData\Roaming\PhotoScape
2014-09-13 11:18 - 2012-05-06 19:25 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-13 11:18 - 2011-06-23 12:30 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Winamp
2014-09-13 11:18 - 2011-04-26 11:27 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2014-09-13 11:18 - 2011-04-22 14:51 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-09-13 11:18 - 2011-04-22 14:51 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-09-13 11:18 - 2011-04-22 14:49 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-09-13 11:18 - 2008-10-20 07:08 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-10 16:08 - 2014-03-21 09:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 16:07 - 2014-09-08 15:11 - 00004611 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-10 16:07 - 2008-10-20 07:08 - 00000000 ____D () C:\Program Files\Java
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Users\I...\AppData\Roaming\dll-files.com
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Program Files\Dll-Files.com Fixer
2014-09-10 15:06 - 2008-10-22 07:18 - 00000000 ____D () C:\ProgramData\Temp
2014-09-10 14:48 - 2014-09-10 14:48 - 00010930 _____ () C:\Users\I...\Downloads\xpcom.zip
2014-09-10 14:30 - 2014-09-10 14:30 - 00009797 _____ () C:\Users\I...\Documents\xpcom.zip
2014-09-10 14:30 - 2014-09-10 14:30 - 00000000 ____D () C:\Users\I....\Documents\xpcom
2014-09-10 14:28 - 2014-09-10 14:28 - 00009797 _____ () C:\Users\I....\Desktop\xpcom.zip
2014-09-10 14:27 - 2014-09-10 14:27 - 00000000 ____D () C:\Program Files\7-Zip
2014-09-09 15:45 - 2014-01-26 13:34 - 00000000 ____D () C:\Users\I...\Documents\2014
2014-09-09 15:00 - 2011-04-22 14:51 - 00000000 ____D () C:\ProgramData\CanonBJ(444)
2014-09-08 18:28 - 2006-11-02 14:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-09-08 15:18 - 2011-04-26 11:25 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Canon
2014-09-07 14:30 - 2014-09-07 14:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox(403)
2014-08-29 13:01 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-08-27 14:33 - 2009-02-14 18:21 - 00001356 _____ () C:\Users\I...\AppData\Local\d3d9caps.dat
2014-08-25 06:53 - 2009-10-03 12:04 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 03:03 - 2014-09-13 13:01 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 01:26 - 2014-09-13 13:01 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-19 19:40 - 2009-08-01 13:12 - 00000000 ____D () C:\Users\I...\Documents\My PSP Files
Files to move or delete:
====================
C:\Users\I.....\CDBIDXL.DAT
C:\Users\I....\NECDB.DAT
C:\Users\I....\NETRKDB.DAT
C:\Users\I....\Schlecker_Fotoservice.exe
C:\Users\I....\TDBIDXL.DAT
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-15 13:04
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- und Addition Editor: [CODE]Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Internet Security (Disabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Internet Security (Disabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Disabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}) (Version: - Microsoft) 2007 Microsoft Office Suite Service Pack 1 (SP1) (Version: - Microsoft) Hidden 7-PDF Maker Version 1.4.1 (Build 128) (HKLM\...\7-PDF Maker_is1) (Version: 7-PDF Maker - Version 1.4.1 (Build 128) - 7-PDF, Germany - Thorsten Hodes) ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY) ABBYY FineReader 9.0 Sprint (Version: 9.00.631.5823 - ABBYY) Hidden Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.) Anleitung für Epson Connect (HKLM\...\Epson Connect Guide) (Version: - ) Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 2.28 - Piriform) CD-LabelPrint (HKLM\...\MediaNavigation.CDLabelPrint) (Version: - ) Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Corel MediaOne (HKLM\...\{A062A15F-9CAC-4B88-98DF-87628A0BD721}) (Version: 2.00.0000 - Corel Corporation) Corel Paint Shop Pro X (HKLM\...\{1A15507A-8551-4626-915D-3D5FA095CC1B}) (Version: 10.10 - Corel Inc) Corel Photo Album 6 (HKLM\...\{8A9B8148-DDD7-448F-BD6C-358386D32354}) (Version: 6.40 - Corel, Inc.) CorelDRAW Essential Edition 3 (HKLM\...\_{ADDBE07D-95B8-4789-9C76-187FFF9624B4}) (Version: - Corel Corporation) CorelDRAW Essential Edition 3 (Version: 3.0 - Corel Corporation) Hidden CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.2019 - CyberLink Corp.) CyberLink MediaShow (Version: 4.1.2019 - CyberLink Corp.) Hidden CyberLink PhotoNow (HKLM\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.5203 - CyberLink Corp.) CyberLink PhotoNow (Version: 1.1.5203 - CyberLink Corp.) Hidden CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2209a - CyberLink Corp.) CyberLink PowerDirector (Version: 7.0.2209a - CyberLink Corp.) Hidden CyberLink PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - PowerDVDCorp.) CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0815 - CyberLink Corp.) CyberLink PowerProducer (Version: 5.0815 - CyberLink Corp.) Hidden CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.2109 - CyberLink Corp.) CyberLink YouCam (Version: 2.0.2109 - CyberLink Corp.) Hidden DE (Version: 3.0 - Corel Corporation) Hidden Digital Trends Club (HKLM\...\{5F0545E7-3F0F-4730-AF70-26E61DBDF263}) (Version: 11.1.3067 - HI-epanel) Dolby Control Center (HKLM\...\{70E8EBD5-78C9-4258-B20A-5098CCA000F0}) (Version: 1.1.0601 - Dolby) Download Updater (AOL LLC) (HKLM\...\SoftwareUpdUtility) (Version: - ) <==== ATTENTION Druckerdeinstallation für EPSON XP-700 Series (HKLM\...\EPSON XP-700 Series) (Version: - SEIKO EPSON Corporation) DVD Shrink 3.2 deutsch (DeCSS-frei) (HKLM\...\DVD Shrink DE_is1) (Version: - DVD Shrink) Epson Benutzerhandbuch XP-700 Series (HKLM\...\XP-700 Series Useg) (Version: - ) Epson Easy Photo Print 2 (HKLM\...\{02A312B5-1542-47B6-BFE9-F51358C39E86}) (Version: 2.4.0.0 - SEIKO EPSON CORPORATION) Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2) Epson Event Manager (HKLM\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation) Epson Netzwerkhandbuch XP-700 Series (HKLM\...\XP-700 Series Netg) (Version: - ) Epson Print CD (HKLM\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.20.00 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) FormatFactory 2.20 (HKLM\...\FormatFactory) (Version: 2.20 - Free Time) Free Audio CD to MP3 Converter version 1.3.12.908 (HKLM\...\Free Audio CD to MP3 Converter_is1) (Version: - DVDVideoSoft Ltd.) Free DVD Video Burner version 3.1.3.1228 (HKLM\...\Free DVD Video Burner_is1) (Version: - DVDVideoSoft Ltd.) Free Video Converter V 2.5 (HKLM\...\Free Video Converter_is1) (Version: 2.5.0.0 - Koyote Soft) Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.) Google Desktop (HKLM\...\Google Desktop) (Version: - - Google) Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden Hardcopy (C:\Program Files\Hardcopy) (HKLM\...\Hardcopy(C__Program Files_Hardcopy)) (Version: 2011.02.12 - www.hardcopy.de) Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 26 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.260 - Oracle) Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.) JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) Kaspersky Internet Security (HKLM\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (Version: 14.0.0.4651 - Kaspersky Lab) Hidden MakeDisc (HKLM\...\{B145EC69-66F5-11D8-9D75-000129760D75}) (Version: 3.0.2601 - CyberLink Corp.) Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: - ) Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 1.1 German Language Pack (HKLM\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version: - ) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6215.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 2.0.31005.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation) Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 24.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla) MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 8 Essentials (HKLM\...\{47948554-90C6-4AAC-8CFA-D23CE11C1031}) (Version: 8.3.124 - Nero AG) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation) Opera Stable 15.0.1147.153 (HKLM\...\Opera 15.0.1147.153) (Version: 15.0.1147.153 - Opera Software ASA) PC Connectivity Solution (HKLM\...\{DCD22647-6D31-479D-8F97-16D0AA934D9E}) (Version: 10.18.0.0 - Nokia) PhotoScape (HKLM\...\PhotoScape) (Version: - ) Pixum EasyBook (HKLM\...\Pixum EasyBook) (Version: - ) Pixum Fotobuch (HKLM\...\Pixum Fotobuch) (Version: - ) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5704 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 3.0.1.3 - Realtek Semiconductor Corp.) Softonic toolbar on IE and Chrome (HKLM\...\Softonic) (Version: 1.8.21.14 - Softonic) <==== ATTENTION StarOffice 7 (HKCU\...\StarOffice 7) (Version: 7 - Sun Microsystems, Inc.) swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.2.2.0 - Synaptics) T-Online WLAN-Access Finder (HKLM\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version: - ) TuneUp Utilities (HKLM\...\TuneUp Utilities) (Version: 9.0.3000.52 - TuneUp Software) TuneUp Utilities (Version: 9.0.3000.52 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (Version: 9.0.3000.52 - TuneUp Software) Hidden Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Update for Office 2007 (KB946691) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A420F522-7395-4872-9882-C591B4B92278}) (Version: - Microsoft) Update Manager (Version: 4.60 - Corel Corporation) Hidden VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden Winamp (HKLM\...\Winamp) (Version: 5.61 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Winamp Toolbar (HKCU\...\Winamp Toolbar) (Version: - ) <==== ATTENTION Winamp Toolbar (HKLM\...\Winamp Toolbar) (Version: - ) <==== ATTENTION Windows Live Fotogalerie (HKLM\...\{A1D08B90-AE1A-4885-AC29-731496FD397E}) (Version: 12.0.1347.0718 - Microsoft Corporation) Windows Live installer (HKLM\...\{7A7B0BF3-2F00-4F03-8A9B-6ABCC07B90C6}) (Version: 12.0.1471.1025 - Microsoft Corporation) Windows Live Mail (HKLM\...\{82F2B38B-1426-443D-874C-AC25675E7BEB}) (Version: 12.0.1606.1023 - Microsoft Corporation) Windows Live Sign-in Assistant (HKLM\...\{0ED47137-C071-46CC-A243-E5E33271E10E}) (Version: 5.000.742.2 - Microsoft Corporation) Windows Live Writer (HKLM\...\{B8D42C3A-3CFF-4A8A-A7DA-4F44474D12C5}) (Version: 12.0.1370.0325 - Microsoft Corporation) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia) X10 Hardware(TM) (HKLM\...\X10Hardware) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{30A2652A-DDF7-45e7-ACA6-3EAB26FC8A4E}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.) CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{41662FC2-0D57-4aff-AB27-AD2E12E7C273}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.) CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files\StarOffice7\program\so_activex.dll () CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{7B342DC4-139A-4a46-8A93-DB0827CCEE9C}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.) CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{82154420-0FBF-11d4-8313-005004526AB4}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.) CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{D0484DE6-AAEE-468a-991F-8D4B0737B57A}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.) CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{E5A0B632-DFBA-4549-9346-E414DA06E6F8}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.) ==================== Restore Points ========================= 14-08-2014 13:55:34 Windows Update 19-08-2014 12:14:59 Windows Update 26-08-2014 12:34:20 Windows Update 28-08-2014 12:26:36 Windows Update 29-08-2014 13:17:13 Windows Update 30-08-2014 11:04:32 Windows Update 31-08-2014 11:10:43 Windows Update 08-09-2014 13:10:34 Installed Java 7 Update 67 08-09-2014 13:14:24 Removed Java(TM) 6 Update 7 09-09-2014 12:51:49 Wiederherstellungsvorgang 09-09-2014 13:33:28 Removed Digital Trends Club 09-09-2014 13:49:50 Wiederherstellungsvorgang 09-09-2014 14:13:50 Windows Update 10-09-2014 14:05:45 Installed Java 7 Update 67 10-09-2014 17:13:38 Windows Update 10-09-2014 17:19:33 Wiederherstellungsvorgang 10-09-2014 18:07:11 Windows Update 10-09-2014 18:12:08 Windows Update 13-09-2014 09:00:22 Wiederherstellungsvorgang 13-09-2014 09:33:46 Windows Update 13-09-2014 09:46:45 Wiederherstellungsvorgang 13-09-2014 10:22:48 Windows Update 13-09-2014 10:47:14 Windows Update 13-09-2014 12:12:59 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {19B73077-717C-49C8-A623-7AEA5307FD09} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation) Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation) Task: {51992868-60B9-4A4B-935C-AD0EEE80F4FE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-13] (Adobe Systems Incorporated) Task: {69A242D7-6D28-43D8-9DAA-AD9C1082BC89} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {72CC2AA4-D765-472F-8771-19AAEFF872BD} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files\TuneUp Utilities 2010\OneClick.exe [2009-12-09] (TuneUp Software) Task: {7960B3A1-4BE1-46E9-A85D-EE3F7CDE06BA} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {BD307122-E5C7-4C13-BBD5-84C503C3F42E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation) Task: {BD64811B-9AD1-4CE9-BB2C-0A957DFBA0EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-08] (Google Inc.) Task: {C971F5E3-4379-4BC3-9789-51B4FA864D68} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-08] (Google Inc.) Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] () Task: {EB12F98E-1545-4237-88CE-43E80776FA6B} - System32\Tasks\Automatische Problemsuche => C:\Program Files\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-12-09] (TuneUp Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe ==================== Loaded Modules (whitelisted) ============= 2013-06-17 13:35 - 2013-06-17 13:35 - 00478400 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 15:52 - 2013-05-08 15:52 - 01270464 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2011-08-17 19:29 - 2014-08-05 10:51 - 03292288 _____ () C:\Program Files\Digital Trends Club\HI-epanel-Reporting.exe 2011-08-17 19:28 - 2014-08-05 10:51 - 01357952 _____ () C:\Program Files\Digital Trends Club\HI-epanel-Updater.exe 2012-08-16 18:46 - 2012-08-16 17:42 - 00477312 _____ () C:\Program Files\Digital Trends Club\UpdateHelper.dll 2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe 2008-10-22 07:21 - 2008-06-28 02:00 - 00241734 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2012-08-16 17:20 - 2014-02-20 13:49 - 00060544 _____ () C:\Program Files\HI-epanelLSPService\HI-epanel-WatchDog.exe 2003-06-01 08:00 - 2003-06-01 08:00 - 08470528 _____ () C:\Program Files\StarOffice7\program\icudt22l.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/15/2014 01:10:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883, Prozess-ID 0x13c8, Anwendungsstartzeit chrome.exe0. Error: (09/15/2014 01:08:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883, Prozess-ID 0x1658, Anwendungsstartzeit chrome.exe0. Error: (09/15/2014 01:08:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883, Prozess-ID 0xc14, Anwendungsstartzeit chrome.exe0. Error: (09/15/2014 00:59:05 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/14/2014 05:13:18 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/14/2014 03:31:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2014 02:59:46 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883, Prozess-ID 0x15a8, Anwendungsstartzeit chrome.exe0. Error: (09/13/2014 02:43:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883, Prozess-ID 0x1240, Anwendungsstartzeit chrome.exe0. Error: (09/13/2014 02:29:51 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Fehlerhafte Anwendung HI-epanel-WatchDog.exe, Version 0.0.0.0, Zeitstempel 0x53e09833, fehlerhaftes Modul HI-epanelLSPService.DLL, Version 14.1.87.0, Zeitstempel 0x53e0983b, Ausnahmecode 0xc0000005, Fehleroffset 0x0001e2c2, Prozess-ID 0x1494, Anwendungsstartzeit HI-epanel-WatchDog.exe0. Error: (09/13/2014 02:25:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/15/2014 01:28:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService86 Error: (09/15/2014 01:27:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService85 Error: (09/15/2014 01:26:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService84 Error: (09/15/2014 01:25:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService83 Error: (09/15/2014 01:25:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService82 Error: (09/15/2014 01:24:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService81 Error: (09/15/2014 01:23:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService80 Error: (09/15/2014 01:22:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService79 Error: (09/15/2014 01:22:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService78 Error: (09/15/2014 01:21:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: HI-epanelLSPService77 Microsoft Office Sessions: ========================= Error: (03/04/2011 11:10:29 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6324.5001, Microsoft Office Version: 12.0.6215.1000. This session lasted 513 seconds with 0 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-09-15 13:26:04.375 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:03.907 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:03.330 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:02.846 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:02.113 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:01.442 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:00.896 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:26:00.272 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:25:59.757 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\klpd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-15 13:25:59.227 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\klpd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz Percentage of memory in use: 75% Total physical RAM: 2301.44 MB Available physical RAM: 554.82 MB Total Pagefile: 4829.77 MB Available Pagefile: 2675.27 MB Total Virtual: 2047.88 MB Available Virtual: 1882.97 MB ==================== Drives ================================ Drive c: (BOOT) (Fixed) (Total:282.27 GB) (Free:190.54 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (RECOVER) (Fixed) (Total:15.81 GB) (Free:5.23 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: DAE4C35C) Partition 1: (Active) - (Size=282.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=15.8 GB) - (Type=0C) ==================== End Of Log ============================[/CODE Ich hoffe, das ist jetzt kein Problem, dass das 2. nicht in den Code-Klammern steht? Geändert von IT-Blondie (15.09.2014 um 13:41 Uhr) |
|
15.09.2014, 19:42
| #5 |
| /// the machine /// TB-Ausbilder | Alle Browser spinnen, Kasperky hat 1 Fund Adware & Co. deinstallieren
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.09.2014, 15:38
| #6 |
| | Alle Browser spinnen, Kasperky hat 1 Fund Lieber schrauber, danke für deine Anweisungen. Revo habe ich installiert und konnte 3 von 4 der mit "Attention" versehenen Einträge damit löschen. Winamp Toolbar stand in der Liste 2x, Revo zeigte mir dies aber nur1x an. Winamp selbst ist noch drauf. Combofix installiert und ausgeführt, Ergebnisse hier: Code:
ATTFilter ComboFix 14-09-16.01 - *** 16.09.2014 13:01:55.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.49.1031.18.2301.886 [GMT 2:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\program files\StarOffice7\program\quickstart.exe
c:\users\***\Schlecker_Fotoservice.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-08-16 bis 2014-09-16 ))))))))))))))))))))))))))))))
.
.
2014-09-16 11:13 . 2014-09-16 11:13 -------- d-----w- c:\users\***\AppData\Local\temp
2014-09-16 11:13 . 2014-09-16 11:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-16 10:50 . 2014-09-09 01:24 8806800 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{6FEE042B-93B0-45D7-81D0-E42761C488B3}\mpengine.dll ERROR(0x00000005)
2014-09-16 10:36 . 2014-09-16 10:36 -------- d-----w- c:\program files\VS Revo Group
2014-09-15 11:20 . 2014-09-15 11:28 -------- d-----w- C:\FRST
2014-09-13 12:14 . 2014-09-13 12:16 -------- d-----w- c:\program files\NVIDIA Corporation
2014-09-13 11:09 . 2014-06-26 22:17 99480 ----a-w- c:\windows\system32\infocardapi.dll
2014-09-13 11:09 . 2014-06-26 22:17 619664 ----a-w- c:\windows\system32\icardagt.exe
2014-09-13 11:09 . 2014-06-26 22:17 8856 ----a-w- c:\windows\system32\icardres.dll
2014-09-13 11:09 . 2014-06-06 04:28 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-09-13 11:01 . 2014-08-23 01:03 297984 ----a-w- c:\windows\system32\gdi32.dll
2014-09-13 11:01 . 2014-08-22 23:26 2054656 ----a-w- c:\windows\system32\win32k.sys
2014-09-13 10:23 . 2014-08-21 09:24 8581864 ------w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{C9876EA9-8F56-4E6A-AD1E-C605D1313A8B}\mpengine.dll ERROR(0x00000005)
2014-09-13 10:19 . 2014-06-02 10:31 2263552 ----a-w- c:\windows\system32\msi.dll
2014-09-13 10:19 . 2014-06-02 10:30 1993728 ----a-w- c:\windows\system32\authui.dll
2014-09-13 10:18 . 2014-06-02 10:30 33280 ----a-w- c:\windows\system32\appinfo.dll
2014-09-13 10:18 . 2014-06-02 08:56 82432 ----a-w- c:\windows\system32\consent.exe
2014-09-13 10:18 . 2014-06-02 10:31 332800 ----a-w- c:\windows\system32\msihnd.dll
2014-09-13 10:18 . 2014-06-14 00:44 638400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-09-13 10:18 . 2014-06-14 00:33 37376 ----a-w- c:\windows\system32\cdd.dll
2014-09-13 10:18 . 2014-07-08 00:46 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-10 13:06 . 2014-09-10 13:06 -------- d-----w- c:\users\***\AppData\Roaming\dll-files.com
2014-09-10 13:06 . 2014-09-10 13:06 -------- d-----w- c:\program files\Dll-Files.com Fixer
2014-09-10 12:27 . 2014-09-10 12:27 -------- d-----w- c:\program files\7-Zip
2014-09-09 13:26 . 2014-09-09 13:26 -------- d-----w- C:\perflogs
2014-09-07 12:30 . 2014-09-07 12:30 -------- d-----w- c:\program files\Mozilla Firefox(403)
2014-08-24 12:28 . 2014-09-13 10:37 -------- d-----w- c:\users\***\AppData\Local\Adobe
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-13 10:40 . 2012-05-27 10:14 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-09-13 10:40 . 2011-06-08 12:20 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-09-13 10:40 . 2014-05-14 07:40 17903792 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2014-08-25 04:53 . 2009-10-03 10:04 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-08-21 09:24 . 2008-10-20 02:48 8581864 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll ERROR(0x00000005)
2014-07-25 00:35 . 2014-07-25 00:35 875688 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIJBE.EXE" [2012-02-29 249440]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-04 1033512]
"UpdatePDRShortCut"="c:\program files\HomeCinema\PowerDirector\MUITransfer\MUIStartMenu.exe" [2008-01-04 222504]
"LanguageShortcut"="c:\program files\HomeCinema\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"UpdatePPShortCut"="c:\program files\HomeCinema\PowerProducer\MUITransfer\MUIStartMenu.exe" [2008-02-21 222504]
"UCam_Menu"="c:\program files\HomeCinema\YouCam\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"RtHDVCpl"="RtHDVCpl.exe" [2008-09-18 6294048]
"toolbar_eula_launcher"="c:\program files\GoogleEULA\EULALauncher.exe" [2007-02-09 16896]
"Corel Photo Downloader"="c:\program files\Corel\Corel Photo Album 6\MediaDetect.exe" [2007-02-21 112208]
"Skytel"="Skytel.exe" [2008-09-18 1833504]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-29 13560352]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-29 92704]
"HI-epanel-WatchDog"="c:\program files\HI-epanelLSPService\HI-epanel-WatchDog.exe" [2014-02-20 60544]
"EEventManager"="c:\program files\Epson Software\Event Manager\EEventManager.exe" [2012-04-02 1058912]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"ControlLSP"="c:\program files\HI-epanelLSPService\ControlLSP.exe" [2014-02-20 110720]
.
c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2007-12-7 101440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-15 11:09 1096520 ----a-w- c:\program files\Google\Chrome\Application\37.0.2062.120\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-09-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-27 10:40]
.
2014-06-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-08 14:38]
.
2014-06-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-08 14:38]
.
2014-09-16 c:\windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
- c:\windows\system32\msfeedssync.exe [2014-09-13 14:34]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: Zu Anti-Banner hinzufügen - c:\program files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4
LSP: c:\windows\system32\HI-epanelLSPService.DLL
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\
FF - prefs.js: browser.search.selectedEngine - WEB.DE Suche
FF - prefs.js: browser.startup.homepage - www.ixquick.de
FF - user.js: extensions.Softonic.autoRvrt - false
FF - user.js: extensions.Softonic.rvrt - false
FF - user.js: extensions.Softonic.hmpg - true
FF - user.js: extensions.Softonic.hmpgUrl - hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=13&cc=&mi=54504794000000000000002220032110
FF - user.js: extensions.Softonic.dfltSrch - true
FF - user.js: extensions.Softonic.srchPrvdr - Search the web (Softonic)
FF - user.js: extensions.Softonic.dnsErr - true
FF - user.js: extensions.Softonic.newTab - true
FF - user.js: extensions.Softonic.newTabUrl - hxxp://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=54504794000000000000002220032110
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StarOffice 7.lnk - c:\program files\StarOffice7\program\quickstart.exe
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-_{ADDBE07D-95B8-4789-9C76-187FFF9624B4} - c:\program files\Corel\CorelDRAW Essential Edition 3\Programs\MSILauncher {ADDBE07D-95B8-4789-9C76-187FFF9624B4}
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2014-09-16 13:13
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-09-16 13:18:44
ComboFix-quarantined-files.txt 2014-09-16 11:18
.
Vor Suchlauf: 12 Verzeichnis(se), 203.677.753.344 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 202.709.381.120 Bytes frei
.
- - End Of File - - FF6847335CC1E6949E699039538A1BF8
5C616939100B85E558DA92B899A0FC36
Was muss ich denn da nun tun? Und was genau hat Combofix da hübsches repariert? Mein Browserproblem instabiler Verbindung besteht noch Nachtrag: Nach runterfahren und Neustart ließ sich der Rechner wieder nur nach mehreren Versuchen über das Reparaturtool der Installations-CD starten! |
|
17.09.2014, 08:02
| #7 |
| /// the machine /// TB-Ausbilder | Alle Browser spinnen, Kasperky hat 1 Fund Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Alle Browser spinnen, Kasperky hat 1 Fund |
| aktiv, bildschirm, browser, computer, datei, dateien, drucker, firewall, frage, hilfe!, kein netzwerk, kis, netzwerk, office, programme, router, schwarzer bildschirm, starten, system, verbindung, vista, w-lan, win32, win7, windows, windows firewall |
Revo Uninstaller herunter.
dann auf 
und dann auf 
.
WARNUNG an die MITLESER: 
Linear-Darstellung
