![]() |
|
Plagegeister aller Art und deren Bekämpfung: HomeTab, MPSigStub.exe und mpas-fe.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
![]() ![]() | ![]() HomeTab, MPSigStub.exe und mpas-fe.exe Hallo schrauber, sorry, dass ich mich erst jetzt wieder gemeldet habe, aber ich hatte ziemlichen Stress. Das mit AdwCleaner und JRT habe ich leider so verstanden, dass ich AdwCleaner nochmal ausführen soll, damit JRT funktioniert, da ich ja AdwCleaner vor JRT ausführen sollte. Hier sind AdwCleaner-Dateien für vier verschiedene Ausführungen: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 02/08/2013 um 19:22:41 erstellt # Aktualisiert am 19/07/2013 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzer : unknownname - NOTEBOOK # Bootmodus : Normal # Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** ***** [Registrierungsdatenbank] ***** ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16635 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js [OK] Die Datei ist sauber. Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22] AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25] AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24] AdwCleaner[S3].txt - [1173 octets] - [09/07/2013 19:56:56] AdwCleaner[S4].txt - [1294 octets] - [02/08/2013 18:52:00] AdwCleaner[S5].txt - [1164 octets] - [02/08/2013 19:22:41] ########## EOF - C:\AdwCleaner[S5].txt - [1224 octets] ########## Code:
ATTFilter # AdwCleaner v2.304 - Datei am 09/07/2013 um 13:41:24 erstellt # Aktualisiert am 03/07/2013 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzer : unknownname - NOTEBOOK # Bootmodus : Normal # Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe # Option [Löschen] **** [Dienste] **** Gestoppt & Gelöscht : SystemStoreService ***** [Dateien / Ordner] ***** Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater ***** [Registrierungsdatenbank] ***** ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16611 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js [OK] Die Datei ist sauber. Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22] AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25] AdwCleaner[S2].txt - [1084 octets] - [09/07/2013 13:41:24] ########## EOF - C:\AdwCleaner[S2].txt - [1144 octets] ########## Code:
ATTFilter # AdwCleaner v2.304 - Datei am 09/07/2013 um 19:56:56 erstellt # Aktualisiert am 03/07/2013 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzer : unknownname - NOTEBOOK # Bootmodus : Normal # Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** ***** [Registrierungsdatenbank] ***** ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16611 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js [OK] Die Datei ist sauber. Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22] AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25] AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24] AdwCleaner[S3].txt - [1044 octets] - [09/07/2013 19:56:56] ########## EOF - C:\AdwCleaner[S3].txt - [1104 octets] ########## Code:
ATTFilter # AdwCleaner v2.306 - Datei am 02/08/2013 um 18:52:00 erstellt # Aktualisiert am 19/07/2013 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzer : unknownname - NOTEBOOK # Bootmodus : Normal # Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Ordner Gelöscht : C:\Users\unknownname\AppData\Local\Freemium ***** [Registrierungsdatenbank] ***** ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16635 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js [OK] Die Datei ist sauber. Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22] AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25] AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24] AdwCleaner[S3].txt - [1173 octets] - [09/07/2013 19:56:56] AdwCleaner[S4].txt - [1165 octets] - [02/08/2013 18:52:00] ########## EOF - C:\AdwCleaner[S4].txt - [1225 octets] ########## FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013 Ran by unknownname (administrator) on 03-08-2013 09:17:49 Running from C:\Users\unknownname\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe (Lenovo.) C:\Windows\system32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe (Ericsson AB) C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe (Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe (AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe (AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE (Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE (Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Secunia) C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Dropbox, Inc.) C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe (Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe (Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe () C:\Program Files\lenovo\lenovo solution center\lsc.exe (Lenovo) C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13519432 2013-04-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor) HKLM\...\Run: [PSQLLauncher] - C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [85864 2012-09-21] (Authentec Inc.) HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63376 2012-09-07] (Lenovo) HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [228744 2012-09-20] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293232 2012-11-26] (Lenovo Group Limited) HKLM\...\Run: [PasswordManager] - C:\Program Files\Lenovo\Password Manager\password_manager.exe [1534888 2012-10-23] (Lenovo Group Limited) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKCU\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [423144 2013-04-27] (BillP Studios) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [PWMTRV] - rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor [x] HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-02-15] (Intel Corporation) HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.) HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo) HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-02-28] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-28] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe (Secunia) Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms} SearchScopes: HKCU - DefaultScope {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms} SearchScopes: HKCU - {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited) BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll () BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation) BHO-x32: No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File BHO-x32: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files (x86)\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited) BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll () BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () Toolbar: HKLM-x32 - No Name - {ba696155-d96e-4281-b467-0367a0456474} - No File Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll () Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll () Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll () Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default FF Homepage: about:newtab FF Keyword.URL: https://www.google.de/search?ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: WOT - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: adblockpopups - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\adblockpopups@jessehakanen.net.xpi FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 ==================== Services (Whitelisted) ================= R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2556384 2013-07-02] (G Data Software AG) S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-09-24] (Lenovo.) R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [296808 2012-08-30] (AuthenTec, Inc) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2926672 2013-03-22] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG) R2 GobiQDLService; C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [312688 2011-11-25] (Sierra Wireless, Inc.) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-02-15] (Intel Corporation) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187760 2012-11-26] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] () S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) R2 WMCoreService; C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [x] ==================== Drivers (Whitelisted) ==================== R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-12] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-07-22] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-06-03] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-07-22] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software) R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-12] (G Data Software AG) R3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [118016 2009-05-11] (Lenovo) R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11525872 2013-02-27] (Intel Corporation) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-02-28] (NVIDIA Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia) S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-18] (Synaptics Incorporated) R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.) R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.) R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation) S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [x] S3 btwaudio; system32\drivers\btwaudio.sys [x] S3 btwavdt; system32\drivers\btwavdt.sys [x] S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x] S3 btwrchid; system32\DRIVERS\btwrchid.sys [x] S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-02 19:22 - 2013-08-02 19:23 - 00001293 _____ C:\AdwCleaner[S5].txt 2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt 2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe 2013-08-02 09:28 - 2013-08-02 09:30 - 00000000 ____D C:\32788R22FWJFW 2013-08-01 20:27 - 2013-08-02 09:22 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web 2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice 2013-07-28 15:28 - 2013-07-28 15:36 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files 2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC ) C:\Users\unknownname\Downloads\flashrecovery.exe 2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk 2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk 2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk 2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery 2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-07-28 12:14 - 2013-07-28 12:16 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe 2013-07-25 07:57 - 2013-07-25 08:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync 2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync 2013-07-19 09:51 - 2013-07-19 11:04 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v# 2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v 2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v 2013-07-12 22:25 - 2013-07-12 22:28 - 00000000 ____D C:\Windows\system32\MRT 2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt 2013-07-11 13:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-11 13:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-11 13:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-11 13:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-11 13:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-11 13:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-11 13:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-11 13:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-11 13:04 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-11 13:04 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-11 13:04 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-11 13:04 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-11 13:04 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-11 13:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-11 13:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-11 13:04 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-11 13:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-11 13:04 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-11 13:04 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-11 13:04 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-11 13:04 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-11 13:04 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-11 08:24 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-11 08:24 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-11 08:24 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-11 08:24 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-11 08:24 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-11 08:24 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-11 08:24 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-10 09:58 - 2013-07-10 09:59 - 15474652 _____ (The Git Development Community ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe 2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh 2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub 2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub 2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub 2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc 2013-07-10 09:51 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment 2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe 2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0 2013-07-09 19:56 - 2013-07-09 19:57 - 00001173 _____ C:\AdwCleaner[S3].txt 2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT 2013-07-09 13:41 - 2013-07-09 13:42 - 00001213 _____ C:\AdwCleaner[S2].txt 2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe 2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt 2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt 2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt 2013-07-09 09:41 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2013-07-09 09:41 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2013-07-09 09:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-07-09 09:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-07-09 09:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-07-09 09:41 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2013-07-09 09:41 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2013-07-09 09:41 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2013-07-09 09:39 - 2013-07-09 11:08 - 00000000 ____D C:\Qoobox 2013-07-09 09:38 - 2013-07-09 11:03 - 00000000 ____D C:\Windows\erdnt 2013-07-09 09:35 - 2013-08-02 09:29 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe 2013-07-07 09:56 - 2013-07-07 10:02 - 00035057 _____ C:\Users\unknownname\Desktop\Addition.txt 2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST 2013-07-07 08:04 - 2013-07-07 08:56 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt 2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 _____ C:\Windows\msxml4-KB2758694-deu.LOG 127 ==================== One Month Modified Files and Folders ======= 2013-08-03 09:14 - 2013-08-03 09:14 - 01781485 _____ (Farbar) C:\Users\unknownname\Desktop\FRST64.exe 2013-08-03 09:14 - 2012-12-18 02:33 - 01411395 _____ C:\Windows\WindowsUpdate.log 2013-08-03 09:14 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-03 09:14 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-03 09:07 - 2013-04-24 13:58 - 00000000 ___RD C:\Users\unknownname\Dropbox 2013-08-03 09:07 - 2013-04-24 13:53 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Dropbox 2013-08-03 09:06 - 2012-12-17 22:54 - 00000000 ____D C:\ProgramData\NVIDIA 2013-08-03 09:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-03 09:06 - 2009-07-14 06:51 - 00079850 _____ C:\Windows\setupact.log 2013-08-02 22:02 - 2012-12-17 21:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-02 19:23 - 2013-08-02 19:22 - 00001293 _____ C:\AdwCleaner[S5].txt 2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt 2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe 2013-08-02 09:30 - 2013-08-02 09:28 - 00000000 ____D C:\32788R22FWJFW 2013-08-02 09:29 - 2013-07-09 09:35 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe 2013-08-02 09:22 - 2013-08-01 20:27 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web 2013-08-01 18:49 - 2012-12-19 23:20 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC 2013-08-01 18:40 - 2013-06-03 11:37 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-08-01 17:13 - 2012-12-19 21:44 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC 2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2013-08-01 10:35 - 2013-04-23 12:43 - 00000000 ____D C:\Users\unknownname\Downloads\kommpar 2013-07-31 17:49 - 2013-03-20 21:47 - 00000000 ____D C:\Users\unknownname\Documents\Visual Studio 2012 2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice 2013-07-30 17:13 - 2013-04-23 08:51 - 00000000 ____D C:\Users\unknownname\Downloads\semprog 2013-07-29 08:43 - 2009-07-14 06:45 - 00296888 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-28 16:14 - 2012-12-18 22:31 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT 2013-07-28 15:36 - 2013-07-28 15:28 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files 2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC ) C:\Users\unknownname\Downloads\flashrecovery.exe 2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk 2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk 2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk 2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery 2013-07-28 15:17 - 2012-12-19 21:53 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT 2013-07-28 15:17 - 2010-11-21 08:50 - 00699666 _____ C:\Windows\system32\perfh007.dat 2013-07-28 15:17 - 2010-11-21 08:50 - 00149774 _____ C:\Windows\system32\perfc007.dat 2013-07-28 15:17 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-28 15:13 - 2013-02-12 15:26 - 00107128 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2013-07-28 15:13 - 2013-02-12 15:26 - 00016944 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4 2013-07-28 12:16 - 2013-07-28 12:14 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe 2013-07-26 08:18 - 2010-11-21 05:47 - 00451066 _____ C:\Windows\PFRO.log 2013-07-25 08:29 - 2013-07-25 07:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync 2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync 2013-07-24 22:12 - 2012-12-17 21:03 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-07-24 22:12 - 2012-12-17 21:03 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-07-24 22:12 - 2012-12-17 21:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-07-24 22:11 - 2012-12-19 21:43 - 00000000 ____D C:\Users\unknownname\AppData\Local\Adobe 2013-07-24 22:08 - 2012-12-18 21:15 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Adobe 2013-07-23 08:15 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-22 20:42 - 2012-12-17 23:10 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2013-07-22 20:42 - 2012-12-17 23:10 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2013-07-21 09:30 - 2012-12-19 21:57 - 00000000 ____D C:\Windows\System32\Tasks\TVT 2013-07-21 09:30 - 2012-12-19 21:31 - 00000000 ____D C:\Program Files (x86)\Lenovo 2013-07-20 08:42 - 2013-05-30 16:07 - 00031351 _____ C:\Users\Public\Documents\kommpar.odt 2013-07-19 18:18 - 2013-05-23 21:07 - 00000000 ____D C:\Users\unknownname\Downloads\datamining 2013-07-19 11:04 - 2013-07-19 09:51 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v# 2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v 2013-07-18 15:40 - 2012-12-17 23:08 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Apple Computer 2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v 2013-07-17 08:27 - 2013-02-14 16:27 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2013-07-16 13:30 - 2012-12-18 02:33 - 00000000 ____D C:\Users\unknownname 2013-07-16 12:53 - 2013-03-25 21:02 - 00000000 ____D C:\Users\unknownname\Documents\amos 2013-07-12 22:28 - 2013-07-12 22:25 - 00000000 ____D C:\Windows\system32\MRT 2013-07-12 12:23 - 2013-03-29 12:08 - 00000000 ____D C:\Users\unknownname\Documents\Krypto 2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt 2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-11 15:26 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-10 10:02 - 2013-04-24 07:36 - 00000000 ____D C:\Program Files (x86)\Git 2013-07-10 09:59 - 2013-07-10 09:58 - 15474652 _____ (The Git Development Community ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe 2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub 2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub 2013-07-10 09:57 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment 2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh 2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub 2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc 2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe 2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0 2013-07-09 19:57 - 2013-07-09 19:56 - 00001173 _____ C:\AdwCleaner[S3].txt 2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT 2013-07-09 13:42 - 2013-07-09 13:41 - 00001213 _____ C:\AdwCleaner[S2].txt 2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe 2013-07-09 13:22 - 2013-06-02 08:36 - 00004128 _____ C:\Windows\System32\Tasks\Software Updater 2013-07-09 13:22 - 2013-06-02 08:36 - 00004106 _____ C:\Windows\System32\Tasks\Software Updater Ui 2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt 2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt 2013-07-09 11:08 - 2013-07-09 09:39 - 00000000 ____D C:\Qoobox 2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt 2013-07-09 11:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2013-07-09 11:04 - 2012-12-18 02:34 - 00000000 ___RD C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-09 11:03 - 2013-07-09 09:38 - 00000000 ____D C:\Windows\erdnt 2013-07-09 10:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2013-07-09 10:57 - 2009-07-14 04:34 - 17301504 _____ C:\Windows\system32\config\system.bak 2013-07-09 10:57 - 2009-07-14 04:34 - 112197632 _____ C:\Windows\system32\config\software.bak 2013-07-09 10:57 - 2009-07-14 04:34 - 05242880 _____ C:\Windows\system32\config\default.bak 2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\security.bak 2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\sam.bak 2013-07-07 10:02 - 2013-07-07 09:56 - 00035057 _____ C:\Users\unknownname\Desktop\Addition.txt 2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST 2013-07-07 08:56 - 2013-07-07 08:04 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt 2013-07-04 15:43 - 2013-06-25 14:32 - 00003163 _____ C:\Users\unknownname\weka.log 2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 _____ C:\Windows\msxml4-KB2758694-deu.LOG ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-02 13:19 ==================== End Of Log ============================ Und die Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013 Ran by unknownname at 2013-08-03 09:18:28 Running from C:\Users\unknownname\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727) Tools for .Net 3.5 (x32 Version: 3.11.50727) Adobe AIR (x32 Version: 3.8.0.870) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Anzeige am Bildschirm (Version: 7.06.00) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Astroburn Lite (x32 Version: 1.7.0.0175) AuthenTec TrueSuite (Version: 5.1.100.49) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0) Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0) Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0) Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0) Bonjour (Version: 3.0.0.10) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103) Cisco EAP-FAST Module (x32 Version: 2.2.14) Cisco LEAP Module (x32 Version: 1.0.19) Cisco PEAP Module (x32 Version: 1.1.6) Coq Version 8.4pl2 (x32 Version: 8.4pl2) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727) Dolby Advanced Audio v2 (x32 Version: 7.2.8000.16) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298) Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298) Dropbox (HKCU Version: 2.0.22) ElsterFormular (x32 Version: 14.0.0.10899) Energie-Manager (x32 Version: 6.36) Entity Framework Designer for Visual Studio 2012 - enu (x32 Version: 11.1.21009.00) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.21009.00) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60) Free Download Manager 3.9.2 (x32) Free Driver Scout (Version: 1.0.0.111) Free Driver Scout (x32 Version: 1.0.0.111) Free System Utilities (x32 Version: 1.1.0.95) Free SystemUtilities (x32 Version: 1.1.0.95) FreeFileSync 5.16 (x32 Version: 5.16) G Data InternetSecurity 2014 (x32 Version: 24.0.2.5) Git version 1.8.3-preview20130601 (x32 Version: 1.8.3-preview20130601) GitHub (HKCU Version: 1.0.52.0) Haskell Platform 2012.4.0.0 (x32) iCloud (Version: 2.1.2.8) IIS 8.0 Express (Version: 8.0.1557) IIS Express Application Compatibility Database for x64 IIS Express Application Compatibility Database for x86 ImgBurn (x32 Version: 2.5.7.0) InstallShield 2012 Spring Limited Edition (x32 Version: 19.00.0000) Integrated Camera Driver Installer Package Ver.1.2.1.18 (x32 Version: 1.2.1.18) Intel PROSet Wireless Intel(R) Control Center (x32 Version: 1.2.1.1010) Intel(R) Management Engine Components (x32 Version: 9.0.0.1310) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (x32 Version: 9.17.10.2843) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.8.251) Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637) Intel® Trusted Connect Service Client (Version: 1.27.757.1) iTunes (Version: 11.0.4.4) Java 7 Update 11 (x32 Version: 7.0.110) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Java SE Development Kit 7 Update 13 (64-bit) (Version: 1.7.0.130) Java SE Development Kit 7 Update 17 (64-bit) (Version: 1.7.0.170) Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250) JavaScript Tooling (Version: 11.0.60315) JavaScript Tooling (x32 Version: 11.0.60315) JetBrains ReSharper 7.1.3 (x32 Version: 7.1.3000) JetBrains TeamCity Addin 7.1 (x32 Version: 7.1.646) Lenovo Patch Utility (x32 Version: 1.3.2.4) Lenovo Patch Utility 64 bit (Version: 1.3.2.4) Lenovo Power Management Driver (Version: 1.67.00.02) Lenovo Solution Center (Version: 2.0.020.00) Lenovo System Update (x32 Version: 5.02.0018) LocalESPC (x32 Version: 8.59.25584) LocalESPCui for de-de (x32 Version: 8.59.25584) LocalESPCui for en-us (x32 Version: 8.59.25584) MAGIX Speed burnR (x32 Version: 7.0.1.27) MAGIX Webradio Recorder 5 5.0.0.326 (D) (x32 Version: 5.0.0.326) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709) Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0) Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0) Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0) Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0) Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0) Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0) Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0) Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0) Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727) Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727) Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60517) Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.60517) Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727) Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003) Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931) Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929) Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929) Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0) Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (x32 Version: 11.1.20627.00) Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1) Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 x64 Designtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610) Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610) Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727) Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303) Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315) Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315) Microsoft Visual Studio 2012 Language Pack - ENU (x32 Version: 11.0.50727.1) Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727) Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 SharePoint Developer Tools ENU Language Pack (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727) Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727) Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727) Microsoft Web Deploy 3.0 (Version: 3.1236.1631) Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0) Microsoft Web Deploy dbSqlPackage Provider - enu (x32 Version: 10.3.20225.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0) Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0) Microsoft Web Platform Installer 4.0 (Version: 4.0.1622) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60) Mobile Broadband Drivers (x32 Version: 7.2.3.2) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Mp3tag v2.54 (x32 Version: v2.54) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Notepad++ (x32 Version: 6.3.2) NUnit 2.6.2 (x32 Version: 2.6.2.12296) NVIDIA 3D Vision Treiber 311.00 (Version: 311.00) NVIDIA Grafiktreiber 311.00 (Version: 311.00) NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0) NVIDIA Install Application (Version: 2.1002.108.688) NVIDIA nView 136.53 (Version: 136.53) NVIDIA Optimus 1.11.3 (Version: 1.11.3) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1100) NVIDIA Systemsteuerung 311.00 (Version: 311.00) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) OpenOffice 4.0.0 (x32 Version: 4.00.9702) ovo Auto Scroll Utility (Version: 2.00) Perforce Visual Components (Version: 131.61.1503) PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1) PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1) Protege 3.4.8 (x32 Version: 1.0.0.0) QuickTime (x32 Version: 7.74.80.86) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6886) RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01) Secunia PSI (3.0.0.7009) (x32 Version: 3.0.0.7009) Sierra Wireless QMI Lenovo Driver Package (x32 Version: 1.0.45.0) Skype™ 6.5 (x32 Version: 6.5.158) Smart Flash Recovery v. 2.0 (x32 Version: 2.0) SpywareBlaster 5.0 (x32 Version: 5.0.0) StreamTransport version: 1.0.2.2171 (x32) Switch Sound File Converter (x32) ThinkPad UltraNav Driver (Version: 16.2.19.7) ThinkPad Wireless LAN Adapter Software (x32 Version: 1.00.0031.1) ThinkVantage Access Connections (x32 Version: 5.97) ThinkVantage Communications Utility (Version: 3.0.40.0) ThinkVantage Fingerprint Software (Version: 5.9.8.7264) ThinkVantage Password Manager (x32 Version: 4.10.20.0) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9) TrueCrypt (x32 Version: 7.1a) Update for (KB2504637) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219) Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727) Visual Studio 2012 Prerequisites (Version: 11.0.50727) Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610) Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602) VLC media player 2.0.7 (x32 Version: 2.0.7) WavePad Sound Editor (x32) WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0) WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0) WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0) WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0) WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0) Weka 3.6.9 (x32 Version: 3.6.9) Windows App Certification Kit Native Components (Version: 8.59.29736) Windows App Certification Kit x64 (x32 Version: 8.59.29750) Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601) Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601) Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584) Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584) Windows Software Development Kit (x32 Version: 8.59.25584) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584) Windows XP Targeting with C++ (Version: 11.0.51106) Windows XP Targeting with C++ (x32 Version: 11.0.51106) WinPatrol (Version: 28.1.2013.0) WinRAR 4.20 (64-Bit) (Version: 4.20.0) WOT for Internet Explorer (Version: 12.8.2.0) ==================== Restore Points ========================= 22-07-2013 11:04:45 Geplanter Prüfpunkt 23-07-2013 06:19:07 Windows Update 26-07-2013 06:22:54 Windows Update 28-07-2013 10:17:42 OpenOffice 4.0.0 wird installiert 30-07-2013 06:10:41 Windows Update 02-08-2013 07:02:02 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2013-07-09 10:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {35B88FFE-29A9-4B59-BF70-7F10142358A3} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] () Task: {3AFABB19-B0DA-46BF-9A84-25D645784EA0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4C5048C3-E0DE-475B-B22B-E39FFF8EB650} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File Task: {5664DAD4-3366-4EDA-9497-A5D954262EE9} - System32\Tasks\Freemium1ClickMaint => C:\Users\unknownname\Downloads\1Click.exe No File Task: {578E90FE-CE2E-4714-BC9A-6FF647FE07D5} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe No File Task: {6EBFA79C-425B-4383-94B9-7D38F8264125} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1260871158-490153657-2048939727-1004 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {7A5BCE17-FBAF-45D1-827B-27D43837DB7B} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-03-14] (Lenovo) Task: {7B614847-D9E7-49F6-9604-64DDF030314F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24] (Adobe Systems Incorporated) Task: {84AC90CA-C832-429C-AFB1-F086F4AAD5F7} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {93072582-895F-4E70-BF3D-4134D37C384F} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File Task: {9D450B53-E0DB-4974-8293-98BD9BA35620} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2012-12-14] (NCH Software) Task: {A13B696C-2973-4DCE-8601-A4888770A00A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {AA120A75-46DF-4CF9-96AB-B86410323489} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe No File Task: {EAB23475-CFF3-4305-B8B4-D0ACFE78B286} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2013-03-14] () Task: {EC6C84A9-65C3-4C52-811F-A5877AB0F548} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-03-14] () Task: {FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {FE8CA6CE-2709-4DCC-AA94-60CDA04A8050} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2012-09-07] (NCH Software) Task: {FF008279-3B42-4C52-9C93-730470D95D66} - System32\Tasks\DSite => C:\Users\unknownname\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Faulty Device Manager Devices ============= Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (08/03/2013 09:06:36 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 09:39:10 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:25:11 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:20:04 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:53:53 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:41:15 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 90080108 Error: (08/02/2013 09:21:29 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80004005 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT) Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0 System errors: ============= Error: (08/03/2013 09:11:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.155.1346.0) Error: (08/03/2013 09:08:56 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/03/2013 09:08:56 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/02/2013 09:41:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/02/2013 09:41:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/02/2013 07:27:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (08/02/2013 07:27:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (08/02/2013 07:23:39 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/02/2013 07:23:39 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht. Error: (08/02/2013 07:22:25 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Microsoft Office Sessions: ========================= Error: (08/03/2013 09:06:36 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 09:39:10 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:25:11 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 07:20:04 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:53:53 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/02/2013 06:41:15 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 90080108 Error: (08/02/2013 09:21:29 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80004005 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path43900 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path25900 Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT) Description: Eap method DLL path17900 CodeIntegrity Errors: =================================== Date: 2013-07-26 17:16:22.123 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-07-09 10:53:40.824 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-07-09 10:53:40.746 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-26 21:15:29.409 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-26 21:13:17.988 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-18 08:08:51.693 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-14 15:30:34.990 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-06-13 21:01:59.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 21:39:53.081 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-05-23 20:00:44.426 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 38% Total physical RAM: 7889.63 MB Available physical RAM: 4816.05 MB Total Pagefile: 15777.44 MB Available Pagefile: 12442.07 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:199.9 GB) (Free:55.44 GB) NTFS (Disk=0 Partition=2) Drive d: () (Fixed) (Total:265.76 GB) (Free:256.74 GB) NTFS (Disk=0 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000E3F0D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=266 GB) - (Type=07 NTFS) ==================== End Of Log ============================ unknownname |
![]() |
Themen zu HomeTab, MPSigStub.exe und mpas-fe.exe |
anmelden, anmeldung, anwendung, ausgehende, autostart, beim starten, c:\windows, download, files, firefox, folge, g-data, hallo zusammen, home, hometab, meldung, modul, mpas-fe.exe, mpsigstub.exe, nicht mehr, nichts, ordner, plug-in, registry, security, starten, system32, verbindung, windows |