| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei SystemstartWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.08.2013, 10:20
| #16 |
 |  Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei SystemstartFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-08-2013
Ran by *** (administrator) on 21-08-2013 11:16:47
Running from C:\Users\***\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(Lenovo.) C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
() C:\Windows\system32\vaultsvd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\ACTray.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\SvcGuiHlpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\password_manager.exe
() C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe
(Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
(Microsoft Corporation) C:\Windows\system32\DeviceDisplayObjectProvider.exe
(Microsoft Corporation) C:\Windows\system32\DXPServer.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3110200 2011-06-10] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2342200 2012-07-05] (Synaptics Incorporated)
HKLM\...\Run: [ACTray] - C:\Program Files\Lenovo\Access Connections\ACTray.exe [433216 2011-10-20] (Lenovo)
HKLM\...\Run: [TP-Link USB Printer Controller] - C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4428800 2012-03-23] ()
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKCU\...\Run: [NTRedirect] - C:\Windows\system32\rundll32.exe "C:\Users\***\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run [x] <===== ATTENTION
HKU\Default\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
IMEO\htcupctloader.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
IMEO\itunes.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
IMEO\ncc.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
ShortcutTarget: VPN Client.lnk -> C:\Windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox;
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {A8945019-18BA-4ECC-B55E-160FD84D07CE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=386496&p={searchTerms}
SearchScopes: HKCU - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL =
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6E46B758-E4D6-4596-807B-A57756BA850A}: [NameServer]212.23.115.148 212.23.115.132
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default
FF user.js: detected! => C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default\user.js
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @parallelgraphics.com/Cortona - C:\Program Files\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ShareazaWebSearch.xml
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
Chrome:
=======
CHR DefaultSearchURL: (Google) - hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&channel=fflb&q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&channel=rcs
CHR DefaultSuggestURL: (Google) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Cortona3D Viewer) - C:\Program Files\Mozilla Firefox\plugins\npCortona.dll (ParallelGraphics)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
========================== Services (Whitelisted) =================
R2 AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [134208 2011-10-20] (Lenovo)
R2 AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [269376 2011-10-20] (Lenovo)
R2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509448 2012-03-15] (Intel Corporation)
R2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2012-04-23] (Intel(R) Corporation)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
S4 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [50536 2010-07-27] (Lenovo Group Limited)
R2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [45496 2010-04-07] (Lenovo Group Limited)
S4 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [74088 2010-07-27] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] ()
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665120 2012-05-16] (Lenovo Group Limited)
R2 ScrybeUpdater; C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)
S2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-04-11] ()
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)
R2 ucsvc32; C:\Windows\system32\vaultsvd.exe [65024 2012-09-15] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2759984 2012-06-25] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10364416 2012-06-03] (Intel Corporation)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [816792 2010-11-19] ()
S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [82984 2007-06-25] (MCCI Corporation)
S3 s117mdfl; C:\Windows\System32\DRIVERS\s117mdfl.sys [14888 2007-06-25] (MCCI Corporation)
S3 s117mdm; C:\Windows\System32\DRIVERS\s117mdm.sys [108456 2007-06-25] (MCCI Corporation)
S3 s117mgmt; C:\Windows\System32\DRIVERS\s117mgmt.sys [100264 2007-06-25] (MCCI Corporation)
S3 s117nd5; C:\Windows\System32\DRIVERS\s117nd5.sys [22952 2007-06-25] (MCCI Corporation)
S3 s117obex; C:\Windows\System32\DRIVERS\s117obex.sys [98344 2007-06-25] (MCCI Corporation)
S3 s117unic; C:\Windows\System32\DRIVERS\s117unic.sys [98856 2007-06-25] (MCCI Corporation)
S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [57856 2010-01-07] (SCM Microsystems Inc.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-07-05] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [11976 2011-05-30] (Authentec Inc.)
R3 TPLINKUDSMBus; C:\Windows\System32\Drivers\TPLINKUDSMBus.sys [89728 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TPLINKUDSTcpBus; C:\Windows\System32\Drivers\TPLINKUDSTcpBus.sys [146304 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10064 2011-06-06] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13752 2009-09-29] ()
S3 catchme; \??\C:\Users\***\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL
2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat
2013-08-19 10:13 - 2013-08-19 11:00 - 00033932 _____ C:\Users\***\Desktop\20130819_FRST.txt
2013-08-19 09:27 - 2013-08-19 10:59 - 00002447 _____ C:\Users\***\Desktop\20130819_JRT.txt
2013-08-19 09:26 - 2013-08-19 09:26 - 00002459 _____ C:\Users\***\Desktop\JRT.txt
2013-08-19 09:14 - 2013-08-19 10:58 - 00002994 _____ C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-08-19 09:11 - 2013-08-19 09:11 - 00003018 _____ C:\AdwCleaner[S1].txt
2013-08-19 08:22 - 2013-08-21 17:41 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-18 16:21 - 2013-08-18 16:46 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv
2013-08-18 16:18 - 2013-08-18 16:18 - 00021377 _____ C:\ComboFix.txt
2013-08-18 16:00 - 2013-08-18 16:18 - 00000000 ____D C:\ComboFix
2013-08-18 16:00 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-18 15:53 - 2013-08-18 16:18 - 00000000 ____D C:\Qoobox
2013-08-17 18:43 - 2013-08-17 18:43 - 00032029 _____ C:\Users\***\Desktop\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00032061 _____ C:\Users\***\Downloads\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00030729 _____ C:\Users\***\Downloads\FRST.txt
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 10:15 - 2013-08-16 10:32 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 07:41 - 2013-08-16 12:38 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 07:41 - 2013-08-16 10:13 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 14:55 - 2013-08-15 18:05 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:48 - 2013-08-16 13:11 - 00000000 ____D C:\Program Files\JDownloader
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:02 - 2013-08-14 23:03 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 22:59 - 2013-08-14 23:01 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:19 - 2013-08-14 21:21 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:56 - 2013-08-14 19:58 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:53 - 2013-08-14 19:54 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:43 - 2013-08-14 19:44 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:22 - 2013-08-14 19:24 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 17:34 - 2013-08-14 17:49 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:55 - 2013-08-14 14:57 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 07:52 - 2013-08-12 08:13 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-02 10:16 - 2013-08-02 10:44 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-26 13:57 - 2013-07-26 14:17 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
2013-07-24 15:24 - 2013-08-14 18:17 - 00000000 ____D C:\Users\***\Documents\DGVT
==================== One Month Modified Files and Folders =======
2013-08-21 17:41 - 2013-07-10 18:36 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2013-08-21 17:41 - 2013-06-14 08:56 - 00000000 ___HD C:\Windows\system32\Settings
2013-08-21 17:41 - 2013-06-12 21:33 - 00000000 ____D C:\Windows\erdnt
2013-08-21 17:41 - 2013-06-10 11:41 - 00000000 ____D C:\Users\***\Downloads\RecBoot_1.3_Windows
2013-08-21 17:41 - 2010-11-20 00:06 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-21 17:41 - 2010-11-19 12:50 - 00000000 ____D C:\ProgramData\Lenovo
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2013-08-21 17:40 - 2013-06-14 12:02 - 00000000 ____D C:\Program Files\Common Files\Java
2013-08-21 17:40 - 2013-06-14 10:51 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iPod
2013-08-21 17:40 - 2013-05-17 13:25 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-21 17:40 - 2012-10-24 10:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-08-21 17:40 - 2012-09-11 08:19 - 00000000 ____D C:\ProgramData\Intel
2013-08-21 17:40 - 2012-09-11 08:18 - 00000000 ____D C:\Program Files\Cisco
2013-08-21 17:40 - 2012-08-15 16:10 - 00000000 ____D C:\Program Files\Google
2013-08-21 17:40 - 2012-07-05 10:19 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-08-21 17:40 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-08-21 17:40 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-08-21 17:40 - 2012-05-31 19:48 - 00000000 ____D C:\Program Files\Oracle
2013-08-21 17:40 - 2012-04-02 09:52 - 00000000 ____D C:\Program Files\Common Files\L&H
2013-08-21 17:40 - 2011-12-23 11:25 - 00000000 ____D C:\Program Files\RUB
2013-08-21 17:40 - 2011-10-23 17:39 - 00000000 ____D C:\Program Files\mp3DirectCut
2013-08-21 17:40 - 2011-10-23 17:27 - 00000000 ____D C:\Program Files\MP3-Cutter
2013-08-21 17:40 - 2011-08-01 07:58 - 00000000 ____D C:\Program Files\Win7codecs
2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\Program Files\TuneUp Utilities 2011
2013-08-21 17:40 - 2011-07-18 11:27 - 00000000 ____D C:\Program Files\Amazon
2013-08-21 17:40 - 2011-06-24 13:25 - 00000000 ____D C:\Program Files\Common Files\ParallelGraphics
2013-08-21 17:40 - 2011-06-05 15:42 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Spirent Communications
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\HTC
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-08-21 17:40 - 2011-05-17 22:32 - 00000000 ____D C:\Program Files\FreeTime
2013-08-21 17:40 - 2011-05-16 08:15 - 00000000 ____D C:\ProgramData\Skype Extras
2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Riva
2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Common Files\SWF Studio
2013-08-21 17:40 - 2011-03-09 19:21 - 00000000 ____D C:\ProgramData\elsterformular
2013-08-21 17:40 - 2011-02-28 16:46 - 00000000 ____D C:\Program Files\Citavi 3
2013-08-21 17:40 - 2011-02-28 16:45 - 00000000 ____D C:\ProgramData\Swiss Academic Software
2013-08-21 17:40 - 2011-02-14 13:47 - 00000000 ____D C:\Program Files\gs
2013-08-21 17:40 - 2011-02-13 15:08 - 00000000 ____D C:\Program Files\SecondLifeViewer2
2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Common Files\Deterministic Networks
2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Cisco Systems
2013-08-21 17:40 - 2011-01-11 18:00 - 00000000 ____D C:\Program Files\OLYMPUS
2013-08-21 17:40 - 2010-12-23 18:35 - 00000000 ____D C:\ProgramData\SafeNet Sentinel
2013-08-21 17:40 - 2010-12-23 18:33 - 00000000 ____D C:\Program Files\Common Files\IBM
2013-08-21 17:40 - 2010-12-23 18:32 - 00000000 ____D C:\Program Files\IBM
2013-08-21 17:40 - 2010-12-21 20:11 - 00000000 ____D C:\Program Files\Adobe
2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Nero
2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Common Files\Nero
2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ___RD C:\Program Files\Skype
2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ____D C:\ProgramData\Skype
2013-08-21 17:40 - 2010-11-29 22:16 - 00000000 ____D C:\Program Files\SeaMonkey
2013-08-21 17:40 - 2010-11-29 20:53 - 00000000 ____D C:\Program Files\Nvu
2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\ProgramData\eBay
2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\Program Files\eBay
2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\ProgramData\Apple Computer
2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-08-21 17:40 - 2010-11-20 09:59 - 00000000 ____D C:\ProgramData\Apple
2013-08-21 17:40 - 2010-11-20 09:57 - 00000000 ____D C:\Program Files\BASE&E-Plus
2013-08-21 17:40 - 2010-11-19 23:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-08-21 17:40 - 2010-11-19 23:21 - 00000000 __RHD C:\MSOCache
2013-08-21 17:40 - 2010-11-19 04:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Windows Live
2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Common Files\Windows Live
2013-08-21 17:40 - 2010-11-19 04:33 - 00000000 ____D C:\Program Files\NetWaiting
2013-08-21 17:40 - 2010-11-19 04:29 - 00000000 ____D C:\Program Files\PC-Doctor
2013-08-21 17:40 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\Verizon Wireless
2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\ProgramData\Adobe
2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\Program Files\ThinkVantage
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\ProgramData\Ulead Systems
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Corel
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Common Files\Ulead Systems
2013-08-21 17:40 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Java
2013-08-21 17:40 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-08-21 17:40 - 2010-11-19 04:20 - 00000000 ____D C:\swshare
2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\ThinkVantage Fingerprint Software
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Protector Suite
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Intel
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\CONEXANT
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Common Files\postureAgent
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Intel
2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Lenovo
2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Integrated Camera Driver
2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ____D C:\Program Files\ThinkPad
2013-08-21 17:40 - 2010-11-19 04:12 - 00000000 ____D C:\Program Files\DIFX
2013-08-21 17:40 - 2010-11-19 04:10 - 00000000 ____D C:\Program Files\Synaptics
2013-08-21 17:40 - 2009-07-21 13:47 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-21 17:40 - 2009-07-21 08:20 - 00000000 ____D C:\SWTOOLS
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-21 17:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-08-21 11:14 - 2013-08-21 11:14 - 01070183 _____ (Farbar) C:\Users\***\Desktop\FRST.exe
2013-08-21 11:12 - 2010-12-06 10:29 - 00000000 ____D C:\Users\***\AppData\Roaming\Skype
2013-08-21 11:05 - 2011-06-05 15:43 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-08-21 10:38 - 2012-08-15 16:10 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-21 10:36 - 2012-09-17 23:07 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job
2013-08-21 10:20 - 2011-05-17 22:35 - 00026624 ___SH C:\Users\***\Thumbs.db
2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL
2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
2013-08-21 08:03 - 2010-11-19 04:29 - 00000000 ____D C:\ProgramData\PCDr
2013-08-21 08:03 - 2009-07-21 07:30 - 00390040 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-21 07:59 - 2011-06-05 15:43 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-08-21 07:52 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-21 07:52 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-21 07:46 - 2010-11-19 04:22 - 01338294 _____ C:\Windows\WindowsUpdate.log
2013-08-21 07:43 - 2013-06-19 10:00 - 00001680 _____ C:\Windows\setupact.log
2013-08-21 07:43 - 2013-04-05 08:37 - 00000000 ___RD C:\Users\***\Mediencenter
2013-08-21 07:43 - 2012-08-15 16:10 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-21 07:43 - 2010-11-19 22:04 - 00000000 ____D C:\Users\***
2013-08-21 07:43 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-19 23:05 - 2012-04-02 10:02 - 00000000 ____D C:\Program Files\Naturalsoft
2013-08-19 23:05 - 2012-01-15 18:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-19 23:05 - 2011-12-14 10:36 - 00000000 ____D C:\Program Files\SDA
2013-08-19 23:05 - 2011-06-13 14:56 - 00000000 ____D C:\ProgramData\Easybits GO
2013-08-19 23:05 - 2011-01-30 19:59 - 00000000 ____D C:\Program Files\Shareaza Applications
2013-08-19 23:05 - 2010-12-31 20:02 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-08-19 23:05 - 2010-12-21 23:28 - 00000000 ____D C:\ProgramData\FreeRIP
2013-08-19 23:05 - 2010-11-19 04:28 - 00000000 ____D C:\ProgramData\AT&T
2013-08-19 23:04 - 2012-05-28 19:22 - 00000000 ____D C:\Program Files\ElsterFormular
2013-08-19 23:04 - 2011-04-26 10:54 - 00000000 ____D C:\Program Files\facemoods.com
2013-08-19 23:03 - 2012-04-02 10:52 - 00000000 ____D C:\Program Files\Balabolka
2013-08-19 23:03 - 2012-02-21 19:32 - 00000000 ____D C:\Program Files\Audible
2013-08-19 23:03 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\AT&T
2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat
2013-08-19 19:27 - 2011-03-09 00:26 - 00000000 ____D C:\Windows\Minidump
2013-08-19 11:00 - 2013-08-19 10:13 - 00033932 _____ C:\Users\***\Desktop\20130819_FRST.txt
2013-08-19 10:59 - 2013-08-19 09:27 - 00002447 _____ C:\Users\***\Desktop\20130819_JRT.txt
2013-08-19 10:58 - 2013-08-19 09:14 - 00002994 _____ C:\Users\***\Desktop\AdwCleaner[S1].txt
2013-08-19 09:26 - 2013-08-19 09:26 - 00002459 _____ C:\Users\***\Desktop\JRT.txt
2013-08-19 09:11 - 2013-08-19 09:11 - 00003018 _____ C:\AdwCleaner[S1].txt
2013-08-18 18:35 - 2010-12-06 19:21 - 00000000 ____D C:\Users\***\Documents\Kennwörter
2013-08-18 16:46 - 2013-08-18 16:21 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv
2013-08-18 16:18 - 2013-08-18 16:18 - 00021377 _____ C:\ComboFix.txt
2013-08-18 16:18 - 2013-08-18 16:00 - 00000000 ____D C:\ComboFix
2013-08-18 16:18 - 2013-08-18 15:53 - 00000000 ____D C:\Qoobox
2013-08-17 18:43 - 2013-08-17 18:43 - 00032029 _____ C:\Users\***\Desktop\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00032061 _____ C:\Users\***\Downloads\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00030729 _____ C:\Users\***\Downloads\FRST.txt
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-17 15:55 - 2013-07-12 08:25 - 00068174 _____ C:\Windows\PFRO.log
2013-08-16 13:56 - 2013-07-10 19:48 - 00029870 _____ C:\Windows\wininit.ini
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 13:11 - 2013-08-15 14:48 - 00000000 ____D C:\Program Files\JDownloader
2013-08-16 12:38 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 10:32 - 2013-08-16 10:15 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 10:13 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 18:05 - 2013-08-15 14:55 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:03 - 2013-08-14 23:02 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 23:01 - 2013-08-14 22:59 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:21 - 2013-08-14 21:19 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:58 - 2013-08-14 19:56 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:54 - 2013-08-14 19:53 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:44 - 2013-08-14 19:43 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:36 - 2012-09-17 23:07 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job
2013-08-14 19:24 - 2013-08-14 19:22 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 18:17 - 2013-07-24 15:24 - 00000000 ____D C:\Users\***\Documents\DGVT
2013-08-14 17:49 - 2013-08-14 17:34 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:57 - 2013-08-14 14:55 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 20:09 - 2010-12-06 19:22 - 00000000 ____D C:\Users\***\Documents\Rezepte
2013-08-12 08:13 - 2013-08-12 07:52 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-06 14:48 - 2013-04-05 08:36 - 00001150 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk
2013-08-02 10:44 - 2013-08-02 10:16 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-28 19:43 - 2013-06-18 09:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-26 14:17 - 2013-07-26 13:57 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
ZeroAccess:
C:\Users\***\AppData\Local\282d2952
C:\Users\***\AppData\Local\282d2952\U\800000c0.$
C:\Users\***\AppData\Local\282d2952\U\800000cb.$
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-12 15:29
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-08-2013
Ran by *** at 2013-08-21 11:17:29
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20
Access Help (Version: 3.01)
Adobe AIR (Version: 3.2.0.2070)
Adobe Flash Player 11 ActiveX (Version: 11.4.402.265)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Advertising Center (Version: 0.0.0.2)
AirPort (Version: 5.6.1.2)
Akamai NetSession Interface
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17)
AMR to MP3 Converter 1.4
Anzeige am Bildschirm (Version: 6.61.00)
Apple Software Update (Version: 2.1.3.127)
Bing Bar (Version: 6.3.2322.0)
Bonjour (Version: 3.0.0.10)
Burn.Now 4.5 (Version: 4.5.0)
Cisco Systems VPN Client 5.0.06.0160 (Version: 5.0.6)
Citavi (Version: 3.0.3.0)
Client Security - Password Manager (Version: 8.30.0049.00)
Conexant 20585 SmartAudio HD (Version: 4.95.48.50)
Corel Burn.Now Lenovo Edition (Version: 4.5.0)
Corel DVD MovieFactory 7 (Version: 7.0.0)
Corel DVD MovieFactory Lenovo Edition (Version: 7.0.0)
Cortona3D Viewer (Version: 6.0.180)
Create Recovery Media (Version: 1.20.0.00)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DHTML Editing Component (Version: 6.02.0001)
Dienstprogramm "ThinkPad UltraNav" (Version: 2.13.0)
Direct DiscRecorder (Version: 1.00.0000)
Disable AMT Profile Synchronization Pop-up for Windows Vista/7 (Version: 1.00)
Dropbox (HKCU Version: 1.4.7)
Energie-Manager (Version: 6.32)
FileZilla Client 3.0.11 (Version: 3.0.11)
FormatFactory 2.60 (Version: 2.60)
Free YouTube Download version 3.1.29.608 (Version: 3.1.29.608)
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (HKCU Version: 28.0.1500.95)
Google Update Helper (Version: 1.3.21.153)
GPL Ghostscript 9.00
HTC BMP USB Driver (Version: 1.0.5375)
HTC Driver Installer (Version: 3.0.0.021)
HTC Sync (Version: 3.2.20)
IBM SPSS Amos 20 (Version: 20.0.0)
IBM SPSS Smartreader 19 (Version: 19.0.0)
Integrated Camera Driver Installer Package Ver.1.1.0.48 (Version: 1.1.0.48)
Intel PROSet Wireless
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Network Connections Drivers (Version: 16.8)
Intel(R) Processor Graphics (Version: 8.15.10.2622)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284)
Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258)
iTunes (Version: 11.0.4.4)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 26 (Version: 6.0.260)
JavaFX 2.1.0 (Version: 2.1.0)
Junk Mail filter update (Version: 15.4.3502.0922)
Lenovo Auto Scroll Utility (Version: 1.11)
Lenovo Patch Utility (Version: 1.3.0.9)
Lenovo System Interface Driver (Version: 1.05)
Lenovo System Update (Version: 5.02.0011)
Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)
Lenovo Warranty Information (Version: 1.0.0004.00)
Lenovo Welcome (Version: 2.0.020.0)
Mediencenter 3.8.0.2907 (HKCU Version: 3.8.0.2907)
Mesh Runtime (Version: 15.4.5722.2)
Message Center Plus (Version: 2.0.0012.00)
Messenger Companion (Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000)
Microsoft Reader Text-to-Speech deutsch (Version: 01.00.0000)
Microsoft Research AutoCollage Touch 2009 (Version: 2.00.2009)
Microsoft Search Enhancement Pack (Version: 3.0.133.0)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Mobile Broadband Connect (Version: 3.5.0010)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MP3-Cutter
MP4 To MP3 Converter V3.0
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Nero 9 Essentials
Nero BurnRights (Version: 3.4.13.100)
Nero BurnRights Help (Version: 3.4.4.100)
Nero ControlCenter (Version: 9.0.0.1)
Nero DiscSpeed (Version: 5.4.13.100)
Nero DiscSpeed Help (Version: 5.4.4.100)
Nero DriveSpeed (Version: 4.4.12.100)
Nero DriveSpeed Help (Version: 4.4.4.100)
Nero InfoTool (Version: 6.4.12.100)
Nero InfoTool Help (Version: 6.4.4.100)
Nero Installer (Version: 4.4.9.0)
Nero Online Upgrade (Version: 1.3.0.0)
Nero StartSmart (Version: 9.4.38.100)
Nero StartSmart Help (Version: 9.4.38.100)
neroxml (Version: 1.0.0)
Nvu 1.0 (Version: 1.0)
OLYMPUS Digital Camera Updater (Version: 1.0.1)
Prezi Desktop (Version: 4.0.4)
RedMon - Redirection Port Monitor
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
Rescue and Recovery (Version: 4.30.0025.00)
RICOH R5U230 Media Driver ver.2.06.02.02 (Version: 2.06.02.02)
Riva FLV Player (Version: 1.0.0000)
RUBICon (Version: 2.0.25)
SeaMonkey 2.14.1 (x86 de) (Version: 2.14.1)
SecondLifeViewer2 (remove only)
Skype Click to Call (Version: 6.3.11079)
Skype™ 6.6 (Version: 6.6.106)
Spybot - Search & Destroy (Version: 2.1.19)
Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (Version: 1.6.5.17120)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.3200)
ThinkPad FullScreen Magnifier (Version: 2.40)
ThinkPad Modem Adapter (Version: 7.80.5.0)
ThinkPad Power Management Driver (Version: 1.60.0.4)
ThinkPad UltraNav Driver (Version: 16.2.5.0)
ThinkVantage Access Connections (Version: 5.85)
ThinkVantage Communications Utility (Version: 1.42)
ThinkVantage Fingerprint Software (Version: 5.9.6.7084)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.5)
TP-LINK USB Printer Controller (Version: 1.0.12.0323)
TrueCrypt (Version: 7.1)
TuneUp Utilities 2011 (Version: 10.0.4600.4)
TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4600.4)
Turbo Lister 2 (Version: 2.00.0000)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Verizon Wireless Mobile Broadband Self Activation (Version: 3.1.4)
Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (Version: 04/08/2010 6.3.5.430)
Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (Version: 06/15/2009 6.2.0.9000)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405)
Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Family Safety (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows-Treiberpaket - Intel (e1kexpress) Net (12/10/2009 11.5.10.0) (Version: 12/10/2009 11.5.10.0)
Windows-Treiberpaket - Intel (HECI) System (09/17/2009 6.0.0.1179) (Version: 09/17/2009 6.0.0.1179)
Windows-Treiberpaket - Intel System (06/04/2009 1.0.0.0002) (Version: 06/04/2009 1.0.0.0002)
Windows-Treiberpaket - Intel System (10/28/2009 9.1.1.1022) (Version: 10/28/2009 9.1.1.1022)
Windows-Treiberpaket - Intel USB (08/20/2009 9.1.1.1020) (Version: 08/20/2009 9.1.1.1020)
Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (Version: 11/18/2009 1.60.0.4)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0)
Windows-Treiberpaket - Ricoh Company MS Host Controller (10/26/2009 6.10.02.07) (Version: 10/26/2009 6.10.02.07)
==================== Restore Points =========================
29-07-2013 17:12:08 Geplanter Prüfpunkt
06-08-2013 12:38:17 Geplanter Prüfpunkt
14-08-2013 06:29:55 Geplanter Prüfpunkt
16-08-2013 08:01:05 S
16-08-2013 11:07:45 S
16-08-2013 11:08:50 S
16-08-2013 11:22:02 Installed Microsoft Fix it 50123
16-08-2013 11:27:10 Installed Microsoft Fix it 50123
16-08-2013 12:32:37 S
17-08-2013 13:58:46 S
17-08-2013 14:00:25 S
==================== Hosts content: ==========================
2009-07-14 04:04 - 2013-06-14 08:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {11BFD002-5FCA-46D7-99CA-18A467A48F38} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {13C99129-D58F-49E1-99F9-1C0DCD48B19F} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe No File
Task: {1631E089-C57A-4C05-8158-1AA11FE20171} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.)
Task: {23EFF5ED-3A67-46EB-B754-8EC2C4FA37D8} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-04-11] ()
Task: {27F72222-3879-4CB2-85F0-A215B4E8ADC0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe No File
Task: {2A571016-1477-49AC-92F4-A2CBB3D8184A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {62948E2D-4ABB-4728-BA5E-86CA80E42BFC} - System32\Tasks\Browser Manager => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {6C26C17B-8034-430E-AC63-BB219FCC7542} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {6C830667-035D-4E6B-AE67-F0C5060B94F0} - System32\Tasks\Google Updater and Installer => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.)
Task: {6D481D47-466F-4473-8112-A6430136B9C9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.)
Task: {6D687FBC-4CD2-44E3-A378-9EC04F756E46} - System32\Tasks\JavaUpdateSched => C:\Windows\System32\jusched.exe No File
Task: {7814C411-5DA0-4099-867E-44CB36E8EC4F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.)
Task: {83905B62-68C4-4219-ACFD-F8AA00DE5CE1} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe No File
Task: {8BA6B856-B798-4A06-8E00-9A0AFDCE5E26} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {96212594-E16D-462A-B7E8-2AEE724C769B} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe No File
Task: {AE20DA03-B461-418F-B755-C2074ABC1CE8} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe No File
Task: {B216C86A-81DA-43DB-B488-769BD1E0BAB0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {B34FDA2D-FD35-4628-8A56-5E0E9BF6F53A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {B3FC1B13-3A30-4F48-8556-3F14EDECA0AD} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {B5A8B7EE-F61F-478C-A745-09A70DE4FAFE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe No File
Task: {BB98A262-CF96-46EF-982D-77B6A6EA3D11} - System32\Tasks\{5242E32B-A714-49F4-AD46-3C3D63060455} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {C5FB7968-92DC-43F1-8A92-725C5C8B8C1D} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {C6932140-D1C0-4FA2-8C6B-7CFCEE01EF21} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()
Task: {C907D1BC-111A-43B4-AEFE-4571DB51DF65} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe No File
Task: {CE82BD9A-B1C2-44CA-93AC-BD318095C569} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {D369F111-A4A5-4D2F-83B3-DB9D615F375D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated)
Task: {DE60EDDC-F3A9-49B5-8F42-F9BE72945AB0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.)
Task: {E704046D-1829-4F64-AA25-9E186D07E3B8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software)
Task: {EB252E21-311D-4A0E-A926-C4EADB1D0701} - System32\Tasks\Message Center plus => C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27] ()
Task: {F2B1BF00-20BC-46B4-8C41-6DFE1C9C98DF} - System32\Tasks\EPUpdater => C:\Users\***\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
==================== Faulty Device Manager Devices =============
Name: Cisco Systems VPN Adapter
Description: Cisco Systems VPN Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Intel(R) 82577LM Gigabit Network Connection
Description: Intel(R) 82577LM Gigabit Network Connection
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1kexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/21/2013 11:16:28 AM) (Source: Application Hang) (User: )
Description: Programm FRST.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1428
Startzeit: 01ce9e4eef31728c
Endzeit: 4
Anwendungspfad: C:\Users\***\Desktop\FRST.exe
Berichts-ID: 460a5be3-0a42-11e3-84a5-70f395445e99
Error: (08/21/2013 08:14:27 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary MpKsl7114dcfa.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (08/21/2013 08:12:23 AM) (Source: Application Hang) (User: )
Description: Programm rnr_gui.exe, Version 4.30.12.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1de4
Startzeit: 01ce9e3517c38ba9
Endzeit: 6
Anwendungspfad: C:\Program Files\Lenovo\Rescue and Recovery\rnr_gui.exe
Berichts-ID: 9e194642-0a28-11e3-84a5-70f395445e99
Error: (08/21/2013 08:03:50 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/21/2013 07:59:59 AM) (Source: PC-Doctor) (User: )
Description: (5184) Asapi: (07:59:59:3430)(5184) DEFECT.GENERIC - Error -- OS_CRASH alert without DumpPath key/val pair: SOFTWARE_ALERT:52125584h-1001-0-2797926276-BugCheck
Error: (08/21/2013 07:49:43 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/20/2013 10:41:41 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/19/2013 07:45:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/19/2013 07:31:40 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/19/2013 07:16:21 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
System errors:
=============
Error: (08/21/2013 08:18:03 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (08/21/2013 08:18:03 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (08/21/2013 08:18:02 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (08/21/2013 08:18:02 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (08/21/2013 08:18:01 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.
Error: (08/21/2013 08:08:30 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (08/21/2013 08:08:30 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (08/21/2013 08:08:29 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (08/21/2013 08:08:29 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
Error: (08/21/2013 07:46:09 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Microsoft Office Sessions:
=========================
Error: (08/21/2013 11:16:28 AM) (Source: Application Hang)(User: )
Description: FRST.exe3.3.8.1142801ce9e4eef31728c4C:\Users\***\Desktop\FRST.exe460a5be3-0a42-11e3-84a5-70f395445e99
Error: (08/21/2013 08:14:27 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary MpKsl7114dcfa.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (08/21/2013 08:12:23 AM) (Source: Application Hang)(User: )
Description: rnr_gui.exe4.30.12.11de401ce9e3517c38ba96C:\Program Files\Lenovo\Rescue and Recovery\rnr_gui.exe9e194642-0a28-11e3-84a5-70f395445e99
Error: (08/21/2013 08:03:50 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/21/2013 07:59:59 AM) (Source: PC-Doctor)(User: )
Description: (5184) Asapi: (07:59:59:3430)(5184) DEFECT.GENERIC - Error -- OS_CRASH alert without DumpPath key/val pair: SOFTWARE_ALERT:52125584h-1001-0-2797926276-BugCheck
Error: (08/21/2013 07:49:43 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/20/2013 10:41:41 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/19/2013 07:45:13 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/19/2013 07:31:40 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/19/2013 07:16:21 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
==================== Memory info ===========================
Percentage of memory in use: 65%
Total physical RAM: 2995.67 MB
Available physical RAM: 1023.32 MB
Total Pagefile: 5989.63 MB
Available Pagefile: 3128.55 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.44 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:454.33 GB) (Free:52.84 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Lacie) (Fixed) (Total:465.76 GB) (Free:130.82 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (Repair disc Windows 7 32-bit) (CDROM) (Total:0.14 GB) (Free:0 GB) UDF
Drive q: (Lenovo_Recovery) (Fixed) (Total:10.25 GB) (Free:5.04 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: BD6B6839)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=454 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: A4BB9438)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
21.08.2013, 11:12
| #17 |
| /// the machine /// TB-Ausbilder    | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart MBAM und AdwCleaner nochmal laufen lassen, JRT weglassen.
__________________
__________________ |
|
21.08.2013, 12:48
| #18 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei SystemstartCode:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.21.02 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 10.0.9200.16618 *** :: ***-THINK [Administrator] 21.08.2013 12:33:34 mbam-log-2013-08-21 (12-33-34).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 231254 Laufzeit: 9 Minute(n), 2 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 4 HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\DataMngr (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\ITUNES.EXE (Security.Hijack) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 3 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Microsoft\Windows\CurrentVersion\Run|NTRedirect (PUP.Optional.A.BabSolution) -> Daten: C:\Windows\system32\rundll32.exe "C:\Users\***\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\itunes.exe|Debugger (Security.Hijack) -> Daten: "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\Windows\Installer\e6f4643.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Installer\e6f464f.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Installer\e6f4655.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.000 - Report created 21/08/2013 at 13:43:02
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : *** - ***-THINK
# Running from : C:\Users\***\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\FreeRIP
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeRIP3
Folder Deleted : C:\Program Files\Ask.com
Folder Deleted : C:\Program Files\facemoods.com
Folder Deleted : C:\Program Files\FreeRIP3
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
File Deleted : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default\user.js
File Deleted : C:\Windows\System32\Tasks\Browser Manager
File Deleted : C:\Windows\System32\Tasks\BrowserDefendert
File Deleted : C:\Windows\System32\Tasks\EPUpdater
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKCU\Software\e57d9d0b03dbe40
Key Deleted : HKLM\SOFTWARE\e57d9d0b03dbe40
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_frostwire_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_frostwire_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\Software\DataMngr
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16611
-\\ Mozilla Firefox v22.0 (de)
[ File : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default\prefs.js ]
Line Deleted : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975");
-\\ Google Chrome v
[ File : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4747 octets] - [21/08/2013 13:40:44]
AdwCleaner[S0].txt - [3794 octets] - [21/08/2013 13:43:02]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3854 octets] ##########
|
|
21.08.2013, 13:44
| #19 |
| /// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei SystemstartESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.08.2013, 17:52
| #20 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei SystemstartCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1f844ade75266b4e8d5c82c860ec7a7d
# engine=14851
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-21 01:43:48
# local_time=2013-08-21 03:43:48 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 0 128723819 0 0
# scanned=33011
# found=0
# cleaned=0
# scan_time=2674
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1f844ade75266b4e8d5c82c860ec7a7d
# engine=14851
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-21 03:57:08
# local_time=2013-08-21 05:57:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 999 128731819 0 0
# scanned=239358
# found=1
# cleaned=0
# scan_time=7951
sh=AD2FAC56F73C779B37C2CF59621DD90B71A69334 ft=1 fh=64bc18eb7df64123 vn="Win32/BHO.OGC trojan" ac=I fn="C:\Windows\System32\vaultsvd.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Spybot - Search and Destroy Microsoft Security Essentials (On Access scanning disabled!) Error obtaining update status for antivirus! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2011 TuneUp Utilities Language Pack (de-DE) JavaFX 2.1.0 Java(TM) 6 Update 26 Java 7 Update 21 Java version out of Date! Adobe Flash Player 11.7.700.224 Adobe Reader XI Mozilla Firefox 22.0 Firefox out of Date! Google Chrome 28.0.1500.72 Google Chrome 28.0.1500.95 ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Spybot Teatimer.exe is disabled! Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-08-2013
Ran by *** (administrator) on 21-08-2013 18:30:31
Running from C:\Users\***\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(Lenovo.) C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
() C:\Windows\system32\vaultsvd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\ACTray.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\SvcGuiHlpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\password_manager.exe
() C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe
(Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3110200 2011-06-10] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2342200 2012-07-05] (Synaptics Incorporated)
HKLM\...\Run: [ACTray] - C:\Program Files\Lenovo\Access Connections\ACTray.exe [433216 2011-10-20] (Lenovo)
HKLM\...\Run: [TP-Link USB Printer Controller] - C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4428800 2012-03-23] ()
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKU\Default\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
IMEO\htcupctloader.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
IMEO\ncc.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
ShortcutTarget: VPN Client.lnk -> C:\Windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox;
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {A8945019-18BA-4ECC-B55E-160FD84D07CE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=386496&p={searchTerms}
SearchScopes: HKCU - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL =
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6E46B758-E4D6-4596-807B-A57756BA850A}: [NameServer]212.23.115.148 212.23.115.132
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @parallelgraphics.com/Cortona - C:\Program Files\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ShareazaWebSearch.xml
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
Chrome:
=======
CHR DefaultSearchURL: (Google) - hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&channel=fflb&q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&channel=rcs
CHR DefaultSuggestURL: (Google) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Cortona3D Viewer) - C:\Program Files\Mozilla Firefox\plugins\npCortona.dll (ParallelGraphics)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
========================== Services (Whitelisted) =================
R2 AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [134208 2011-10-20] (Lenovo)
R2 AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [269376 2011-10-20] (Lenovo)
R2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509448 2012-03-15] (Intel Corporation)
R2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2012-04-23] (Intel(R) Corporation)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
S4 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [50536 2010-07-27] (Lenovo Group Limited)
R2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [45496 2010-04-07] (Lenovo Group Limited)
S4 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [74088 2010-07-27] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] ()
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665120 2012-05-16] (Lenovo Group Limited)
R2 ScrybeUpdater; C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)
S2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-04-11] ()
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)
R2 ucsvc32; C:\Windows\system32\vaultsvd.exe [65024 2012-09-15] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2759984 2012-06-25] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10364416 2012-06-03] (Intel Corporation)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [816792 2010-11-19] ()
S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [82984 2007-06-25] (MCCI Corporation)
S3 s117mdfl; C:\Windows\System32\DRIVERS\s117mdfl.sys [14888 2007-06-25] (MCCI Corporation)
S3 s117mdm; C:\Windows\System32\DRIVERS\s117mdm.sys [108456 2007-06-25] (MCCI Corporation)
S3 s117mgmt; C:\Windows\System32\DRIVERS\s117mgmt.sys [100264 2007-06-25] (MCCI Corporation)
S3 s117nd5; C:\Windows\System32\DRIVERS\s117nd5.sys [22952 2007-06-25] (MCCI Corporation)
S3 s117obex; C:\Windows\System32\DRIVERS\s117obex.sys [98344 2007-06-25] (MCCI Corporation)
S3 s117unic; C:\Windows\System32\DRIVERS\s117unic.sys [98856 2007-06-25] (MCCI Corporation)
S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [57856 2010-01-07] (SCM Microsystems Inc.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-07-05] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [11976 2011-05-30] (Authentec Inc.)
R3 TPLINKUDSMBus; C:\Windows\System32\Drivers\TPLINKUDSMBus.sys [89728 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TPLINKUDSTcpBus; C:\Windows\System32\Drivers\TPLINKUDSTcpBus.sys [146304 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10064 2011-06-06] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13752 2009-09-29] ()
S3 catchme; \??\C:\Users\***\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-21 14:50 - 2013-08-21 14:50 - 02347384 _____ (ESET) C:\Users\***\Downloads\esetsmartinstaller_enu.exe
2013-08-21 13:40 - 2013-08-21 13:43 - 00000000 ____D C:\AdwCleaner
2013-08-21 12:32 - 2013-08-21 12:32 - 00001082 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 12:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-21 12:31 - 2013-08-21 12:32 - 00975858 _____ C:\Users\***\Desktop\adwcleaner.exe
2013-08-21 12:31 - 2013-08-21 12:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\***\Desktop\mbam-setup-1.75.0.1300.exe
2013-08-21 11:21 - 2013-08-21 11:21 - 00044009 _____ C:\Users\***\Desktop\20130821_FRST.txt
2013-08-21 11:21 - 2013-08-21 11:21 - 00030379 _____ C:\Users\***\Desktop\20130821_Addition.txt
2013-08-21 11:14 - 2013-08-21 11:14 - 01070183 _____ (Farbar) C:\Users\***\Desktop\FRST.exe
2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL
2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat
2013-08-19 09:26 - 2013-08-19 09:26 - 00002459 _____ C:\Users\***\Desktop\JRT.txt
2013-08-19 09:11 - 2013-08-19 09:11 - 00003018 _____ C:\AdwCleaner[S1].txt
2013-08-19 08:22 - 2013-08-21 12:32 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-18 16:21 - 2013-08-18 16:46 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv
2013-08-18 16:18 - 2013-08-18 16:18 - 00021377 _____ C:\ComboFix.txt
2013-08-18 16:00 - 2013-08-18 16:18 - 00000000 ____D C:\ComboFix
2013-08-18 16:00 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-18 15:53 - 2013-08-18 16:18 - 00000000 ____D C:\Qoobox
2013-08-17 18:37 - 2013-08-17 18:37 - 00032061 _____ C:\Users\***\Downloads\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00030729 _____ C:\Users\***\Downloads\FRST.txt
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 10:15 - 2013-08-16 10:32 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 07:41 - 2013-08-16 12:38 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 07:41 - 2013-08-16 10:13 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 14:55 - 2013-08-15 18:05 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:48 - 2013-08-16 13:11 - 00000000 ____D C:\Program Files\JDownloader
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:02 - 2013-08-14 23:03 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 22:59 - 2013-08-14 23:01 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:19 - 2013-08-14 21:21 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:56 - 2013-08-14 19:58 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:53 - 2013-08-14 19:54 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:43 - 2013-08-14 19:44 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:22 - 2013-08-14 19:24 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 17:34 - 2013-08-14 17:49 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:55 - 2013-08-14 14:57 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 07:52 - 2013-08-12 08:13 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-02 10:16 - 2013-08-02 10:44 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-26 13:57 - 2013-07-26 14:17 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
2013-07-24 15:24 - 2013-08-14 18:17 - 00000000 ____D C:\Users\***\Documents\DGVT
==================== One Month Modified Files and Folders =======
2013-08-21 18:27 - 2011-06-05 15:43 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-08-21 17:46 - 2010-11-19 04:22 - 01365209 _____ C:\Windows\WindowsUpdate.log
2013-08-21 17:41 - 2013-07-10 18:36 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2013-08-21 17:41 - 2013-06-14 08:56 - 00000000 ___HD C:\Windows\system32\Settings
2013-08-21 17:41 - 2013-06-12 21:33 - 00000000 ____D C:\Windows\erdnt
2013-08-21 17:41 - 2013-06-10 11:41 - 00000000 ____D C:\Users\***\Downloads\RecBoot_1.3_Windows
2013-08-21 17:41 - 2010-11-20 00:06 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-21 17:41 - 2010-11-19 12:50 - 00000000 ____D C:\ProgramData\Lenovo
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2013-08-21 17:40 - 2013-06-14 12:02 - 00000000 ____D C:\Program Files\Common Files\Java
2013-08-21 17:40 - 2013-06-14 10:51 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iPod
2013-08-21 17:40 - 2013-05-17 13:25 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-21 17:40 - 2012-10-24 10:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-08-21 17:40 - 2012-09-11 08:19 - 00000000 ____D C:\ProgramData\Intel
2013-08-21 17:40 - 2012-09-11 08:18 - 00000000 ____D C:\Program Files\Cisco
2013-08-21 17:40 - 2012-08-15 16:10 - 00000000 ____D C:\Program Files\Google
2013-08-21 17:40 - 2012-07-05 10:19 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-08-21 17:40 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-08-21 17:40 - 2012-05-31 19:48 - 00000000 ____D C:\Program Files\Oracle
2013-08-21 17:40 - 2012-04-02 09:52 - 00000000 ____D C:\Program Files\Common Files\L&H
2013-08-21 17:40 - 2011-12-23 11:25 - 00000000 ____D C:\Program Files\RUB
2013-08-21 17:40 - 2011-10-23 17:39 - 00000000 ____D C:\Program Files\mp3DirectCut
2013-08-21 17:40 - 2011-10-23 17:27 - 00000000 ____D C:\Program Files\MP3-Cutter
2013-08-21 17:40 - 2011-08-01 07:58 - 00000000 ____D C:\Program Files\Win7codecs
2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\Program Files\TuneUp Utilities 2011
2013-08-21 17:40 - 2011-07-18 11:27 - 00000000 ____D C:\Program Files\Amazon
2013-08-21 17:40 - 2011-06-24 13:25 - 00000000 ____D C:\Program Files\Common Files\ParallelGraphics
2013-08-21 17:40 - 2011-06-05 15:42 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Spirent Communications
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\HTC
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-08-21 17:40 - 2011-05-17 22:32 - 00000000 ____D C:\Program Files\FreeTime
2013-08-21 17:40 - 2011-05-16 08:15 - 00000000 ____D C:\ProgramData\Skype Extras
2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Riva
2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Common Files\SWF Studio
2013-08-21 17:40 - 2011-03-09 19:21 - 00000000 ____D C:\ProgramData\elsterformular
2013-08-21 17:40 - 2011-03-09 00:26 - 00000000 ____D C:\Windows\Minidump
2013-08-21 17:40 - 2011-02-28 16:46 - 00000000 ____D C:\Program Files\Citavi 3
2013-08-21 17:40 - 2011-02-28 16:45 - 00000000 ____D C:\ProgramData\Swiss Academic Software
2013-08-21 17:40 - 2011-02-14 13:47 - 00000000 ____D C:\Program Files\gs
2013-08-21 17:40 - 2011-02-13 15:08 - 00000000 ____D C:\Program Files\SecondLifeViewer2
2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Common Files\Deterministic Networks
2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Cisco Systems
2013-08-21 17:40 - 2011-01-11 18:00 - 00000000 ____D C:\Program Files\OLYMPUS
2013-08-21 17:40 - 2010-12-23 18:35 - 00000000 ____D C:\ProgramData\SafeNet Sentinel
2013-08-21 17:40 - 2010-12-23 18:33 - 00000000 ____D C:\Program Files\Common Files\IBM
2013-08-21 17:40 - 2010-12-23 18:32 - 00000000 ____D C:\Program Files\IBM
2013-08-21 17:40 - 2010-12-21 20:11 - 00000000 ____D C:\Program Files\Adobe
2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Nero
2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Common Files\Nero
2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ___RD C:\Program Files\Skype
2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ____D C:\ProgramData\Skype
2013-08-21 17:40 - 2010-11-29 22:16 - 00000000 ____D C:\Program Files\SeaMonkey
2013-08-21 17:40 - 2010-11-29 20:53 - 00000000 ____D C:\Program Files\Nvu
2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\ProgramData\eBay
2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\Program Files\eBay
2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\ProgramData\Apple Computer
2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-08-21 17:40 - 2010-11-20 09:59 - 00000000 ____D C:\ProgramData\Apple
2013-08-21 17:40 - 2010-11-20 09:57 - 00000000 ____D C:\Program Files\BASE&E-Plus
2013-08-21 17:40 - 2010-11-19 23:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-08-21 17:40 - 2010-11-19 23:21 - 00000000 __RHD C:\MSOCache
2013-08-21 17:40 - 2010-11-19 04:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Windows Live
2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Common Files\Windows Live
2013-08-21 17:40 - 2010-11-19 04:33 - 00000000 ____D C:\Program Files\NetWaiting
2013-08-21 17:40 - 2010-11-19 04:29 - 00000000 ____D C:\Program Files\PC-Doctor
2013-08-21 17:40 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\Verizon Wireless
2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\ProgramData\Adobe
2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\Program Files\ThinkVantage
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\ProgramData\Ulead Systems
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Corel
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Common Files\Ulead Systems
2013-08-21 17:40 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Java
2013-08-21 17:40 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-08-21 17:40 - 2010-11-19 04:20 - 00000000 ____D C:\swshare
2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\ThinkVantage Fingerprint Software
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Protector Suite
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Intel
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\CONEXANT
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Common Files\postureAgent
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Intel
2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Lenovo
2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Integrated Camera Driver
2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ____D C:\Program Files\ThinkPad
2013-08-21 17:40 - 2010-11-19 04:12 - 00000000 ____D C:\Program Files\DIFX
2013-08-21 17:40 - 2010-11-19 04:10 - 00000000 ____D C:\Program Files\Synaptics
2013-08-21 17:40 - 2009-07-21 13:47 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-21 17:40 - 2009-07-21 08:20 - 00000000 ____D C:\SWTOOLS
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-21 17:38 - 2012-08-15 16:10 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-21 17:36 - 2012-09-17 23:07 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job
2013-08-21 17:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-08-21 17:22 - 2010-12-06 10:29 - 00000000 ____D C:\Users\***\AppData\Roaming\Skype
2013-08-21 17:04 - 2013-08-21 17:04 - 00891115 _____ C:\Users\***\Desktop\SecurityCheck.exe
2013-08-21 14:50 - 2013-08-21 14:50 - 02347384 _____ (ESET) C:\Users\***\Downloads\esetsmartinstaller_enu.exe
2013-08-21 13:53 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-21 13:53 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-21 13:51 - 2009-07-21 07:30 - 00390040 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-21 13:46 - 2013-04-05 08:37 - 00000000 ___RD C:\Users\***\Mediencenter
2013-08-21 13:46 - 2012-08-15 16:10 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-21 13:44 - 2013-06-19 10:00 - 00001792 _____ C:\Windows\setupact.log
2013-08-21 13:44 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-21 13:43 - 2013-08-21 13:40 - 00000000 ____D C:\AdwCleaner
2013-08-21 13:43 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-08-21 13:37 - 2011-06-05 15:43 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-08-21 13:36 - 2013-07-12 08:25 - 00068898 _____ C:\Windows\PFRO.log
2013-08-21 13:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Cursors
2013-08-21 12:32 - 2013-08-21 12:32 - 00001082 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 12:32 - 2013-08-21 12:31 - 00975858 _____ C:\Users\***\Desktop\adwcleaner.exe
2013-08-21 12:32 - 2013-08-19 08:22 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-21 12:31 - 2013-08-21 12:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\***\Desktop\mbam-setup-1.75.0.1300.exe
2013-08-21 11:21 - 2013-08-21 11:21 - 00044009 _____ C:\Users\***\Desktop\20130821_FRST.txt
2013-08-21 11:21 - 2013-08-21 11:21 - 00030379 _____ C:\Users\***\Desktop\20130821_Addition.txt
2013-08-21 11:14 - 2013-08-21 11:14 - 01070183 _____ (Farbar) C:\Users\***\Desktop\FRST.exe
2013-08-21 10:20 - 2011-05-17 22:35 - 00026624 ___SH C:\Users\***\Thumbs.db
2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL
2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
2013-08-21 08:03 - 2010-11-19 04:29 - 00000000 ____D C:\ProgramData\PCDr
2013-08-21 07:43 - 2010-11-19 22:04 - 00000000 ____D C:\Users\***
2013-08-19 23:05 - 2012-04-02 10:02 - 00000000 ____D C:\Program Files\Naturalsoft
2013-08-19 23:05 - 2012-01-15 18:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-19 23:05 - 2011-12-14 10:36 - 00000000 ____D C:\Program Files\SDA
2013-08-19 23:05 - 2011-06-13 14:56 - 00000000 ____D C:\ProgramData\Easybits GO
2013-08-19 23:05 - 2011-01-30 19:59 - 00000000 ____D C:\Program Files\Shareaza Applications
2013-08-19 23:05 - 2010-12-31 20:02 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-08-19 23:05 - 2010-11-19 04:28 - 00000000 ____D C:\ProgramData\AT&T
2013-08-19 23:04 - 2012-05-28 19:22 - 00000000 ____D C:\Program Files\ElsterFormular
2013-08-19 23:03 - 2012-04-02 10:52 - 00000000 ____D C:\Program Files\Balabolka
2013-08-19 23:03 - 2012-02-21 19:32 - 00000000 ____D C:\Program Files\Audible
2013-08-19 23:03 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\AT&T
2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat
2013-08-19 09:26 - 2013-08-19 09:26 - 00002459 _____ C:\Users\***\Desktop\JRT.txt
2013-08-19 09:11 - 2013-08-19 09:11 - 00003018 _____ C:\AdwCleaner[S1].txt
2013-08-18 18:35 - 2010-12-06 19:21 - 00000000 ____D C:\Users\***\Documents\Kennwörter
2013-08-18 16:46 - 2013-08-18 16:21 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv
2013-08-18 16:18 - 2013-08-18 16:18 - 00021377 _____ C:\ComboFix.txt
2013-08-18 16:18 - 2013-08-18 16:00 - 00000000 ____D C:\ComboFix
2013-08-18 16:18 - 2013-08-18 15:53 - 00000000 ____D C:\Qoobox
2013-08-17 18:37 - 2013-08-17 18:37 - 00032061 _____ C:\Users\***\Downloads\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00030729 _____ C:\Users\***\Downloads\FRST.txt
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-16 13:56 - 2013-07-10 19:48 - 00029870 _____ C:\Windows\wininit.ini
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 13:11 - 2013-08-15 14:48 - 00000000 ____D C:\Program Files\JDownloader
2013-08-16 12:38 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 10:32 - 2013-08-16 10:15 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 10:13 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 18:05 - 2013-08-15 14:55 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:03 - 2013-08-14 23:02 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 23:01 - 2013-08-14 22:59 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:21 - 2013-08-14 21:19 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:58 - 2013-08-14 19:56 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:54 - 2013-08-14 19:53 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:44 - 2013-08-14 19:43 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:36 - 2012-09-17 23:07 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job
2013-08-14 19:24 - 2013-08-14 19:22 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 18:17 - 2013-07-24 15:24 - 00000000 ____D C:\Users\***\Documents\DGVT
2013-08-14 17:49 - 2013-08-14 17:34 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:57 - 2013-08-14 14:55 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 20:09 - 2010-12-06 19:22 - 00000000 ____D C:\Users\***\Documents\Rezepte
2013-08-12 08:13 - 2013-08-12 07:52 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-06 14:48 - 2013-04-05 08:36 - 00001150 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk
2013-08-02 10:44 - 2013-08-02 10:16 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-28 19:43 - 2013-06-18 09:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-26 14:17 - 2013-07-26 13:57 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
ZeroAccess:
C:\Users\***\AppData\Local\282d2952
C:\Users\***\AppData\Local\282d2952\U\800000c0.$
C:\Users\***\AppData\Local\282d2952\U\800000cb.$
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-12 15:29
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-08-2013 Ran by *** at 2013-08-21 18:31:37 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 Access Help (Version: 3.01) Adobe AIR (Version: 3.2.0.2070) Adobe Flash Player 11 ActiveX (Version: 11.4.402.265) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03) Advertising Center (Version: 0.0.0.2) AirPort (Version: 5.6.1.2) Akamai NetSession Interface Amazon MP3-Downloader 1.0.17 (Version: 1.0.17) AMR to MP3 Converter 1.4 Anzeige am Bildschirm (Version: 6.61.00) Apple Software Update (Version: 2.1.3.127) Bing Bar (Version: 6.3.2322.0) Bonjour (Version: 3.0.0.10) Burn.Now 4.5 (Version: 4.5.0) Cisco Systems VPN Client 5.0.06.0160 (Version: 5.0.6) Citavi (Version: 3.0.3.0) Client Security - Password Manager (Version: 8.30.0049.00) Conexant 20585 SmartAudio HD (Version: 4.95.48.50) Corel Burn.Now Lenovo Edition (Version: 4.5.0) Corel DVD MovieFactory 7 (Version: 7.0.0) Corel DVD MovieFactory Lenovo Edition (Version: 7.0.0) Cortona3D Viewer (Version: 6.0.180) Create Recovery Media (Version: 1.20.0.00) D3DX10 (Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DHTML Editing Component (Version: 6.02.0001) Dienstprogramm "ThinkPad UltraNav" (Version: 2.13.0) Direct DiscRecorder (Version: 1.00.0000) Disable AMT Profile Synchronization Pop-up for Windows Vista/7 (Version: 1.00) Dropbox (HKCU Version: 1.4.7) Energie-Manager (Version: 6.32) FileZilla Client 3.0.11 (Version: 3.0.11) FormatFactory 2.60 (Version: 2.60) Free YouTube Download version 3.1.29.608 (Version: 3.1.29.608) GIMP 2.8.2 (Version: 2.8.2) Google Chrome (HKCU Version: 28.0.1500.95) Google Update Helper (Version: 1.3.21.153) GPL Ghostscript 9.00 HTC BMP USB Driver (Version: 1.0.5375) HTC Driver Installer (Version: 3.0.0.021) HTC Sync (Version: 3.2.20) IBM SPSS Amos 20 (Version: 20.0.0) IBM SPSS Smartreader 19 (Version: 19.0.0) Integrated Camera Driver Installer Package Ver.1.1.0.48 (Version: 1.1.0.48) Intel PROSet Wireless Intel(R) Control Center (Version: 1.2.1.1007) Intel(R) Management Engine Components (Version: 6.0.0.1179) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (Version: 8.15.10.2622) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284) Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258) iTunes (Version: 11.0.4.4) Java 7 Update 21 (Version: 7.0.210) Java Auto Updater (Version: 2.1.9.5) Java(TM) 6 Update 26 (Version: 6.0.260) JavaFX 2.1.0 (Version: 2.1.0) Junk Mail filter update (Version: 15.4.3502.0922) Lenovo Auto Scroll Utility (Version: 1.11) Lenovo Patch Utility (Version: 1.3.0.9) Lenovo System Interface Driver (Version: 1.05) Lenovo System Update (Version: 5.02.0011) Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23) Lenovo Warranty Information (Version: 1.0.0004.00) Lenovo Welcome (Version: 2.0.020.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Mediencenter 3.8.0.2907 (HKCU Version: 3.8.0.2907) Mesh Runtime (Version: 15.4.5722.2) Message Center Plus (Version: 2.0.0012.00) Messenger Companion (Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Outlook Connector (Version: 14.0.5118.5000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Professional 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000) Microsoft Reader Text-to-Speech deutsch (Version: 01.00.0000) Microsoft Research AutoCollage Touch 2009 (Version: 2.00.2009) Microsoft Search Enhancement Pack (Version: 3.0.133.0) Microsoft Security Client (Version: 4.2.0223.1) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Security Essentials (Version: 4.2.223.1) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Mobile Broadband Connect (Version: 3.5.0010) Mozilla Firefox 22.0 (x86 de) (Version: 22.0) Mozilla Maintenance Service (Version: 22.0) MP3-Cutter MP4 To MP3 Converter V3.0 MSVCRT (Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0) MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (Version: 4.30.2100.0) Nero 9 Essentials Nero BurnRights (Version: 3.4.13.100) Nero BurnRights Help (Version: 3.4.4.100) Nero ControlCenter (Version: 9.0.0.1) Nero DiscSpeed (Version: 5.4.13.100) Nero DiscSpeed Help (Version: 5.4.4.100) Nero DriveSpeed (Version: 4.4.12.100) Nero DriveSpeed Help (Version: 4.4.4.100) Nero InfoTool (Version: 6.4.12.100) Nero InfoTool Help (Version: 6.4.4.100) Nero Installer (Version: 4.4.9.0) Nero Online Upgrade (Version: 1.3.0.0) Nero StartSmart (Version: 9.4.38.100) Nero StartSmart Help (Version: 9.4.38.100) neroxml (Version: 1.0.0) Nvu 1.0 (Version: 1.0) OLYMPUS Digital Camera Updater (Version: 1.0.1) Prezi Desktop (Version: 4.0.4) RedMon - Redirection Port Monitor Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00) Rescue and Recovery (Version: 4.30.0025.00) RICOH R5U230 Media Driver ver.2.06.02.02 (Version: 2.06.02.02) Riva FLV Player (Version: 1.0.0000) RUBICon (Version: 2.0.25) SeaMonkey 2.14.1 (x86 de) (Version: 2.14.1) SecondLifeViewer2 (remove only) Skype Click to Call (Version: 6.3.11079) Skype™ 6.6 (Version: 6.6.106) Spybot - Search & Destroy (Version: 2.1.19) Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (Version: 1.6.5.17120) ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.3200) ThinkPad FullScreen Magnifier (Version: 2.40) ThinkPad Modem Adapter (Version: 7.80.5.0) ThinkPad Power Management Driver (Version: 1.60.0.4) ThinkPad UltraNav Driver (Version: 16.2.5.0) ThinkVantage Access Connections (Version: 5.85) ThinkVantage Communications Utility (Version: 1.42) ThinkVantage Fingerprint Software (Version: 5.9.6.7084) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.5) TP-LINK USB Printer Controller (Version: 1.0.12.0323) TrueCrypt (Version: 7.1) TuneUp Utilities 2011 (Version: 10.0.4600.4) TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4600.4) Turbo Lister 2 (Version: 2.00.0000) Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition Verizon Wireless Mobile Broadband Self Activation (Version: 3.1.4) Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (Version: 04/08/2010 6.3.5.430) Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (Version: 06/15/2009 6.2.0.9000) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405) Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800) Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3538.0513) Windows Live Family Safety (Version: 15.4.3538.0513) Windows Live Fotogalerie (Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Mail (Version: 15.4.3502.0922) Windows Live Mesh (Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2) Windows Live Messenger (Version: 15.4.3538.0513) Windows Live Messenger Companion Core (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live Photo Gallery (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live Sync (Version: 14.0.8089.726) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (Version: 1.0.0.8) Windows-Treiberpaket - Intel (e1kexpress) Net (12/10/2009 11.5.10.0) (Version: 12/10/2009 11.5.10.0) Windows-Treiberpaket - Intel (HECI) System (09/17/2009 6.0.0.1179) (Version: 09/17/2009 6.0.0.1179) Windows-Treiberpaket - Intel System (06/04/2009 1.0.0.0002) (Version: 06/04/2009 1.0.0.0002) Windows-Treiberpaket - Intel System (10/28/2009 9.1.1.1022) (Version: 10/28/2009 9.1.1.1022) Windows-Treiberpaket - Intel USB (08/20/2009 9.1.1.1020) (Version: 08/20/2009 9.1.1.1020) Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (Version: 11/18/2009 1.60.0.4) Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0) Windows-Treiberpaket - Ricoh Company MS Host Controller (10/26/2009 6.10.02.07) (Version: 10/26/2009 6.10.02.07) ==================== Restore Points ========================= 29-07-2013 17:12:08 Geplanter Prüfpunkt 06-08-2013 12:38:17 Geplanter Prüfpunkt 14-08-2013 06:29:55 Geplanter Prüfpunkt 16-08-2013 08:01:05 S 16-08-2013 11:07:45 S 16-08-2013 11:08:50 S 16-08-2013 11:22:02 Installed Microsoft Fix it 50123 16-08-2013 11:27:10 Installed Microsoft Fix it 50123 16-08-2013 12:32:37 S 17-08-2013 13:58:46 S 17-08-2013 14:00:25 S ==================== Hosts content: ========================== 2009-07-14 04:04 - 2013-06-14 08:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {11BFD002-5FCA-46D7-99CA-18A467A48F38} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.) Task: {13C99129-D58F-49E1-99F9-1C0DCD48B19F} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe No File Task: {1631E089-C57A-4C05-8158-1AA11FE20171} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.) Task: {23EFF5ED-3A67-46EB-B754-8EC2C4FA37D8} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-04-11] () Task: {27F72222-3879-4CB2-85F0-A215B4E8ADC0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe No File Task: {2A571016-1477-49AC-92F4-A2CBB3D8184A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {62948E2D-4ABB-4728-BA5E-86CA80E42BFC} - \Browser Manager No Task File Task: {6C26C17B-8034-430E-AC63-BB219FCC7542} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.) Task: {6C830667-035D-4E6B-AE67-F0C5060B94F0} - System32\Tasks\Google Updater and Installer => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {6D481D47-466F-4473-8112-A6430136B9C9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {6D687FBC-4CD2-44E3-A378-9EC04F756E46} - System32\Tasks\JavaUpdateSched => C:\Windows\System32\jusched.exe No File Task: {7814C411-5DA0-4099-867E-44CB36E8EC4F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {83905B62-68C4-4219-ACFD-F8AA00DE5CE1} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe No File Task: {8BA6B856-B798-4A06-8E00-9A0AFDCE5E26} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {96212594-E16D-462A-B7E8-2AEE724C769B} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe No File Task: {AE20DA03-B461-418F-B755-C2074ABC1CE8} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe No File Task: {B216C86A-81DA-43DB-B488-769BD1E0BAB0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {B34FDA2D-FD35-4628-8A56-5E0E9BF6F53A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {B5A8B7EE-F61F-478C-A745-09A70DE4FAFE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe No File Task: {BB98A262-CF96-46EF-982D-77B6A6EA3D11} - System32\Tasks\{5242E32B-A714-49F4-AD46-3C3D63060455} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.) Task: {C0EC8D5B-1745-4049-827D-B4D17260D599} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation) Task: {C5FB7968-92DC-43F1-8A92-725C5C8B8C1D} - \BrowserDefendert No Task File Task: {C6932140-D1C0-4FA2-8C6B-7CFCEE01EF21} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] () Task: {C907D1BC-111A-43B4-AEFE-4571DB51DF65} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe No File Task: {CE82BD9A-B1C2-44CA-93AC-BD318095C569} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.) Task: {D369F111-A4A5-4D2F-83B3-DB9D615F375D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated) Task: {DE60EDDC-F3A9-49B5-8F42-F9BE72945AB0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.) Task: {E704046D-1829-4F64-AA25-9E186D07E3B8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software) Task: {EB252E21-311D-4A0E-A926-C4EADB1D0701} - System32\Tasks\Message Center plus => C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27] () Task: {F2B1BF00-20BC-46B4-8C41-6DFE1C9C98DF} - \EPUpdater No Task File Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter Description: Cisco Systems VPN Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Intel(R) 82577LM Gigabit Network Connection Description: Intel(R) 82577LM Gigabit Network Connection Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Intel Service: e1kexpress Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (08/21/2013 01:51:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/21/2013 01:19:05 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (08/21/2013 01:18:46 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (08/21/2013 01:17:57 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/21/2013 01:17:49 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (08/21/2013 11:16:28 AM) (Source: Application Hang) (User: ) Description: Programm FRST.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1428 Startzeit: 01ce9e4eef31728c Endzeit: 4 Anwendungspfad: C:\Users\***\Desktop\FRST.exe Berichts-ID: 460a5be3-0a42-11e3-84a5-70f395445e99 Error: (08/21/2013 08:14:27 AM) (Source: Microsoft-Windows-CAPI2) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary MpKsl7114dcfa. System Error: Das System kann die angegebene Datei nicht finden. . Error: (08/21/2013 08:12:23 AM) (Source: Application Hang) (User: ) Description: Programm rnr_gui.exe, Version 4.30.12.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1de4 Startzeit: 01ce9e3517c38ba9 Endzeit: 6 Anwendungspfad: C:\Program Files\Lenovo\Rescue and Recovery\rnr_gui.exe Berichts-ID: 9e194642-0a28-11e3-84a5-70f395445e99 Error: (08/21/2013 08:03:50 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/21/2013 07:59:59 AM) (Source: PC-Doctor) (User: ) Description: (5184) Asapi: (07:59:59:3430)(5184) DEFECT.GENERIC - Error -- OS_CRASH alert without DumpPath key/val pair: SOFTWARE_ALERT:52125584h-1001-0-2797926276-BugCheck System errors: ============= Error: (08/21/2013 01:47:02 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/21/2013 01:46:33 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/21/2013 01:46:33 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (08/21/2013 01:46:32 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet. Error: (08/21/2013 01:45:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/21/2013 01:45:11 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Updating Service erreicht. Error: (08/21/2013 01:45:10 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/21/2013 01:45:10 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht. Error: (08/21/2013 01:45:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/21/2013 01:40:21 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Microsoft Office Sessions: ========================= Error: (08/21/2013 01:51:15 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/21/2013 01:19:05 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\HTC\HTC Sync 3.0\FDAgentForOutlook64.exe Error: (08/21/2013 01:18:46 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dllC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dll19 Error: (08/21/2013 01:17:57 PM) (Source: SideBySide)(User: ) Description: C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dllC:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll0 Error: (08/21/2013 01:17:49 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack200.exeC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack200.exe19 Error: (08/21/2013 11:16:28 AM) (Source: Application Hang)(User: ) Description: FRST.exe3.3.8.1142801ce9e4eef31728c4C:\Users\***\Desktop\FRST.exe460a5be3-0a42-11e3-84a5-70f395445e99 Error: (08/21/2013 08:14:27 AM) (Source: Microsoft-Windows-CAPI2)(User: ) Description: Details: AddLegacyDriverFiles: Unable to back up image of binary MpKsl7114dcfa. System Error: Das System kann die angegebene Datei nicht finden. Error: (08/21/2013 08:12:23 AM) (Source: Application Hang)(User: ) Description: rnr_gui.exe4.30.12.11de401ce9e3517c38ba96C:\Program Files\Lenovo\Rescue and Recovery\rnr_gui.exe9e194642-0a28-11e3-84a5-70f395445e99 Error: (08/21/2013 08:03:50 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/21/2013 07:59:59 AM) (Source: PC-Doctor)(User: ) Description: (5184) Asapi: (07:59:59:3430)(5184) DEFECT.GENERIC - Error -- OS_CRASH alert without DumpPath key/val pair: SOFTWARE_ALERT:52125584h-1001-0-2797926276-BugCheck ==================== Memory info =========================== Percentage of memory in use: 57% Total physical RAM: 2995.67 MB Available physical RAM: 1282.86 MB Total Pagefile: 5989.63 MB Available Pagefile: 3832.38 MB Total Virtual: 2047.88 MB Available Virtual: 1908.44 MB ==================== Drives ================================ Drive c: (Windows7_OS) (Fixed) (Total:454.33 GB) (Free:50.99 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive g: (Repair disc Windows 7 32-bit) (CDROM) (Total:0.14 GB) (Free:0 GB) UDF Drive q: (Lenovo_Recovery) (Fixed) (Total:10.25 GB) (Free:5.04 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: BD6B6839) Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=454 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS) ==================== End Of Log ============================ mir sagen diese Log-Dateien ja nichts. Ist denn alles in Ordnung? also, nach dem hochfahren wieder zwei fehlerfenster erschienen. hab wieder screenshots gemacht und füge sie mit bei. dann funktioniert das windows update immer noch nicht. es gibt 3 wichtige updates für meinen rechner, aber die installation schlägt fehl. wieder code 80096001 unbekannter fehler. |
|
21.08.2013, 17:54
| #21 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart hier die screenshots... |
|
22.08.2013, 07:59
| #22 |
| /// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Java und Firefox updaten. Spybot komplett deinstallieren, ist eh unnötig. Angehängte Datei entpacken und laufen lassen, danach ein frisches FRST log bitte. Und wieder Win Updates versuchen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.08.2013, 08:45
| #23 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Update von JAVA/FIREFOX habe ich gemacht. Beim Deinstallieren von Spybot gab es ein Problem. Siehe .jpg Bevor ich jetzt wieder Quatsch mache, frage ich dich lieber. Soll ich Spybot wie empfohlen noch mal installieren? Wenn ja von welcher Queller? Danke für eine Zwischenhilfe ;-) |
|
22.08.2013, 08:46
| #24 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Hier der Screenshot... |
|
22.08.2013, 08:56
| #25 |
| /// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Herstellerseite, neu installieren, dann deinstallieren, rebooten und schauen ob die Meldungen noch kommen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.08.2013, 09:41
| #26 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-08-2013 02
Ran by *** (administrator) on 22-08-2013 10:29:57
Running from C:\Users\***\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(Lenovo.) C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
() C:\Windows\system32\vaultsvd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvc.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\ACTray.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
() C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe
(Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3110200 2011-06-10] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2342200 2012-07-05] (Synaptics Incorporated)
HKLM\...\Run: [ACTray] - C:\Program Files\Lenovo\Access Connections\ACTray.exe [433216 2011-10-20] (Lenovo)
HKLM\...\Run: [TP-Link USB Printer Controller] - C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4428800 2012-03-23] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe -update activex [690888 2012-09-11] (Adobe Systems Incorporated)
HKU\Default\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
IMEO\htcupctloader.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
IMEO\ncc.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
ShortcutTarget: VPN Client.lnk -> C:\Windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
ProxyServer: :0
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox;
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {A8945019-18BA-4ECC-B55E-160FD84D07CE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=386496&p={searchTerms}
SearchScopes: HKCU - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL =
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6E46B758-E4D6-4596-807B-A57756BA850A}: [NameServer]212.23.115.148 212.23.115.132
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @parallelgraphics.com/Cortona - C:\Program Files\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ShareazaWebSearch.xml
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
Chrome:
=======
CHR DefaultSearchURL: (Google) - hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&channel=fflb&q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&channel=rcs
CHR DefaultSuggestURL: (Google) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\***\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Cortona3D Viewer) - C:\Program Files\Mozilla Firefox\plugins\npCortona.dll (ParallelGraphics)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
========================== Services (Whitelisted) =================
R2 AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [134208 2011-10-20] (Lenovo)
R2 AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [269376 2011-10-20] (Lenovo)
R2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509448 2012-03-15] (Intel Corporation)
R2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2012-04-23] (Intel(R) Corporation)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
S4 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [50536 2010-07-27] (Lenovo Group Limited)
R2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [45496 2010-04-07] (Lenovo Group Limited)
S4 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [74088 2010-07-27] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] ()
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665120 2012-05-16] (Lenovo Group Limited)
R2 ScrybeUpdater; C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)
S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-04-11] ()
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)
R2 ucsvc32; C:\Windows\system32\vaultsvd.exe [65024 2012-09-15] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2759984 2012-06-25] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
R1 MpKsl327d07b1; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E9799F18-70FF-4418-806E-8F9B82B0E611}\MpKsl327d07b1.sys [29904 2013-08-22] (Microsoft Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10364416 2012-06-03] (Intel Corporation)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [816792 2010-11-19] ()
S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [82984 2007-06-25] (MCCI Corporation)
S3 s117mdfl; C:\Windows\System32\DRIVERS\s117mdfl.sys [14888 2007-06-25] (MCCI Corporation)
S3 s117mdm; C:\Windows\System32\DRIVERS\s117mdm.sys [108456 2007-06-25] (MCCI Corporation)
S3 s117mgmt; C:\Windows\System32\DRIVERS\s117mgmt.sys [100264 2007-06-25] (MCCI Corporation)
S3 s117nd5; C:\Windows\System32\DRIVERS\s117nd5.sys [22952 2007-06-25] (MCCI Corporation)
S3 s117obex; C:\Windows\System32\DRIVERS\s117obex.sys [98344 2007-06-25] (MCCI Corporation)
S3 s117unic; C:\Windows\System32\DRIVERS\s117unic.sys [98856 2007-06-25] (MCCI Corporation)
S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [57856 2010-01-07] (SCM Microsystems Inc.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-07-05] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [11976 2011-05-30] (Authentec Inc.)
R3 TPLINKUDSMBus; C:\Windows\System32\Drivers\TPLINKUDSMBus.sys [89728 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TPLINKUDSTcpBus; C:\Windows\System32\Drivers\TPLINKUDSTcpBus.sys [146304 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10064 2011-06-06] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13752 2009-09-29] ()
S3 catchme; \??\C:\Users\***\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-22 10:25 - 2013-08-22 10:25 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run (1).zip
2013-08-22 10:24 - 2013-08-22 10:25 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run.zip
2013-08-22 10:11 - 2013-08-22 10:11 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybot-2.1 (1).exe
2013-08-22 10:08 - 2013-08-22 10:09 - 36364784 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybotsd-2.1.20-SR1.exe
2013-08-22 09:42 - 2013-08-22 09:42 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-08-22 09:40 - 2013-08-22 09:40 - 00903080 _____ (Oracle Corporation) C:\Users\***\Downloads\chromeinstall-7u25.exe
2013-08-21 17:04 - 2013-08-21 17:04 - 00891115 _____ C:\Users\***\Desktop\SecurityCheck.exe
2013-08-21 14:50 - 2013-08-21 14:50 - 02347384 _____ (ESET) C:\Users\***\Downloads\esetsmartinstaller_enu.exe
2013-08-21 13:40 - 2013-08-21 13:43 - 00000000 ____D C:\AdwCleaner
2013-08-21 12:32 - 2013-08-21 12:32 - 00001082 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 12:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-21 12:31 - 2013-08-21 12:32 - 00975858 _____ C:\Users\***\Desktop\adwcleaner.exe
2013-08-21 12:31 - 2013-08-21 12:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\***\Desktop\mbam-setup-1.75.0.1300.exe
2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL
2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat
2013-08-19 09:26 - 2013-08-19 09:26 - 00002459 _____ C:\Users\***\Desktop\JRT.txt
2013-08-19 09:11 - 2013-08-19 09:11 - 00003018 _____ C:\AdwCleaner[S1].txt
2013-08-19 08:22 - 2013-08-21 12:32 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-18 16:21 - 2013-08-18 16:46 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv
2013-08-18 16:18 - 2013-08-18 16:18 - 00021377 _____ C:\ComboFix.txt
2013-08-18 16:00 - 2013-08-18 16:18 - 00000000 ____D C:\ComboFix
2013-08-18 16:00 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-18 15:53 - 2013-08-18 16:18 - 00000000 ____D C:\Qoobox
2013-08-17 18:37 - 2013-08-17 18:37 - 00032061 _____ C:\Users\***\Downloads\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00030729 _____ C:\Users\***\Downloads\FRST.txt
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 10:15 - 2013-08-16 10:32 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 07:41 - 2013-08-16 12:38 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 07:41 - 2013-08-16 10:13 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 14:55 - 2013-08-15 18:05 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:48 - 2013-08-16 13:11 - 00000000 ____D C:\Program Files\JDownloader
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:02 - 2013-08-14 23:03 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 22:59 - 2013-08-14 23:01 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:19 - 2013-08-14 21:21 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:56 - 2013-08-14 19:58 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:53 - 2013-08-14 19:54 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:43 - 2013-08-14 19:44 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:22 - 2013-08-14 19:24 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 17:34 - 2013-08-14 17:49 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:55 - 2013-08-14 14:57 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 07:52 - 2013-08-12 08:13 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-02 10:16 - 2013-08-02 10:44 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-26 13:57 - 2013-07-26 14:17 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
2013-07-24 15:24 - 2013-08-21 19:11 - 00000000 ____D C:\Users\***\Documents\DGVT
==================== One Month Modified Files and Folders =======
2013-08-22 10:29 - 2013-08-22 10:29 - 01070315 _____ (Farbar) C:\Users\***\Desktop\FRST.exe
2013-08-22 10:28 - 2009-07-21 07:30 - 00390040 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-22 10:26 - 2011-06-05 15:43 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-08-22 10:26 - 2010-11-19 04:22 - 01427214 _____ C:\Windows\WindowsUpdate.log
2013-08-22 10:25 - 2013-08-22 10:25 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run (1).zip
2013-08-22 10:25 - 2013-08-22 10:24 - 00211349 _____ C:\Users\***\Downloads\MicrosoftFixit.wu.Run.zip
2013-08-22 10:23 - 2013-04-05 08:37 - 00000000 ___RD C:\Users\***\Mediencenter
2013-08-22 10:23 - 2012-08-15 16:10 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 10:22 - 2013-06-19 10:00 - 00002016 _____ C:\Windows\setupact.log
2013-08-22 10:22 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-22 10:18 - 2013-07-12 08:25 - 00072446 _____ C:\Windows\PFRO.log
2013-08-22 10:18 - 2013-07-10 18:36 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2013-08-22 10:16 - 2013-07-10 19:48 - 00029914 _____ C:\Windows\wininit.ini
2013-08-22 10:13 - 2010-12-06 10:29 - 00000000 ____D C:\Users\***\AppData\Roaming\Skype
2013-08-22 10:11 - 2013-08-22 10:11 - 36271144 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybot-2.1 (1).exe
2013-08-22 10:09 - 2013-08-22 10:08 - 36364784 _____ (Safer-Networking Ltd. ) C:\Users\***\Downloads\spybotsd-2.1.20-SR1.exe
2013-08-22 09:42 - 2013-08-22 09:42 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-08-22 09:42 - 2013-06-14 12:02 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-08-22 09:42 - 2012-05-31 19:48 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-08-22 09:42 - 2012-05-31 19:48 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-08-22 09:42 - 2012-05-31 19:48 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-08-22 09:42 - 2010-11-20 09:53 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-08-22 09:42 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Java
2013-08-22 09:40 - 2013-08-22 09:40 - 00903080 _____ (Oracle Corporation) C:\Users\***\Downloads\chromeinstall-7u25.exe
2013-08-22 09:38 - 2012-08-15 16:10 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 09:36 - 2012-09-17 23:07 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job
2013-08-22 08:20 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-22 08:20 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-21 19:11 - 2013-07-24 15:24 - 00000000 ____D C:\Users\***\Documents\DGVT
2013-08-21 17:41 - 2013-06-14 08:56 - 00000000 ___HD C:\Windows\system32\Settings
2013-08-21 17:41 - 2013-06-12 21:33 - 00000000 ____D C:\Windows\erdnt
2013-08-21 17:41 - 2013-06-10 11:41 - 00000000 ____D C:\Users\***\Downloads\RecBoot_1.3_Windows
2013-08-21 17:41 - 2010-11-20 00:06 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-21 17:41 - 2010-11-19 12:50 - 00000000 ____D C:\ProgramData\Lenovo
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-21 17:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\AppCompat
2013-08-21 17:40 - 2013-06-14 12:02 - 00000000 ____D C:\Program Files\Common Files\Java
2013-08-21 17:40 - 2013-06-14 10:51 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iTunes
2013-08-21 17:40 - 2013-06-10 09:57 - 00000000 ____D C:\Program Files\iPod
2013-08-21 17:40 - 2013-05-17 13:25 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-21 17:40 - 2012-10-24 10:30 - 00000000 ____D C:\Program Files\Apple Software Update
2013-08-21 17:40 - 2012-09-11 08:19 - 00000000 ____D C:\ProgramData\Intel
2013-08-21 17:40 - 2012-09-11 08:18 - 00000000 ____D C:\Program Files\Cisco
2013-08-21 17:40 - 2012-08-15 16:10 - 00000000 ____D C:\Program Files\Google
2013-08-21 17:40 - 2012-07-05 10:19 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-08-21 17:40 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-08-21 17:40 - 2012-05-31 19:48 - 00000000 ____D C:\Program Files\Oracle
2013-08-21 17:40 - 2012-04-02 09:52 - 00000000 ____D C:\Program Files\Common Files\L&H
2013-08-21 17:40 - 2011-12-23 11:25 - 00000000 ____D C:\Program Files\RUB
2013-08-21 17:40 - 2011-10-23 17:39 - 00000000 ____D C:\Program Files\mp3DirectCut
2013-08-21 17:40 - 2011-10-23 17:27 - 00000000 ____D C:\Program Files\MP3-Cutter
2013-08-21 17:40 - 2011-08-01 07:58 - 00000000 ____D C:\Program Files\Win7codecs
2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-08-21 17:40 - 2011-07-23 13:40 - 00000000 ____D C:\Program Files\TuneUp Utilities 2011
2013-08-21 17:40 - 2011-07-18 11:27 - 00000000 ____D C:\Program Files\Amazon
2013-08-21 17:40 - 2011-06-24 13:25 - 00000000 ____D C:\Program Files\Common Files\ParallelGraphics
2013-08-21 17:40 - 2011-06-05 15:42 - 00000000 ____D C:\ProgramData\PC-Doctor for Windows
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Spirent Communications
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\HTC
2013-08-21 17:40 - 2011-05-26 19:25 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-08-21 17:40 - 2011-05-17 22:32 - 00000000 ____D C:\Program Files\FreeTime
2013-08-21 17:40 - 2011-05-16 08:15 - 00000000 ____D C:\ProgramData\Skype Extras
2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Riva
2013-08-21 17:40 - 2011-04-11 19:19 - 00000000 ____D C:\Program Files\Common Files\SWF Studio
2013-08-21 17:40 - 2011-03-09 19:21 - 00000000 ____D C:\ProgramData\elsterformular
2013-08-21 17:40 - 2011-03-09 00:26 - 00000000 ____D C:\Windows\Minidump
2013-08-21 17:40 - 2011-02-28 16:46 - 00000000 ____D C:\Program Files\Citavi 3
2013-08-21 17:40 - 2011-02-28 16:45 - 00000000 ____D C:\ProgramData\Swiss Academic Software
2013-08-21 17:40 - 2011-02-14 13:47 - 00000000 ____D C:\Program Files\gs
2013-08-21 17:40 - 2011-02-13 15:08 - 00000000 ____D C:\Program Files\SecondLifeViewer2
2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Common Files\Deterministic Networks
2013-08-21 17:40 - 2011-01-12 13:20 - 00000000 ____D C:\Program Files\Cisco Systems
2013-08-21 17:40 - 2011-01-11 18:00 - 00000000 ____D C:\Program Files\OLYMPUS
2013-08-21 17:40 - 2010-12-23 18:35 - 00000000 ____D C:\ProgramData\SafeNet Sentinel
2013-08-21 17:40 - 2010-12-23 18:33 - 00000000 ____D C:\Program Files\Common Files\IBM
2013-08-21 17:40 - 2010-12-23 18:32 - 00000000 ____D C:\Program Files\IBM
2013-08-21 17:40 - 2010-12-21 20:11 - 00000000 ____D C:\Program Files\Adobe
2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Nero
2013-08-21 17:40 - 2010-12-08 22:45 - 00000000 ____D C:\Program Files\Common Files\Nero
2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ___RD C:\Program Files\Skype
2013-08-21 17:40 - 2010-12-06 10:29 - 00000000 ____D C:\ProgramData\Skype
2013-08-21 17:40 - 2010-11-29 22:16 - 00000000 ____D C:\Program Files\SeaMonkey
2013-08-21 17:40 - 2010-11-29 20:53 - 00000000 ____D C:\Program Files\Nvu
2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\ProgramData\eBay
2013-08-21 17:40 - 2010-11-24 22:50 - 00000000 ____D C:\Program Files\eBay
2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\ProgramData\Apple Computer
2013-08-21 17:40 - 2010-11-20 10:08 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-08-21 17:40 - 2010-11-20 09:59 - 00000000 ____D C:\ProgramData\Apple
2013-08-21 17:40 - 2010-11-20 09:57 - 00000000 ____D C:\Program Files\BASE&E-Plus
2013-08-21 17:40 - 2010-11-19 23:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-21 17:40 - 2010-11-19 23:22 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-08-21 17:40 - 2010-11-19 23:21 - 00000000 __RHD C:\MSOCache
2013-08-21 17:40 - 2010-11-19 04:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Windows Live
2013-08-21 17:40 - 2010-11-19 04:35 - 00000000 ____D C:\Program Files\Common Files\Windows Live
2013-08-21 17:40 - 2010-11-19 04:33 - 00000000 ____D C:\Program Files\NetWaiting
2013-08-21 17:40 - 2010-11-19 04:29 - 00000000 ____D C:\Program Files\PC-Doctor
2013-08-21 17:40 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\Verizon Wireless
2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\ProgramData\Adobe
2013-08-21 17:40 - 2010-11-19 04:26 - 00000000 ____D C:\Program Files\ThinkVantage
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\ProgramData\Ulead Systems
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Corel
2013-08-21 17:40 - 2010-11-19 04:24 - 00000000 ____D C:\Program Files\Common Files\Ulead Systems
2013-08-21 17:40 - 2010-11-19 04:21 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-08-21 17:40 - 2010-11-19 04:20 - 00000000 ____D C:\swshare
2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-08-21 17:40 - 2010-11-19 04:18 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\ThinkVantage Fingerprint Software
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Protector Suite
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Intel
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\CONEXANT
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Program Files\Common Files\postureAgent
2013-08-21 17:40 - 2010-11-19 04:15 - 00000000 ____D C:\Intel
2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Lenovo
2013-08-21 17:40 - 2010-11-19 04:14 - 00000000 ____D C:\Program Files\Integrated Camera Driver
2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-21 17:40 - 2010-11-19 04:13 - 00000000 ____D C:\Program Files\ThinkPad
2013-08-21 17:40 - 2010-11-19 04:12 - 00000000 ____D C:\Program Files\DIFX
2013-08-21 17:40 - 2010-11-19 04:10 - 00000000 ____D C:\Program Files\Synaptics
2013-08-21 17:40 - 2009-07-21 13:47 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-21 17:40 - 2009-07-21 08:20 - 00000000 ____D C:\SWTOOLS
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2013-08-21 17:40 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-08-21 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-21 17:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-08-21 17:04 - 2013-08-21 17:04 - 00891115 _____ C:\Users\***\Desktop\SecurityCheck.exe
2013-08-21 14:50 - 2013-08-21 14:50 - 02347384 _____ (ESET) C:\Users\***\Downloads\esetsmartinstaller_enu.exe
2013-08-21 13:43 - 2013-08-21 13:40 - 00000000 ____D C:\AdwCleaner
2013-08-21 13:43 - 2012-06-18 17:53 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-08-21 13:37 - 2011-06-05 15:43 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-08-21 13:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Cursors
2013-08-21 12:32 - 2013-08-21 12:32 - 00001082 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-21 12:32 - 2013-08-21 12:31 - 00975858 _____ C:\Users\***\Desktop\adwcleaner.exe
2013-08-21 12:32 - 2013-08-19 08:22 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-21 12:31 - 2013-08-21 12:31 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\***\Desktop\mbam-setup-1.75.0.1300.exe
2013-08-21 10:20 - 2011-05-17 22:35 - 00026624 ___SH C:\Users\***\Thumbs.db
2013-08-21 10:19 - 2013-08-21 10:19 - 00012990 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).CAL
2013-08-21 10:18 - 2013-08-21 10:18 - 00038458 _____ C:\Users\***\AppData\Roaming\Kommagetrennte Werte (Windows).ADR
2013-08-21 08:03 - 2010-11-19 04:29 - 00000000 ____D C:\ProgramData\PCDr
2013-08-21 07:43 - 2010-11-19 22:04 - 00000000 ____D C:\Users\***
2013-08-19 23:05 - 2012-04-02 10:02 - 00000000 ____D C:\Program Files\Naturalsoft
2013-08-19 23:05 - 2012-01-15 18:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-19 23:05 - 2011-12-14 10:36 - 00000000 ____D C:\Program Files\SDA
2013-08-19 23:05 - 2011-06-13 14:56 - 00000000 ____D C:\ProgramData\Easybits GO
2013-08-19 23:05 - 2011-01-30 19:59 - 00000000 ____D C:\Program Files\Shareaza Applications
2013-08-19 23:05 - 2010-12-31 20:02 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-08-19 23:05 - 2010-11-19 04:28 - 00000000 ____D C:\ProgramData\AT&T
2013-08-19 23:04 - 2012-05-28 19:22 - 00000000 ____D C:\Program Files\ElsterFormular
2013-08-19 23:03 - 2012-04-02 10:52 - 00000000 ____D C:\Program Files\Balabolka
2013-08-19 23:03 - 2012-02-21 19:32 - 00000000 ____D C:\Program Files\Audible
2013-08-19 23:03 - 2010-11-19 04:28 - 00000000 ____D C:\Program Files\AT&T
2013-08-19 23:02 - 2013-08-19 23:02 - 00001732 _____ C:\tvtpktfilter.dat
2013-08-19 09:26 - 2013-08-19 09:26 - 00002459 _____ C:\Users\***\Desktop\JRT.txt
2013-08-19 09:11 - 2013-08-19 09:11 - 00003018 _____ C:\AdwCleaner[S1].txt
2013-08-18 18:35 - 2010-12-06 19:21 - 00000000 ____D C:\Users\***\Documents\Kennwörter
2013-08-18 16:46 - 2013-08-18 16:21 - 410116739 _____ C:\Users\***\Downloads\1308_banana_0236.wmv
2013-08-18 16:18 - 2013-08-18 16:18 - 00021377 _____ C:\ComboFix.txt
2013-08-18 16:18 - 2013-08-18 16:00 - 00000000 ____D C:\ComboFix
2013-08-18 16:18 - 2013-08-18 15:53 - 00000000 ____D C:\Qoobox
2013-08-17 18:37 - 2013-08-17 18:37 - 00032061 _____ C:\Users\***\Downloads\Addition.txt
2013-08-17 18:37 - 2013-08-17 18:37 - 00030729 _____ C:\Users\***\Downloads\FRST.txt
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 13:11 - 2013-08-15 14:48 - 00000000 ____D C:\Program Files\JDownloader
2013-08-16 12:38 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 10:32 - 2013-08-16 10:15 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 10:13 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 18:05 - 2013-08-15 14:55 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:03 - 2013-08-14 23:02 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 23:01 - 2013-08-14 22:59 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:21 - 2013-08-14 21:19 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:58 - 2013-08-14 19:56 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:54 - 2013-08-14 19:53 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:44 - 2013-08-14 19:43 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:36 - 2012-09-17 23:07 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job
2013-08-14 19:24 - 2013-08-14 19:22 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 17:49 - 2013-08-14 17:34 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:57 - 2013-08-14 14:55 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 20:09 - 2010-12-06 19:22 - 00000000 ____D C:\Users\***\Documents\Rezepte
2013-08-12 08:13 - 2013-08-12 07:52 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-06 14:48 - 2013-04-05 08:36 - 00001150 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk
2013-08-02 10:44 - 2013-08-02 10:16 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-28 19:43 - 2013-06-18 09:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-26 14:17 - 2013-07-26 13:57 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
ZeroAccess:
C:\Users\***\AppData\Local\282d2952
C:\Users\***\AppData\Local\282d2952\U\800000c0.$
C:\Users\***\AppData\Local\282d2952\U\800000cb.$
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-22 08:59
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-08-2013 02 Ran by *** at 2013-08-22 10:31:08 Running from C:\Users\***\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 Access Help (Version: 3.01) Adobe AIR (Version: 3.2.0.2070) Adobe Flash Player 11 ActiveX (Version: 11.4.402.265) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03) Advertising Center (Version: 0.0.0.2) AirPort (Version: 5.6.1.2) Akamai NetSession Interface Amazon MP3-Downloader 1.0.17 (Version: 1.0.17) AMR to MP3 Converter 1.4 Anzeige am Bildschirm (Version: 6.61.00) Apple Software Update (Version: 2.1.3.127) Bing Bar (Version: 6.3.2322.0) Bonjour (Version: 3.0.0.10) Burn.Now 4.5 (Version: 4.5.0) Cisco Systems VPN Client 5.0.06.0160 (Version: 5.0.6) Citavi (Version: 3.0.3.0) Client Security - Password Manager (Version: 8.30.0049.00) Conexant 20585 SmartAudio HD (Version: 4.95.48.50) Corel Burn.Now Lenovo Edition (Version: 4.5.0) Corel DVD MovieFactory 7 (Version: 7.0.0) Corel DVD MovieFactory Lenovo Edition (Version: 7.0.0) Cortona3D Viewer (Version: 6.0.180) Create Recovery Media (Version: 1.20.0.00) D3DX10 (Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DHTML Editing Component (Version: 6.02.0001) Dienstprogramm "ThinkPad UltraNav" (Version: 2.13.0) Direct DiscRecorder (Version: 1.00.0000) Disable AMT Profile Synchronization Pop-up for Windows Vista/7 (Version: 1.00) Dropbox (HKCU Version: 1.4.7) Energie-Manager (Version: 6.32) FileZilla Client 3.0.11 (Version: 3.0.11) FormatFactory 2.60 (Version: 2.60) Free YouTube Download version 3.1.29.608 (Version: 3.1.29.608) GIMP 2.8.2 (Version: 2.8.2) Google Chrome (HKCU Version: 28.0.1500.95) Google Update Helper (Version: 1.3.21.153) GPL Ghostscript 9.00 HTC BMP USB Driver (Version: 1.0.5375) HTC Driver Installer (Version: 3.0.0.021) HTC Sync (Version: 3.2.20) IBM SPSS Amos 20 (Version: 20.0.0) IBM SPSS Smartreader 19 (Version: 19.0.0) Integrated Camera Driver Installer Package Ver.1.1.0.48 (Version: 1.1.0.48) Intel PROSet Wireless Intel(R) Control Center (Version: 1.2.1.1007) Intel(R) Management Engine Components (Version: 6.0.0.1179) Intel(R) Network Connections Drivers (Version: 16.8) Intel(R) Processor Graphics (Version: 8.15.10.2622) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284) Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258) iTunes (Version: 11.0.4.4) Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Java(TM) 6 Update 26 (Version: 6.0.260) JavaFX 2.1.0 (Version: 2.1.0) Junk Mail filter update (Version: 15.4.3502.0922) Lenovo Auto Scroll Utility (Version: 1.11) Lenovo Patch Utility (Version: 1.3.0.9) Lenovo System Interface Driver (Version: 1.05) Lenovo System Update (Version: 5.02.0011) Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23) Lenovo Warranty Information (Version: 1.0.0004.00) Lenovo Welcome (Version: 2.0.020.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Mediencenter 3.8.0.2907 (HKCU Version: 3.8.0.2907) Mesh Runtime (Version: 15.4.5722.2) Message Center Plus (Version: 2.0.0012.00) Messenger Companion (Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Outlook Connector (Version: 14.0.5118.5000) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Professional 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000) Microsoft Reader Text-to-Speech deutsch (Version: 01.00.0000) Microsoft Research AutoCollage Touch 2009 (Version: 2.00.2009) Microsoft Search Enhancement Pack (Version: 3.0.133.0) Microsoft Security Client (Version: 4.2.0223.1) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Security Essentials (Version: 4.2.223.1) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Mobile Broadband Connect (Version: 3.5.0010) Mozilla Firefox 22.0 (x86 de) (Version: 22.0) Mozilla Maintenance Service (Version: 22.0) MP3-Cutter MP4 To MP3 Converter V3.0 MSVCRT (Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0) MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (Version: 4.30.2100.0) Nero 9 Essentials Nero BurnRights (Version: 3.4.13.100) Nero BurnRights Help (Version: 3.4.4.100) Nero ControlCenter (Version: 9.0.0.1) Nero DiscSpeed (Version: 5.4.13.100) Nero DiscSpeed Help (Version: 5.4.4.100) Nero DriveSpeed (Version: 4.4.12.100) Nero DriveSpeed Help (Version: 4.4.4.100) Nero InfoTool (Version: 6.4.12.100) Nero InfoTool Help (Version: 6.4.4.100) Nero Installer (Version: 4.4.9.0) Nero Online Upgrade (Version: 1.3.0.0) Nero StartSmart (Version: 9.4.38.100) Nero StartSmart Help (Version: 9.4.38.100) neroxml (Version: 1.0.0) Nvu 1.0 (Version: 1.0) OLYMPUS Digital Camera Updater (Version: 1.0.1) Prezi Desktop (Version: 4.0.4) RedMon - Redirection Port Monitor Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00) Rescue and Recovery (Version: 4.30.0025.00) RICOH R5U230 Media Driver ver.2.06.02.02 (Version: 2.06.02.02) Riva FLV Player (Version: 1.0.0000) RUBICon (Version: 2.0.25) SeaMonkey 2.14.1 (x86 de) (Version: 2.14.1) SecondLifeViewer2 (remove only) Skype Click to Call (Version: 6.3.11079) Skype™ 6.6 (Version: 6.6.106) Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (Version: 1.6.5.17120) ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.3200) ThinkPad FullScreen Magnifier (Version: 2.40) ThinkPad Modem Adapter (Version: 7.80.5.0) ThinkPad Power Management Driver (Version: 1.60.0.4) ThinkPad UltraNav Driver (Version: 16.2.5.0) ThinkVantage Access Connections (Version: 5.85) ThinkVantage Communications Utility (Version: 1.42) ThinkVantage Fingerprint Software (Version: 5.9.6.7084) ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.5) TP-LINK USB Printer Controller (Version: 1.0.12.0323) TrueCrypt (Version: 7.1) TuneUp Utilities 2011 (Version: 10.0.4600.4) TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4600.4) Turbo Lister 2 (Version: 2.00.0000) Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition Verizon Wireless Mobile Broadband Self Activation (Version: 3.1.4) Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (Version: 04/08/2010 6.3.5.430) Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (Version: 06/15/2009 6.2.0.9000) Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405) Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800) Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3538.0513) Windows Live Family Safety (Version: 15.4.3538.0513) Windows Live Fotogalerie (Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Mail (Version: 15.4.3502.0922) Windows Live Mesh (Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2) Windows Live Messenger (Version: 15.4.3538.0513) Windows Live Messenger Companion Core (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live Photo Gallery (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live Sync (Version: 14.0.8089.726) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (Version: 1.0.0.8) Windows-Treiberpaket - Intel (e1kexpress) Net (12/10/2009 11.5.10.0) (Version: 12/10/2009 11.5.10.0) Windows-Treiberpaket - Intel (HECI) System (09/17/2009 6.0.0.1179) (Version: 09/17/2009 6.0.0.1179) Windows-Treiberpaket - Intel System (06/04/2009 1.0.0.0002) (Version: 06/04/2009 1.0.0.0002) Windows-Treiberpaket - Intel System (10/28/2009 9.1.1.1022) (Version: 10/28/2009 9.1.1.1022) Windows-Treiberpaket - Intel USB (08/20/2009 9.1.1.1020) (Version: 08/20/2009 9.1.1.1020) Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (Version: 11/18/2009 1.60.0.4) Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0) Windows-Treiberpaket - Ricoh Company MS Host Controller (10/26/2009 6.10.02.07) (Version: 10/26/2009 6.10.02.07) ==================== Restore Points ========================= 14-08-2013 06:29:55 Geplanter Prüfpunkt 16-08-2013 08:01:05 S 16-08-2013 11:07:45 S 16-08-2013 11:08:50 S 16-08-2013 11:22:02 Installed Microsoft Fix it 50123 16-08-2013 11:27:10 Installed Microsoft Fix it 50123 16-08-2013 12:32:37 S 17-08-2013 13:58:46 S 17-08-2013 14:00:25 S 22-08-2013 07:40:58 Installed Java 7 Update 25 ==================== Hosts content: ========================== 2009-07-14 04:04 - 2013-06-14 08:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {11BFD002-5FCA-46D7-99CA-18A467A48F38} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.) Task: {13C99129-D58F-49E1-99F9-1C0DCD48B19F} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe No File Task: {1631E089-C57A-4C05-8158-1AA11FE20171} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.) Task: {23EFF5ED-3A67-46EB-B754-8EC2C4FA37D8} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-04-11] () Task: {2A571016-1477-49AC-92F4-A2CBB3D8184A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {62948E2D-4ABB-4728-BA5E-86CA80E42BFC} - \Browser Manager No Task File Task: {6C26C17B-8034-430E-AC63-BB219FCC7542} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.) Task: {6C830667-035D-4E6B-AE67-F0C5060B94F0} - System32\Tasks\Google Updater and Installer => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {6D481D47-466F-4473-8112-A6430136B9C9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {6D687FBC-4CD2-44E3-A378-9EC04F756E46} - System32\Tasks\JavaUpdateSched => C:\Windows\System32\jusched.exe No File Task: {7814C411-5DA0-4099-867E-44CB36E8EC4F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.) Task: {83905B62-68C4-4219-ACFD-F8AA00DE5CE1} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe No File Task: {8BA6B856-B798-4A06-8E00-9A0AFDCE5E26} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {96212594-E16D-462A-B7E8-2AEE724C769B} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe No File Task: {AE20DA03-B461-418F-B755-C2074ABC1CE8} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe No File Task: {B216C86A-81DA-43DB-B488-769BD1E0BAB0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {B34FDA2D-FD35-4628-8A56-5E0E9BF6F53A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {BB98A262-CF96-46EF-982D-77B6A6EA3D11} - System32\Tasks\{5242E32B-A714-49F4-AD46-3C3D63060455} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.) Task: {C5FB7968-92DC-43F1-8A92-725C5C8B8C1D} - \BrowserDefendert No Task File Task: {C6932140-D1C0-4FA2-8C6B-7CFCEE01EF21} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] () Task: {CE82BD9A-B1C2-44CA-93AC-BD318095C569} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.) Task: {D369F111-A4A5-4D2F-83B3-DB9D615F375D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated) Task: {DE60EDDC-F3A9-49B5-8F42-F9BE72945AB0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.) Task: {E704046D-1829-4F64-AA25-9E186D07E3B8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software) Task: {EB252E21-311D-4A0E-A926-C4EADB1D0701} - System32\Tasks\Message Center plus => C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27] () Task: {F2B1BF00-20BC-46B4-8C41-6DFE1C9C98DF} - \EPUpdater No Task File Task: {FE38C4A6-39EA-4683-A32B-B602CB738950} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter Description: Cisco Systems VPN Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Intel(R) 82577LM Gigabit Network Connection Description: Intel(R) 82577LM Gigabit Network Connection Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Intel Service: e1kexpress Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (08/22/2013 10:28:59 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/22/2013 09:02:02 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (08/22/2013 09:01:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (08/22/2013 09:00:48 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/22/2013 09:00:40 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (08/22/2013 08:18:10 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/21/2013 06:44:46 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/21/2013 01:51:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (08/21/2013 01:19:05 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (08/21/2013 01:18:46 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "6.0.0.6u9b41" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (08/22/2013 10:24:42 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/22/2013 10:24:16 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet. Error: (08/22/2013 10:22:49 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/22/2013 10:20:50 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/22/2013 10:20:15 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet. Error: (08/22/2013 10:18:49 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/22/2013 10:17:06 AM) (Source: DCOM) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (08/22/2013 08:22:14 AM) (Source: Microsoft Antimalware) (User: ) Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt. Neue Signaturversion: Vorherige Signaturversion: 1.157.56.0 Aktualisierungsquelle: %NT-AUTORITÄT59 Aktualisierungsphase: 4.2.0223.00 Quellpfad: 4.2.0223.01 Signaturtyp: %NT-AUTORITÄT602 Aktualisierungstyp: %NT-AUTORITÄT604 Benutzer: NT-AUTORITÄT\SYSTEM Aktuelle Modulversion: %NT-AUTORITÄT605 Vorherige Modulversion: %NT-AUTORITÄT606 Fehlercode: %NT-AUTORITÄT607 Fehlerbeschreibung: %NT-AUTORITÄT608 Error: (08/22/2013 08:14:11 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (08/22/2013 08:13:53 AM) (Source: WMPNetworkSvc) (User: ) Description: WMPNetworkSvc0x80004005 Microsoft Office Sessions: ========================= Error: (08/22/2013 10:28:59 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/22/2013 09:02:02 AM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\HTC\HTC Sync 3.0\FDAgentForOutlook64.exe Error: (08/22/2013 09:01:41 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dllC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dll19 Error: (08/22/2013 09:00:48 AM) (Source: SideBySide)(User: ) Description: C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dllC:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll0 Error: (08/22/2013 09:00:40 AM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack200.exeC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack200.exe19 Error: (08/22/2013 08:18:10 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/21/2013 06:44:46 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/21/2013 01:51:15 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (08/21/2013 01:19:05 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\HTC\HTC Sync 3.0\FDAgentForOutlook64.exe Error: (08/21/2013 01:18:46 PM) (Source: SideBySide)(User: ) Description: assemblyIdentityversion6.0.0.6u9b41C:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dllC:\Program Files\IBM\SPSS\Smartreader\19\JRE\bin\unpack.dll19 ==================== Memory info =========================== Percentage of memory in use: 53% Total physical RAM: 2995.67 MB Available physical RAM: 1404.39 MB Total Pagefile: 5989.63 MB Available Pagefile: 4018.47 MB Total Virtual: 2047.88 MB Available Virtual: 1920.5 MB ==================== Drives ================================ Drive c: (Windows7_OS) (Fixed) (Total:454.33 GB) (Free:53.75 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive q: (Lenovo_Recovery) (Fixed) (Total:10.25 GB) (Free:5.04 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: BD6B6839) Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=454 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS) ==================== End Of Log ============================ habe zur sicherheit auch noch mal neu gestartet. dann nochmal update probiert. unverändert. frst log hab ich gepostet. |
|
22.08.2013, 11:49
| #27 |
| /// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Windows Update allgemein oder nur ein paar Updates? Meldungen beim start weg? Downloade dir bitte  Farbar Service Scanner
Poste bitte den Inhalt hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.08.2013, 12:45
| #28 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart ad update: es gibt 3 sog. "wichtige updates" und 11 "optionale updates". ich wollte nur die 3 wichtigen herunterladen und installieren. und das funzt eben nicht. ad systemstart: ja, die kleinen fensterchen tauchen nicht mehr auf. super! ;-) hier die log-datei von fss: Code:
ATTFilter Farbar Service Scanner Version: 18-08-2013
Ran by *** (administrator) on 22-08-2013 at 13:43:17
Running from "C:\Users\***\Desktop"
Microsoft Windows 7 Professional Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
Other Services:
==============
File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
**** End of log ****
|
|
22.08.2013, 13:25
| #29 |
| /// the machine /// TB-Ausbilder | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart dann brauch ich bitte die KB nummern der 3 Updates und nochmal die Fehlernummern
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.08.2013, 13:51
| #30 |
| | Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart Update für Microsoft .NET Framework 3.5.1 unter Windows 7 SP1 x86 (KB2836942) Update für Microsoft .NET Framework 3.5.1 unter Windows 7 SP1 x86 (KB2836943) Update für Microsoft .NET Framework 4 unter XP, Server 2003, Vista, Windows 7, Windows Server 2008 x86 (KB2836939) Fehlercode 80096001 |
|
| Themen zu Systemwiederherstellungspunkte weg, Malware lässt sich nicht entfernen, Fehlermeldung bei Systemstart |
| .dll, entfernen, erscheint, fehlermeldung, gelöscht, google, keine updates, komplett, komplett entfernen, lässt sich nicht entfernen, nicht möglich, pup.optional.bandoo, pup.optional.datamngr, pup.optional.somoto, pup.optional.startpage, pup.optional.sweetim, spybot, systemwiederherstellung, sämtliche, windows system update, windows update |
Linear-Darstellung
