Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Laptop macht sich selbstständig. / Turn off ab und an Blue Screen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 20.08.2013, 18:00   #1
Elb
 
Laptop macht sich selbstständig. / Turn off ab und an Blue Screen - Standard

Laptop macht sich selbstständig. / Turn off ab und an Blue Screen



Hallo zusammen ,

anbei die Log-Dateien gemäß den Anleitungen.
Samsung Satellite , Windows 7 - 64
Bitte um Durchsicht und Hilfe.

Addition.txt

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-08-2013 03
Ran by TOSHIBA at 2013-08-20 18:32:05
Running from C:\Users\TOSHIBA\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
adcom 802.11 Network Adapter (Version: 5.60.48.42)
Adobe AIR (x32 Version: 3.1.0.4880)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Advertising Center (x32 Version: 0.0.0.2)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ATI Catalyst Install Manager (Version: 3.0.765.0)
AVG SafeGuard toolbar (x32 Version: 15.5.0.2)
Bluetooth Stack for Windows by Toshiba (Version: v7.10.10(T))
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center Graphics Light (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center InstallProxy (x32 Version: 2010.0315.1050.17562)
Catalyst Control Center Localization All (x32 Version: 2010.0315.1050.17562)
CCC Help Chinese Standard (x32 Version: 2010.0315.1049.17562)
CCC Help Chinese Traditional (x32 Version: 2010.0315.1049.17562)
CCC Help Czech (x32 Version: 2010.0315.1049.17562)
CCC Help Danish (x32 Version: 2010.0315.1049.17562)
CCC Help Dutch (x32 Version: 2010.0315.1049.17562)
CCC Help English (x32 Version: 2010.0315.1049.17562)
CCC Help Finnish (x32 Version: 2010.0315.1049.17562)
CCC Help French (x32 Version: 2010.0315.1049.17562)
CCC Help German (x32 Version: 2010.0315.1049.17562)
CCC Help Greek (x32 Version: 2010.0315.1049.17562)
CCC Help Hungarian (x32 Version: 2010.0315.1049.17562)
CCC Help Italian (x32 Version: 2010.0315.1049.17562)
CCC Help Japanese (x32 Version: 2010.0315.1049.17562)
CCC Help Korean (x32 Version: 2010.0315.1049.17562)
CCC Help Norwegian (x32 Version: 2010.0315.1049.17562)
CCC Help Polish (x32 Version: 2010.0315.1049.17562)
CCC Help Portuguese (x32 Version: 2010.0315.1049.17562)
CCC Help Russian (x32 Version: 2010.0315.1049.17562)
CCC Help Spanish (x32 Version: 2010.0315.1049.17562)
CCC Help Swedish (x32 Version: 2010.0315.1049.17562)
CCC Help Thai (x32 Version: 2010.0315.1049.17562)
CCC Help Turkish (x32 Version: 2010.0315.1049.17562)
ccc-core-static (x32 Version: 2010.0315.1050.17562)
ccc-utility64 (Version: 2010.0315.1050.17562)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Diablo III (x32 Version: 1.0.8.16603)
Die Schlacht um Mittelerde(tm) (x32)
Download Updater (AOL Inc.) (x32)
Google Chrome (x32 Version: 28.0.1500.95)
Google Update Helper (x32 Version: 1.3.21.153)
IB Updater 2.0.0.578 (Version: 2.0.0.578)
IB Updater Service (x32 Version: 3.0.4.6)
iCloud (Version: 2.1.2.8)
ImagXpress (x32 Version: 7.0.74.0)
Incredibar Toolbar  on IE (x32)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.7.1002)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.01.01.1007)
iTunes (Version: 11.0.5.5)
Java(TM) 6 Update 17 (x32 Version: 6.0.170)
Junk Mail filter update (x32 Version: 14.0.8089.726)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
McAfee SecurityCenter (x32 Version: 11.0.623)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Suite Activation Assistant (x32 Version: 2.9)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft VC9 runtime libraries (x32 Version: 2.0.0)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Works (x32 Version: 9.7.0621)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero 9 Essentials (x32)
Nero BackItUp (x32 Version: 5.2.21001)
Nero BackItUp and Burn (x32 Version: 1.2.0030)
Nero BurnRights (x32 Version: 3.4.13.100)
Nero BurnRights (x32 Version: 3.6.26001)
Nero BurnRights Help (x32 Version: 3.4.4.100)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero DiscSpeed (x32 Version: 5.4.13.100)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.12.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero Express (x32 Version: 9.6.16000)
Nero Express Help (x32 Version: 9.4.34.100)
Nero InfoTool (x32 Version: 6.4.12.100)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.9.0)
Nero Online Upgrade (x32 Version: 1.3.0.0)
Nero RescueAgent (x32 Version: 2.6.25002)
Nero StartSmart (x32 Version: 9.4.37.100)
Nero StartSmart Help (x32 Version: 9.4.37.100)
NeroExpress (x32 Version: 9.4.34.100)
neroxml (x32 Version: 1.0.0)
Opera 12.16 (x32 Version: 12.16.1860)
Photo Service - powered by myphotobook (x32 Version: 1.0.7)
Photo Service - powered by myphotobook (x32 Version: 1.0.7-279)
PLAY ONLINE (x32 Version: 21.005.11.14.264)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Daemon (x32 Version: 2.2.20000)
Polar WebLink 2.4.13 (x32 Version: 02.49.0004)
Polar WebSync (x32 Version: 2.8.10006)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.13.112.2010)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.5992)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6069)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30111)
RewardsArcade (HKCU)
Skype Toolbars (x32 Version: 1.0.4051)
Skype™ 6.3 (x32 Version: 6.3.105)
Smart File Advisor 1.1.1 (x32 Version: 1.1.1)
Softonic toolbar  on IE and Chrome (x32 Version: 1.8.8.11)
SweetIM for Messenger 3.6 (x32 Version: 3.6.0002)
SweetIM Toolbar for Internet Explorer 4.2 (x32 Version: 4.2.0004)
Synaptics Pointing Device Driver (Version: 15.0.8.1)
Toshiba Assist (x32 Version: 3.00.11)
TOSHIBA Bulletin Board (Version: 1.6.07.64)
TOSHIBA Bulletin Board (x32 Version: 1.6.07.64)
TOSHIBA ConfigFree (x32 Version: 8.0.28)
TOSHIBA Disc Creator (Version: 2.1.0.2 for x64)
TOSHIBA eco Utility (Version: 1.2.11.64)
TOSHIBA eco Utility (x32 Version: 1.2.11.64)
TOSHIBA Face Recognition (Version: 3.1.3.64)
TOSHIBA Face Recognition (x32 Version: 3.1.3.64)
TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.6C)
TOSHIBA Hardware Setup (x32 Version: 1.63.0.22C)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.6)
TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.6)
Toshiba Manuals (x32 Version: 10.01)
TOSHIBA Media Controller (x32 Version: 1.0.80.3.64)
TOSHIBA Media Controller Plug-in (x32 Version: 1.0.5.10)
TOSHIBA Online Product Information (x32 Version: 2.09.0001)
TOSHIBA PC Health Monitor (Version: 1.6.0.64)
TOSHIBA Recovery Media Creator (Version: 2.1.0.4 x64)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.6.06.64)
TOSHIBA ReelTime (x32 Version: 1.6.06.64)
TOSHIBA Service Station (x32 Version: 2.1.40)
TOSHIBA Supervisor Password (x32 Version: 1.63.0.9C)
TOSHIBA Supervisorkennwort (x32 Version: 1.63.0.9C)
Toshiba TEMPRO (x32 Version: 3.30)
TOSHIBA Value Added Package (Version: 1.3.3.64)
TOSHIBA Value Added Package (x32 Version: 1.3.3.64)
TOSHIBA Web Camera Application (x32 Version: 1.1.1.15)
TRORMCLauncher (Version: 1.0.0.9)
TRORMCLauncher (x32 Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553092) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Utility Common Driver (x32 Version: 1.0.52.1C)
VirtualCloneDrive (x32)
VLC media player 2.0.5 (x32 Version: 2.0.5)
Windows iLivid Toolbar (x32 Version: 3.0.0.118320)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points  =========================

04-07-2013 15:41:14 Geplanter Prüfpunkt
11-07-2013 09:15:03 Windows Update
11-07-2013 14:49:56 Windows Update
19-07-2013 13:13:30 Geplanter Prüfpunkt
25-07-2013 18:57:31 Removed BlueStacks Notification Center
19-08-2013 20:53:04 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10F36181-5416-4811-AC01-1D7373CD6E47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-24] (Google Inc.)
Task: {213FC864-EA24-4455-911C-29A701D18781} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-24] (Google Inc.)
Task: {3AEEB643-FA3E-4898-8312-613AC0B99F4C} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-04-05] (Apple Inc.)
Task: {3E1E1E6D-D4AF-4AE6-BCDA-E8465978CB2E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6CAF1855-E249-4F01-B623-9CC00DC4D754} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-02-22] (TOSHIBA CORPORATION)
Task: {73B68F33-0354-441B-9DF6-06DCB0C9A80E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-17] (Adobe Systems Incorporated)
Task: {A332668E-FA74-4BA1-AE32-08C4E7EA749C} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2011-12-22] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/19/2013 10:53:09 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service rpcnetp since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/19/2013 08:08:47 PM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm WFP Dispatch Registration Tool wurde wegen dieses Fehlers geschlossen.

Programm: WFP Dispatch Registration Tool
Datei: 

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
	- diese sich im Netzwerk befindet, 
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
	- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.

Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0

Error: (08/19/2013 08:08:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: kb185808.exe, Version: 2.2.1.2, Zeitstempel: 0x52022ba7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000096
Fehleroffset: 0x038218d0
ID des fehlerhaften Prozesses: 0x12cc
Startzeit der fehlerhaften Anwendung: 0xkb185808.exe0
Pfad der fehlerhaften Anwendung: kb185808.exe1
Pfad des fehlerhaften Moduls: kb185808.exe2
Berichtskennung: kb185808.exe3

Error: (08/01/2013 09:12:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7161

Error: (08/01/2013 09:12:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7161

Error: (08/01/2013 09:12:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/25/2013 08:49:54 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst konnte nicht heruntergefahren werden. Aufgetretener Fehler: System.InvalidOperationException: UpdatePendingStatus kann nur während der Verarbeitung von Befehlen zum Starten, Beenden, Anhalten und Fortsetzen aufgerufen werden.
   bei System.ServiceProcess.ServiceBase.RequestAdditionalTime(Int32 milliseconds)
   bei BlueStacks.hyperDroid.Service.Service.CleanupHelperProcess(Process proc, String name)
   bei BlueStacks.hyperDroid.Service.Service.OnStop()
   bei BlueStacks.hyperDroid.Service.Service.OnShutdown()
   bei System.ServiceProcess.ServiceBase.DeferredShutdown()

Error: (07/25/2013 03:42:25 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 85567

Error: (07/25/2013 03:42:25 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 85567

Error: (07/25/2013 03:42:25 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (08/20/2013 06:16:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Network Agent" ist von folgendem Dienst abhängig: MfeFire. Dieser Dienst ist eventuell nicht installiert.

Error: (08/20/2013 06:16:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee VirusScan Announcer" wurde nicht richtig gestartet.

Error: (08/20/2013 06:11:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PLAY ONLINE. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/20/2013 06:11:15 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst PLAY ONLINE. OUC erreicht.

Error: (08/20/2013 06:11:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Anti-Spam Service" ist von folgendem Dienst abhängig: MfeFire. Dieser Dienst ist eventuell nicht installiert.

Error: (08/20/2013 06:11:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Proxy Service" ist von folgendem Dienst abhängig: MfeFire. Dieser Dienst ist eventuell nicht installiert.

Error: (08/20/2013 06:11:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Personal Firewall Service" ist von folgendem Dienst abhängig: MfeFire. Dieser Dienst ist eventuell nicht installiert.

Error: (08/20/2013 06:10:55 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎19.‎08.‎2013 um 23:00:08 unerwartet heruntergefahren.

Error: (08/19/2013 10:21:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Network Agent" ist von folgendem Dienst abhängig: MfeFire. Dieser Dienst ist eventuell nicht installiert.

Error: (08/19/2013 10:16:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PLAY ONLINE. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office Sessions:
=========================
Error: (08/19/2013 10:53:09 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service rpcnetp since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/19/2013 08:08:47 PM) (Source: Application Error)(User: )
Description: WFP Dispatch Registration Tool000000000

Error: (08/19/2013 08:08:47 PM) (Source: Application Error)(User: )
Description: kb185808.exe2.2.1.252022ba7unknown0.0.0.000000000c0000096038218d012cc01ce9d0725f5f349C:\Users\TOSHIBA\AppData\Local\Temp\kb185808.exeunknown644b7c21-08fa-11e3-a506-88ae1dfd9e74

Error: (08/01/2013 09:12:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7161

Error: (08/01/2013 09:12:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7161

Error: (08/01/2013 09:12:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/25/2013 08:49:54 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst konnte nicht heruntergefahren werden. Aufgetretener Fehler: System.InvalidOperationException: UpdatePendingStatus kann nur während der Verarbeitung von Befehlen zum Starten, Beenden, Anhalten und Fortsetzen aufgerufen werden.
   bei System.ServiceProcess.ServiceBase.RequestAdditionalTime(Int32 milliseconds)
   bei BlueStacks.hyperDroid.Service.Service.CleanupHelperProcess(Process proc, String name)
   bei BlueStacks.hyperDroid.Service.Service.OnStop()
   bei BlueStacks.hyperDroid.Service.Service.OnShutdown()
   bei System.ServiceProcess.ServiceBase.DeferredShutdown()

Error: (07/25/2013 03:42:25 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 85567

Error: (07/25/2013 03:42:25 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 85567

Error: (07/25/2013 03:42:25 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Percentage of memory in use: 53%
Total physical RAM: 3954.57 MB
Available physical RAM: 1825.39 MB
Total Pagefile: 7907.32 MB
Available Pagefile: 5453.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.42 GB) (Free:39.86 GB) NTFS
Drive d: (Data) (Fixed) (Total:231.87 GB) (Free:210.67 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: A3A493DF)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=232 GB) - (Type=07 NTFS)

==================== End Of Log ============================


FRST.txt

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-08-2013 03
Ran by TOSHIBA (administrator) on 20-08-2013 18:31:30
Running from C:\Users\TOSHIBA\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\IB Updater\ExtensionUpdaterService.exe
() C:\Windows\system32\dmwu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(Nero AG) c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
() C:\Program Files (x86)\Polar\Daemon\polard.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
() C:\Program Files (x86)\Polar\WebSync\WebSync.exe
() C:\Windows\SysWOW64\jmdp\stij.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
() C:\Users\TOSHIBA\AppData\Local\Temp\naprdmgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TosNC] - C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2010-03-19] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1050072 2010-02-11] (Toshiba Europe GmbH)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10134560 2010-03-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [896032 2010-03-22] (Realtek Semiconductor)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [505696 2009-11-05] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [913720 2010-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [SmartFaceVWatcher] - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [35672 2010-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [136136 2010-02-12] (Toshiba Europe GmbH)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [CrashReportUpdater] - C:\Windows\Temp\temp99.exe [x] <===== ATTENTION
HKCU\...\Run: [AA2014] - C:\Users\TOSHIBA\AppData\Roaming\DarVr333\DarVr333.exe [x]
HKCU\...\Run: [aSQw8ccL0] - C:\Users\TOSHIBA\AppData\Local\vniengeejmgkttedoqp.bfg [93184 2013-07-31] (Корпорация  Майкрософт)
MountPoints2: {124e71ed-2bf8-11e1-bb5e-88ae1dfd9e74} - G:\SETUP.EXE
MountPoints2: {4a91f498-3765-11e2-bba3-88ae1dfd9e74} - F:\iStudio.exe
MountPoints2: {ad18e774-1480-11e2-a3af-4ceddeaa3adc} - F:\AutoRun.exe
MountPoints2: {ad18e784-1480-11e2-a3af-4ceddeaa3adc} - F:\AutoRun.exe
MountPoints2: {ad18e7c2-1480-11e2-a3af-88ae1dfd9e74} - F:\AutoRun.exe
HKLM-x32\...\Run: [SVPWUTIL] - C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [352256 2010-02-22] (TOSHIBA)
HKLM-x32\...\Run: [HWSetup] - C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [1674896 2011-09-16] (McAfee, Inc.)
HKLM-x32\...\Run: [NBAgent] - c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [1086760 2010-03-09] (Nero AG)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2009-12-25] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [83336 2009-07-22] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TWebCamera] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2454840 2010-02-24] (TOSHIBA CORPORATION.)
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-10-06] (TOSHIBA Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [280824 2011-04-04] (Filefacts.net)
HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [114992 2011-08-01] (SweetIM Technologies Ltd.)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [WinampAgent] - "C:\Program Files (x86)\Winamp\winampa.exe" [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2314416 2013-08-19] ()
HKLM-x32\...\Run: [CrashReportUpdater] - C:\Windows\Temp\temp99.exe [x]
HKLM-x32\...\Run: [aSQw8ccL0] - C:\Users\TOSHIBA\AppData\Local\vniengeejmgkttedoqp.bfg [93184 2013-07-31] (Корпорация  Майкрософт)
HKLM-x32\...\Run: [DesktopVerifyer] - C:\Users\TOSHIBA\AppData\Local\Temp\\naprdmgr.exe [1261173 2004-11-18] ()
HKLM-x32\...\Run: [CrashReportVerifyer] - C:\Users\TOSHIBA\AppData\Local\Temp\naprdmgr.exe [1261173 2004-11-18] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKU\Default\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [4581280 2010-03-03] (TOSHIBA)
HKU\Default User\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [4581280 2010-03-03] (TOSHIBA)
AppInit_DLLs: C:\PROGRA~2\WI3C8A~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll  [1791384 2011-12-06] (Bandoo Media, inc)
AppInit_DLLs-x32: C:\PROGRA~2\WI3C8A~1\Datamngr\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll  [1233816 2011-12-06] (Bandoo Media, inc)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Polar WebSync.lnk
ShortcutTarget: Polar WebSync.lnk -> C:\Program Files (x86)\Polar\WebSync\WebSync.exe ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb201?a=6PQXoyAtfQ&i=26
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba.msn.com
URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=164&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=164&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=164&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=164&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://findgala.com/?&uid=5689&q={searchTerms}
SearchScopes: HKCU - {25B2192F-B274-4047-9DF3-A618B110D786} URL = 
SearchScopes: HKCU - {262A412D-A7F2-42DB-9F7E-08701A1A5827} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
SearchScopes: HKCU - {87B87678-A6C8-41A3-8161-D6F90A765756} URL = hxxp://search.aol.com/aol/search?s_it=tb50winamp&q={searchTerms}
SearchScopes: HKCU - {8F4EB5E0-4182-47E9-A983-64E59DF54CB0} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={24F46A2E-4980-4E7E-BE31-7F650927FC4B}&mid=9b59d025f83547d3a36059e75b197787-8464724e9f7a9e08a57b1afdbb38cec14f6285cd&lang=en&ds=bl011&pr=sa&d=2013-05-26 20:01:46&v=15.3.0.11&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {99A5123D-87E1-4248-ABF3-D72C2078C9AB} URL = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=621
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=164&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://findgala.com/?&uid=5689&q={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension64.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\WI3C8A~1\Datamngr\x64\BROWSE~1.DLL (Bandoo Media, inc)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll ()
BHO-x32: IB Updater - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll ()
BHO-x32: RewardsArcade - {597A9974-8CB0-4f41-B61F-ED065738A397} - C:\Program Files (x86)\RewardsArcade\RewardsArcade.dll (215 Apps)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.5.0.2\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO-x32: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll ()
BHO-x32: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\WI3C8A~1\Datamngr\BROWSE~1.DLL (Bandoo Media, inc)
BHO-x32: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\bh\Softonic.dll (Softonic.com)
BHO-x32: SweetIM Toolbar Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll ()
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKLM-x32 - Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.5.0.2\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
DPF: HKLM-x32 {0F2AAAE3-7E9E-4B64-AB5D-1CA24C6ACB9C} https://webmail.goldbach.at/dwa85W.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~1\mcafee\msc\MCSNIE~1.DLL (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 212.186.211.21 195.34.133.21
Tcpip\..\Interfaces\{582D9EDA-BC1F-462E-AB6D-5C358E75B668}: [NameServer]89.108.202.21 89.108.195.21

FireFox:
========
FF ProfilePath: C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default
FF user.js: detected! => C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\user.js
FF Homepage: hxxp://www.searchqu.com/406
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\searchplugins\aol-search.xml
FF SearchPlugin: C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\searchplugins\search.xml
FF SearchPlugin: C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: No Name - C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: incredibar.com - C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\Extensions\ffxtlbr@incredibar.com
FF Extension: No Name - C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\Extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
FF Extension: DivXWebPlayer - C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\Extensions\DivXWebPlayer@divx.com.xpi
FF Extension: No Name - C:\Users\TOSHIBA\AppData\Roaming\Mozilla\Firefox\Profiles\zwxsns5q.default\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [crossriderapp498@crossrider.com] C:\Users\TOSHIBA\AppData\Local\RewardsArcade\498\Firefox
FF Extension: No Name - C:\Users\TOSHIBA\AppData\Local\RewardsArcade\498\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\IB Updater\Firefox
FF Extension: IB Updater - C:\Program Files\IB Updater\Firefox
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\15.5.0.2
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\15.5.0.2

Chrome: 
=======
CHR HomePage: hxxp://mysearch.avg.com/?cid={24F46A2E-4980-4E7E-BE31-7F650927FC4B}&mid=9b59d025f83547d3a36059e75b197787-8464724e9f7a9e08a57b1afdbb38cec14f6285cd&lang=en&ds=bl011&pr=sa&d=2013-05-26 20:01:46&v=15.2.0.5&pid=safeguard&sg=2&sap=hp
CHR RestoreOnStartup: "hxxp://mysearch.avg.com/?cid={24F46A2E-4980-4E7E-BE31-7F650927FC4B}&mid=9b59d025f83547d3a36059e75b197787-8464724e9f7a9e08a57b1afdbb38cec14f6285cd&lang=en&ds=bl011&pr=sa&d=2013-05-26 20:01:46&v=15.2.0.5&pid=safeguard&sg=2&sap=hp"
CHR DefaultSearchURL: (AVG Secure Search) - hxxp://mysearch.avg.com/search?cid={24F46A2E-4980-4E7E-BE31-7F650927FC4B}&mid=9b59d025f83547d3a36059e75b197787-8464724e9f7a9e08a57b1afdbb38cec14f6285cd&lang=en&ds=bl011&pr=sa&d=2013-05-26 20:01:46&v=15.2.0.5&pid=safeguard&sg=2&sap=dsp&q={searchTerms}
CHR DefaultSuggestURL: (AVG Secure Search) - hxxp://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0\McChPlg.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.170.4) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U17) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (downloadUpdater) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll (AOL LLC)
CHR Plugin: (downloadUpdater2) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll (AOL LLC)
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll ()
CHR Extension: (YouTube) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RewardsArcade) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcmagccbogebndpoodhhhafmofelpffh\1.23.177_0
CHR Extension: (IB Updater) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.578_0
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0
CHR Extension: (SiteAdvisor) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.60.126.1_0
CHR Extension: (AVG SafeGuard) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.4.0.5_0
CHR Extension: (Gmail) - C:\Users\TOSHIBA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [dcmagccbogebndpoodhhhafmofelpffh] - C:\Users\TOSHIBA\AppData\Local\RewardsArcade\498\Chrome\rewardsarcade.crx
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\IB Updater\source.crx
CHR HKLM-x32\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\Softonic.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\15.5.0.2\avg.crx

==================== Services (Whitelisted) =================

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2013-01-29] ()
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1455408 2013-04-07] ()
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [502032 2011-10-18] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-27] (McAfee, Inc.)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-10-12] ()
R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [124368 2010-02-11] (Toshiba Europe GmbH)
R2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-19] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-19] (AVG Technologies)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [223744 2012-10-12] (Huawei Technologies Co., Ltd.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75808 2011-10-15] (McAfee, Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 Tosrfcom; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-20 18:28 - 2013-08-20 18:28 - 01576196 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST64.exe
2013-08-20 18:26 - 2013-08-20 18:26 - 00000476 _____ C:\Users\TOSHIBA\Desktop\defogger_disable.log
2013-08-20 18:26 - 2013-08-20 18:26 - 00000000 _____ C:\Users\TOSHIBA\defogger_reenable
2013-08-20 18:25 - 2013-08-20 18:25 - 00050477 _____ C:\Users\TOSHIBA\Desktop\Defogger.exe
2013-08-19 22:16 - 2013-08-19 22:16 - 00274656 _____ C:\Windows\Minidump\081913-23977-01.dmp
2013-08-19 22:01 - 2013-08-19 22:01 - 00274656 _____ C:\Windows\Minidump\081913-19094-01.dmp
2013-08-19 21:17 - 2013-08-19 21:17 - 00274656 _____ C:\Windows\Minidump\081913-77236-01.dmp
2013-08-19 20:31 - 2013-08-19 20:31 - 00274656 _____ C:\Windows\Minidump\081913-19593-01.dmp
2013-08-19 01:22 - 2013-08-19 01:22 - 00274656 _____ C:\Windows\Minidump\081913-27830-01.dmp
2013-08-19 00:52 - 2013-08-19 00:52 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-19 00:51 - 2013-08-19 00:52 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-19 00:51 - 2013-08-19 00:52 - 00000000 ____D C:\Program Files\iTunes
2013-08-19 00:51 - 2013-08-19 00:52 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-19 00:51 - 2013-08-19 00:51 - 00000000 ____D C:\Program Files\iPod
2013-08-13 00:00 - 2013-08-19 22:16 - 00000000 ____D C:\Windows\Minidump
2013-08-13 00:00 - 2013-08-13 00:00 - 00274656 _____ C:\Windows\Minidump\081313-27549-01.dmp
2013-08-12 23:59 - 2013-08-19 22:16 - 441797150 _____ C:\Windows\MEMORY.DMP
2013-07-31 22:32 - 2013-07-31 22:32 - 00161807 _____ C:\Users\TOSHIBA\AppData\Local\9f2c10a0-f56c-464d-b90f-23109eb5be53
2013-07-31 22:32 - 2013-07-31 22:32 - 00093184 _____ (Корпорация  Майкрософт) C:\Users\TOSHIBA\AppData\Local\vniengeejmgkttedoqp.bfg
2013-07-31 22:31 - 2013-07-31 22:31 - 00000000 ____D C:\Windows\Sun
2013-07-30 10:28 - 2013-07-30 10:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-30 10:27 - 2013-08-19 00:37 - 00003725 _____ C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2013-07-25 20:57 - 2013-07-25 20:57 - 00003114 _____ C:\Windows\System32\Tasks\{144A1EC3-BD8B-441A-8AD1-4D3A3670DB26}
2013-07-25 20:15 - 2013-07-25 20:15 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Аttentive Аntivirus
2013-07-22 08:56 - 2013-07-22 08:59 - 00000000 ____D C:\Users\TOSHIBA\Desktop\Neuer Ordner

==================== One Month Modified Files and Folders =======

2013-08-20 18:28 - 2013-08-20 18:28 - 01576196 _____ (Farbar) C:\Users\TOSHIBA\Desktop\FRST64.exe
2013-08-20 18:26 - 2013-08-20 18:26 - 00000476 _____ C:\Users\TOSHIBA\Desktop\defogger_disable.log
2013-08-20 18:26 - 2013-08-20 18:26 - 00000000 _____ C:\Users\TOSHIBA\defogger_reenable
2013-08-20 18:26 - 2011-11-18 11:25 - 00000000 ____D C:\Users\TOSHIBA
2013-08-20 18:25 - 2013-08-20 18:25 - 00050477 _____ C:\Users\TOSHIBA\Desktop\Defogger.exe
2013-08-20 18:22 - 2009-07-14 06:45 - 00016304 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-20 18:22 - 2009-07-14 06:45 - 00016304 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-20 18:19 - 2012-02-26 22:05 - 00001828 _____ C:\Users\Public\Desktop\McAfee Security Center.lnk
2013-08-20 18:16 - 2012-04-21 19:30 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-20 18:11 - 2012-11-24 01:46 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-20 18:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-20 18:10 - 2009-07-14 06:51 - 00114109 _____ C:\Windows\setupact.log
2013-08-19 22:35 - 2012-11-24 01:46 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-19 22:16 - 2013-08-19 22:16 - 00274656 _____ C:\Windows\Minidump\081913-23977-01.dmp
2013-08-19 22:16 - 2013-08-13 00:00 - 00000000 ____D C:\Windows\Minidump
2013-08-19 22:16 - 2013-08-12 23:59 - 441797150 _____ C:\Windows\MEMORY.DMP
2013-08-19 22:16 - 2013-06-03 02:37 - 00017920 _____ C:\Windows\SysWOW64\rpcnetp.dll
2013-08-19 22:15 - 2013-06-03 02:36 - 00017920 _____ C:\Windows\SysWOW64\rpcnetp.exe
2013-08-19 22:15 - 2013-06-03 02:36 - 00017920 _____ C:\Windows\system32\rpcnetp.exe
2013-08-19 22:01 - 2013-08-19 22:01 - 00274656 _____ C:\Windows\Minidump\081913-19094-01.dmp
2013-08-19 21:17 - 2013-08-19 21:17 - 00274656 _____ C:\Windows\Minidump\081913-77236-01.dmp
2013-08-19 20:57 - 2009-07-14 19:58 - 00657948 _____ C:\Windows\system32\perfh007.dat
2013-08-19 20:57 - 2009-07-14 19:58 - 00131288 _____ C:\Windows\system32\perfc007.dat
2013-08-19 20:57 - 2009-07-14 07:13 - 01507502 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-19 20:31 - 2013-08-19 20:31 - 00274656 _____ C:\Windows\Minidump\081913-19593-01.dmp
2013-08-19 01:22 - 2013-08-19 01:22 - 00274656 _____ C:\Windows\Minidump\081913-27830-01.dmp
2013-08-19 00:52 - 2013-08-19 00:52 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-19 00:52 - 2013-08-19 00:51 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-19 00:52 - 2013-08-19 00:51 - 00000000 ____D C:\Program Files\iTunes
2013-08-19 00:52 - 2013-08-19 00:51 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-19 00:51 - 2013-08-19 00:51 - 00000000 ____D C:\Program Files\iPod
2013-08-19 00:49 - 2013-07-08 19:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 00:37 - 2013-07-30 10:27 - 00003725 _____ C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2013-08-19 00:37 - 2013-05-26 20:01 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-19 00:37 - 2013-05-26 20:01 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2013-08-14 10:49 - 2011-12-22 22:08 - 00000000 ____D C:\Users\TOSHIBA\Documents\Outlook-Dateien
2013-08-14 10:48 - 2012-12-18 02:40 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\813BC7F6-8D18-46C7-A627-0E376B81895C.aplzod
2013-08-13 00:00 - 2013-08-13 00:00 - 00274656 _____ C:\Windows\Minidump\081313-27549-01.dmp
2013-08-12 23:16 - 2013-03-13 23:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-12 23:16 - 2013-01-30 20:00 - 00000000 ____D C:\Program Files\IB Updater
2013-08-12 23:16 - 2012-12-03 21:42 - 00000000 ____D C:\Games
2013-08-12 23:16 - 2012-03-02 23:59 - 00000000 ____D C:\Program Files\LOTRO Standard Res Install Files DE
2013-08-12 23:16 - 2011-12-22 18:56 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-12 23:16 - 2011-11-27 17:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-08-12 23:16 - 2011-11-27 17:47 - 00000000 ____D C:\Program Files\Bonjour
2013-08-12 23:16 - 2011-11-18 09:49 - 00000000 ____D C:\Program Files\Broadcom
2013-08-12 23:16 - 2011-11-18 09:38 - 00000000 ____D C:\Program Files\ATI
2013-08-12 23:16 - 2011-11-18 09:36 - 00000000 ____D C:\Intel
2013-08-12 23:16 - 2010-04-19 11:11 - 00000000 ____D C:\Program Files\mcafee.com
2013-08-12 23:16 - 2010-04-19 11:11 - 00000000 ____D C:\Program Files\mcafee
2013-08-12 23:16 - 2010-04-19 11:11 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-08-12 23:16 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2013-08-12 23:16 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-12 23:16 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-12 23:16 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-08-12 23:16 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Services
2013-08-12 23:16 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-12 08:14 - 2011-11-18 09:32 - 00059396 _____ C:\Windows\PFRO.log
2013-08-01 20:38 - 2012-11-24 01:46 - 00002143 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-31 22:32 - 2013-07-31 22:32 - 00161807 _____ C:\Users\TOSHIBA\AppData\Local\9f2c10a0-f56c-464d-b90f-23109eb5be53
2013-07-31 22:32 - 2013-07-31 22:32 - 00093184 _____ (Корпорация  Майкрософт) C:\Users\TOSHIBA\AppData\Local\vniengeejmgkttedoqp.bfg
2013-07-31 22:31 - 2013-07-31 22:31 - 00000000 ____D C:\Windows\Sun
2013-07-30 10:28 - 2013-07-30 10:28 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-25 20:58 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-07-25 20:57 - 2013-07-25 20:57 - 00003114 _____ C:\Windows\System32\Tasks\{144A1EC3-BD8B-441A-8AD1-4D3A3670DB26}
2013-07-25 20:15 - 2013-07-25 20:15 - 00000000 ____D C:\Users\TOSHIBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Аttentive Аntivirus
2013-07-25 20:15 - 2011-11-18 09:35 - 01537246 _____ C:\Windows\WindowsUpdate.log
2013-07-22 08:59 - 2013-07-22 08:56 - 00000000 ____D C:\Users\TOSHIBA\Desktop\Neuer Ordner
2013-07-22 08:58 - 2011-12-22 18:55 - 00000000 ____D C:\Users\TOSHIBA\AppData\Local\Microsoft Help
2013-07-22 08:50 - 2011-11-27 12:35 - 00000000 ____D C:\Users\TOSHIBA\Documents\BAWAG

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-19 21:53

==================== End Of Log ============================

GMER.txt

Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-20 18:43:44
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.GB00 465,76GB
Running: 8xqn5pn7.exe; Driver: C:\Users\TOSHIBA\AppData\Local\Temp\axldrpod.sys


---- Kernel code sections - GMER 2.1 ----

PAGE    C:\Windows\system32\ntoskrnl.exe!NtResumeThread                                                                                                                 fffff800035ccf50 1 byte INT3

---- User code sections - GMER 2.1 ----

.text   C:\Windows\Explorer.EXE[1996] C:\Windows\SYSTEM32\ntdll.dll!NtResumeThread                                                                                      0000000077c81830 1 byte [FB]
.text   C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe[2656] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077541465 2 bytes [54, 77]
.text   C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe[2656] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000775414bb 2 bytes [54, 77]
.text   ...                                                                                                                                                             * 2
.text   C:\Windows\SysWOW64\jmdp\stij.exe[4616] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                 0000000077541465 2 bytes [54, 77]
.text   C:\Windows\SysWOW64\jmdp\stij.exe[4616] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                00000000775414bb 2 bytes [54, 77]
.text   ...                                                                                                                                                             * 2
.text   C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe[5116] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                              0000000077541465 2 bytes [54, 77]
.text   C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe[5116] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                             00000000775414bb 2 bytes [54, 77]
.text   ...                                                                                                                                                             * 2
.text   C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe[4584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                            0000000077541465 2 bytes [54, 77]
.text   C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe[4584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                           00000000775414bb 2 bytes [54, 77]
.text   ...                                                                                                                                                             * 2
.text   C:\Users\TOSHIBA\AppData\Local\Temp\naprdmgr.exe[252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                   0000000077541465 2 bytes [54, 77]
.text   C:\Users\TOSHIBA\AppData\Local\Temp\naprdmgr.exe[252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                  00000000775414bb 2 bytes [54, 77]
.text   ...                                                                                                                                                             * 2
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[4272] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                    0000000077541465 2 bytes [54, 77]
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[4272] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                   00000000775414bb 2 bytes [54, 77]
.text   ...                                                                                                                                                             * 2

---- Threads - GMER 2.1 ----

Thread  C:\Windows\Explorer.EXE [1996:2940]                                                                                                                             000000000027e7d4
Thread  C:\Windows\Explorer.EXE [1996:2944]                                                                                                                             00000000002826bc
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [5448:2668]                                                                                                  000007fefc032a7c
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [5448:1496]                                                                                                  000007fee7a4d618
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [5448:4936]                                                                                                  000007fefb215124
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [5448:4904]                                                                                                  000007fee79e9730
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [5448:4700]                                                                                                  000007fee7a4d618

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{427C0C68-C345-427A-87F1-03CF072E70CB}@LeaseObtainedTime                                     1377015067
Reg     HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{427C0C68-C345-427A-87F1-03CF072E70CB}@T1                                                    1377016867
Reg     HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{427C0C68-C345-427A-87F1-03CF072E70CB}@T2                                                    1377018217
Reg     HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{427C0C68-C345-427A-87F1-03CF072E70CB}@LeaseTerminatesTime                                   1377018667

---- EOF - GMER 2.1 ----
         

 

Themen zu Laptop macht sich selbstständig. / Turn off ab und an Blue Screen
autokms, bluestacks, branding, browser, device driver, diagnostics, error, excel, farbar, farbar recovery scan tool, firefox, flash player, helper, minidump, nicht möglich, ntdll.dll, phishing, plug-in, programm, pup.installbrain, pup.optional.bandoo.a, pup.optional.datamngr, pup.optional.searchqu, pup.optional.searchqu.a, pup.optional.sweetim, pup.optional.sweetpacks.a, pup.rewardsarcade, scan, secure search, server, siteadvisor, starten, svchost.exe, vista, vtoolbarupdater, windows




Ähnliche Themen: Laptop macht sich selbstständig. / Turn off ab und an Blue Screen


  1. Laptop dreht und dreht und ist ganz langsam Blue screen erscheint
    Plagegeister aller Art und deren Bekämpfung - 16.11.2015 (18)
  2. windows 7 es öffnen sich ständig neue fenster rechner ist sehr langsam, ist auch schon mit blue screen abgestürtzt
    Log-Analyse und Auswertung - 09.09.2014 (1)
  3. Tastatur macht sich selbstständig und pc schaltet sich von selbst auf standby
    Plagegeister aller Art und deren Bekämpfung - 13.05.2014 (5)
  4. Laptop-Absturz - Blue Screen -> Malware?
    Plagegeister aller Art und deren Bekämpfung - 19.06.2013 (17)
  5. PC macht sich selbstständig!
    Plagegeister aller Art und deren Bekämpfung - 03.04.2013 (8)
  6. Auswahl macht sich selbstständig
    Plagegeister aller Art und deren Bekämpfung - 13.03.2013 (9)
  7. Maus macht sich selbstständig
    Log-Analyse und Auswertung - 16.06.2012 (3)
  8. Festplatte macht sich selbstständig
    Plagegeister aller Art und deren Bekämpfung - 24.11.2011 (4)
  9. Internetexplorer 8.0 macht sich selbstständig
    Log-Analyse und Auswertung - 23.07.2011 (12)
  10. Benutzerbild macht sich selbstständig?
    Alles rund um Windows - 01.12.2008 (2)
  11. browser macht sich selbstständig
    Plagegeister aller Art und deren Bekämpfung - 02.09.2008 (1)
  12. Hilfe! - Pc macht sich selbstständig!
    Log-Analyse und Auswertung - 24.05.2008 (5)
  13. Pc macht sich selbstständig!
    Alles rund um Windows - 17.12.2007 (2)
  14. PC macht sich Selbstständig
    Log-Analyse und Auswertung - 30.09.2007 (4)
  15. Rechner macht sich selbstständig
    Log-Analyse und Auswertung - 24.09.2007 (29)
  16. maus macht sich selbstständig
    Log-Analyse und Auswertung - 27.02.2006 (12)
  17. IE macht sich selbstständig
    Log-Analyse und Auswertung - 01.03.2005 (2)

Zum Thema Laptop macht sich selbstständig. / Turn off ab und an Blue Screen - Hallo zusammen , anbei die Log-Dateien gemäß den Anleitungen. Samsung Satellite , Windows 7 - 64 Bitte um Durchsicht und Hilfe. Addition.txt Code: Alles auswählen Aufklappen ATTFilter Additional scan result - Laptop macht sich selbstständig. / Turn off ab und an Blue Screen...
Archiv
Du betrachtest: Laptop macht sich selbstständig. / Turn off ab und an Blue Screen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.