| |
| |||||||
Log-Analyse und Auswertung: Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
31.08.2013, 16:31
| #1 |
 |  Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Hallo zusammen, Avira meldet mir seit einiger Zeit Trojaner-Funde. Mit dem Druck auf entfernen ist es leider nicht getan und es kommen immer neue dazu. Über Hilfe würde ich mich sehr freuen! Hier die Logs: FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 03
Ran by Jenny (administrator) on JENNY-PC on 31-08-2013 15:48:54
Running from C:\Users\Jenny\Dropbox\Dokumente
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) c:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
(Farbar) C:\Users\Jenny\Dropbox\Dokumente\FRST-1.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GfxServiceInstall] - C:\Windows\system32\GfxCUIServiceInstall.vbs [131 2011-12-30] ()
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10082920 2011-05-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [715368 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1387288 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-08-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKCU\...\Run: [Global Registration] - "C:\Program Files\Packard Bell\Registration\GREG.exe" /boot [x]
HKCU\...\Run: [Google Update*] - [x] <===== ATTENTION (ZeroAccess rootkit hidden path)
MountPoints2: {b99e8a81-bdc8-11e2-a9d4-047d7b27bb43} - D:\LaunchU3.exe -a
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files\Packard Bell\Screensaver\run_Packard Bell.exe [ 2010-07-29] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lyrmix - {115b65d1-cd23-4411-8d8c-f8967d4f553c} - C:\Program Files\Lyrmix\131.dll (Lyrmix)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll No File
Toolbar: HKLM - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll No File
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 mswsock.dll File Not found ()
Winsock: Catalog9 02 mswsock.dll File Not found ()
Winsock: Catalog9 03 mswsock.dll File Not found ()
Winsock: Catalog9 04 mswsock.dll File Not found ()
Winsock: Catalog9 05 mswsock.dll File Not found ()
Winsock: Catalog9 06 mswsock.dll File Not found ()
Winsock: Catalog9 07 mswsock.dll File Not found ()
Winsock: Catalog9 08 mswsock.dll File Not found ()
Winsock: Catalog9 09 mswsock.dll File Not found ()
Winsock: Catalog9 10 mswsock.dll File Not found ()
Winsock: Catalog9 11 mswsock.dll File Not found ()
Winsock: Catalog9 12 mswsock.dll File Not found ()
Winsock: Catalog9 13 mswsock.dll File Not found ()
Winsock: Catalog9 14 mswsock.dll File Not found ()
Winsock: Catalog9 15 mswsock.dll File Not found ()
Winsock: Catalog9 16 mswsock.dll File Not found ()
Winsock: Catalog9 17 mswsock.dll File Not found ()
Winsock: Catalog9 18 mswsock.dll File Not found ()
Winsock: Catalog9 19 mswsock.dll File Not found ()
Winsock: Catalog9 20 mswsock.dll File Not found ()
Winsock: Catalog9 21 mswsock.dll File Not found ()
Winsock: Catalog9 22 mswsock.dll File Not found ()
Winsock: Catalog9 23 mswsock.dll File Not found ()
Winsock: Catalog9 24 mswsock.dll File Not found ()
Winsock: Catalog9 25 mswsock.dll File Not found ()
Winsock: Catalog9 26 mswsock.dll File Not found ()
Winsock: Catalog9 27 mswsock.dll File Not found ()
Winsock: Catalog9 28 mswsock.dll File Not found ()
Winsock: Catalog9 29 mswsock.dll File Not found ()
Winsock: Catalog9 30 mswsock.dll File Not found ()
Winsock: Catalog9 31 mswsock.dll File Not found ()
Winsock: Catalog9 32 mswsock.dll File Not found ()
Winsock: Catalog9 33 mswsock.dll File Not found ()
Winsock: Catalog9 34 mswsock.dll File Not found ()
Winsock: Catalog9 35 mswsock.dll File Not found ()
Winsock: Catalog9 36 mswsock.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default
FF user.js: detected! => C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default\user.js
FF Keyword.URL: hxxp://search.sweetim.com/search.asp?src=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{ef7f760f-6a65-4dd9-8946-2f7e24e00c28}] C:\Program Files\Lyrmix\131.xpi
FF Extension: No Name - C:\Program Files\Lyrmix\131.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Programme\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR Plugin: ( "name": "Shockwave Flash",) - "path": "C:\Program Files\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll", No File
CHR Plugin: ( "name": "Chrome Remote Desktop Viewer",) - "path": "internal-remoting-viewer",
CHR Plugin: ( "name": "Native Client",) - "path": "C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll", No File
CHR Plugin: ( "name": "Chrome PDF Viewer",) - "path": "C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll", No File
CHR Plugin: ( "name": "Adobe Acrobat",) - "path": "C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll", No File
CHR Plugin: ( "name": "QuickTime Plug-in 7.7.4",) - "path": "C:\Program Files\QuickTime\plugins\npqtplugin.dll", No File
CHR Plugin: ( "name": "QuickTime Plug-in 7.7.4",) - "path": "C:\Program Files\QuickTime\plugins\npqtplugin2.dll", No File
CHR Plugin: ( "name": "QuickTime Plug-in 7.7.4",) - "path": "C:\Program Files\QuickTime\plugins\npqtplugin3.dll", No File
CHR Plugin: ( "name": "QuickTime Plug-in 7.7.4",) - "path": "C:\Program Files\QuickTime\plugins\npqtplugin4.dll", No File
CHR Plugin: ( "name": "QuickTime Plug-in 7.7.4",) - "path": "C:\Program Files\QuickTime\plugins\npqtplugin5.dll", No File
CHR Plugin: ( "name": "Google Update",) - "path": "C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll", No File
CHR Plugin: ( "name": "Java(TM) Platform SE 7 U21",) - "path": "C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll", No File
CHR Plugin: ( "name": "McAfee Security Scanner +",) - "path": "C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll", No File
CHR Plugin: ( "name": "Windows Live™ Photo Gallery",) - "path": "C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll", No File
CHR Plugin: ( "name": "iTunes Application Detector",) - "path": "C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll", No File
CHR Plugin: ( "name": "VLC Web Plugin",) - "path": "C:\Programme\VideoLAN\VLC\npvlc.dll", No File
CHR Plugin: ( "name": "Shockwave Flash",) - "path": "C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll", No File
CHR Plugin: ( "name": "Silverlight Plug-In",) - "path": "c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll", No File
CHR Extension: (Google Docs) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Jenny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [kidmhllhjmmmnpbiaihafgchacpmokof] - C:\Program Files\Lyrmix\131.crx
========================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor9.0; c:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408 2010-09-30] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-20] (Avira Operations GmbH & Co. KG)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
U2 *etadpug; "C:\Program Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\ \...\???\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-08-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-31] (Avira Operations GmbH & Co. KG)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30360 2011-09-02] (Logitech, Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-05-29] (Malwarebytes Corporation)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254056 2011-05-30] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-31 15:44 - 2013-08-31 15:44 - 00000000 _____ C:\Users\Jenny\defogger_reenable
2013-08-31 14:36 - 2013-08-31 14:36 - 95103849 _____ C:\Windows\system32\c
2013-08-30 13:04 - 2013-08-30 13:04 - 94748418 _____ C:\Windows\system32\鞢皏Y
2013-08-29 21:17 - 2013-08-29 21:17 - 94663095 _____ C:\Windows\system32\뀁�]
2013-08-29 11:41 - 2013-08-29 11:41 - 00000000 ____D C:\Program Files\Lyrmix
2013-08-28 21:19 - 2013-08-28 21:19 - 101009872 _____ C:\Windows\system32\皵㧘b
2013-08-28 15:07 - 2012-07-05 12:36 - 681535488 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e12.avi
2013-08-28 14:51 - 2012-07-05 11:25 - 681766912 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e11.avi
2013-08-28 14:35 - 2012-07-05 10:14 - 681474048 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e10.avi
2013-08-28 14:18 - 2012-07-05 08:59 - 681551872 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e09.avi
2013-08-28 14:03 - 2012-07-05 07:50 - 681525248 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e08.avi
2013-08-25 19:17 - 2013-08-25 19:17 - 100156396 _____ C:\Windows\system32\촙暇Y
2013-08-25 13:45 - 2013-08-16 11:36 - 00000000 ____D C:\Users\Jenny\Downloads\Dan.Brown.-.Inferno.Mp3.Vbr
2013-08-25 11:35 - 2013-08-23 05:41 - 00000000 ____D C:\Users\Jenny\Downloads\DEX.XVID.S07E10.GDR
2013-08-25 09:17 - 2012-02-02 22:35 - 1032504440 _____ C:\Users\Jenny\Downloads\Wag the Dog Wenn der Schwanz mit dem Hund wedelt.HQ.avi
2013-08-21 23:14 - 2013-08-22 13:16 - 99750289 _____ C:\Windows\system32\蓂滄s
2013-08-20 17:16 - 2013-08-20 17:16 - 99562272 _____ C:\Windows\system32\䗢뎫c
2013-08-16 10:10 - 2013-08-31 11:31 - 00000338 _____ C:\Windows\Tasks\Lyrmix Update.job
2013-08-16 03:10 - 2013-08-16 03:19 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 01:28 - 2013-08-16 01:28 - 00000000 ____D C:\Users\Jenny\Downloads\Body.of.Proof.S03E13.Die.letzte.Zeugin.GERMAN.DUBBED.WebHDRiP.XviD-SOF
2013-08-15 12:58 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-15 12:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 12:58 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 12:58 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 12:58 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 23:50 - 2013-08-19 17:47 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\WindSolutions
2013-08-14 23:50 - 2013-08-19 17:15 - 00000000 ____D C:\ProgramData\WindSolutions
2013-08-14 23:50 - 2013-08-14 23:50 - 04279392 _____ (WindSolutions) C:\Users\Jenny\Downloads\Install_CopyTrans_Suite.exe
2013-08-14 23:50 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-08-13 18:28 - 2013-08-13 18:28 - 00000000 ____D C:\Users\Jenny\AppData\Local\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Program Files\Cockatrice
2013-08-13 18:18 - 2013-08-13 18:19 - 13834479 _____ C:\Users\Jenny\Downloads\cockatrice_win32_20130509_git-d462870.exe
2013-08-12 21:06 - 2013-08-12 21:06 - 05102112 _____ C:\Users\Jenny\Downloads\WTH_0186_iOS.ipa
2013-08-12 21:03 - 2013-08-12 21:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\iFunbox_UserCache
2013-08-12 21:03 - 2013-08-12 21:03 - 00000000 ____D C:\Program Files\i-Funbox DevTeam
2013-08-12 21:00 - 2013-08-12 21:01 - 15043804 _____ ( ) C:\Users\Jenny\Downloads\ifunbox_setup.exe
2013-08-12 19:36 - 2013-08-12 19:39 - 00000000 ____D C:\Users\Jenny\AppData\Local\libimobiledevice
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\MSDOS.SYS
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\IO.SYS
2013-08-12 19:09 - 2013-08-12 19:10 - 00137569 _____ C:\Users\Jenny\Downloads\evasi0n-win-1.5.3.zip
2013-08-12 01:57 - 2013-01-13 07:33 - 182403058 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e24.avi
2013-08-12 01:46 - 2013-01-05 16:53 - 182387774 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e23.avi
2013-08-12 01:35 - 2012-12-20 18:49 - 182386178 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e21.avi
2013-08-12 01:27 - 2012-12-29 17:50 - 182348596 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e22.avi
2013-08-12 01:08 - 2012-12-13 22:15 - 182227500 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e20.avi
2013-08-12 00:57 - 2013-08-01 01:05 - 205473198 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e19.avi
2013-08-12 00:45 - 2012-11-29 20:01 - 182464954 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e18.avi
2013-08-12 00:34 - 2012-11-21 23:33 - 182371694 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e17.avi
2013-08-12 00:23 - 2012-11-14 23:56 - 182335634 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e16.avi
2013-08-12 00:12 - 2012-11-07 22:26 - 182292008 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e15.avi
2013-08-12 00:01 - 2013-08-01 00:33 - 191252820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e14.avi
2013-08-11 23:37 - 2012-10-18 01:17 - 182364968 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e12.avi
2013-08-11 23:24 - 2012-10-11 14:33 - 182301702 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e11.avi
2013-08-11 23:11 - 2013-07-29 08:07 - 201620374 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e10.avi
2013-08-11 22:58 - 2012-09-26 23:52 - 182340244 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e09.avi
2013-08-11 22:46 - 2012-09-21 16:59 - 182433820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e08.avi
2013-08-11 22:35 - 2012-09-15 14:46 - 182297378 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e07rp.avi
2013-08-11 22:24 - 2012-09-06 14:41 - 182388466 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e06.avi
2013-08-11 22:13 - 2012-08-30 13:58 - 182319866 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e05.avi
2013-08-11 22:02 - 2012-08-24 13:42 - 182361922 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e04.avi
2013-08-11 21:51 - 2012-08-15 23:57 - 182268884 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e03.avi
2013-08-11 21:40 - 2012-08-09 12:01 - 182424090 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e02.avi
2013-08-11 21:30 - 2012-08-01 21:34 - 181856256 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e01.avi
2013-08-11 13:38 - 2013-08-11 13:38 - 00000000 ____D C:\Users\Jenny\Downloads\Papas 50.ter
2013-08-09 16:37 - 2013-08-09 16:38 - 00000000 ____D C:\ProgramData\VirtualizedApplications
2013-08-01 02:44 - 2012-10-26 02:23 - 243615860 _____ C:\Users\Jenny\Downloads\Parks.and.Recreation.S01E02.Canvassing.GERMAN.DUBBED.WS.DVDRip.XviD-TVP.avi
2013-08-01 02:44 - 2012-10-26 02:23 - 243567684 _____ C:\Users\Jenny\Downloads\Parks.and.Recreation.S01E04.Boys.Club.GERMAN.DUBBED.WS.DVDRip.XviD-TVP.avi
2013-08-01 02:44 - 2012-10-26 02:23 - 243164638 _____ C:\Users\Jenny\Downloads\Parks.and.Recreation.S01E06.Rock.Show.GERMAN.DUBBED.WS.DVDRip.XviD-TVP.avi
2013-08-01 02:44 - 2012-10-26 02:23 - 241455150 _____ C:\Users\Jenny\Downloads\Parks.and.Recreation.S01E05.The.Banquet.GERMAN.DUBBED.WS.DVDRip.XviD-TVP.avi
2013-08-01 02:43 - 2012-10-26 02:23 - 243256072 _____ C:\Users\Jenny\Downloads\Parks.and.Recreation.S01E03.The.Reporter.GERMAN.DUBBED.WS.DVDRip.XviD-TVP.avi
2013-08-01 02:43 - 2012-10-26 02:23 - 181842246 _____ C:\Users\Jenny\Downloads\Parks.and.Recreation.S01E01.Pilot.GERMAN.DUBBED.WS.DVDRip.XviD-TVP.avi
2013-08-01 01:11 - 2013-07-27 01:43 - 261537792 _____ C:\Users\Jenny\Downloads\Up.All.Night.S01E08.Amy.allein.zu.Haus.DL.German.Dubbed.WEBRip.XviD-GDR.avi
2013-08-01 00:52 - 2013-07-27 01:42 - 261842944 _____ C:\Users\Jenny\Downloads\Up.All.Night.S01E07.Muetter.und.Toechter.DL.German.Dubbed.WEBRip.XviD-GDR.avi
2013-08-01 00:39 - 2013-07-22 18:47 - 261984256 _____ C:\Users\Jenny\Downloads\Up.All.Night.S01E06.Hallo.Amy.DL.German.Dubbed.WEBRip.XviD-GDR.avi
2013-08-01 00:19 - 2013-07-22 18:46 - 262055936 _____ C:\Users\Jenny\Downloads\Up.All.Night.S01E05.Eine.1A.Karrieremutter.DL.German.Dubbed.WEBRip.XviD-GDR.avi
2013-08-01 00:06 - 2013-07-12 23:57 - 261556224 _____ C:\Users\Jenny\Downloads\Up.All.Night.S01E04.Das.neue.Auto.DL.German.Dubbed.WEBRip.XviD-GDR.avi
==================== One Month Modified Files and Folders =======
2013-08-31 15:49 - 2013-07-14 20:44 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-31 15:48 - 2013-08-31 15:48 - 00000000 ____D C:\FRST
2013-08-31 15:47 - 2012-10-05 19:56 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Dropbox
2013-08-31 15:44 - 2013-08-31 15:44 - 00000000 _____ C:\Users\Jenny\defogger_reenable
2013-08-31 15:44 - 2012-09-27 16:59 - 00000000 ____D C:\Users\Jenny
2013-08-31 15:09 - 2012-09-27 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-31 14:40 - 2012-09-27 21:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-31 14:36 - 2013-08-31 14:36 - 95103849 _____ C:\Windows\system32\c
2013-08-31 12:38 - 2009-07-14 06:39 - 00210994 _____ C:\Windows\setupact.log
2013-08-31 11:31 - 2013-08-16 10:10 - 00000338 _____ C:\Windows\Tasks\Lyrmix Update.job
2013-08-31 09:31 - 2012-09-30 20:10 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\vlc
2013-08-31 08:37 - 2012-11-24 18:32 - 00000000 ____D C:\Users\Jenny\AppData\Local\CrashDumps
2013-08-30 20:49 - 2013-07-14 20:44 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-30 14:35 - 2010-11-20 23:01 - 01499844 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-30 13:14 - 2009-07-14 06:34 - 00016160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-30 13:14 - 2009-07-14 06:34 - 00016160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-30 13:07 - 2012-10-05 20:01 - 00000000 ___RD C:\Users\Jenny\Dropbox
2013-08-30 13:05 - 2010-11-20 23:48 - 00820604 _____ C:\Windows\PFRO.log
2013-08-30 13:05 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-30 13:04 - 2013-08-30 13:04 - 94748418 _____ C:\Windows\system32\鞢皏Y
2013-08-29 21:17 - 2013-08-29 21:17 - 94663095 _____ C:\Windows\system32\뀁�]
2013-08-29 11:41 - 2013-08-29 11:41 - 00000000 ____D C:\Program Files\Lyrmix
2013-08-28 21:19 - 2013-08-28 21:19 - 101009872 _____ C:\Windows\system32\皵㧘b
2013-08-25 19:17 - 2013-08-25 19:17 - 100156396 _____ C:\Windows\system32\촙暇Y
2013-08-23 05:41 - 2013-08-25 11:35 - 00000000 ____D C:\Users\Jenny\Downloads\DEX.XVID.S07E10.GDR
2013-08-22 13:16 - 2013-08-21 23:14 - 99750289 _____ C:\Windows\system32\蓂滄s
2013-08-21 09:09 - 2012-09-27 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 09:09 - 2011-12-16 14:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 17:21 - 2012-02-09 00:43 - 01254242 _____ C:\Windows\WindowsUpdate.log
2013-08-20 17:16 - 2013-08-20 17:16 - 99562272 _____ C:\Windows\system32\䗢뎫c
2013-08-20 11:14 - 2013-05-02 11:35 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-20 11:14 - 2012-12-01 23:08 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-20 11:14 - 2012-12-01 23:08 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-19 17:47 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\WindSolutions
2013-08-19 17:41 - 2013-07-14 20:44 - 00000000 ____D C:\Program Files\Google
2013-08-19 17:41 - 2013-07-14 20:43 - 00000000 ____D C:\Users\Jenny\AppData\Local\Google
2013-08-19 17:15 - 2013-08-14 23:50 - 00000000 ____D C:\ProgramData\WindSolutions
2013-08-16 11:36 - 2013-08-25 13:45 - 00000000 ____D C:\Users\Jenny\Downloads\Dan.Brown.-.Inferno.Mp3.Vbr
2013-08-16 04:16 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-16 03:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-16 03:29 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-16 03:19 - 2013-08-16 03:10 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 03:10 - 2012-09-29 09:08 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 01:28 - 2013-08-16 01:28 - 00000000 ____D C:\Users\Jenny\Downloads\Body.of.Proof.S03E13.Die.letzte.Zeugin.GERMAN.DUBBED.WebHDRiP.XviD-SOF
2013-08-14 23:50 - 2013-08-14 23:50 - 04279392 _____ (WindSolutions) C:\Users\Jenny\Downloads\Install_CopyTrans_Suite.exe
2013-08-14 23:50 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-08-14 23:50 - 2012-09-27 17:02 - 00000000 ____D C:\Users\Jenny\AppData\Local\Adobe
2013-08-13 18:28 - 2013-08-13 18:28 - 00000000 ____D C:\Users\Jenny\AppData\Local\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Program Files\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:18 - 13834479 _____ C:\Users\Jenny\Downloads\cockatrice_win32_20130509_git-d462870.exe
2013-08-12 21:19 - 2013-08-12 21:03 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\iFunbox_UserCache
2013-08-12 21:06 - 2013-08-12 21:06 - 05102112 _____ C:\Users\Jenny\Downloads\WTH_0186_iOS.ipa
2013-08-12 21:03 - 2013-08-12 21:03 - 00000000 ____D C:\Program Files\i-Funbox DevTeam
2013-08-12 21:01 - 2013-08-12 21:00 - 15043804 _____ ( ) C:\Users\Jenny\Downloads\ifunbox_setup.exe
2013-08-12 20:10 - 2011-12-16 13:26 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-12 19:39 - 2013-08-12 19:36 - 00000000 ____D C:\Users\Jenny\AppData\Local\libimobiledevice
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\MSDOS.SYS
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\IO.SYS
2013-08-12 19:10 - 2013-08-12 19:09 - 00137569 _____ C:\Users\Jenny\Downloads\evasi0n-win-1.5.3.zip
2013-08-11 20:51 - 2012-09-27 20:56 - 00016400 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2013-08-11 20:51 - 2012-09-27 20:56 - 00001018 _____ C:\Windows\LkmdfCoInst.log
2013-08-11 13:38 - 2013-08-11 13:38 - 00000000 ____D C:\Users\Jenny\Downloads\Papas 50.ter
2013-08-10 13:46 - 2013-07-31 08:50 - 00000000 ____D C:\Program Files\Microsoft Application Virtualization Client
2013-08-09 16:38 - 2013-08-09 16:37 - 00000000 ____D C:\ProgramData\VirtualizedApplications
2013-08-09 16:23 - 2013-07-31 08:53 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\SoftGrid Client
2013-08-01 01:05 - 2013-08-12 00:57 - 205473198 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e19.avi
2013-08-01 00:33 - 2013-08-12 00:01 - 191252820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e14.avi
ZeroAccess:
C:\Windows\assembly\GAC\Desktop.ini
Files to move or delete:
====================
ZeroAccess:
C:\Users\Jenny\AppData\Local\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}
ZeroAccess:
C:\Program Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}
C:\Users\Jenny\AppData\Local\Temp\appshat-distribution.exe
C:\Users\Jenny\AppData\Local\Temp\AskSLib.dll
C:\Users\Jenny\AppData\Local\Temp\DeltaTB.exe
C:\Users\Jenny\AppData\Local\Temp\evasi0n.exe
C:\Users\Jenny\AppData\Local\Temp\InstallFlashPlayer.exe
C:\Users\Jenny\AppData\Local\Temp\install_flashplayer11x32_mssa_aih_1.exe
C:\Users\Jenny\AppData\Local\Temp\JDownloaderSetup.exe
C:\Users\Jenny\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Jenny\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Jenny\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Jenny\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Jenny\AppData\Local\Temp\lrxtmp.exe
C:\Users\Jenny\AppData\Local\Temp\LyricsPal_1060-8101_v122.exe
C:\Users\Jenny\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Jenny\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Jenny\AppData\Local\Temp\pricepeep_130001_0101.exe
C:\Users\Jenny\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
C:\Users\Jenny\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Jenny\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\Jenny\AppData\Local\Temp\vlc-2.0.5-win32.exe
C:\Users\Jenny\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Jenny\AppData\Local\Temp\vlc-2.0.8-win32.exe
C:\Users\Jenny\AppData\Local\Temp\VuuPCSetup_full.exe
C:\Users\Jenny\AppData\Local\Temp\VuuPCSilentSetup.exe
C:\Users\Jenny\AppData\Local\Temp\{418E3B39-9C16-45DC-AEE4-451F7A4615F0}\setup.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-f9828f91-ccff-43f1-8b4e-2d9fd4994336\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-df11a757-6279-4c5f-a96a-b11f9b6427da\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-dd3fc29f-e044-4df7-95ed-cccd2f0e116a\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-d9ebd02f-22bd-4d14-96f2-266c53718cf6\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-b9beaf83-c1d0-4dac-9d92-c31f2b62a484\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-a5523f60-b9e3-4ebd-9e4b-1c498e778935\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-71bb890a-20c1-4fcc-b2ca-02084f7a8ef3\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-65b76649-e652-4cc6-8c0a-04363e63c692\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-61dbd859-29da-47eb-a444-20c8db768db1\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-48ae1904-47fa-4fad-ae0b-be3ca5fed1c0\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-19810a32-d206-4e9f-9d1b-b6d6c32e4ca6\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-10dd4352-012f-4379-ab78-8fe4aa6670f7\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-086e1090-6a5d-4252-ba39-1ead4b2ee81f\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\uninstaller-WTA-01a38139-d0ef-483e-981f-b4464594d737\Uninstaller.exe
C:\Users\Jenny\AppData\Local\Temp\nst80E1.tmp\DropboxNSISTools.dll
C:\Users\Jenny\AppData\Local\Temp\nss18C.tmp\DropboxNSISTools.dll
C:\Users\Jenny\AppData\Local\Temp\nsrA249.tmp\DropboxNSISTools.dll
C:\Users\Jenny\AppData\Local\Temp\nsrA249.tmp\UAC.dll
C:\Users\Jenny\AppData\Local\Temp\nsnF167.tmp\DropboxNSISTools.dll
C:\Users\Jenny\AppData\Local\Temp\lu\1_spp_1000095.exe
C:\Users\Jenny\AppData\Local\Temp\lu\sp_10032_5_setpoint_logitech_32.exe
C:\Users\Jenny\AppData\Local\Temp\lu\sp_20032_6_unifying_logitech_32.exe
C:\Users\Jenny\AppData\Local\Temp\lu\sp_40032_7a_lu_logitech_32.exe
C:\Users\Jenny\AppData\Local\Temp\is1070216317\ActiveMailSetup.exe
C:\Users\Jenny\AppData\Local\Temp\is1070216317\bundlesweetimsetup.exe
C:\Users\Jenny\AppData\Local\Temp\is1070216317\JDownloaderSetup_IC.exe
C:\Users\Jenny\AppData\Local\Temp\is-6QI14.tmp\OptProCrash.dll
C:\Users\Jenny\AppData\Local\Temp\AF23.dir\InstallFlashPlayer.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\hpzc3212.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\hpzids01.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\HPZIDS40.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\hpzsetup.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\HPZstub.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\Setup.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\hpwlcfg\instmsia.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\hpwlcfg\instmsiw.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\hpwlcfg\setup.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\cfgedt\hpbcfgap.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\cfgedt\hpbcfgre.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\cfgedt\hpbcfgui.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\cfgedt\HPBDMC32.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\cfgedt\HPCDMC32.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\cfgedt\hpcdmc64.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\hpqrrx08.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\scrub2k.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\WindowsInstaller-KB884016-v2-x86.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\trk\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\trk\WindowsXP-KB822603-x86-TRK.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\sve\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\sve\WindowsXP-KB822603-x86-SVE.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\rus\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\rus\WindowsXP-KB822603-x86-RUS.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\ptb\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\ptb\WindowsXP-KB822603-x86-ptb.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\plk\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\plk\WindowsXP-KB822603-x86-PLK.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\nob\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\nob\WindowsXP-KB822603-x86-NOR.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\nld\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\nld\WindowsXP-KB822603-x86-NLD.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\kor\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\kor\WindowsXP-KB822603-x86-KOR.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\jpn\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\jpn\WindowsXP-KB822603-x86-jpn.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\ita\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\ita\WindowsXP-KB822603-x86-ITA.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\hun\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\hun\WindowsXP-KB822603-x86-HUN.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\fra\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\fra\WindowsXP-KB822603-x86-fra.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\fin\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\fin\WindowsXP-KB822603-x86-FIN.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\esn\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\esn\WindowsXP-KB822603-x86-esn.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\enu\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\ell\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\ell\WindowsXP-KB822603-x86-ELL.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\DeviceInfo.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\HpAppEgn.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\HpSdUi.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\HPSysDig.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\logging.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\systeminfo.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\zlib.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\tu\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\tc\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\sw\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\sp\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\sc\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\ru\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\pol\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\po\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\no\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\ko\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\ja\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\it\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\hu\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\gr\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\ge\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\fr\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\fi\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\en\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\du\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\da\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\diagnostics\loc\cz\HpSdRes.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\deu\Q283787_W2K_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\deu\WindowsXP-KB822603-x86-DEU.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\dan\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\dan\WindowsXP-KB822603-x86-DAN.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\csy\Q283787_w2k_sp3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\csy\WindowsXP-KB822603-x86-CSY.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\cht\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\cht\WindowsXP-KB822603-x86-CHT.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\chs\Q283787_W2K_SP3_x86.EXE
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\util\ccc\chs\WindowsXP-KB822603-x86-CHS.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\blocksysuserinstall.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\devicedisconnect.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\difxapi.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPCommunication.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpdot4chk.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPeDiag.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPeSupport.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpprtchk.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpqrrx08.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPScripting.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpwlpd01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpxpschk.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZarp01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZcdl01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZchk01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZdui01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZdui40.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpzfwx01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZgat01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZmsi01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZnop01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpznui01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZnui40.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpznuiprn01.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\hpznuiprn40.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZpnp01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZpnp40.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZprl01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZprl40.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZpsc01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZpsl01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZrcn01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZrcv01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZrein01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZscr01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZscr40.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZshl01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZshl40.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZtim01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZwis01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZwrp01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\HPZwup01.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\InstallMetrics.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\InternetUtil.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\msvcp60.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\msvcr80.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\msxml3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\msxml3a.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\msxml3r.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\RulesEngine.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\TwainFix.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\usbready.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\x64\difxapi.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\wis\Win2K_XP\instmsi.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\setup\bpdhelp\help\detectlang2.exe
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x64\hpovst11.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x64\hpwtiop3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x64\hpwtscl3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x64\hpwwiax3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x64\hpwwiax4.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x32\hpovst11.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x32\hpwtiop3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x32\hpwtscl3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x32\hpwtusd1.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x32\hpwwiax3.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\scanner\x32\hpwwiax4.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\dot4\win2000\difxapi.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\dot4\win2000\hppldcoi.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\dot4\win2000\hpzc3212.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\Jenny\AppData\Local\Temp\7zS3331\OJJ4500_Basic_13\drivers\dot4\amd64\winxp\hppldcoi.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\mpsvc.dll => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
LastRegBack: 2013-08-22 00:28
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-08-2013 03 Ran by Jenny at 2013-08-31 15:52:44 Running from C:\Users\Jenny\Dropbox\Dokumente Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 6.1.1) 4500_Help (Version: 1.00.0000) 7-Zip 9.20 (Version: 9.20.00.0) Adobe AIR (Version: 2.7.1.19610) Adobe Community Help (Version: 3.2.1) Adobe Community Help (Version: 3.2.1.650) Adobe Flash Player 11 ActiveX (Version: 11.8.800.94) Adobe Flash Player 11 Plugin (Version: 11.8.800.94) Adobe Photoshop Elements 9 (Version: 9.0) Adobe Reader X (10.1.7) MUI (Version: 10.1.7) Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Avira Free Antivirus (Version: 13.0.0.4045) Bonjour (Version: 3.0.0.10) bpd_scan (Version: 3.00.0000) BPDSoftware (Version: 50.0.165.000) BPDSoftware_Ini (Version: 1.00.0000) BufferChm (Version: 130.0.331.000) Bundled software uninstaller Cockatrice Cyberduck 4.2.1 (9350) (Version: 4.2.1 (9350)) D3DX10 (Version: 15.4.2368.0902) Dropbox (HKCU Version: 2.0.22) Elements 9 Organizer (Version: 9.0) Elements STI Installer (Version: 1.0) eReg (Version: 1.20.138.34) Evernote v. 4.5.1 (Version: 4.5.1.5451) Fotogalerija Windows Live (Version: 15.4.3502.0922) Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922) Galería fotográfica de Windows Live (Version: 15.4.3502.0922) Galeria fotogràfica del Windows Live (Version: 15.4.3502.0922) Galeria fotografii usługi Windows Live (Version: 15.4.3502.0922) Galerie de photos Windows Live (Version: 15.4.3502.0922) Galerie foto Windows Live (Version: 15.4.3502.0922) Google Chrome (Version: 29.0.1547.62) Google Update Helper (Version: 1.3.21.153) HP Officejet J4500 Series (Version: 13.0) iCloud (Version: 2.1.2.8) Identity Card (Version: 1.00.3501) iFunbox (v2.6.2375.747), iFunbox DevTeam (Version: v2.6.2375.747) Intel(R) Control Center (Version: 1.2.1.1007) Intel(R) Graphics Media Accelerator Driver (Version: 8.14.8.1065) Intel(R) Rapid Storage Technology (Version: 10.1.0.1008) Internet Explorer Toolbar 4.6 by SweetPacks (Version: 4.6.0004) iTunes (Version: 11.0.4.4) J4500 (Version: 50.0.165.000) Java 7 Update 21 (Version: 7.0.210) Java Auto Updater (Version: 2.1.9.5) JDownloader 0.9 (Version: 0.9) Joboshare iPhone iBooks Transfer (Version: 3.4.5.1204) Junk Mail filter update (Version: 15.4.3502.0922) Launch Manager (Version: 5.1.7) Logitech SetPoint 6.32 (Version: 6.32.20) Lyrmix Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) McAfee Security Scan Plus (Version: 3.0.318.3) Mesh Runtime (Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Office 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Starter 2010 - Deutsch (Version: 14.0.5128.5002) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053) Microsoft_VC90_CRT_x86 (Version: 1.00.0000) mkv2vob (Version: 2.4.9) Mozilla Firefox 15.0.1 (x86 de) (Version: 15.0.1) Mozilla Maintenance Service (Version: 15.0.1) MSVCRT (Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.37) Packard Bell Power Management (Version: 6.00.3008) Packard Bell Recovery Management (Version: 5.00.3504) Packard Bell ScreenSaver (Version: 1.1.0124.2011) Packard Bell Updater (Version: 1.02.3500) Poczta usługi Windows Live (Version: 15.4.3502.0922) Podstawowe programy Windows Live (Version: 15.4.3502.0922) Pošta Windows Live (Version: 15.4.3502.0922) ProductContext (Version: 50.0.165.000) QuickTime (Version: 7.74.80.86) Raccolta foto di Windows Live (Version: 15.4.3502.0922) Realtek Ethernet Controller Driver (Version: 7.49.927.2011) Realtek High Definition Audio Driver (Version: 6.0.1.6374) Realtek PCIE Card Reader (Version: 6.1.7601.83) Scan (Version: 13.0.0.0) Synaptics Pointing Device Driver (Version: 15.1.18.0) Toolbox (Version: 130.0.648.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Video Web Camera (Version: 1.5.2108.00) VLC media player 2.0.8 (Version: 2.0.8) WebReg (Version: 130.0.132.017) Windows Live Argazki Galeria (Version: 15.4.3502.0922) Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3538.0513) Windows Live Fotogaléria (Version: 15.4.3502.0922) Windows Live Fotogalerie (Version: 15.4.3502.0922) Windows Live Fotogalleri (Version: 15.4.3502.0922) Windows Live Fotoğraf Galerisi (Version: 15.4.3502.0922) Windows Live Fotótár (Version: 15.4.3502.0922) Windows Live Galeria de Fotos (Version: 15.4.3502.0922) Windows Live Galerija fotografija (Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Mail (Version: 15.4.3502.0922) Windows Live Mesh (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live Photo Gallery (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live Temel Parçalar (Version: 15.4.3502.0922) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) Windows Live 影像中心 (Version: 15.4.3502.0922) Windows Live 程式集 (Version: 15.4.3502.0922) Windows Liven asennustyökalu (Version: 15.4.3502.0922) Windows Liven sähköposti (Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (Version: 15.4.3502.0922) Συλλογή φωτογραφιών του Windows Live (Version: 15.4.3502.0922) Основные компоненты Windows Live (Version: 15.4.3502.0922) Почта Windows Live (Version: 15.4.3502.0922) Фотоальбом Windows Live (Version: 15.4.3502.0922) Фотогалерия на Windows Live (Version: 15.4.3502.0922) גלריית התמונות של Windows Live (Version: 15.4.3502.0922) بريد Windows Live (Version: 15.4.3502.0922) معرض صور Windows Live (Version: 15.4.3502.0922) ==================== Restore Points ========================= 22-08-2013 11:21:30 Geplanter Prüfpunkt 29-08-2013 12:15:05 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {12CC230B-DF3C-461D-B016-485BC3D4A4FB} - System32\Tasks\Lyrmix Update => C:\Program Files\Lyrmix\LymxUD.exe [2013-08-29] () Task: {42CC5CC8-6E5D-4564-A7DA-D16F64CCF52D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {48B8517B-21B9-494A-AF82-4667DBDE0351} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.) Task: {50FE001B-B62D-4EC3-82AE-79C326C3E289} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.) Task: {61E10246-FC57-401D-8756-F877F6834460} - System32\Tasks\AdobeAAMUpdater-1.0-Jenny-PC-Jenny => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated) Task: {CCF4E59F-C1A4-4E66-A37F-577307F46A51} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {EEB6565D-55AD-42F8-9515-F764AF34836A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Lyrmix Update.job => C:\Program Files\Lyrmix\LymxUD.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-09 01:25 - 2011-08-02 13:00 - 00215656 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\SysHook.dll 2012-05-11 07:21 - 2012-05-11 07:21 - 00172544 _____ () C:\Windows\system32\iMobileDisk.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 01079184 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00053648 _____ (Open Source Software community project) C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00124816 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00043408 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 01292136 _____ (The ICU Project) C:\Program Files\Common Files\Apple\Apple Application Support\libicuin.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00923496 _____ (The ICU Project) C:\Program Files\Common Files\Apple\Apple Application Support\libicuuc.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 16303976 _____ (The ICU Project) C:\Program Files\Common Files\Apple\Apple Application Support\icudt46.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00075664 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll 2012-12-21 17:19 - 2012-12-21 17:19 - 00704176 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\MobileDevice.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2013-04-21 21:43 - 2013-04-21 21:43 - 02464072 _____ (Apple, Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\CFNetwork.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 00456592 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\SQLite3.dll 2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2011-08-31 00:05 - 2011-08-31 00:05 - 00073064 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll 2012-07-02 19:01 - 2012-07-02 19:01 - 00268176 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files\Common Files\Apple\Mobile Device Support\SSLEAY32.dll 2012-07-02 19:01 - 2012-07-02 19:01 - 01116048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files\Common Files\Apple\Mobile Device Support\LIBEAY32.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00232448 _____ () C:\Windows\system32\mswsock.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00232448 _____ (Microsoft Corporation) \\.\globalroot\systemroot\system32\mswsock.dll 2012-01-06 09:49 - 2011-12-30 12:03 - 00094720 _____ (Intel Corporation) C:\Windows\System32\hccutils.DLL 2012-01-06 09:49 - 2011-12-30 12:04 - 00056832 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2012-01-06 09:49 - 2011-12-30 12:03 - 00284160 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc 2012-01-06 09:49 - 2011-12-30 12:04 - 09030656 _____ (Intel Corporation) C:\Windows\System32\igfxress.dll 2012-01-06 09:49 - 2011-12-30 12:04 - 00200704 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2012-01-06 09:49 - 2011-12-30 12:03 - 00224768 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2011-12-16 12:22 - 2009-07-20 09:12 - 00137736 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\ComFnUtl.dll 2011-12-16 12:22 - 2009-07-14 08:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\CDRomUtl.dll 2011-12-16 12:22 - 2009-07-27 06:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\MixerUtl.dll 2011-12-16 12:22 - 2009-07-27 06:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\Wnd2File.dll 2011-12-16 12:22 - 2009-07-27 12:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\PowerUtl.dll 2011-12-16 12:22 - 2009-12-30 11:13 - 00326736 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\OSDUtl2.dll 2011-12-16 12:22 - 2009-07-27 06:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\SzUPFUtl.dll 2011-12-16 12:22 - 2011-06-30 09:01 - 00431696 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\RadioWndUtl.dll 2011-12-16 12:22 - 2011-07-01 04:51 - 00393808 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\aipflib.dll 2011-12-16 12:22 - 2010-11-03 11:00 - 00092240 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\LmSmbKel.dll 2011-12-16 12:22 - 2009-07-03 10:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\VistaVol.DLL 2011-12-16 12:24 - 2010-10-08 12:31 - 00173352 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2011-12-16 12:24 - 2010-10-08 12:31 - 00173352 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2012-02-09 01:25 - 2011-08-02 13:00 - 00174696 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\BrightnessControl.dll 2012-02-09 01:25 - 2011-08-02 13:00 - 00174696 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\PowerSettingControl.dll 2012-02-09 01:25 - 2011-08-02 13:00 - 00174696 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\CommonControl.dll 2012-01-06 09:49 - 2011-12-30 12:04 - 00023552 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2011-10-07 11:40 - 2011-10-07 11:40 - 00039704 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\khalwrapper.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 00122648 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\KemUtil.dll 2012-10-06 08:48 - 2012-10-06 08:48 - 03781960 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 00070936 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\KemXML.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 00135448 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\kemutb.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 00105752 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\KemWnd.dll 2011-10-07 11:40 - 2011-10-07 11:40 - 00031000 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPointCOM.dll 2012-10-06 08:48 - 2012-10-06 08:48 - 00063312 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90DEU.DLL 2011-10-07 11:41 - 2011-10-07 11:41 - 00879896 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll 2011-10-07 11:40 - 2011-10-07 11:40 - 00032024 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\WebBrowserSupport.dll 2012-10-06 08:48 - 2012-10-06 08:48 - 00159048 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.DLL 2011-10-07 11:41 - 2011-10-07 11:41 - 00134936 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\Macros\MacroAppSwitch.dll 2011-10-07 11:41 - 2011-10-07 11:41 - 00207640 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\Macros\MacroMedia.dll 2011-10-07 11:41 - 2011-10-07 11:41 - 00173336 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\Macros\MacroEmail.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 00024856 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\KemMon.dll 2011-09-27 21:05 - 2011-09-27 21:05 - 00501528 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KhalApi.dll 2011-09-27 21:03 - 2011-09-27 21:03 - 00134936 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.dll 2011-10-07 11:39 - 2011-10-07 11:39 - 00064280 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\kgame.dll 2011-10-07 11:40 - 2011-10-07 11:40 - 00107800 _____ (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LCabHandler.dll 2011-12-16 12:22 - 2011-03-14 13:44 - 00075856 _____ (Dritek System Inc.) C:\Program Files\Launch Manager\NTKCUtl.dll 2011-06-11 01:58 - 2011-06-11 01:58 - 04422992 _____ (Microsoft Corporation) C:\Windows\system32\mfc100u.dll 2011-06-11 01:58 - 2011-06-11 01:58 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\MSVCR100.dll 2011-06-11 01:58 - 2011-06-11 01:58 - 00421200 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP100.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\LOGONCLI.DLL 2012-09-28 09:19 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\BROWCLI.DLL 2011-06-11 01:58 - 2011-06-11 01:58 - 00064336 _____ (Microsoft Corporation) C:\Windows\system32\MFC100DEU.DLL 2012-12-01 23:08 - 2013-08-20 11:14 - 00749112 _____ (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\ccwkrlib.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00055352 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\cfglib.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00349752 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccguard.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00029240 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccgrdrc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00229432 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccgrdw.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00059448 _____ (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avipc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00419384 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccwgrd.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00807992 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccgen.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00049720 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccgenrc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00220216 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccupdate.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00028728 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccupdrc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00083000 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\cclic.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00009784 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\cclicrc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00237624 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccmsg.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00010296 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccmsgrc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00014392 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\ccmainrc.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 04786744 _____ (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\rcimage.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00212536 _____ (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\ccupdw.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00415288 _____ (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\grdcore.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00218168 _____ (Avira Operations GmbH & Co. KG) c:\program files\avira\antivir desktop\gpipc.dll 2013-05-31 11:56 - 2013-05-31 11:56 - 00148808 _____ (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.dll 2013-05-31 12:39 - 2013-05-31 12:39 - 00041800 _____ (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.DLL 2013-05-31 11:56 - 2013-05-31 11:56 - 00040264 _____ (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL 2012-12-21 17:27 - 2012-12-21 17:27 - 01449648 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll 2011-08-31 00:05 - 2011-08-31 00:05 - 00121704 _____ (Apple Inc.) C:\Program Files\Bonjour\mdnsNSP.dll 2013-07-12 12:44 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2009-07-14 01:45 - 2009-07-14 03:15 - 00226816 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll 2013-02-28 00:40 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll 2013-03-15 17:06 - 2013-03-15 17:06 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2009-07-14 01:40 - 2009-07-14 03:16 - 00108544 _____ (Microsoft Corporation) C:\Program Files\Windows Sidebar\wlsrvc.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00232448 _____ () C:\Windows\system32\MSWSOCK.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00232448 _____ (Microsoft Corporation) \\?\globalroot\systemroot\system32\mswsock.DLL 2009-07-14 01:33 - 2009-07-14 03:09 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\security.dll 2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Jenny\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll 2009-07-14 01:53 - 2009-07-14 03:15 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Jenny\AppData\Roaming\Dropbox\bin\libcef.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Jenny\AppData\Roaming\Dropbox\bin\icudt.dll 2011-09-27 21:05 - 2011-09-27 21:05 - 00501528 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALAPI.DLL 2011-09-27 21:05 - 2011-09-27 21:05 - 00268056 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALITCH.DLL 2011-09-27 21:05 - 2011-09-27 21:05 - 00272152 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMW.DLL 2011-09-27 21:05 - 2011-09-27 21:05 - 00729368 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHPP.DLL 2011-09-27 21:05 - 2011-09-27 21:05 - 00296728 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMOU.DLL 2011-09-27 21:05 - 2011-09-27 21:05 - 00347416 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALHID.DLL 2011-09-27 21:05 - 2011-09-27 21:05 - 00293144 _____ (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALUSB.DLL 2013-05-25 02:36 - 2013-05-25 02:36 - 00130736 _____ (Dropbox, Inc.) C:\Users\Jenny\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll 2013-04-05 12:58 - 2013-04-05 12:58 - 00657736 _____ (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ShellStreams.dll 2012-12-01 23:08 - 2013-08-20 11:14 - 00154680 _____ (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\shlext.dll 2010-11-18 21:08 - 2010-11-18 21:08 - 00055808 _____ (Igor Pavlov) C:\Programme\7-Zip\7-zip.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2009-07-14 02:13 - 2009-07-14 03:16 - 02255360 _____ (Microsoft Corporation) C:\Windows\System32\NLSData0007.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2013-05-10 09:57 - 2013-05-10 09:57 - 00396864 _____ (Adobe Systems, Inc.) C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll 2012-01-06 09:49 - 2011-12-30 12:03 - 00094720 _____ (Intel Corporation) C:\Windows\system32\hccutils.DLL 2012-09-27 21:00 - 2012-09-06 03:24 - 00770384 _____ (Microsoft Corporation) C:\Programme\Mozilla Firefox\MSVCR100.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00068576 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\mozglue.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00171488 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nspr4.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00021472 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\plc4.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00020960 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\plds4.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00015840 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\mozalloc.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00813536 _____ (sqlite.org) C:\Programme\Mozilla Firefox\mozsqlite3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00092640 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nssutil3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00155104 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\softokn3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00638432 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nss3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00145376 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\ssl3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00091104 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\smime3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 02244064 _____ () C:\Programme\Mozilla Firefox\mozjs.dll 2012-09-27 21:00 - 2012-09-06 03:24 - 00421200 _____ (Microsoft Corporation) C:\Programme\Mozilla Firefox\MSVCP100.dll 2012-09-27 21:00 - 2012-09-06 03:26 - 15632352 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\xul.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 02288608 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\gkmedias.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00019424 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\xpcom.dll 2012-09-27 21:00 - 2012-09-06 03:26 - 00266720 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\components\browsercomps.dll 2010-11-20 23:29 - 2010-11-20 23:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2012-01-06 09:49 - 2011-12-30 11:57 - 01201664 _____ (Intel Corporation) C:\Windows\system32\igdumd32.dll 2012-01-06 09:49 - 2011-12-30 12:01 - 00817152 _____ (Intel Corporation) C:\Windows\system32\igddxva32.dll 2012-01-06 09:49 - 2011-12-30 12:01 - 00074240 _____ (Intel Corporation) C:\Windows\system32\igdvidproc32.dll 2012-01-06 09:49 - 2011-12-30 12:03 - 00025088 _____ (Intel Corporation) C:\Windows\system32\igdaux32.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00096224 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nssdbm3.dll 2012-09-27 21:00 - 2012-09-06 03:24 - 00258528 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\freebl3.dll 2012-09-27 21:00 - 2012-09-06 03:25 - 00370656 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nssckbi.dll 2009-07-14 01:29 - 2009-07-14 03:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\tschannel.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/31/2013 03:53:15 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1f00 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:52:13 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xf3c Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:51:11 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1b58 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:50:09 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1af0 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:49:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1198 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:48:06 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1144 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:47:04 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1534 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:46:02 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x1eb0 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:45:01 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x2e0 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 Error: (08/31/2013 03:43:58 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x550 Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0 Pfad der fehlerhaften Anwendung: svchost.exe1 Pfad des fehlerhaften Moduls: svchost.exe2 Berichtskennung: svchost.exe3 System errors: ============= Error: (08/31/2013 08:34:40 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (08/31/2013 08:34:40 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (08/31/2013 08:34:32 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (08/31/2013 08:34:32 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (08/31/2013 01:03:15 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (08/31/2013 01:03:15 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (08/30/2013 01:08:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147024891 Error: (08/30/2013 01:08:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891 Error: (08/30/2013 01:07:38 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (08/30/2013 01:07:36 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht. Microsoft Office Sessions: ========================= Error: (08/31/2013 03:53:15 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c0000005000000001f0001cea651700e0347C:\Windows\System32\svchost.exeunknownae6d155c-1244-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:52:13 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c000000500000000f3c01cea6514b2d4ab8C:\Windows\System32\svchost.exeunknown8957fe86-1244-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:51:11 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c0000005000000001b5801cea65126459518C:\Windows\System32\svchost.exeunknown64b550cf-1244-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:50:09 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c0000005000000001af001cea65101e32c88C:\Windows\System32\svchost.exeunknown3fc8d86f-1244-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:49:08 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c000000500000000119801cea650dcbd1defC:\Windows\System32\svchost.exeunknown1b65faad-1244-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:48:06 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c000000500000000114401cea650b7ca2d49C:\Windows\System32\svchost.exeunknownf616345c-1243-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:47:04 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c000000500000000153401cea65092d1a6f7C:\Windows\System32\svchost.exeunknownd1520c50-1243-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:46:02 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c0000005000000001eb001cea6506e681a46C:\Windows\System32\svchost.exeunknownac5288ed-1243-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:45:01 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c0000005000000002e001cea65049264642C:\Windows\System32\svchost.exeunknown87ee14e3-1243-11e3-8c64-047d7b27bb43 Error: (08/31/2013 03:43:58 PM) (Source: Application Error)(User: ) Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c00000050000000055001cea65024c5068dC:\Windows\System32\svchost.exeunknown62a85114-1243-11e3-8c64-047d7b27bb43 ==================== Memory info =========================== Percentage of memory in use: 85% Total physical RAM: 1012.3 MB Available physical RAM: 144.02 MB Total Pagefile: 2168.3 MB Available Pagefile: 778.32 MB Total Virtual: 2047.88 MB Available Virtual: 1888.61 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:284.99 GB) (Free:165.16 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 02EA307F) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=285 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 1397 GB) (Disk ID: 076F11AF) Partition 1: (Not Active) - (Size=-698721377792) - (Type=AF) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-31 16:36:50
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 WDC_WD32 rev.01.0 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Jenny\AppData\Local\Temp\fgdoypog.sys
---- System - GMER 2.1 ----
SSDT 8C8C88DE ZwCreateSection
SSDT 8C8C88E8 ZwRequestWaitReplyPort
SSDT 8C8C88E3 ZwSetContextThread
SSDT 8C8C88ED ZwSetSecurityObject
SSDT 8C8C88F2 ZwSystemDebugControl
SSDT 8C8C887F ZwTerminateProcess
INT 0x51 ? 90F117D8
INT 0x91 ? 90F11058
INT 0xA1 ? 90F112D8
INT 0xA2 ? 90F11A58
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 82E919F5 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82ECB1F2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11F7 82ED253C 4 Bytes [DE, 88, 8C, 8C]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1553 82ED2898 4 Bytes [E8, 88, 8C, 8C]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1597 82ED28DC 4 Bytes [E3, 88, 8C, 8C]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1613 82ED2958 4 Bytes [ED, 88, 8C, 8C]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 82ED29AC 4 Bytes [F2, 88, 8C, 8C]
.text ...
? system32\DRIVERS\avkmgr.sys Das System kann den angegebenen Pfad nicht finden. !
---- User code sections - GMER 2.1 ----
.text C:\Windows\Explorer.EXE[2732] SHELL32.dll!RealDriveType + 1561 76CEFC54 4 Bytes [F0, EB, 3E, 6D] {JMP 0x41; INS DWORD [ES:EDI], DX}
.text C:\Windows\Explorer.EXE[2732] SHELL32.dll!RealDriveType + 1765 76CEFE58 4 Bytes JMP E67D6D3E
.text C:\Windows\System32\svchost.exe[3100] user32.dll!GetCursorPos 765AA4B3 5 Bytes JMP 0095000A
.text C:\Windows\System32\svchost.exe[3100] user32.dll!DialogBoxIndirectParamAorW 765D3B40 5 Bytes JMP 0096000A
.text C:\Windows\System32\svchost.exe[3100] ole32.DLL!CoCreateInstance 778E9D0B 5 Bytes JMP 0094000A
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\
Reg HKLM\SYSTEM\CurrentControlSet\services\@Parameters\0\x202e\x2764 868
Reg HKLM\SYSTEM\ControlSet002\services\ (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\@Parameters\0\x202e\x2764 868
---- EOF - GMER 2.1 ----
Code:
ATTFilter Exportierte Ereignisse:
31.08.2013 17:22 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:21 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:19 [System-Scanner] Malware gefunden
Die Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
enthielt einen Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '549e974c.qua'
verschoben!
31.08.2013 17:19 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:19 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:18 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:18 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:16 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
31.08.2013 17:16 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program
Files\Google\Desktop\Install\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\
\...\*ﯹ๛\{c2d977a4-36dd-58e1-93d4-1e5df1f598d6}\U\80000032.@'
wurde ein Virus oder unerwünschtes Programm 'TR/ATRAPS.Gen2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern
|
|
31.08.2013, 16:33
| #2 | |
| /// the machine /// TB-Ausbilder    | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
01.09.2013, 10:28
| #3 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Hat soweit alles geklappt aber nun habe ich keine Internetverbindung mehr und kann daher nicht den Log von combofix posten. Mir fehlen auch die üblichen Symbole in der Taskleiste (Antivir, Dropbox, Grafikkartentreiber, etc.). Habe den Computer schon mehrfach neugestartet und Router funktioniert soweit auch (z.B. mit dem iPad, mit dem ich hier gerade schreibe).
__________________Habt ihr da vllt. auch einen Tipp für mich? Vielen Dank soweit! Edit: Ich habe inzwischen außerdem den Router neugestartet, mit LAN-Kabel Router und Computer verbunden, im abgesicherten Modus gestartet und den Fehler versucht von Windows beheben zu lassen. Den Combofix Log konnte ich nur abfotografieren. Anders wusste ich mir nicht zu helfen. Als eine Zip-Datei https://www.dropbox.com/s/6vkzo0320djvl36/PhotoArchive.zip Als einzelne Bilder hxxp://up.picr.de/15685800he.jpg hxxp://up.picr.de/15685822jg.jpg hxxp://up.picr.de/15685836jm.jpg hxxp://up.picr.de/15685859dm.jpg hxxp://up.picr.de/15685898yw.jpg hxxp://up.picr.de/15685935ps.jpg Geändert von vikingr55 (01.09.2013 um 10:51 Uhr) |
|
01.09.2013, 12:53
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Kannste ein frisches FRST log posten?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
01.09.2013, 13:24
| #5 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Leider wieder nur abfotografiert:        |
|
01.09.2013, 16:48
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Hast Du keinen Stick wo du die Logs draufkopieren kannst?
__________________ --> Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) |
|
01.09.2013, 17:09
| #7 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Einen Stick hätte ich, kann es nur dann nirgends draufpacken, da sonst nur das iPad zur Verfügung steht. Tut mir leid für die Umstände, aktuell habe ich wirklich keine andere Möglichkeit ohne Internet auf dem Rechner. |
|
01.09.2013, 18:37
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Dann kannst Du auch nix downloaden und rüber auf den Rechner schieben? Das ist blöd. Lass Combofix nochmal laufen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
01.09.2013, 18:46
| #9 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Ohne erheblichen Aufwand leider momentan nicht. Habe gerade ComboFix angeschmissen und er hat mir gesagt es sei ein Update verfügbar, was er ja eigentlich nicht prüfen kann ohne Verbindung. Er hat dann nach Bestätigung auch tatsächlich etwas runtergeladen, aber ansonsten bekomme ich dennoch keine Internetverbindung zu stande. |
|
02.09.2013, 07:38
| #10 |
| /// the machine /// TB-Ausbilder | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Ist Combofix denn durchgelaufen? Wie genau gehst Du online? LAN oder WLAN?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.09.2013, 07:44
| #11 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Combofix ist durchgelaufen. Soll ich den Log posten? Ich gehe über W-Lan online, habe es aber auch schon mit dem Lan-Kabel probiert. Zwischenzeitig sind meine Symbole in der Taskleiste aucb wieder aufgetaucht, sind jetzt aber auch wieder weg. |
|
02.09.2013, 08:38
| #12 |
| /// the machine /// TB-Ausbilder | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Abgesicherter Modus mit Netzwerktreibern geht auch kein Internet? Wir müssen irgendwie Programme und Logfiles hin und herschieben können, sonst wird das ein Schuss ins blaue. Drück mal Windows-taste+R, schreibe netsh winsock reset und drücke Enter. Versuch Online zu gehen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.09.2013, 18:05
| #13 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Ja, so habe ich es gemacht. Habe auch den Befehl eingegeben, leider auch ohne Erfolg. Ich kann schon mal zu wem und einen Stick für ein Log oder ein Programm nehmen. Ich kann nur nicht permanent hin und her. |
|
02.09.2013, 19:27
| #14 |
| /// the machine /// TB-Ausbilder | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Dann folgendes: Organisier nen Stick und steck folgende Programme drauf, lass alles laufen, speicher die Logs auf dem Stick, geh nochmal zu dem und poste sie hier: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Downloade dir bitte  Farbar Service Scanner
Poste bitte den Inhalt hier. Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool Setze einen Haken bei folgenden Einträgen
Downloade dir bitte Windows Repair (All In One) von hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.09.2013, 17:51
| #15 |
| | Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) Results.txt Code:
ATTFilter MiniToolBox by Farbar Version: 13-07-2013
Ran by Jenny (administrator) on 03-09-2013 at 19:03:38
Running from "C:\Users\Jenny\Desktop"
Microsoft Windows 7 Starter Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************
========================= Flush DNS: ===================================
Windows-IP-Konfiguration
Der DNS-Auflîsungscache wurde geleert.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= FF Proxy Settings: ==============================
"Reset FF Proxy Settings": Firefox Proxy settings were reset.
========================= Hosts content: =================================
127.0.0.1 localhost
========================= IP Configuration: ================================
Broadcom 802.11n-Netzwerkadapter = Drahtlosnetzwerkverbindung (Connected)
Realtek PCIe FE Family Controller = LAN-Verbindung (Media disconnected)
Microsoft Virtual WiFi Miniport Adapter = Drahtlosnetzwerkverbindung 2 (Media disconnected)
# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4
reset
set global icmpredirects=enabled
popd
# Ende der IPv4-Konfiguration
Windows-IP-Konfiguration
Hostname . . . . . . . . . . . . : Jenny-PC
PrimÑres DNS-Suffix . . . . . . . :
Knotentyp . . . . . . . . . . . . : Hybrid
IP-Routing aktiviert . . . . . . : Nein
WINS-Proxy aktiviert . . . . . . : Nein
Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung 2:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physikalische Adresse . . . . . . : 7C-E9-D3-50-38-86
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung:
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Broadcom 802.11n-Netzwerkadapter
Physikalische Adresse . . . . . . : 7C-E9-D3-50-38-86
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
Verbindungslokale IPv6-Adresse . : fe80::80d8:d4a:25de:ba3d%13(Bevorzugt)
IPv4-Adresse . . . . . . . . . . : 192.168.2.105(Bevorzugt)
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Lease erhalten. . . . . . . . . . : Sonntag, 1. September 2013 11:09:41
Lease lÑuft ab. . . . . . . . . . : Samstag, 11. Oktober 2149 01:32:42
Standardgateway . . . . . . . . . : 192.168.2.1
DHCP-Server . . . . . . . . . . . : 192.168.2.1
DHCPv6-IAID . . . . . . . . . . . : 326953427
DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-16-C4-B5-24-04-7D-7B-27-BB-43
DNS-Server . . . . . . . . . . . : 192.168.2.1
NetBIOS Åber TCP/IP . . . . . . . : Aktiviert
Ethernet-Adapter LAN-Verbindung:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Realtek PCIe FE Family Controller
Physikalische Adresse . . . . . . : 04-7D-7B-27-BB-43
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
Tunneladapter isatap.{DD5567C6-AE70-4742-B7FF-C8730C030591}:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Tunneladapter LAN-Verbindung* 2:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-6zu4-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Tunneladapter isatap.{BAB17182-9EB1-4344-9BA2-87D4FBED5324}:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Tunneladapter Teredo Tunneling Pseudo-Interface:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Tunneladapter isatap.{E2C935F8-5204-4436-8E7A-6A6B6C4CE30B}:
Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #3
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Server: easy.box
Address: 192.168.2.1
Name: google.com
Addresses: 2a00:1450:4001:c02::8a
173.194.70.113
173.194.70.138
173.194.70.139
173.194.70.100
173.194.70.101
173.194.70.102
Ping-Anforderung konnte Host "google.com" nicht finden. öberprÅfen Sie den Namen, und versuchen Sie es erneut.
Server: easy.box
Address: 192.168.2.1
Name: yahoo.com
Addresses: 206.190.36.45
98.138.253.109
98.139.183.24
Ping-Anforderung konnte Host "yahoo.com" nicht finden. öberprÅfen Sie den Namen, und versuchen Sie es erneut.
Ping wird ausgefÅhrt fÅr 127.0.0.1 mit 32 Bytes Daten:
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
Ping-Statistik fÅr 127.0.0.1:
Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0
(0% Verlust),
Ca. Zeitangaben in Millisek.:
Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms
===========================================================================
Schnittstellenliste
16...7c e9 d3 50 38 86 ......Microsoft Virtual WiFi Miniport Adapter
13...7c e9 d3 50 38 86 ......Broadcom 802.11n-Netzwerkadapter
11...04 7d 7b 27 bb 43 ......Realtek PCIe FE Family Controller
1...........................Software Loopback Interface 1
17...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter
12...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
18...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
19...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #3
===========================================================================
IPv4-Routentabelle
===========================================================================
Aktive Routen:
Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.105 26
127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 306
127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 306
127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306
192.168.2.0 255.255.255.0 Auf Verbindung 192.168.2.105 281
192.168.2.105 255.255.255.255 Auf Verbindung 192.168.2.105 281
192.168.2.255 255.255.255.255 Auf Verbindung 192.168.2.105 281
224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 306
224.0.0.0 240.0.0.0 Auf Verbindung 192.168.2.105 281
255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306
255.255.255.255 255.255.255.255 Auf Verbindung 192.168.2.105 281
===========================================================================
StÑndige Routen:
Keine
IPv6-Routentabelle
===========================================================================
Aktive Routen:
If Metrik Netzwerkziel Gateway
1 306 ::1/128 Auf Verbindung
13 281 fe80::/64 Auf Verbindung
13 281 fe80::80d8:d4a:25de:ba3d/128
Auf Verbindung
1 306 ff00::/8 Auf Verbindung
13 281 ff00::/8 Auf Verbindung
===========================================================================
StÑndige Routen:
Keine
========================= Winsock entries =====================================
Catalog5 01 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Catalog5 02 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
========================= Event log errors: ===============================
Application errors:
==================
Error: (09/03/2013 06:58:55 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
Error: (09/01/2013 08:04:14 PM) (Source: ESENT) (User: )
Description: Catalog Database (1204) Catalog Database: Bei ‹berpr¸fung der aus Datei "C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" bei Offset 2441216 (0x0000000000254000) (Datenbankseite Catalog Database0) f¸r 4096 (0x00001000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenpr¸fsumme ein Fehler aufgetreten. Die erwartete Pr¸fsumme war [e9963531eb34d7b9], die tats‰chliche Pr¸fsumme [0000025365502b28]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich f¸r weitere Unterst¸tzung bei der Diagnose des Problems an Ihren Hardwarehersteller.
Error: (09/01/2013 11:17:51 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
Error: (09/01/2013 11:07:51 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/01/2013 10:54:29 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/31/2013 07:05:10 PM) (Source: ESENT) (User: )
Description: Catalog Database (1208) Catalog Database: Bei ‹berpr¸fung der aus Datei "C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" bei Offset 2441216 (0x0000000000254000) (Datenbankseite Catalog Database0) f¸r 4096 (0x00001000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenpr¸fsumme ein Fehler aufgetreten. Die erwartete Pr¸fsumme war [e9963531eb34d7b9], die tats‰chliche Pr¸fsumme [0000025365502b28]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich f¸r weitere Unterst¸tzung bei der Diagnose des Problems an Ihren Hardwarehersteller.
Error: (08/31/2013 07:00:39 PM) (Source: ESENT) (User: )
Description: Catalog Database (1208) Catalog Database: Bei ‹berpr¸fung der aus Datei "C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" bei Offset 2441216 (0x0000000000254000) (Datenbankseite Catalog Database0) f¸r 4096 (0x00001000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenpr¸fsumme ein Fehler aufgetreten. Die erwartete Pr¸fsumme war [e9963531eb34d7b9], die tats‰chliche Pr¸fsumme [0000025365502b28]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich f¸r weitere Unterst¸tzung bei der Diagnose des Problems an Ihren Hardwarehersteller.
Error: (08/31/2013 06:42:08 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
Error: (08/31/2013 06:31:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/31/2013 06:27:06 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (09/03/2013 00:13:59 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (09/01/2013 08:28:08 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (09/01/2013 08:04:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht mˆglich sind. Der Dienst wird mˆglicherweise nicht richtig funktionieren.
Error: (09/01/2013 07:56:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht mˆglich sind. Der Dienst wird mˆglicherweise nicht richtig funktionieren.
Error: (09/01/2013 07:48:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht mˆglich sind. Der Dienst wird mˆglicherweise nicht richtig funktionieren.
Error: (09/01/2013 11:08:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (09/01/2013 11:08:56 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht.
Error: (09/01/2013 11:08:22 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (09/01/2013 11:05:42 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abh‰ngig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/01/2013 11:05:42 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abh‰ngig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
Error: (09/03/2013 06:58:55 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
Error: (09/01/2013 08:04:14 PM) (Source: ESENT)(User: )
Description: Catalog Database1204Catalog Database: C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb2441216 (0x0000000000254000)4096 (0x00001000)-1018 (0xfffffc06)[e9963531eb34d7b9][0000025365502b28]595 (0x253)
Error: (09/01/2013 11:17:51 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
Error: (09/01/2013 11:07:51 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/01/2013 10:54:29 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/31/2013 07:05:10 PM) (Source: ESENT)(User: )
Description: Catalog Database1208Catalog Database: C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb2441216 (0x0000000000254000)4096 (0x00001000)-1018 (0xfffffc06)[e9963531eb34d7b9][0000025365502b28]595 (0x253)
Error: (08/31/2013 07:00:39 PM) (Source: ESENT)(User: )
Description: Catalog Database1208Catalog Database: C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb2441216 (0x0000000000254000)4096 (0x00001000)-1018 (0xfffffc06)[e9963531eb34d7b9][0000025365502b28]595 (0x253)
Error: (08/31/2013 06:42:08 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
Error: (08/31/2013 06:31:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/31/2013 06:27:06 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
=========================== Installed Programs ============================
???? ??? Windows Live (Version: 15.4.3502.0922)
???? Windows Live (Version: 15.4.3502.0922)
?????? ??????? ?? Windows Live (Version: 15.4.3502.0922)
???????? ?????????? Windows Live (Version: 15.4.3502.0922)
?????????? Windows Live (Version: 15.4.3502.0922)
??????????? ?? Windows Live (Version: 15.4.3502.0922)
32 Bit HP CIO Components Installer (Version: 6.1.1)
4500_Help (Version: 1.00.0000)
7-Zip 9.20 (Version: 9.20.00.0)
Adobe AIR (Version: 2.7.1.19610)
Adobe Community Help (Version: 3.2.1)
Adobe Community Help (Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Photoshop Elements 9 (Version: 9.0)
Adobe Reader X (10.1.7) MUI (Version: 10.1.7)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Avira Free Antivirus (Version: 13.0.0.4052)
Bonjour (Version: 3.0.0.10)
bpd_scan (Version: 3.00.0000)
BPDSoftware (Version: 50.0.165.000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 130.0.331.000)
Bundled software uninstaller
Cockatrice
Cyberduck 4.2.1 (9350) (Version: 4.2.1 (9350))
D3DX10 (Version: 15.4.2368.0902)
Dropbox (Version: 2.0.22)
Elements 9 Organizer (Version: 9.0)
Elements STI Installer (Version: 1.0)
eReg (Version: 1.20.138.34)
Evernote v. 4.5.1 (Version: 4.5.1.5451)
Fotogalerija Windows Live (Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922)
GalerÌa fotogr·fica de Windows Live (Version: 15.4.3502.0922)
Galeria fotogr‡fica del Windows Live (Version: 15.4.3502.0922)
Galeria fotografii uslugi Windows Live (Version: 15.4.3502.0922)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Galerie foto Windows Live (Version: 15.4.3502.0922)
HP Officejet J4500 Series (Version: 13.0)
iCloud (Version: 2.1.2.8)
Identity Card (Version: 1.00.3501)
iFunbox (v2.6.2375.747), iFunbox DevTeam (Version: v2.6.2375.747)
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.8.1065)
Intel(R) Rapid Storage Technology (Version: 10.1.0.1008)
iTunes (Version: 11.0.4.4)
J4500 (Version: 50.0.165.000)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
JDownloader 0.9 (Version: 0.9)
Joboshare iPhone iBooks Transfer (Version: 3.4.5.1204)
Junk Mail filter update (Version: 15.4.3502.0922)
Launch Manager (Version: 5.1.7)
Logitech SetPoint 6.32 (Version: 6.32.20)
Lyrmix
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
McAfee Security Scan Plus (Version: 3.0.318.3)
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (Version: 14.0.5128.5002)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
mkv2vob (Version: 2.4.9)
Mozilla Firefox 15.0.1 (x86 de) (Version: 15.0.1)
Mozilla Maintenance Service (Version: 15.0.1)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nur Entfernen der CopyTrans Suite mˆglich (Version: 2.37)
Packard Bell Power Management (Version: 6.00.3008)
Packard Bell Recovery Management (Version: 5.00.3504)
Packard Bell ScreenSaver (Version: 1.1.0124.2011)
Packard Bell Updater (Version: 1.02.3500)
Poczta uslugi Windows Live (Version: 15.4.3502.0922)
Podstawowe programy Windows Live (Version: 15.4.3502.0922)
Poöta Windows Live (Version: 15.4.3502.0922)
ProductContext (Version: 50.0.165.000)
QuickTime (Version: 7.74.80.86)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (Version: 7.49.927.2011)
Realtek High Definition Audio Driver (Version: 6.0.1.6374)
Realtek PCIE Card Reader (Version: 6.1.7601.83)
S?????? f?t???af??? t?? Windows Live (Version: 15.4.3502.0922)
Scan (Version: 13.0.0.0)
Synaptics Pointing Device Driver (Version: 15.1.18.0)
Toolbox (Version: 130.0.648.000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Video Web Camera (Version: 1.5.2108.00)
VLC media player 2.0.8 (Version: 2.0.8)
WebReg (Version: 130.0.132.017)
Windows Live ??? (Version: 15.4.3502.0922)
Windows Live ???? (Version: 15.4.3502.0922)
Windows Live Argazki Galeria (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live FotogalÈria (Version: 15.4.3502.0922)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live Fotogalleri (Version: 15.4.3502.0922)
Windows Live Fotograf Galerisi (Version: 15.4.3502.0922)
Windows Live FotÛt·r (Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (Version: 15.4.3502.0922)
Windows Live Galerija fotografija (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Temel ParÁalar (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Liven asennustyˆkalu (Version: 15.4.3502.0922)
Windows Liven s‰hkˆposti (Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (Version: 15.4.3502.0922)
========================= Memory info: ===================================
Percentage of memory in use: 70%
Total physical RAM: 1012.3 MB
Available physical RAM: 301.79 MB
Total Pagefile: 2036.3 MB
Available Pagefile: 642.21 MB
Total Virtual: 2047.88 MB
Available Virtual: 1939.5 MB
========================= Partitions: =====================================
1 Drive c: (Packard Bell) (Fixed) (Total:284.99 GB) (Free:170.36 GB) NTFS
2 Drive d: () (Removable) (Total:3.92 GB) (Free:1.81 GB) FAT32
========================= Users: ========================================
Benutzerkonten fÅr \\JENNY-PC
Administrator Gast Jenny
Der Befehl wurde erfolgreich ausgefÅhrt.
========================= Minidump Files ==================================
No minidump file found
**** End of log ****
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 03
Ran by Jenny (administrator) on JENNY-PC on 03-09-2013 18:59:37
Running from C:\Users\Jenny\Dropbox\Dokumente
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Farbar) C:\Users\Jenny\Dropbox\Dokumente\FRST-1.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GfxServiceInstall] - C:\Windows\system32\GfxCUIServiceInstall.vbs [131 2011-12-30] ()
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10082920 2011-05-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [715368 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1387288 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Policies\Explorer: [NoDrives] 0
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files\Packard Bell\Screensaver\run_Packard Bell.exe [ 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files\Packard Bell\Screensaver\run_Packard Bell.exe [ 2010-07-29] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lyrmix - {115b65d1-cd23-4411-8d8c-f8967d4f553c} - C:\Program Files\Lyrmix\131.dll (Lyrmix)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default
FF user.js: detected! => C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{ef7f760f-6a65-4dd9-8946-2f7e24e00c28}] C:\Program Files\Lyrmix\131.xpi
FF Extension: No Name - C:\Program Files\Lyrmix\131.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Programme\Mozilla Firefox\firefox.exe
========================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor9.0; c:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408 2010-09-30] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-08-31] (Avira Operations GmbH & Co. KG)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30360 2011-09-02] (Logitech, Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-05-29] (Malwarebytes Corporation)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254056 2011-05-30] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-31] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R3 catchme; \??\C:\Users\Jenny\AppData\Local\Temp\catchme.sys [x]
U3 mbr; \??\C:\ComboFix\mbr.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-03 18:58 - 2013-09-03 18:44 - 00760937 _____ (Farbar) C:\Users\Jenny\Desktop\MiniToolBox.exe
2013-09-03 18:58 - 2013-09-03 18:44 - 00358571 _____ (Farbar) C:\Users\Jenny\Desktop\FSS.exe
2013-09-03 15:37 - 2013-09-03 15:37 - 95587704 _____ C:\Windows\system32\Ꮽ（k
2013-09-02 08:42 - 2013-09-02 08:42 - 00014420 _____ C:\Users\Jenny\Desktop\combofix2.txt
2013-09-01 20:11 - 2013-09-01 20:11 - 00014418 _____ C:\ComboFix.txt
2013-08-31 23:21 - 2013-09-02 15:37 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-31 19:16 - 2013-08-31 19:16 - 00017182 _____ C:\Users\Jenny\Desktop\combofix.txt
2013-08-31 17:47 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-31 17:47 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-31 17:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-31 17:45 - 2013-09-01 20:11 - 00000000 ____D C:\Qoobox
2013-08-31 17:44 - 2013-09-01 19:43 - 05115930 ____R (Swearware) C:\Users\Jenny\Desktop\ComboFix.exe
2013-08-31 17:44 - 2013-08-31 19:04 - 00000000 ____D C:\Windows\erdnt
2013-08-31 17:22 - 2013-08-31 17:23 - 00007612 _____ C:\Users\Jenny\Desktop\Ereignisse.txt.txt
2013-08-31 17:21 - 2013-08-31 17:21 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Avira
2013-08-31 17:16 - 2013-08-31 17:16 - 00000000 ____D C:\ProgramData\APN
2013-08-31 17:14 - 2013-09-02 15:37 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-31 17:14 - 2013-09-02 15:37 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-31 17:14 - 2013-08-31 17:12 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-31 17:14 - 2013-08-31 17:12 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-08-31 17:13 - 2013-08-31 17:14 - 00000000 ____D C:\ProgramData\Avira
2013-08-31 17:13 - 2013-08-31 17:13 - 00000000 ____D C:\Program Files\Avira
2013-08-31 15:48 - 2013-08-31 15:48 - 00000000 ____D C:\FRST
2013-08-31 15:44 - 2013-08-31 15:44 - 00000000 _____ C:\Users\Jenny\defogger_reenable
2013-08-30 13:04 - 2013-08-30 13:04 - 94748418 _____ C:\Windows\system32\鞢皏Y
2013-08-29 21:17 - 2013-08-29 21:17 - 94663095 _____ C:\Windows\system32\뀁�]
2013-08-29 11:41 - 2013-08-29 11:41 - 00000000 ____D C:\Program Files\Lyrmix
2013-08-28 21:19 - 2013-08-28 21:19 - 101009872 _____ C:\Windows\system32\皵㧘b
2013-08-28 15:07 - 2012-07-05 12:36 - 681535488 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e12.avi
2013-08-28 14:51 - 2012-07-05 11:25 - 681766912 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e11.avi
2013-08-28 14:35 - 2012-07-05 10:14 - 681474048 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e10.avi
2013-08-28 14:18 - 2012-07-05 08:59 - 681551872 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e09.avi
2013-08-28 14:03 - 2012-07-05 07:50 - 681525248 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e08.avi
2013-08-25 19:17 - 2013-08-25 19:17 - 100156396 _____ C:\Windows\system32\촙暇Y
2013-08-25 13:45 - 2013-08-16 11:36 - 00000000 ____D C:\Users\Jenny\Downloads\Dan.Brown.-.Inferno.Mp3.Vbr
2013-08-25 11:35 - 2013-08-23 05:41 - 00000000 ____D C:\Users\Jenny\Downloads\DEX.XVID.S07E10.GDR
2013-08-25 09:17 - 2012-02-02 22:35 - 1032504440 _____ C:\Users\Jenny\Downloads\Wag the Dog Wenn der Schwanz mit dem Hund wedelt.HQ.avi
2013-08-21 23:14 - 2013-08-22 13:16 - 99750289 _____ C:\Windows\system32\蓂滄s
2013-08-20 17:16 - 2013-08-20 17:16 - 99562272 _____ C:\Windows\system32\䗢뎫c
2013-08-16 10:10 - 2013-09-03 11:33 - 00000338 _____ C:\Windows\Tasks\Lyrmix Update.job
2013-08-16 03:10 - 2013-08-16 03:19 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 01:28 - 2013-08-16 01:28 - 00000000 ____D C:\Users\Jenny\Downloads\Body.of.Proof.S03E13.Die.letzte.Zeugin.GERMAN.DUBBED.WebHDRiP.XviD-SOF
2013-08-15 12:58 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-15 12:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 12:58 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 12:58 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 12:58 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 23:50 - 2013-08-19 17:47 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\WindSolutions
2013-08-14 23:50 - 2013-08-19 17:15 - 00000000 ____D C:\ProgramData\WindSolutions
2013-08-14 23:50 - 2013-08-14 23:50 - 04279392 _____ (WindSolutions) C:\Users\Jenny\Downloads\Install_CopyTrans_Suite.exe
2013-08-14 23:50 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-08-13 18:28 - 2013-08-13 18:28 - 00000000 ____D C:\Users\Jenny\AppData\Local\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Program Files\Cockatrice
2013-08-13 18:18 - 2013-08-13 18:19 - 13834479 _____ C:\Users\Jenny\Downloads\cockatrice_win32_20130509_git-d462870.exe
2013-08-12 21:06 - 2013-08-12 21:06 - 05102112 _____ C:\Users\Jenny\Downloads\WTH_0186_iOS.ipa
2013-08-12 21:03 - 2013-08-12 21:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\iFunbox_UserCache
2013-08-12 21:03 - 2013-08-12 21:03 - 00000000 ____D C:\Program Files\i-Funbox DevTeam
2013-08-12 21:00 - 2013-08-12 21:01 - 15043804 _____ ( ) C:\Users\Jenny\Downloads\ifunbox_setup.exe
2013-08-12 19:36 - 2013-08-12 19:39 - 00000000 ____D C:\Users\Jenny\AppData\Local\libimobiledevice
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\MSDOS.SYS
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\IO.SYS
2013-08-12 19:09 - 2013-08-12 19:10 - 00137569 _____ C:\Users\Jenny\Downloads\evasi0n-win-1.5.3.zip
2013-08-12 01:57 - 2013-01-13 07:33 - 182403058 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e24.avi
2013-08-12 01:46 - 2013-01-05 16:53 - 182387774 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e23.avi
2013-08-12 01:35 - 2012-12-20 18:49 - 182386178 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e21.avi
2013-08-12 01:27 - 2012-12-29 17:50 - 182348596 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e22.avi
2013-08-12 01:08 - 2012-12-13 22:15 - 182227500 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e20.avi
2013-08-12 00:57 - 2013-08-01 01:05 - 205473198 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e19.avi
2013-08-12 00:45 - 2012-11-29 20:01 - 182464954 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e18.avi
2013-08-12 00:34 - 2012-11-21 23:33 - 182371694 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e17.avi
2013-08-12 00:23 - 2012-11-14 23:56 - 182335634 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e16.avi
2013-08-12 00:12 - 2012-11-07 22:26 - 182292008 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e15.avi
2013-08-12 00:01 - 2013-08-01 00:33 - 191252820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e14.avi
2013-08-11 23:37 - 2012-10-18 01:17 - 182364968 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e12.avi
2013-08-11 23:24 - 2012-10-11 14:33 - 182301702 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e11.avi
2013-08-11 23:11 - 2013-07-29 08:07 - 201620374 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e10.avi
2013-08-11 22:58 - 2012-09-26 23:52 - 182340244 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e09.avi
2013-08-11 22:46 - 2012-09-21 16:59 - 182433820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e08.avi
2013-08-11 22:35 - 2012-09-15 14:46 - 182297378 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e07rp.avi
2013-08-11 22:24 - 2012-09-06 14:41 - 182388466 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e06.avi
2013-08-11 22:13 - 2012-08-30 13:58 - 182319866 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e05.avi
2013-08-11 22:02 - 2012-08-24 13:42 - 182361922 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e04.avi
2013-08-11 21:51 - 2012-08-15 23:57 - 182268884 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e03.avi
2013-08-11 21:40 - 2012-08-09 12:01 - 182424090 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e02.avi
2013-08-11 21:30 - 2012-08-01 21:34 - 181856256 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e01.avi
2013-08-11 13:38 - 2013-08-11 13:38 - 00000000 ____D C:\Users\Jenny\Downloads\Papas 50.ter
2013-08-09 16:37 - 2013-08-09 16:38 - 00000000 ____D C:\ProgramData\VirtualizedApplications
==================== One Month Modified Files and Folders =======
2013-09-03 18:58 - 2010-11-20 23:01 - 01499844 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-03 18:45 - 2013-09-03 18:58 - 03268369 _____ C:\Users\Jenny\Desktop\tweaking.com_windows_repair_aio.zip
2013-09-03 18:44 - 2013-09-03 18:58 - 00760937 _____ (Farbar) C:\Users\Jenny\Desktop\MiniToolBox.exe
2013-09-03 18:44 - 2013-09-03 18:58 - 00358571 _____ (Farbar) C:\Users\Jenny\Desktop\FSS.exe
2013-09-03 18:09 - 2012-09-27 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-03 16:51 - 2009-07-14 06:39 - 00212842 _____ C:\Windows\setupact.log
2013-09-03 15:37 - 2013-09-03 15:37 - 95587704 _____ C:\Windows\system32\Ꮽ（k
2013-09-03 11:33 - 2013-08-16 10:10 - 00000338 _____ C:\Windows\Tasks\Lyrmix Update.job
2013-09-02 15:46 - 2012-02-09 00:43 - 01487475 _____ C:\Windows\WindowsUpdate.log
2013-09-02 15:37 - 2013-08-31 23:21 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-02 15:37 - 2013-08-31 17:14 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-02 15:37 - 2013-08-31 17:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-02 08:42 - 2013-09-02 08:42 - 00014420 _____ C:\Users\Jenny\Desktop\combofix2.txt
2013-09-01 20:48 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-09-01 20:11 - 2013-09-01 20:11 - 00014418 _____ C:\ComboFix.txt
2013-09-01 20:11 - 2013-08-31 17:45 - 00000000 ____D C:\Qoobox
2013-09-01 20:04 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-01 19:43 - 2013-08-31 17:44 - 05115930 ____R (Swearware) C:\Users\Jenny\Desktop\ComboFix.exe
2013-09-01 11:15 - 2009-07-14 06:34 - 00016160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 11:15 - 2009-07-14 06:34 - 00016160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 11:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-01 11:08 - 2012-10-05 19:56 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Dropbox
2013-09-01 11:07 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-01 10:44 - 2010-11-20 23:48 - 00823500 _____ C:\Windows\PFRO.log
2013-09-01 10:24 - 2012-09-30 20:10 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\vlc
2013-09-01 01:42 - 2013-07-14 20:44 - 00000000 ____D C:\Program Files\Google
2013-09-01 01:41 - 2013-07-14 20:43 - 00000000 ____D C:\Users\Jenny\AppData\Local\Google
2013-08-31 19:16 - 2013-08-31 19:16 - 00017182 _____ C:\Users\Jenny\Desktop\combofix.txt
2013-08-31 19:16 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2013-08-31 19:16 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-08-31 19:04 - 2013-08-31 17:44 - 00000000 ____D C:\Windows\erdnt
2013-08-31 17:45 - 2009-07-14 06:53 - 00032634 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-31 17:23 - 2013-08-31 17:22 - 00007612 _____ C:\Users\Jenny\Desktop\Ereignisse.txt.txt
2013-08-31 17:21 - 2013-08-31 17:21 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Avira
2013-08-31 17:16 - 2013-08-31 17:16 - 00000000 ____D C:\ProgramData\APN
2013-08-31 17:14 - 2013-08-31 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-08-31 17:13 - 2013-08-31 17:13 - 00000000 ____D C:\Program Files\Avira
2013-08-31 17:12 - 2013-08-31 17:14 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-31 17:12 - 2013-08-31 17:14 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-08-31 16:58 - 2012-10-05 20:01 - 00000000 ___RD C:\Users\Jenny\Dropbox
2013-08-31 15:48 - 2013-08-31 15:48 - 00000000 ____D C:\FRST
2013-08-31 15:44 - 2013-08-31 15:44 - 00000000 _____ C:\Users\Jenny\defogger_reenable
2013-08-31 15:44 - 2012-09-27 16:59 - 00000000 ____D C:\Users\Jenny
2013-08-31 14:40 - 2012-09-27 21:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-31 08:37 - 2012-11-24 18:32 - 00000000 ____D C:\Users\Jenny\AppData\Local\CrashDumps
2013-08-30 13:04 - 2013-08-30 13:04 - 94748418 _____ C:\Windows\system32\鞢皏Y
2013-08-29 21:17 - 2013-08-29 21:17 - 94663095 _____ C:\Windows\system32\뀁�]
2013-08-29 11:41 - 2013-08-29 11:41 - 00000000 ____D C:\Program Files\Lyrmix
2013-08-28 21:19 - 2013-08-28 21:19 - 101009872 _____ C:\Windows\system32\皵㧘b
2013-08-25 19:17 - 2013-08-25 19:17 - 100156396 _____ C:\Windows\system32\촙暇Y
2013-08-23 05:41 - 2013-08-25 11:35 - 00000000 ____D C:\Users\Jenny\Downloads\DEX.XVID.S07E10.GDR
2013-08-22 13:16 - 2013-08-21 23:14 - 99750289 _____ C:\Windows\system32\蓂滄s
2013-08-21 09:09 - 2012-09-27 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 09:09 - 2011-12-16 14:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 17:16 - 2013-08-20 17:16 - 99562272 _____ C:\Windows\system32\䗢뎫c
2013-08-19 17:47 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\WindSolutions
2013-08-19 17:15 - 2013-08-14 23:50 - 00000000 ____D C:\ProgramData\WindSolutions
2013-08-16 11:36 - 2013-08-25 13:45 - 00000000 ____D C:\Users\Jenny\Downloads\Dan.Brown.-.Inferno.Mp3.Vbr
2013-08-16 04:16 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-16 03:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-16 03:29 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-16 03:19 - 2013-08-16 03:10 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 03:10 - 2012-09-29 09:08 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 01:28 - 2013-08-16 01:28 - 00000000 ____D C:\Users\Jenny\Downloads\Body.of.Proof.S03E13.Die.letzte.Zeugin.GERMAN.DUBBED.WebHDRiP.XviD-SOF
2013-08-14 23:50 - 2013-08-14 23:50 - 04279392 _____ (WindSolutions) C:\Users\Jenny\Downloads\Install_CopyTrans_Suite.exe
2013-08-14 23:50 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-08-14 23:50 - 2012-09-27 17:02 - 00000000 ____D C:\Users\Jenny\AppData\Local\Adobe
2013-08-13 18:28 - 2013-08-13 18:28 - 00000000 ____D C:\Users\Jenny\AppData\Local\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Program Files\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:18 - 13834479 _____ C:\Users\Jenny\Downloads\cockatrice_win32_20130509_git-d462870.exe
2013-08-12 21:19 - 2013-08-12 21:03 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\iFunbox_UserCache
2013-08-12 21:06 - 2013-08-12 21:06 - 05102112 _____ C:\Users\Jenny\Downloads\WTH_0186_iOS.ipa
2013-08-12 21:03 - 2013-08-12 21:03 - 00000000 ____D C:\Program Files\i-Funbox DevTeam
2013-08-12 21:01 - 2013-08-12 21:00 - 15043804 _____ ( ) C:\Users\Jenny\Downloads\ifunbox_setup.exe
2013-08-12 20:10 - 2011-12-16 13:26 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-12 19:39 - 2013-08-12 19:36 - 00000000 ____D C:\Users\Jenny\AppData\Local\libimobiledevice
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\MSDOS.SYS
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\IO.SYS
2013-08-12 19:10 - 2013-08-12 19:09 - 00137569 _____ C:\Users\Jenny\Downloads\evasi0n-win-1.5.3.zip
2013-08-11 20:51 - 2012-09-27 20:56 - 00016400 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2013-08-11 20:51 - 2012-09-27 20:56 - 00001018 _____ C:\Windows\LkmdfCoInst.log
2013-08-11 13:38 - 2013-08-11 13:38 - 00000000 ____D C:\Users\Jenny\Downloads\Papas 50.ter
2013-08-10 13:46 - 2013-07-31 08:50 - 00000000 ____D C:\Program Files\Microsoft Application Virtualization Client
2013-08-09 16:38 - 2013-08-09 16:37 - 00000000 ____D C:\ProgramData\VirtualizedApplications
2013-08-09 16:23 - 2013-07-31 08:53 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\SoftGrid Client
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-01 00:29
==================== End Of Log ============================
|
|
| Themen zu Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2) |
| adobe, antivir, antivirus, avira, bonjour, defender, desktop, device driver, diagnostics, entfernen, farbar, farbar recovery scan tool, firefox, flash player, google, installation, launch, mozilla, officejet, packard bell, plug-in, realtek, registry, rootkit, security, services.exe, software, svchost.exe, system, tr/atraps.gen2, windows |
Linear-Darstellung
