| |
| |||||||
Log-Analyse und Auswertung: winlogon.exe und csrss.exe ---> TrojanerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
30.10.2013, 15:27
| #1 | ||
| /// Winkelfunktion /// TB-Süch-Tiger™   |  winlogon.exe und csrss.exe ---> Trojaner Hallo und  Zitat:
Zitat:
 wie kommst du denn auf sowas? Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
30.10.2013, 16:07
| #2 | ||||
| | winlogon.exe und csrss.exe ---> Trojaner Hallo und danke für die schnelle Antwort.
__________________Zitat:
Zitat:
Zitat:
Zitat:
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013
Ran by Florian (administrator) on FLORIAN-PC on 30-10-2013 16:02:07
Running from C:\Users\Florian\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Egis Technology Inc. ) C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
(Egis Technology Inc. ) C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Egis Technology Inc. ) C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe
(Alcor) C:\windows\WebCam\S6000\S6000Mnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Egis Technology Inc. ) C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2538280 2010-12-22] (Synaptics Incorporated)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9769888 2011-11-30] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [5908928 2011-11-30] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-11-30] (Lenovo)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)
HKLM-x32\...\Run: [S6000Mnt] - C:\windows\SysWOW64\Rundll32.exe S6000Rmv.dll,WinMainRmv /StartStillMnt
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-11-05] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202096 2010-11-05] (Egis Technology Inc.)
HKLM-x32\...\Run: [VitaKeyTSR] - C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe [383344 2010-12-14] (Egis Technology Inc. )
HKLM-x32\...\Run: [PLTSR] - C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe [364400 2010-10-22] (Egis Technology Inc. )
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2010-12-24] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [224352 2010-12-24] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Lsa: [Notification Packages] scecli EgisPwdFilter EgisDSPwdFilter EgisPLPwdFilter
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: EgisPBIE Class - {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} - C:\Program Files (x86)\EgisTec BioExcess\x64\EgisPBIE.dll (Egis Technology Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Class - {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} - C:\Program Files (x86)\EgisTec BioExcess\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\0w4kwj7j.default
FF NetworkProxy: "autoconfig_url", "data:application/x-ns-proxy-autoconfig;base64,ZnVuY3Rpb24gRmluZFByb3h5Rm9yVVJMKHVybCwgaG9zdCkgewogIGlmICgoaG9zdCA9PSAnd3d3LnlvdXR1YmUuY29tJyAmJiB1cmwuaW5kZXhPZigneW91dHViZS5jb20vd2F0Y2g/dj12eXBmU29PNFZSMCZsaXN0PVBMMjIwMEZCMTJBN0Q3M0VBQiZweHRyeT0xJykgIT0gLTEpIHx8IChob3N0LmluZGV4T2YoJ2MueW91dHViZS5jb20nKSAhPSAtMSAmJiB1cmwuaW5kZXhPZignYy55b3V0dWJlLmNvbS92aWRlb3BsYXliYWNrJykgIT0gLTEgJiYgdXJsLmluZGV4T2YoJ2djcj11cycpICE9IC0xKSkKICAgIHJldHVybiAnUFJPWFkgMjA5LjIzOS4xMjAuMTE0OjMxMzEnOwogIHJldHVybiAnRElSRUNUJzsKfQ=="
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.0-git-20120217-1212 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\0w4kwj7j.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}
FF Extension: firebug - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\0w4kwj7j.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: firefox - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\0w4kwj7j.default\Extensions\firefox@gsremote.com.xpi
FF Extension: Adblock Plus - C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\0w4kwj7j.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\EgisTec BioExcess\FFExt
FF Extension: Online Accounts Extension - C:\Program Files (x86)\EgisTec BioExcess\FFExt
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
CHR RestoreOnStartup: "hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [956192 2011-02-15] (Broadcom Corporation.)
R2 EgisTec Service Help; C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe [327024 2010-10-22] (Egis Technology Inc. )
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-07] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-07] ()
S3 PDNMp50; C:\windows\SysWow64\drivers\PDNMp50.sys [28224 2006-11-28] (Printing Communications Assoc., Inc. (PCAUSA))
S3 PDNSp50; C:\windows\SysWow64\drivers\PDNSp50.sys [27072 2006-11-28] (Printing Communications Assoc., Inc. (PCAUSA))
R3 S6000KNT; C:\Windows\System32\Drivers\S6000KNT.sys [3293272 2010-12-23] (Windows (R) Win 7 DDK provider)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
U3 BcmSqlStartupSvc;
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 IAStorDataMgrSvc;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U3 SQLWriter;
U2 Stereo Service;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-30 16:02 - 2013-10-30 16:02 - 00000000 ____D C:\FRST
2013-10-30 16:01 - 2013-10-30 16:01 - 01956614 _____ (Farbar) C:\Users\Florian\Downloads\FRST64.exe
2013-10-30 14:30 - 2013-10-30 14:30 - 00085018 _____ C:\Users\Florian\Desktop\Extras.Txt
2013-10-30 14:27 - 2013-10-30 14:27 - 00084470 _____ C:\Users\Florian\Desktop\OTL.Txt
2013-10-30 14:22 - 2013-10-30 14:22 - 00085298 _____ C:\Users\Florian\Downloads\Extras.Txt
2013-10-30 14:21 - 2013-10-30 14:21 - 00084632 _____ C:\Users\Florian\Downloads\OTL.Txt
2013-10-30 14:12 - 2013-10-30 14:12 - 00602112 _____ (OldTimer Tools) C:\Users\Florian\Downloads\OTL.exe
2013-10-30 11:25 - 2013-10-30 11:25 - 00565763 _____ C:\Users\Florian\Downloads\Decursive-2.3_Beta_3.zip
2013-10-30 11:24 - 2013-10-30 11:24 - 00064015 _____ C:\Users\Florian\Downloads\SellFish.rar
2013-10-30 11:23 - 2013-10-30 11:23 - 00027843 _____ C:\Users\Florian\Downloads\EqCom.rar
2013-10-30 11:22 - 2013-10-30 11:22 - 00704383 _____ C:\Users\Florian\Downloads\AckisRecipeList.rar
2013-10-30 11:22 - 2013-10-30 11:22 - 00054556 _____ C:\Users\Florian\Downloads\Bagnon.zip
2013-10-28 21:49 - 2013-10-28 21:49 - 00442190 _____ C:\Users\Florian\Downloads\Gatherer.rar
2013-10-28 21:49 - 2013-10-28 21:49 - 00333991 _____ C:\Users\Florian\Downloads\Omen.rar
2013-10-28 21:48 - 2013-10-28 21:48 - 02591447 _____ C:\Users\Florian\Downloads\Carbonite.zip
2013-10-28 21:48 - 2013-10-28 21:48 - 00470102 _____ C:\Users\Florian\Downloads\DeadlyBossMods.rar
2013-10-28 21:47 - 2013-10-28 21:47 - 12169525 _____ C:\Users\Florian\Downloads\AtlasCollection.rar
2013-10-28 21:47 - 2013-10-28 21:47 - 00291036 _____ C:\Users\Florian\Downloads\cartographer3-v0.8.zip
2013-10-28 21:46 - 2013-10-28 21:46 - 00576991 _____ C:\Users\Florian\Downloads\Altoholic.rar
2013-10-28 20:47 - 2013-10-28 20:48 - 00000000 ____D C:\World of Warcraft - BC
2013-10-28 20:44 - 2013-10-28 20:46 - 559673528 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part10.rar
2013-10-28 20:37 - 2013-10-28 20:41 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part09.rar
2013-10-28 20:30 - 2013-10-28 20:34 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part07.rar
2013-10-28 20:19 - 2013-10-28 20:26 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part08.rar
2013-10-28 20:10 - 2013-10-28 20:15 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part06.rar
2013-10-28 20:02 - 2013-10-28 20:06 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part05.rar
2013-10-28 19:55 - 2013-10-28 19:59 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part04.rar
2013-10-28 19:45 - 2013-10-28 19:52 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part03.rar
2013-10-28 19:33 - 2013-10-28 19:44 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part02.rar
2013-10-28 19:24 - 2013-10-28 19:30 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part01.rar
2013-10-28 19:24 - 2013-10-28 19:24 - 00010784 _____ C:\Users\Florian\Downloads\b2b.torrent.zip
2013-10-28 16:43 - 2013-10-28 16:43 - 00000000 ____D C:\Users\Florian\AppData\Local\Blizzard
2013-10-28 16:35 - 2013-10-28 16:43 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-10-28 16:35 - 2013-10-28 16:35 - 00000900 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-10-28 16:34 - 2013-10-28 16:34 - 00000000 ____D C:\Users\Florian\AppData\Local\Blizzard Entertainment
2013-10-28 16:33 - 2013-10-29 09:36 - 00000000 ____D C:\Users\Florian\AppData\Local\Battle.net
2013-10-28 16:33 - 2013-10-28 17:17 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Battle.net
2013-10-28 16:33 - 2013-10-28 16:33 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-10-27 16:12 - 2013-10-27 16:13 - 05906904 _____ (Blizzard Entertainment) C:\Users\Florian\Downloads\Hearthstone-Beta-Setup-deDE.exe
2013-10-27 15:48 - 2013-10-27 15:48 - 00000000 ____D C:\Users\Florian\Desktop\Wingolf
2013-10-22 18:40 - 2013-10-22 18:40 - 00002054 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-22 18:40 - 2013-06-09 20:59 - 00216064 _____ C:\windows\SysWOW64\gcapi_dll.dll
2013-10-17 14:43 - 2013-10-17 14:42 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-10-17 14:43 - 2013-10-17 14:42 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-10-17 14:43 - 2013-10-17 14:42 - 00174504 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-10-17 14:43 - 2013-10-17 14:42 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-17 14:42 - 2013-10-17 14:42 - 00915368 _____ (Oracle Corporation) C:\Users\Florian\Downloads\jxpiinstall(6).exe
2013-10-17 14:42 - 2013-10-17 14:42 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-17 14:37 - 2013-10-17 14:37 - 00915368 _____ (Oracle Corporation) C:\Users\Florian\Downloads\jxpiinstall(5).exe
2013-10-17 14:32 - 2013-10-17 14:32 - 30694824 _____ (Oracle Corporation) C:\Users\Florian\Downloads\jre-7u45-windows-x64.exe
2013-10-15 15:01 - 2013-10-15 15:01 - 00001733 _____ C:\Users\Florian\Desktop\swkotor - Verknüpfung.lnk
2013-10-08 15:24 - 2013-10-08 15:24 - 00000000 ____D C:\Users\Florian\AppData\Local\LogMeIn
2013-10-08 15:24 - 2013-10-08 15:24 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-05 15:32 - 2013-10-05 15:32 - 00099763 _____ C:\Users\Florian\Downloads\zum_mittelpunkt_der_erde.zip
2013-10-05 11:36 - 2013-10-05 13:11 - 00000000 ____D C:\Users\Florian\Documents\Baldur's Gate - Enhanced Edition
2013-10-05 11:36 - 2013-10-05 11:36 - 00466456 _____ (Creative Labs) C:\windows\system32\wrap_oal.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00444952 _____ (Creative Labs) C:\windows\SysWOW64\wrap_oal.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\windows\system32\OpenAL32.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\windows\SysWOW64\OpenAL32.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-10-05 11:10 - 2013-10-05 11:10 - 00000212 _____ C:\Users\Florian\Desktop\Baldur's Gate Enhanced Edition.url
2013-10-04 13:59 - 2013-10-04 13:59 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-01 15:29 - 2013-10-02 18:00 - 00033792 _____ C:\Users\Florian\Downloads\to-do Liste.xls
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2013-10-30 16:02 - 2013-10-30 16:02 - 00000000 ____D C:\FRST
2013-10-30 16:01 - 2013-10-30 16:01 - 01956614 _____ (Farbar) C:\Users\Florian\Downloads\FRST64.exe
2013-10-30 15:50 - 2013-09-25 07:35 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-30 15:50 - 2011-11-30 05:48 - 01108863 _____ C:\windows\WindowsUpdate.log
2013-10-30 15:28 - 2011-11-30 06:40 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-30 14:30 - 2013-10-30 14:30 - 00085018 _____ C:\Users\Florian\Desktop\Extras.Txt
2013-10-30 14:27 - 2013-10-30 14:27 - 00084470 _____ C:\Users\Florian\Desktop\OTL.Txt
2013-10-30 14:22 - 2013-10-30 14:22 - 00085298 _____ C:\Users\Florian\Downloads\Extras.Txt
2013-10-30 14:21 - 2013-10-30 14:21 - 00084632 _____ C:\Users\Florian\Downloads\OTL.Txt
2013-10-30 14:12 - 2013-10-30 14:12 - 00602112 _____ (OldTimer Tools) C:\Users\Florian\Downloads\OTL.exe
2013-10-30 11:25 - 2013-10-30 11:25 - 00565763 _____ C:\Users\Florian\Downloads\Decursive-2.3_Beta_3.zip
2013-10-30 11:24 - 2013-10-30 11:24 - 00064015 _____ C:\Users\Florian\Downloads\SellFish.rar
2013-10-30 11:23 - 2013-10-30 11:23 - 00027843 _____ C:\Users\Florian\Downloads\EqCom.rar
2013-10-30 11:22 - 2013-10-30 11:22 - 00704383 _____ C:\Users\Florian\Downloads\AckisRecipeList.rar
2013-10-30 11:22 - 2013-10-30 11:22 - 00054556 _____ C:\Users\Florian\Downloads\Bagnon.zip
2013-10-30 09:43 - 2012-01-08 15:46 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Skype
2013-10-30 08:28 - 2009-07-14 05:45 - 00021072 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-30 08:28 - 2009-07-14 05:45 - 00021072 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-30 08:26 - 2011-11-18 20:55 - 00654166 _____ C:\windows\system32\perfh007.dat
2013-10-30 08:26 - 2011-11-18 20:55 - 00130006 _____ C:\windows\system32\perfc007.dat
2013-10-30 08:26 - 2009-07-14 06:13 - 01498506 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-30 08:22 - 2012-01-09 18:07 - 00000000 ___RD C:\Users\Florian\Dropbox
2013-10-30 08:22 - 2012-01-09 18:05 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox
2013-10-30 08:21 - 2013-04-08 20:13 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-30 08:20 - 2012-01-11 20:17 - 00000000 ____D C:\Users\Florian\AppData\Local\LogMeIn Hamachi
2013-10-30 08:20 - 2011-11-30 06:45 - 00147743 _____ C:\windows\system32\fastboot.set
2013-10-30 08:20 - 2011-11-30 06:40 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-30 08:19 - 2013-06-28 22:27 - 00014078 _____ C:\windows\setupact.log
2013-10-30 08:19 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-29 10:09 - 2012-06-21 17:51 - 00007598 _____ C:\Users\Florian\AppData\Local\Resmon.ResmonCfg
2013-10-29 09:36 - 2013-10-28 16:33 - 00000000 ____D C:\Users\Florian\AppData\Local\Battle.net
2013-10-28 21:49 - 2013-10-28 21:49 - 00442190 _____ C:\Users\Florian\Downloads\Gatherer.rar
2013-10-28 21:49 - 2013-10-28 21:49 - 00333991 _____ C:\Users\Florian\Downloads\Omen.rar
2013-10-28 21:48 - 2013-10-28 21:48 - 02591447 _____ C:\Users\Florian\Downloads\Carbonite.zip
2013-10-28 21:48 - 2013-10-28 21:48 - 00470102 _____ C:\Users\Florian\Downloads\DeadlyBossMods.rar
2013-10-28 21:47 - 2013-10-28 21:47 - 12169525 _____ C:\Users\Florian\Downloads\AtlasCollection.rar
2013-10-28 21:47 - 2013-10-28 21:47 - 00291036 _____ C:\Users\Florian\Downloads\cartographer3-v0.8.zip
2013-10-28 21:46 - 2013-10-28 21:46 - 00576991 _____ C:\Users\Florian\Downloads\Altoholic.rar
2013-10-28 20:58 - 2012-07-22 21:43 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-28 20:48 - 2013-10-28 20:47 - 00000000 ____D C:\World of Warcraft - BC
2013-10-28 20:46 - 2013-10-28 20:44 - 559673528 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part10.rar
2013-10-28 20:41 - 2013-10-28 20:37 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part09.rar
2013-10-28 20:34 - 2013-10-28 20:30 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part07.rar
2013-10-28 20:26 - 2013-10-28 20:19 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part08.rar
2013-10-28 20:15 - 2013-10-28 20:10 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part06.rar
2013-10-28 20:06 - 2013-10-28 20:02 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part05.rar
2013-10-28 19:59 - 2013-10-28 19:55 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part04.rar
2013-10-28 19:52 - 2013-10-28 19:45 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part03.rar
2013-10-28 19:44 - 2013-10-28 19:33 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part02.rar
2013-10-28 19:42 - 2012-01-10 15:59 - 00000000 ____D C:\Users\Florian\AppData\Roaming\TS3Client
2013-10-28 19:30 - 2013-10-28 19:24 - 891289600 _____ C:\Users\Florian\Downloads\World_of_Warcraft_BC-B2B.part01.rar
2013-10-28 19:24 - 2013-10-28 19:24 - 00010784 _____ C:\Users\Florian\Downloads\b2b.torrent.zip
2013-10-28 19:21 - 2012-02-27 12:02 - 00000000 ____D C:\World of Warcraft - WOTLK
2013-10-28 17:17 - 2013-10-28 16:33 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Battle.net
2013-10-28 16:43 - 2013-10-28 16:43 - 00000000 ____D C:\Users\Florian\AppData\Local\Blizzard
2013-10-28 16:43 - 2013-10-28 16:35 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2013-10-28 16:35 - 2013-10-28 16:35 - 00000900 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2013-10-28 16:34 - 2013-10-28 16:34 - 00000000 ____D C:\Users\Florian\AppData\Local\Blizzard Entertainment
2013-10-28 16:33 - 2013-10-28 16:33 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-10-27 16:25 - 2012-03-04 22:06 - 00000000 ____D C:\Users\Florian\AppData\Roaming\vlc
2013-10-27 16:13 - 2013-10-27 16:12 - 05906904 _____ (Blizzard Entertainment) C:\Users\Florian\Downloads\Hearthstone-Beta-Setup-deDE.exe
2013-10-27 15:48 - 2013-10-27 15:48 - 00000000 ____D C:\Users\Florian\Desktop\Wingolf
2013-10-26 11:58 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-10-26 11:57 - 2013-02-06 19:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-26 11:57 - 2012-01-08 15:46 - 00000000 ____D C:\ProgramData\Skype
2013-10-25 12:21 - 2013-01-18 15:49 - 00000000 ____D C:\Users\Florian\AppData\Local\PokerStars.NET
2013-10-24 16:00 - 2012-01-17 17:09 - 00000000 ____D C:\Users\Florian\Desktop\BAII
2013-10-22 18:40 - 2013-10-22 18:40 - 00002054 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-10-21 07:20 - 2013-02-24 18:46 - 00000000 ____D C:\Users\Florian\Desktop\Master Clausthal
2013-10-17 14:43 - 2013-09-17 14:07 - 00000000 ____D C:\ProgramData\Oracle
2013-10-17 14:42 - 2013-10-17 14:43 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-10-17 14:42 - 2013-10-17 14:43 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-10-17 14:42 - 2013-10-17 14:43 - 00174504 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-10-17 14:42 - 2013-10-17 14:43 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-17 14:42 - 2013-10-17 14:42 - 00915368 _____ (Oracle Corporation) C:\Users\Florian\Downloads\jxpiinstall(6).exe
2013-10-17 14:42 - 2013-10-17 14:42 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-17 14:37 - 2013-10-17 14:37 - 00915368 _____ (Oracle Corporation) C:\Users\Florian\Downloads\jxpiinstall(5).exe
2013-10-17 14:32 - 2013-10-17 14:32 - 30694824 _____ (Oracle Corporation) C:\Users\Florian\Downloads\jre-7u45-windows-x64.exe
2013-10-15 15:01 - 2013-10-15 15:01 - 00001733 _____ C:\Users\Florian\Desktop\swkotor - Verknüpfung.lnk
2013-10-11 23:41 - 2009-07-14 06:08 - 00032632 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-10-10 23:23 - 2011-11-30 06:40 - 00004120 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-10 23:23 - 2011-11-30 06:40 - 00003868 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-09 22:12 - 2013-09-25 07:35 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 22:12 - 2012-08-30 07:36 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 22:12 - 2011-12-22 16:08 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 18:00 - 2013-04-08 22:28 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-10-08 15:24 - 2013-10-08 15:24 - 00000000 ____D C:\Users\Florian\AppData\Local\LogMeIn
2013-10-08 15:24 - 2013-10-08 15:24 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-05 15:32 - 2013-10-05 15:32 - 00099763 _____ C:\Users\Florian\Downloads\zum_mittelpunkt_der_erde.zip
2013-10-05 13:11 - 2013-10-05 11:36 - 00000000 ____D C:\Users\Florian\Documents\Baldur's Gate - Enhanced Edition
2013-10-05 11:36 - 2013-10-05 11:36 - 00466456 _____ (Creative Labs) C:\windows\system32\wrap_oal.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00444952 _____ (Creative Labs) C:\windows\SysWOW64\wrap_oal.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\windows\system32\OpenAL32.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\windows\SysWOW64\OpenAL32.dll
2013-10-05 11:36 - 2013-10-05 11:36 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-10-05 11:10 - 2013-10-05 11:10 - 00000212 _____ C:\Users\Florian\Desktop\Baldur's Gate Enhanced Edition.url
2013-10-04 13:59 - 2013-10-04 13:59 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 18:00 - 2013-10-01 15:29 - 00033792 _____ C:\Users\Florian\Downloads\to-do Liste.xls
2013-10-02 07:58 - 2012-04-26 20:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-01 14:09 - 2011-12-22 16:04 - 00000000 ____D C:\Users\Florian\AppData\Local\Mozilla
2013-10-01 12:54 - 2013-05-02 09:42 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-10-01 12:54 - 2013-03-30 11:32 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-10-01 12:54 - 2013-03-30 11:32 - 00105856 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-10-01 12:54 - 2013-03-30 11:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
Some content of TEMP:
====================
C:\Users\Florian\AppData\Local\Temp\avgnt.exe
C:\Users\Florian\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Florian\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Florian\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Florian\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-22 18:23
==================== End Of Log ============================
Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2013
Ran by Florian at 2013-10-30 16:02:49
Running from C:\Users\Florian\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Alice-Installationsdateien entfernen (x32)
ANSTOSS 3 (x32)
Atheros Client Installation Program (x32 Version: 7.0)
Avira Free Antivirus (x32 Version: 14.0.0.383)
Baldur's Gate: Enhanced Edition (x32)
Battle.net (x32)
BioExcess (Version: 7.0.67.0)
BioExcess (x32 Version: 7.0.67.0)
CCleaner (Version: 4.02)
CyberLink YouCam (x32 Version: 3.1.3623)
D3DX10 (x32 Version: 15.4.2368.0902)
Diablo III (x32)
Dropbox (HKCU Version: 2.0.22)
EgisTec ES603 WDM Driver (x32 Version: 3.0.10.4)
Energy Management (x32 Version: 6.0.2.1)
Forte Free (x32)
Foxit Reader (x32 Version: 6.0.6.722)
Free YouTube Download version 3.2.1.320 (x32 Version: 3.2.1.320)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (x32 Version: 30.0.1599.101)
Google Update Helper (x32 Version: 1.3.21.165)
Hearthstone (x32)
Heroes of Might & Magic V: Hammers of Fate (x32)
Heroes of Might and Magic V - Tribes of the East (x32)
Heroes of Might and Magic V (x32)
Heroes of Might and Magic® III Complete (x32)
Hotline Miami (x32 Version: 2.0.0.4)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2342)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.5.1001)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.3.0.8000)
Lenovo EasyCamera (x32 Version: 2.16.23.3)
Lenovo EE Boot Optimizer (Version: 0.0.1.6)
Lenovo OneKey Recovery (Version: 7.0.1628)
Lenovo OneKey Recovery (x32 Version: 7.0.1628)
Lenovo Security Suite (x32 Version: 2.0.11.0)
LogMeIn Hamachi (x32 Version: 2.2.0.58)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (x32 Version: 4.1.10329.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Oblivion (x32 Version: 1.2.0416)
OpenAL (x32)
Path of Exile (x32 Version: 0.10.0.22571)
PokerStars.net (x32)
Port Locker (Version: 1.0.5.24)
Port Locker (x32 Version: 1.0.5.24)
Power2Go (x32 Version: 5.6.0.7303)
Project64 1.6 (x32 Version: 1.6)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.21.531.2010)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6282)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10008)
SAMSUNG Mobile Composite Device Software
SAMSUNG Mobile Modem Driver Set
Samsung Mobile phone USB driver Drive Software
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Samsung PC Studio 3 (x32 Version: 3.0.0.80601)
Samsung PC Studio 3 (x32 Version: 3.2.2.80601)
Samsung PC Studio 3 USB Driver Installer (x32 Version: 3.2.0.70701)
Scrolls (x32 Version: 1.0.0)
Sid Meier's Civilization V (x32)
Skype™ 6.9 (x32 Version: 6.9.106)
SopCast 3.4.8 (x32 Version: 3.4.8)
Star Wars: Knights of the Old Republic (x32)
Steam (x32 Version: 1.0.0.0)
Synaptics Pointing Device Driver (Version: 15.2.7.0)
Team Fortress 2 (x32)
TeamSpeak 3 Client (x32 Version: 3.0.11.1)
Torchlight (x32 Version: 1.0.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VLC media player 2.1.0-git-20120217-1212 (Version: 2.1.0-git-20120217-1212)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows-Treiberpaket - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1) (Version: 12/02/2010 6.1.0.1)
WinRAR 4.01 (64-Bit) (Version: 4.01.0)
==================== Restore Points =========================
01-10-2013 15:18:27 Geplanter Prüfpunkt
08-10-2013 18:02:07 Geplanter Prüfpunkt
16-10-2013 02:45:52 Geplanter Prüfpunkt
17-10-2013 13:32:49 Installed Java 7 Update 45 (64-bit)
17-10-2013 13:39:09 Removed Java 7 Update 45 (64-bit)
17-10-2013 13:39:47 Removed Java 7 Update 40
17-10-2013 13:42:38 Installed Java 7 Update 45
23-10-2013 13:22:55 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {068BF1C8-1FFD-47AA-966F-C60458A08533} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2010-12-24] (CyberLink)
Task: {077D55F3-EB52-47BD-B634-2005D115A09C} - System32\Tasks\{D4FC2DC0-2976-437D-AE95-88742D870F34} => C:\Program Files (x86)\icytower1.5\icytower15.exe
Task: {22E856F1-B77D-461F-A09F-64EA62B131FC} - System32\Tasks\{06D53B64-F38C-43E0-A1A2-2313226E1009} => C:\Users\Florian\Desktop\Worms\wwp.exe
Task: {266C288B-164B-411F-A6B6-36070BF95125} - System32\Tasks\{D952DC26-F51E-44D3-9C98-0E2F78B62E66} => C:\Program Files (x86)\EA GAMES\Need for Speed Underground 2\speed2.exe
Task: {53DC0D26-E2F5-4F1B-8F06-D2342D90F47C} - System32\Tasks\{4B9A3FCE-3420-4FFA-B67F-A582E1CC6626} => C:\Program Files (x86)\ANSTOSS 3\anstoss3.exe [2000-02-16] ()
Task: {59708AA1-94E4-4122-8031-9EF6A1FBEE37} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {8871A7B7-B3E4-467C-8945-E2E137CF565D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {C7A087E5-D500-444E-85C3-100D29C0B527} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-30] (Google Inc.)
Task: {DF0A9FC3-55E3-4D27-B98E-1BDD88F46FD9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-30] (Google Inc.)
Task: {E370484B-D296-4989-8ADC-69F484D23349} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-01-14 16:14 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2008-12-20 04:20 - 2011-11-30 06:43 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2008-12-20 04:20 - 2011-11-30 06:43 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2011-04-15 06:28 - 2011-03-25 10:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-03-17 08:26 - 2013-03-17 08:20 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-10-01 10:38 - 2013-10-01 10:38 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Faulty Device Manager Devices =============
Name: Bluetooth-Gerät (PAN)
Description: Bluetooth-Gerät (PAN)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthPan
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/30/2013 01:23:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:23:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:23:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:23:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:23:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:11:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:11:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:11:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:11:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error: (10/30/2013 01:11:21 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
System errors:
=============
Error: (10/30/2013 01:23:41 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MARTIN-FRINGSPC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{6658424C-49DE-4DC5-836E-BB2D06A32342}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (10/30/2013 08:21:46 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
StarOpen
Error: (10/30/2013 08:21:29 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%2
Error: (10/30/2013 08:19:12 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (10/30/2013 00:48:30 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%2
Error: (10/30/2013 00:48:18 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
StarOpen
Error: (10/30/2013 00:46:54 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (10/29/2013 05:11:37 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MARTIN-FRINGSPC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{6658424C-49DE-4DC5-836E-BB2D06A32342}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (10/29/2013 00:46:19 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MARTIN-FRINGSPC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{6658424C-49DE-4DC5-836E-BB2D06A32342}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (10/29/2013 10:18:27 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
StarOpen
Microsoft Office Sessions:
=========================
Error: (05/03/2013 02:32:00 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2478 seconds with 120 seconds of active time. This session ended with a crash.
Error: (07/18/2012 07:06:46 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1525 seconds with 1500 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 43%
Total physical RAM: 4010.14 MB
Available physical RAM: 2270.69 MB
Total Pagefile: 16296.33 MB
Available Pagefile: 14371.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:421.81 GB) (Free:255.6 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:20.6 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 544681EF)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=422 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=29 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=15 GB) - (Type=12)
==================== End Of Log ============================
Flooschi |
|
| Themen zu winlogon.exe und csrss.exe ---> Trojaner |
| antivir, application/pdf:, avira, bho, browser, desktop, error, firefox, flash player, help, helper, home, homepage, install.exe, logfile, mozilla, object, plug-in, pmmupdate.exe, popup, realtek, registry, security, software, svchost.exe, taskmanager, teamspeak, trojaner, windows |
Hybrid-Darstellung
