| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win Vista 32bit - Extrem langsam, Verdacht auf Adware/Scareware/VirenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
30.10.2013, 22:56
| #1 |
| |  Win Vista 32bit - Extrem langsam, Verdacht auf Adware/Scareware/Viren Schönen guten Abend! Ich habe von einer Freundin einen Rechner bekommen, der "ein wenig langsam sei" und so "lange zum Starten" braucht. Zuerst habe alle Programme, die ich nicht zuordnen konnte, gegooglet. Bei denen, die als Scareware, Adware oder ähnlich bezeichnet wurden, habe ich versucht, diese zu deinstallieren. Die fünf verschiedenen (aber extrem veralteten) Java-Versionen habe ich ebenfalls gelöscht, ebenso diverse Browser-Erweiterungen. Allerdings finden sich immer noch viele Einträge in msconfig -> Dienste (z.B. von AOL und Ask) und der Rechner ist auch nicht wirklich deutlich schneller geworden. Ich vermute, dass sich da irgendwelche Schädlinge tief im System verankert haben. Aus diesem Grund wende ich mich an Euch und habe mich an die Checkliste gehalten. Hier nun die Logfiles, es wäre nett, wenn jemand mal einen Blick darauf wirft und mir eventuell weiterhilft. FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2013
Ran by hp (administrator) on HP-PC on 30-10-2013 22:02:37
Running from C:\Users\hp\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
(EasyBits Software Corp.) C:\Windows\system32\ezNTSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(SPAMfighter ApS) C:\Program Files\Fighters\SPAMfighter\sfus.exe
(SPAMfighter ApS) C:\Program Files\Fighters\FighterSuiteService.exe
() C:\Program Files\Amazon Browser Bar\ToolbarUpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
(SPAMfighter ApS) C:\Program Files\Fighters\SPAMfighter\sfagent.exe
(SPAMfighter ApS) C:\Program Files\Fighters\Tray\FightersTray.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDPOP3.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDCountdown.exe
() C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4390912 2007-03-09] (Realtek Semiconductor)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [174872 2007-02-12] (Intel Corporation)
HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [472776 2007-03-01] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Launch LCDMon] - C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe [774168 2007-04-26] (Logitech Inc.)
HKLM\...\Run: [USB2Check] - RUNDLL32.EXE "C:\Windows\system32\PCLECoInst.dll",CheckUSBController
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [sfagent] - C:\Program Files\Fighters\SPAMfighter\sfagent.exe [1201256 2012-06-21] (SPAMfighter ApS)
HKLM\...\Run: [CommonToolkitTray] - C:\Program Files\Fighters\Tray\FightersTray.exe [1453704 2012-02-02] (SPAMfighter ApS)
HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe [323640 2009-11-24] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [SMSERIAL] - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1458176 2009-10-26] (Motorola Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-10] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [Launcher] - %WINDIR%\SMINST\launcher.exe [44128 2006-11-08] (soft thinks)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\ezShellStart.exe
HKCU\...\Policies\system: [DisableLockWorkstation] 1
HKCU\...\Policies\system: [DisableChangePassword] 1
HKCU\...\Policies\Explorer: [NoLogoff] 1
HKCU\...\Policies\Explorer: [NoClose] 1
MountPoints2: G - G:\LGAutoRun.exe
MountPoints2: {4a430d17-fb44-11e2-8fab-806e6f6e6963} - G:\LGAutoRun.exe
MountPoints2: {a2f2db46-6b5a-11e0-aa68-001a6bdf9434} - G:\LGAutoRun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=hp&installDate=23/09/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=ds&q={searchTerms}&installDate=23/09/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=ds&q={searchTerms}&installDate=23/09/2013
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=73&bd=Pavilion&pf=laptop
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=73&bd=Pavilion&pf=laptop
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=ds&q={searchTerms}&installDate=23/09/2013
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=ds&q={searchTerms}&installDate=23/09/2013
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3132001A6BDF9434&affID=119357&tsp=4978
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=ds&q={searchTerms}&installDate=23/09/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3132001A6BDF9434&affID=119357&tsp=4978
BHO: Plus-HD-2.5 - {11111111-1111-1111-1111-110311341138} - C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-bho.dll (Plus HD)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKLM - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} hxxp://oparuedi.ath.cx/IPCamPluginMJPEG.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
ShellExecuteHooks: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\system32\EZUPBH~1.DLL [49152 2007-09-25] (EasyBits Software Corp.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default
FF user.js: detected! => C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default\user.js
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @viewpoint.com/VMP - C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-2.5 - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default\Extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com
FF Extension: Amazon Browser Bar - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default\Extensions\abb@amazon.com
FF Extension: toolbar_AVIRA-V7 - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: Adblock Plus - C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\7a1sg73x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Google Toolbar for Firefox - C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
Chrome:
=======
CHR HomePage: hxxp://feed.snap.do/?publisher=ShoppingHelper&dpid=ShoppingHelper&co=DE&userid=32a2abc4-8789-4f0c-b6ba-bdc61b407fe6&searchtype=hp&installDate=23/09/2013
CHR RestoreOnStartup: "urls_to_restore_on_startup": [
CHR DefaultSearchURL: (Amazon) - hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tag=bds-p23-serp-de-cr-21&tbrId=v1_abb-channel-23_351a871239d343e2a135d5a44bc88d63_39_1006_20130813_DE_cr_ds_&query={searchTerms}
CHR DefaultSuggestURL: (Amazon) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}&output=chrome
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File
CHR Extension: (Shopping Helper Smartbar) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (YouTube) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: () - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\chdboodilddefglllfoimeceomkpmkbi\1.0.0
CHR Extension: (Google Search) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Plus-HD-2.5) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.24.63_0
CHR Extension: (Gmail) - C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-10] (Avira Operations GmbH & Co. KG)
S3 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)
R2 CLCapSvc; C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [262243 2007-04-24] ()
S2 CLSched; C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [106593 2007-04-24] ()
S2 dealplylive; C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [148000 2013-09-23] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [148000 2013-09-23] (DealPly Technologies Ltd)
R2 ezntsvc; C:\Windows\system32\ezNTSvc.exe [33792 2007-09-25] (EasyBits Software Corp.)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [62984 2007-03-14] (Hewlett-Packard)
R2 SPAMfighter Update Service; C:\Program Files\Fighters\SPAMfighter\sfus.exe [216168 2012-06-21] (SPAMfighter ApS)
R2 Suite Service; C:\Program Files\Fighters\FighterSuiteService.exe [1324680 2012-01-23] (SPAMfighter ApS)
R2 Updater Service for AMZN; C:\Program Files\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
S3 DCamUSBEMPIA; C:\Windows\System32\DRIVERS\emDevice.sys [100957 2005-12-21] (eMPIA Technology, Inc.)
S3 emAudio; C:\Windows\System32\drivers\emAudio.sys [19712 2005-12-21] (Pinnacle Systems, Inc.)
S3 FiltUSBEMPIA; C:\Windows\System32\DRIVERS\emFilter.sys [5245 2005-12-21] (eMPIA Technology, Inc.)
R3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171008 2005-06-02] (Pinnacle Systems GmbH)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2003-12-05] (Padus, Inc.)
S3 ScanUSBEMPIA; C:\Windows\System32\DRIVERS\emScan.sys [4493 2005-12-21] (eMPIA Technology, Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-10] (Avira GmbH)
S3 usbbus; C:\Windows\System32\DRIVERS\lgusbbus.sys [13056 2010-01-21] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgusbdiag.sys [20864 2010-01-21] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgusbmodem.sys [24960 2010-01-21] (LG Electronics Inc.)
R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-01] (America Online, Inc.)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
U4 eabfiltr;
S3 GPU-Z; \??\C:\Users\hp\AppData\Local\Temp\GPU-Z.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 USBAAPL; System32\Drivers\usbaapl.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-30 22:02 - 2013-10-30 22:02 - 00000000 ____D C:\FRST
2013-10-30 22:01 - 2013-10-30 21:56 - 01089275 _____ (Farbar) C:\Users\hp\Desktop\FRST.exe
2013-10-30 22:00 - 2013-10-30 22:01 - 00000466 _____ C:\Users\hp\Desktop\defogger_disable.log
2013-10-30 22:00 - 2013-10-30 22:00 - 00000000 _____ C:\Users\hp\defogger_reenable
2013-10-30 22:00 - 2013-10-30 21:55 - 00050477 _____ C:\Users\hp\Desktop\Defogger.exe
2013-10-30 21:59 - 2013-10-30 21:59 - 00000796 _____ C:\Windows\setupact.log
2013-10-30 21:02 - 2013-10-30 21:10 - 00000209 _____ C:\Users\hp\Desktop\Neues Textdokument.txt
2013-10-22 21:00 - 2013-10-22 21:00 - 00000000 ____D C:\Users\hp\AppData\Local\AskPartnerNetwork
2013-10-22 20:17 - 2013-10-30 21:55 - 00005766 _____ C:\Windows\PFRO.log
2013-10-22 20:13 - 2013-10-22 20:13 - 00000000 ____D C:\Users\hp\AppData\Local\Avg2013
2013-10-20 19:52 - 2013-10-20 19:52 - 00000840 _____ C:\Users\Public\Desktop\VideoPlayer.lnk
2013-10-20 19:38 - 2013-10-20 19:38 - 00000000 ____D C:\Program Files\Common Files\337
2013-10-20 19:34 - 2013-10-20 19:52 - 00000000 ____D C:\Program Files\VideoPlayer
2013-10-20 19:12 - 2013-10-20 19:12 - 00319688 _____ C:\Users\hp\Downloads\Setup.exe
2013-10-20 18:38 - 2013-10-20 18:38 - 00000000 ____D C:\Users\hp\AppData\Roaming\Avira
2013-10-20 18:34 - 2013-10-20 18:34 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-10-20 18:34 - 2013-10-20 18:34 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-10-20 18:33 - 2013-10-20 18:33 - 00000000 ____D C:\ProgramData\APN
2013-10-20 18:31 - 2013-10-20 18:31 - 00001857 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-20 18:31 - 2013-10-10 18:14 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-20 18:31 - 2013-10-10 18:14 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-20 18:31 - 2013-10-10 18:14 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-20 18:30 - 2013-10-20 18:31 - 00000000 ____D C:\ProgramData\Avira
2013-10-20 18:30 - 2013-10-20 18:30 - 00000000 ____D C:\Program Files\Avira
2013-10-20 18:15 - 2013-10-20 18:18 - 123853152 _____ C:\Users\hp\Downloads\avira_free_antivirus_de_14b411.exe
2013-10-20 18:01 - 2013-10-20 18:02 - 26023275 _____ C:\Users\hp\Downloads\avira_free_antivirus_de.exe.part
2013-10-20 18:01 - 2013-10-20 18:01 - 00000000 _____ C:\Users\hp\Downloads\avira_free_antivirus_de.exe
2013-10-20 11:06 - 2013-07-03 03:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-20 11:06 - 2013-07-03 03:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-20 10:59 - 2013-09-22 11:29 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-20 10:59 - 2013-09-22 11:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-20 10:59 - 2013-09-22 11:22 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-20 10:59 - 2013-09-22 11:14 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-10-20 10:59 - 2013-09-22 11:13 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-20 10:59 - 2013-09-22 11:13 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-20 10:59 - 2013-09-22 11:12 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-20 10:59 - 2013-09-22 11:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-20 10:59 - 2013-09-22 11:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-10-20 10:59 - 2013-09-22 11:07 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-20 10:59 - 2013-09-22 11:06 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-20 10:59 - 2013-09-22 11:05 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-20 10:59 - 2013-09-22 11:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-20 10:59 - 2013-09-22 11:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-20 10:59 - 2013-09-22 11:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-20 10:59 - 2013-09-22 10:59 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-19 11:59 - 2013-10-19 11:59 - 00000000 _____ C:\Users\hp\Downloads\Pokemon_in_Real_Life_german_Fandub.3gp
2013-10-19 11:58 - 2013-10-19 11:59 - 05332116 _____ C:\Users\hp\Downloads\Pokemon_in_Real_Life_german_Fandub.3gp.part
2013-10-19 11:54 - 2013-10-19 11:59 - 19465881 _____ C:\Users\hp\Downloads\Mein_Bruder_Herbert.3gp
2013-10-19 11:50 - 2013-10-19 11:50 - 08920436 _____ C:\Users\hp\Downloads\Louis_and_Zach_-_Oh_You_Touched_My_Tra_la_la.3gp
2013-10-19 11:45 - 2013-10-19 11:47 - 16692714 _____ C:\Users\hp\Downloads\Louis_and_Zach_-_Oh_You_Touched_My_Tra_la_la.mp4
2013-10-19 11:39 - 2013-08-29 08:36 - 02050048 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-19 11:39 - 2013-08-27 03:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-10-19 11:39 - 2013-08-27 03:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-19 11:39 - 2013-08-27 03:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-10-19 11:39 - 2013-08-27 03:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-19 11:39 - 2013-08-27 02:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-19 11:39 - 2013-08-27 02:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-19 11:39 - 2013-08-27 02:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-19 11:39 - 2013-08-27 02:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-19 11:39 - 2013-08-27 02:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-19 11:39 - 2013-08-01 04:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-19 11:39 - 2013-08-01 03:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-10-19 11:39 - 2013-07-20 11:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-19 11:39 - 2013-07-12 10:04 - 00134272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-19 11:39 - 2013-07-12 10:04 - 00073344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-19 11:39 - 2013-06-29 03:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-19 11:39 - 2013-06-29 03:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-19 11:39 - 2013-06-29 03:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-19 11:39 - 2013-06-29 03:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-19 11:39 - 2013-06-27 00:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-19 11:39 - 2011-05-05 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-19 11:39 - 2011-05-05 14:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-19 11:38 - 2013-07-04 05:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-19 11:38 - 2013-06-04 05:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-19 11:38 - 2013-06-04 02:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-18 20:13 - 2013-10-18 20:14 - 00000000 ____D C:\Program Files\GUM4691.tmp
2013-10-18 20:13 - 2013-10-18 20:13 - 50053120 _____ C:\Program Files\GUT4692.tmp
==================== One Month Modified Files and Folders =======
2013-10-30 22:04 - 2013-02-05 22:41 - 01983389 _____ C:\Windows\WindowsUpdate.log
2013-10-30 22:02 - 2013-10-30 22:02 - 00000000 ____D C:\FRST
2013-10-30 22:01 - 2013-10-30 22:00 - 00000466 _____ C:\Users\hp\Desktop\defogger_disable.log
2013-10-30 22:00 - 2013-10-30 22:00 - 00000000 _____ C:\Users\hp\defogger_reenable
2013-10-30 22:00 - 2007-09-24 19:22 - 00000000 ____D C:\Users\hp
2013-10-30 21:59 - 2013-10-30 21:59 - 00000796 _____ C:\Windows\setupact.log
2013-10-30 21:59 - 2009-07-24 07:29 - 00031586 _____ C:\ProgramData\nvModes.001
2013-10-30 21:58 - 2007-06-22 11:35 - 00000000 ____D C:\Windows\SMINST
2013-10-30 21:56 - 2013-10-30 22:01 - 01089275 _____ (Farbar) C:\Users\hp\Desktop\FRST.exe
2013-10-30 21:56 - 2009-07-24 07:29 - 00031586 _____ C:\ProgramData\nvModes.dat
2013-10-30 21:56 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-30 21:56 - 2006-11-02 13:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-30 21:56 - 2006-11-02 13:47 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-30 21:55 - 2013-10-30 22:00 - 00050477 _____ C:\Users\hp\Desktop\Defogger.exe
2013-10-30 21:55 - 2013-10-22 20:17 - 00005766 _____ C:\Windows\PFRO.log
2013-10-30 21:51 - 2007-08-31 09:03 - 00003204 _____ C:\Windows\bthservsdp.dat
2013-10-30 21:51 - 2006-11-02 14:01 - 00032536 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-30 21:45 - 2013-02-06 17:03 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-30 21:34 - 2013-08-13 16:15 - 00000000 ____D C:\Users\hp\AppData\Roaming\Systweak
2013-10-30 21:32 - 2013-08-18 13:50 - 00000000 ____D C:\Program Files\PC Speed Maximizer
2013-10-30 21:30 - 2007-06-22 11:49 - 00000000 ____D C:\Program Files\Java
2013-10-30 21:15 - 2013-09-23 15:36 - 00000000 ____D C:\Program Files\DealPly
2013-10-30 21:10 - 2013-10-30 21:02 - 00000209 _____ C:\Users\hp\Desktop\Neues Textdokument.txt
2013-10-22 21:01 - 2013-08-15 13:13 - 00000000 ____D C:\Windows\system32\MRT
2013-10-22 21:00 - 2013-10-22 21:00 - 00000000 ____D C:\Users\hp\AppData\Local\AskPartnerNetwork
2013-10-22 20:59 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-22 20:46 - 2013-08-13 16:15 - 00000000 ____D C:\Program Files\MyPC Backup
2013-10-22 20:18 - 2006-11-02 13:47 - 00490488 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-22 20:15 - 2013-02-06 18:39 - 00000000 ____D C:\ProgramData\MFAData
2013-10-22 20:13 - 2013-10-22 20:13 - 00000000 ____D C:\Users\hp\AppData\Local\Avg2013
2013-10-20 19:52 - 2013-10-20 19:52 - 00000840 _____ C:\Users\Public\Desktop\VideoPlayer.lnk
2013-10-20 19:52 - 2013-10-20 19:34 - 00000000 ____D C:\Program Files\VideoPlayer
2013-10-20 19:38 - 2013-10-20 19:38 - 00000000 ____D C:\Program Files\Common Files\337
2013-10-20 19:12 - 2013-10-20 19:12 - 00319688 _____ C:\Users\hp\Downloads\Setup.exe
2013-10-20 18:38 - 2013-10-20 18:38 - 00000000 ____D C:\Users\hp\AppData\Roaming\Avira
2013-10-20 18:34 - 2013-10-20 18:34 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-10-20 18:34 - 2013-10-20 18:34 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-10-20 18:33 - 2013-10-20 18:33 - 00000000 ____D C:\ProgramData\APN
2013-10-20 18:31 - 2013-10-20 18:31 - 00001857 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-20 18:31 - 2013-10-20 18:30 - 00000000 ____D C:\ProgramData\Avira
2013-10-20 18:30 - 2013-10-20 18:30 - 00000000 ____D C:\Program Files\Avira
2013-10-20 18:27 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-10-20 18:18 - 2013-10-20 18:15 - 123853152 _____ C:\Users\hp\Downloads\avira_free_antivirus_de_14b411.exe
2013-10-20 18:02 - 2013-10-20 18:01 - 26023275 _____ C:\Users\hp\Downloads\avira_free_antivirus_de.exe.part
2013-10-20 18:01 - 2013-10-20 18:01 - 00000000 _____ C:\Users\hp\Downloads\avira_free_antivirus_de.exe
2013-10-20 17:37 - 2007-06-22 11:17 - 00000148 _____ C:\Users\Public\Documents\hpqp.ini
2013-10-20 17:22 - 2012-01-02 16:37 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-20 11:17 - 2006-11-02 11:23 - 00000348 _____ C:\Windows\win.ini
2013-10-20 10:32 - 2013-08-08 10:39 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-20 10:20 - 2013-08-17 20:02 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-19 11:59 - 2013-10-19 11:59 - 00000000 _____ C:\Users\hp\Downloads\Pokemon_in_Real_Life_german_Fandub.3gp
2013-10-19 11:59 - 2013-10-19 11:58 - 05332116 _____ C:\Users\hp\Downloads\Pokemon_in_Real_Life_german_Fandub.3gp.part
2013-10-19 11:59 - 2013-10-19 11:54 - 19465881 _____ C:\Users\hp\Downloads\Mein_Bruder_Herbert.3gp
2013-10-19 11:50 - 2013-10-19 11:50 - 08920436 _____ C:\Users\hp\Downloads\Louis_and_Zach_-_Oh_You_Touched_My_Tra_la_la.3gp
2013-10-19 11:47 - 2013-10-19 11:45 - 16692714 _____ C:\Users\hp\Downloads\Louis_and_Zach_-_Oh_You_Touched_My_Tra_la_la.mp4
2013-10-18 20:14 - 2013-10-18 20:13 - 00000000 ____D C:\Program Files\GUM4691.tmp
2013-10-18 20:13 - 2013-10-18 20:13 - 50053120 _____ C:\Program Files\GUT4692.tmp
2013-10-10 18:14 - 2013-10-20 18:31 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-10 18:14 - 2013-10-20 18:31 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-10 18:14 - 2013-10-20 18:31 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-10 18:14 - 2007-10-12 19:07 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-10-01 16:38 - 2007-10-01 17:22 - 00000108 _____ C:\Users\hp\AppData\Roaming\wklnhst.dat
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.4568.dll
Some content of TEMP:
====================
C:\Users\hp\AppData\Local\Temp\avgnt.exe
C:\Users\hp\AppData\Local\Temp\fjhxjbyp.dll
C:\Users\hp\AppData\Local\Temp\Setup.exe
C:\Users\hp\AppData\Local\Temp\uninst.dll
C:\Users\hp\AppData\Local\Temp\uninst1.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-30 22:02
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 30-10-2013
Ran by hp at 2013-10-30 22:05:11
Running from C:\Users\hp\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Out of date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Out of date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 4.65
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Flash Player ActiveX (Version: 9.0.124.0)
Adobe Reader XI (11.0.01) - Deutsch (Version: 11.0.01)
Adobe Shockwave Player (Version: 10.3.0.24)
Amazon Browser Bar (Version: 3.0)
AOL Deinstallation
AquaMark3
Ashampoo Burning Studio 6 FREE (Version: 6.7.6)
Avira Free Antivirus (Version: 14.0.0.411)
Avira SearchFree Toolbar (Version: 12.5.1.1249)
Brother MFL-Pro Suite (Version: 1.00)
CCleaner (Version: 3.27)
CIB pdf brewer 2.2.4 (Version: 2.2.4)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
D3DX10 (Version: 15.4.2368.0902)
DVD Solution
EasyBits Magic Desktop
ESU for Microsoft Vista (Version: 2.0.3.1)
EyeRoller 1.1.4 (Version: 1.1.4)
Gaim (nur entfernen)
GameSpy Arcade
Google Chrome (Version: 28.0.1500.95)
Google Update Helper (Version: 1.3.21.153)
GTK+ Runtime 2.6.9 rev a (nur entfernen)
Hewlett-Packard Active Check (Version: 1.1.7.0)
Hewlett-Packard Asset Agent (Version: 2.0.58.0)
Hot Wheels Stunt Track Challenge
HP Active Support Library (Version: 2.0.9.1)
HP Active Support Library 32 bit components (Version: 1.0.9)
HP Customer Experience Enhancements (Version: 5.1.0.2278)
HP Doc Viewer (Version: 1.01.0005)
HP Easy Setup - Frontend (Version: 5.1.0.2279)
HP Help and Support (Version: 2.0.10.0)
HP Integrated Module with Bluetooth wireless technology (Version: 6.0.1.3700)
HP Photo Creations (Version: 1.0.0.3781)
HP Photosmart Essential 2.0 (Version: 2.0)
HP Photosmart Essential2.5 (Version: 1.00.0000)
HP Photosmart Plus B210 series - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Photosmart Plus B210 series Hilfe (Version: 140.0.54.54)
HP Product Detection (Version: 4.00.0004)
HP Quick Launch Buttons (Version: 6.50.14.1)
HP QuickPlay 3.2
HP Update (Version: 5.002.007.004)
HP User Guides 0056 (Version: 1.02.0000)
HP Wireless Assistant (Version: 3.00 F1)
IMVU Avatar Chat Software
Intel Matrix Storage Manager
Iomega Product Registration (Version: 7.24.0000)
iTunes (Version: 10.5.2.11)
Junk Mail filter update (Version: 15.4.3502.0922)
LG Internet Kit (Version: 4.2.1)
LG USB Modem Drivers (Version: 4.9.7)
LightScribe 1.4.136.1 (Version: 1.4.136.1)
Logitech Z-series Software 1.04 (Version: 1.04.153)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Outlook Connector (Version: 14.0.5118.5000)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Picture It! Foto 7.0 (Version: 7.0.0.0000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 08.05.0822)
Microsoft Works 2003-Setup-Start
Microsoft Works 7.0 (Version: 07.02.0702)
Motorola SM56 Speakerphone Modem (Version: 6.12.25.06)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSCU for Microsoft Vista (Version: 1.0.1.1)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Napster (Version: 3.8.1.4)
Napster Burn Engine (Version: 3.5.0000)
NVIDIA Drivers (Version: 1.10)
NVIDIA PhysX (Version: 9.09.0203)
PaperPort Image Printer (Version: 1.00.0000)
PDFzuWord Professional
PhotoNow! 1.0 (Version: 3.0.3805)
Pinnacle Instant DVD Recorder (Version: 2.00.103)
PlanetSide 2 (HKCU Version: 1.0.3.183)
Plus-HD-2.5 (Version: 1.28.153.3)
PowerDirector Express
PowerProducer
PSSWCORE (Version: 2.00.5000)
PVSonyDll (Version: 1.00.0001)
QLBCASL (Version: 6.40.17.2)
QuickTime (Version: 7.68.75.0)
Realtek High Definition Audio Driver (Version: 6.0.1.5384)
Roxio Activation Module (Version: 1.0)
Roxio Creator Audio (Version: 3.4.0)
Roxio Creator Basic v9 (Version: 3.4.0)
Roxio Creator Copy (Version: 3.4.0)
Roxio Creator Data (Version: 3.4.0)
Roxio Creator EasyArchive (Version: 3.4.0)
Roxio Creator Tools (Version: 3.4.0)
Roxio Express Labeler 3 (Version: 3.2.1)
Roxio MyDVD Basic v9 (Version: 9.0.551)
RTC Client API v1.2 (Version: 1.2.0000)
ScanSoft PaperPort 11 (Version: 11.1.0000)
Segoe UI (Version: 15.4.2271.0615)
Slender: The Eight Pages Packages
SPAMfighter (Version: 7.5.147)
Spelling Dictionaries Support For Adobe Reader 8 (Version: 8.0.0)
Studie zur Verbesserung von HP Photosmart Plus B210 series Produkten (Version: 22.50.231.0)
Synaptics Pointing Device Driver (Version: 15.3.29.0)
Tony Hawk's American Wasteland (Version: 1.00.0000)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
VideoPlayer v2.0.6 (Version: v2.0.6)
Viewpoint Media Player
VisualBee for Microsoft PowerPoint (HKCU Version: V3.9)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
WinRAR
Works Suite-Betriebssystem-Pack (Version: 3.0.0.0000)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)
==================== Restore Points =========================
==================== Hosts content: ==========================
2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1A057408-CC1A-4969-B9EF-F918B4962803} - System32\Tasks\Plus-HD-2.5-updater => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-updater.exe [2013-09-23] (Plus HD)
Task: {25469498-2255-4D27-BE5B-ACE545526CBA} - System32\Tasks\Dealply => C:\Users\hp\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: {3A967783-2E73-4578-BFE2-9746776E56E0} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [2013-09-23] (DealPly Technologies Ltd)
Task: {3F4C76B5-0D34-494B-A0C2-BFEBC0E72039} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files\Desk 365\desk365.exe
Task: {5EFD868B-574B-4784-8A88-B2C28389CC48} - System32\Tasks\Plus-HD-2.5-firefoxinstaller => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe [2013-09-23] (Plus HD)
Task: {620E8B2A-85A3-4D54-B7D3-61733449932D} - System32\Tasks\Plus-HD-2.5-enabler => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-enabler.exe [2013-09-23] (Plus HD)
Task: {73D0C6E9-48E6-45F7-9365-7EFB518DAA39} - System32\Tasks\Plus-HD-2.5-codedownloader => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe [2013-09-23] (Plus HD)
Task: {78951A58-838B-4D20-8FBA-3AA6F510624D} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe [2013-09-23] (DealPly Technologies Ltd)
Task: {974297BF-C15E-4803-ADFE-75AE90F3EB53} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: {CFDBA69A-BAFE-48DB-A759-B2A6FC0AE03A} - System32\Tasks\Plus-HD-2.5-chromeinstaller => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe [2013-09-23] (Plus HD)
Task: {F582013A-28AD-4E45-8BC1-32D954322DEA} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\hp\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-chromeinstaller.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-codedownloader.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-enabler.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-firefoxinstaller.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-updater.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-updater.exe
==================== Loaded Modules (whitelisted) =============
2003-07-11 01:09 - 2003-07-11 01:09 - 00048192 _____ () C:\Program Files\Common Files\Microsoft Shared\Web Folders\1031\nsextint.dll
2009-09-13 15:12 - 2009-08-16 16:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll
2012-06-21 11:56 - 2012-06-21 11:56 - 00549992 _____ () C:\Program Files\Fighters\SPAMfighter\sfsg.dll
2012-06-21 11:56 - 2013-02-05 22:06 - 00966248 ____T () C:\Program Files\Fighters\SPAMfighter\sfse.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\hp\Downloads\Draw_My_Life_-_Y-Titty.mp4:TOC.WMV
AlternateDataStreams: C:\Users\hp\Downloads\Gehen_-_Wahnsinns_Werbung.mp4:TOC.WMV
AlternateDataStreams: C:\Users\hp\Downloads\iEi.mp4:TOC.WMV
AlternateDataStreams: C:\Users\hp\Downloads\iPaper.mp4:TOC.WMV
AlternateDataStreams: C:\Users\hp\Downloads\Scary_Movie_1_-_Part_18_german.mp4:TOC.WMV
AlternateDataStreams: C:\Users\hp\Downloads\Waschen_-_Wahnsinns_Werbung.mp4:TOC.WMV
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth Peripheral Device
Description: Bluetooth Peripheral Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/30/2013 10:04:17 PM) (Source: LoadPerf) (User: )
Description: ᛋ仉Ϫ16
Error: (10/30/2013 08:56:01 PM) (Source: LoadPerf) (User: )
Description: ᛋ仉Ϫ16
Error: (10/22/2013 09:02:46 PM) (Source: MsiInstaller) (User: hp-PC)
Description: Produkt: Microsoft .NET Framework 4 Client Profile - Update "KB2861188" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Users\hp\AppData\Local\Temp\KB2861188_20131022_220135679-Microsoft .NET Framework 4 Client Profile-MSP0.txt enthalten.
Error: (10/22/2013 09:02:39 PM) (Source: MsiInstaller) (User: hp-PC)
Description: Produkt: Microsoft .NET Framework 4 Client Profile -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.
Error: (10/22/2013 09:02:31 PM) (Source: LoadPerf) (User: )
Description: MSDTC Bridge 4.0.0.0MSDTC Bridge 4.0.0.08
Error: (10/22/2013 09:02:31 PM) (Source: LoadPerf) (User: )
Description: SMSvcHost 4.0.0.0SMSvcHost 4.0.0.08
Error: (10/22/2013 08:57:29 PM) (Source: MsiInstaller) (User: hp-PC)
Description: Produkt: Microsoft .NET Framework 4 Client Profile - Update "KB2836939" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Users\hp\AppData\Local\Temp\KB2836939_20131022_215617799-Microsoft .NET Framework 4 Client Profile-MSP0.txt enthalten.
Error: (10/22/2013 08:57:06 PM) (Source: LoadPerf) (User: )
Description: MSDTC Bridge 4.0.0.0MSDTC Bridge 4.0.0.08
Error: (10/22/2013 08:57:06 PM) (Source: LoadPerf) (User: )
Description: SMSvcHost 4.0.0.0SMSvcHost 4.0.0.08
Error: (10/22/2013 08:56:13 PM) (Source: MsiInstaller) (User: hp-PC)
Description: Produkt: Microsoft .NET Framework 4 Client Profile - Update "KB2468871" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei enthalten.
System errors:
=============
Error: (10/30/2013 09:58:42 PM) (Source: Service Control Manager) (User: )
Description: CyberLink Task Scheduler (CTS)CyberLink Background Capture Service (CBCS)%%1070
Error: (10/30/2013 09:58:42 PM) (Source: Service Control Manager) (User: )
Description: CyberLink Background Capture Service (CBCS)
Error: (10/30/2013 09:57:38 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (10/30/2013 09:56:49 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT-AUTORITÄT)
Description: 2147942402
Error: (10/30/2013 08:51:04 PM) (Source: Service Control Manager) (User: )
Description: CyberLink Task Scheduler (CTS)CyberLink Background Capture Service (CBCS)%%1070
Error: (10/30/2013 08:51:04 PM) (Source: Service Control Manager) (User: )
Description: CyberLink Background Capture Service (CBCS)
Error: (10/30/2013 08:49:32 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (10/30/2013 08:49:06 PM) (Source: Microsoft-Windows-TaskScheduler) (User: NT-AUTORITÄT)
Description: 2147942402
Error: (10/22/2013 09:02:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: 0x800706baUpdate für Microsoft .NET Framework 4 unter Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2600217){7079BEEB-6120-4AFD-AD07-FB4DFA284FBE}100
Error: (10/22/2013 09:02:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: 0x800706baSicherheitsupdate für Microsoft .NET Framework 4 unter Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2742595){97E091C7-35EB-4DA0-9346-E6F33115C8ED}201
Microsoft Office Sessions:
=========================
Error: (10/30/2013 10:04:17 PM) (Source: LoadPerf)(User: )
Description: ᛋ仉Ϫ16
Error: (10/30/2013 08:56:01 PM) (Source: LoadPerf)(User: )
Description: ᛋ仉Ϫ16
Error: (10/22/2013 09:02:46 PM) (Source: MsiInstaller)(User: hp-PC)
Description: Microsoft .NET Framework 4 Client ProfileKB28611881603C:\Users\hp\AppData\Local\Temp\KB2861188_20131022_220135679-Microsoft .NET Framework 4 Client Profile-MSP0.txt(NULL)
Error: (10/22/2013 09:02:39 PM) (Source: MsiInstaller)(User: hp-PC)
Description: Produkt: Microsoft .NET Framework 4 Client Profile -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.(NULL)(NULL)(NULL)(NULL)
Error: (10/22/2013 09:02:31 PM) (Source: LoadPerf)(User: )
Description: MSDTC Bridge 4.0.0.0MSDTC Bridge 4.0.0.08
Error: (10/22/2013 09:02:31 PM) (Source: LoadPerf)(User: )
Description: SMSvcHost 4.0.0.0SMSvcHost 4.0.0.08
Error: (10/22/2013 08:57:29 PM) (Source: MsiInstaller)(User: hp-PC)
Description: Microsoft .NET Framework 4 Client ProfileKB28369391603C:\Users\hp\AppData\Local\Temp\KB2836939_20131022_215617799-Microsoft .NET Framework 4 Client Profile-MSP0.txt(NULL)
Error: (10/22/2013 08:57:06 PM) (Source: LoadPerf)(User: )
Description: MSDTC Bridge 4.0.0.0MSDTC Bridge 4.0.0.08
Error: (10/22/2013 08:57:06 PM) (Source: LoadPerf)(User: )
Description: SMSvcHost 4.0.0.0SMSvcHost 4.0.0.08
Error: (10/22/2013 08:56:13 PM) (Source: MsiInstaller)(User: hp-PC)
Description: Microsoft .NET Framework 4 Client ProfileKB24688711603(NULL)
CodeIntegrity Errors:
===================================
Date: 2013-10-22 21:11:39.537
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:39.260
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:38.985
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:38.711
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:34.517
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:34.234
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:33.956
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-10-22 21:11:33.660
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-08 11:04:19.079
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-08 11:04:18.825
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\AVG\AVG2013\Drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 2045.68 MB
Available physical RAM: 979.5 MB
Total Pagefile: 4338.38 MB
Available Pagefile: 3058.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.21 MB
==================== Drives ================================
Drive c: (Festplatte) (Fixed) (Total:225.42 GB) (Free:158.49 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:232.88 GB) (Free:229.57 GB) NTFS
Drive e: (HP_RECOVERY) (Fixed) (Total:7.46 GB) (Free:1.7 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: () (Removable) (Total:0.12 GB) (Free:0.06 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 33C3D33E)
Partition 1: (Active) - (Size=225 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 233 GB) (Disk ID: C1736852)
Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 127 MB) (Disk ID: 0D0C0B0A)
Partition 1: (Not Active) - (Size=127 MB) - (Type=07 NTFS)
==================== End Of Log ============================
Gmer.txt Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-30 22:48:04
Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 WDC_WD25 rev.01.0 232,89GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\hp\AppData\Local\Temp\pxddipob.sys
---- System - GMER 2.1 ----
SSDT 90E4EB8E ZwCreateSection
SSDT 90E4EB98 ZwRequestWaitReplyPort
SSDT 90E4EB93 ZwSetContextThread
SSDT 90E4EB9D ZwSetSecurityObject
SSDT 90E4EBA2 ZwSystemDebugControl
SSDT 90E4EB2F ZwTerminateProcess
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!KeSetEvent + 215 826E0860 4 Bytes [8E, EB, E4, 90] {MOV GS, EBX; IN AL, 0x90}
.text ntkrnlpa.exe!KeSetEvent + 539 826E0B84 4 Bytes [98, EB, E4, 90] {CWDE ; JMP 0xffffffe7; NOP }
.text ntkrnlpa.exe!KeSetEvent + 56D 826E0BB8 4 Bytes [93, EB, E4, 90] {XCHG EBX, EAX; JMP 0xffffffe7; NOP }
.text ntkrnlpa.exe!KeSetEvent + 5D1 826E0C1C 4 Bytes [9D, EB, E4, 90] {POPF ; JMP 0xffffffe7; NOP }
.text ntkrnlpa.exe!KeSetEvent + 619 826E0C64 4 Bytes [A2, EB, E4, 90]
.text ...
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys
Device \Driver\BTHUSB \Device\00000079 bthport.sys
Device \Driver\BTHUSB \Device\0000007b bthport.sys
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001a6bdf9434
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001a6bdf9434@0014a7989023 0x5B 0x1D 0x07 0x56 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001a6bdf9434@8c541d20dded 0x3D 0x58 0x38 0xCB ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001a6bdf9434@6cd68a781c12 0xB9 0x30 0x13 0xE9 ...
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001a6bdf9434 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001a6bdf9434@0014a7989023 0x5B 0x1D 0x07 0x56 ...
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001a6bdf9434@8c541d20dded 0x3D 0x58 0x38 0xCB ...
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001a6bdf9434@6cd68a781c12 0xB9 0x30 0x13 0xE9 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0x2E 0xE8 0xE1 0x00 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x71 0x3B 0x04 0x66 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0xFF 0x7C 0x85 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x3E 0x1E 0x9E 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xF5 0x1D 0x4D 0x73 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xDF 0x20 0x58 0x62 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0xFB 0xA7 0x78 0xE6 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0x01 0x3A 0x48 0xFC ...
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0x51 0xFA 0x6E 0x91 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0x37 0xA4 0xAA 0xC3 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0xE3 0x0E 0x66 0xD5 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0xFA 0xEA 0x66 0x7F ...
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Emile |
| Themen zu Win Vista 32bit - Extrem langsam, Verdacht auf Adware/Scareware/Viren |
| 32 bit, adblock, adware, adware.egdaccess, adware/ibryte.f, adware/mysearch.a, antivirus, avira searchfree toolbar, checkliste, device driver, entfernen, error, farbar, farbar recovery scan tool, fehlercode 1, festplatte, flash player, home, homepage, langsam, launch, mozilla, msiinstaller, newtab, nicht installiert, registry, rundll, security, shopping helper smartbar, smartbar, software, svchost.exe, system, tr/sefnit.as, tr/staser.rfm, windows, windows xp |
Baum-Darstellung