![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch daWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
/// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
![]() | #2 |
![]() | ![]() Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da Hi,
__________________hier das Log von Combofix. In dem Hinweis bei dir zu Combofix steht etwas von Neustart...sollte nach dem Durchführen von Combofix ein automatischer Neustart erfolgen? Wenn ja, der wurde bei mir nicht ausgelöst. Code:
ATTFilter ComboFix 13-11-03.02 - Student 04.11.2013 10:47:22.1.4 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.7920.5749 [GMT 1:00] ausgeführt von:: c:\users\Student\Desktop\ComboFix.exe AV: AVG Anti-Virus Business Edition 2011 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} SP: AVG Anti-Virus Business Edition 2011 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\END c:\program files (x86)\Update c:\programdata\Roaming . . ((((((((((((((((((((((( Dateien erstellt von 2013-10-04 bis 2013-11-04 )))))))))))))))))))))))))))))) . . 2013-11-04 09:52 . 2013-11-04 09:52 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-11-04 08:02 . 2013-11-04 08:02 -------- d-----w- c:\program files (x86)\SEARCHPROTECT 2013-11-03 22:03 . 2013-11-03 22:03 -------- d-----w- C:\FRST 2013-11-03 21:16 . 2013-11-03 21:16 -------- d-----w- c:\users\Student\AppData\Local\Adobe 2013-11-03 20:41 . 2013-10-26 01:54 272496 ----a-w- c:\program files (x86)\Mozilla Firefox\browser\components\browsercomps.dll 2013-11-03 20:05 . 2013-11-03 20:05 -------- d-----w- c:\programdata\regid.1995-08.com.techsmith 2013-11-03 20:05 . 2013-11-03 20:05 -------- d-----w- c:\program files (x86)\QuickTime 2013-11-03 20:05 . 2013-11-03 20:05 -------- d-----w- c:\programdata\TechSmith 2013-11-03 11:24 . 2011-09-22 20:06 109416 ----a-w- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll 2013-11-03 11:24 . 2011-09-22 16:18 73064 ----a-w- c:\windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll 2013-11-03 11:24 . 2011-09-22 20:07 105832 ----a-w- c:\windows\system32\SQSRVRES.DLL 2013-11-03 11:12 . 2013-11-03 11:12 -------- d-----w- c:\program files\CCleaner 2013-11-03 10:18 . 2012-11-22 08:37 5225472 ----a-w- c:\windows\SysWow64\librfc32u.dll 2013-11-03 10:17 . 2012-06-20 09:27 946176 ----a-w- c:\windows\SysWow64\icuuc34.dll 2013-11-03 10:17 . 2012-06-20 09:27 8847360 ----a-w- c:\windows\SysWow64\icudt34.dll 2013-11-03 00:18 . 2013-11-03 00:18 -------- d-----w- c:\users\Student\AppData\Local\webkit 2013-11-03 00:14 . 2013-11-03 20:29 -------- d-----w- c:\users\Student\AppData\Local\gtk-2.0 2013-11-02 15:03 . 2013-11-02 15:03 -------- d-----w- c:\users\Student\AppData\Local\gegl-0.2 2013-11-02 12:53 . 2013-11-02 12:53 -------- d-----w- c:\program files (x86)\Freemake 2013-11-02 12:51 . 2013-11-02 12:51 -------- d-----w- c:\users\Student\AppData\Local\Programs 2013-11-02 12:38 . 2013-11-03 11:14 -------- d-----w- c:\users\Student\AppData\Local\CrashDumps 2013-11-02 12:15 . 2013-11-02 12:15 -------- d-----w- c:\users\Student\AppData\Roaming\RealNetworks 2013-11-02 12:15 . 2013-11-02 12:15 -------- d-----w- c:\program files (x86)\RealNetworks 2013-11-02 12:15 . 2013-11-02 12:15 -------- d-----w- c:\programdata\RealNetworks 2013-11-02 12:15 . 2013-11-02 12:15 -------- d-----w- c:\program files (x86)\Common Files\xing shared 2013-11-02 12:14 . 2013-11-02 12:14 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll 2013-11-02 12:14 . 2013-11-02 12:14 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll 2013-11-02 11:38 . 2013-11-02 11:38 -------- d-----w- c:\users\Student\AppData\Local\Macromedia 2013-11-02 10:08 . 2013-11-02 10:17 -------- d-----w- c:\program files (x86)\Pinnacle 2013-11-02 00:02 . 2013-11-02 00:02 -------- d-----w- c:\users\Student\AppData\Local\VirtualStore 2013-11-01 20:13 . 2013-11-01 20:14 -------- d-----w- c:\programdata\Pinnacle VideoSpin 2013-11-01 20:13 . 2013-11-01 20:13 -------- d-----w- c:\program files (x86)\Common Files\Yahoo! 2013-11-01 17:36 . 2013-11-01 17:36 -------- d-----w- c:\users\Student\AppData\Roaming\Windows Live Writer 2013-11-01 17:34 . 2013-11-03 11:15 -------- d-----w- c:\users\Student\Tracing 2013-10-30 21:18 . 2013-10-30 21:11 98816 ----a-w- c:\windows\system32\drivers\ew_jucdcacm.sys 2013-10-30 21:18 . 2013-10-30 21:11 86016 ----a-w- c:\windows\system32\drivers\ew_jubusenum.sys 2013-10-30 21:18 . 2013-10-30 21:11 69632 ----a-w- c:\windows\system32\drivers\ew_jucdcecm.sys 2013-10-30 21:18 . 2013-10-30 21:11 421376 ----a-w- c:\windows\system32\drivers\ewusbwwan.sys 2013-10-30 21:18 . 2013-10-30 21:11 32768 ----a-w- c:\windows\system32\drivers\ewdcsc.sys 2013-10-30 21:18 . 2013-10-30 21:11 28672 ----a-w- c:\windows\system32\drivers\ew_juextctrl.sys 2013-10-30 21:18 . 2013-10-30 21:11 221312 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys 2013-10-30 21:18 . 2013-10-30 21:11 22016 ----a-w- c:\windows\system32\drivers\ew_hwupgrade.sys 2013-10-30 21:18 . 2013-10-30 21:11 212992 ----a-w- c:\windows\system32\drivers\ew_juwwanecm.sys 2013-10-30 21:18 . 2013-10-30 21:11 13952 ----a-w- c:\windows\system32\drivers\ew_usbenumfilter.sys 2013-10-30 21:18 . 2013-10-30 21:11 117248 ----a-w- c:\windows\system32\drivers\ew_hwusbdev.sys 2013-10-30 21:18 . 2013-10-30 21:11 1001472 ----a-w- c:\windows\system32\drivers\mod7700.sys 2013-10-30 21:15 . 2013-10-30 21:11 724608 ----a-w- c:\windows\SysWow64\bmutil.dll 2013-10-30 21:15 . 2013-10-30 21:11 308352 ----a-w- c:\windows\SysWow64\bminstall.dll 2013-10-30 21:15 . 2013-10-30 21:11 39552 ----a-w- c:\windows\system32\drivers\tcpipBM.sys 2013-10-30 21:15 . 2013-10-30 21:11 16512 ----a-w- c:\windows\system32\drivers\BMLoad.sys 2013-10-29 17:44 . 2013-11-02 12:54 -------- d-----w- c:\programdata\Freemake 2013-10-27 22:35 . 2013-10-27 22:35 -------- d-----w- c:\windows\de 2013-10-27 22:33 . 2013-10-27 22:33 -------- d-----w- c:\windows\en 2013-10-27 22:33 . 2013-10-27 22:33 -------- d-----w- c:\windows\fr 2013-10-27 22:33 . 2013-10-27 22:33 -------- d-----w- c:\windows\es 2013-10-27 22:33 . 2013-10-27 22:33 -------- d-----w- c:\windows\it 2013-10-27 22:33 . 2013-10-27 22:33 -------- d-----w- c:\windows\nl 2013-10-27 22:31 . 2013-02-05 21:06 57840 ----a-w- c:\windows\system32\drivers\fssfltr.sys 2013-10-27 22:31 . 2013-11-01 17:29 -------- d-----w- c:\program files\Windows Live 2013-10-27 22:26 . 2013-10-27 22:26 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8db915231ced36304\DSETUP.dll 2013-10-27 22:26 . 2013-10-27 22:26 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8db915231ced36304\DXSETUP.exe 2013-10-27 22:26 . 2013-10-27 22:26 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8db915231ced36304\dsetup32.dll 2013-10-27 22:26 . 2013-10-27 22:26 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8a54db331ced36303\DSETUP.dll 2013-10-27 22:26 . 2013-10-27 22:26 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8a54db331ced36303\DXSETUP.exe 2013-10-27 22:26 . 2013-10-27 22:26 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8a54db331ced36303\dsetup32.dll 2013-10-27 22:26 . 2013-10-27 22:26 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\83d158ea1ced36301\DSETUP.dll 2013-10-27 22:26 . 2013-10-27 22:26 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\83d158ea1ced36301\DXSETUP.exe 2013-10-27 22:26 . 2013-10-27 22:26 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\83d158ea1ced36301\dsetup32.dll 2013-10-26 18:22 . 2013-10-26 18:23 -------- d-----w- c:\users\Student\.BrainYoo2 2013-10-26 18:22 . 2013-10-26 18:22 -------- d-----w- c:\programdata\Brainyoo2 2013-10-24 23:26 . 2013-10-24 23:35 -------- d-----w- c:\users\Student\AppData\Roaming\SAP 2013-10-22 09:06 . 1995-03-02 22:00 26832 ----a-w- c:\windows\system\Ctl3dv2.dll 2013-10-22 09:06 . 1995-03-02 22:00 92576 ----a-w- c:\windows\system\Odbcinst.dll 2013-10-22 09:06 . 1995-03-02 22:00 6464 ----a-w- c:\windows\system\Odbcadm.exe 2013-10-22 09:06 . 1995-03-02 22:00 56240 ----a-w- c:\windows\system\Odbc.dll 2013-10-22 09:05 . 1999-01-17 22:00 5392 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\oledb32x.dll 2013-10-22 09:05 . 1999-01-11 22:00 62736 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\msdatl2.dll 2013-10-22 09:05 . 1999-01-10 22:00 7952 ----a-w- c:\windows\SysWow64\Odbccp32.cpl 2013-10-22 09:05 . 1999-01-10 22:00 4656 ----a-w- c:\windows\SysWow64\Ds16gt.dll 2013-10-22 09:05 . 1999-01-10 22:00 26224 ----a-w- c:\windows\SysWow64\Odbc16gt.dll 2013-10-22 09:04 . 1998-07-30 11:51 305152 ----a-w- c:\windows\IsUninst.exe 2013-10-21 15:13 . 2013-10-22 08:20 -------- d-----w- c:\users\Student\AppData\Roaming\SQL Developer 2013-10-19 06:08 . 2013-10-19 06:08 -------- d-----w- c:\programdata\Oracle 2013-10-19 06:08 . 2013-10-19 06:08 -------- d-----w- c:\program files (x86)\Common Files\Java 2013-10-19 06:08 . 2013-10-08 05:50 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-10-18 13:55 . 2013-10-18 13:55 -------- d-----w- c:\programdata\McAfee 2013-10-15 15:05 . 2013-11-01 16:41 -------- d-----w- C:\tmp 2013-10-15 14:23 . 2013-10-15 14:23 -------- d-----w- c:\users\Student\AppData\Roaming\Blender Foundation 2013-10-13 12:15 . 2013-10-13 12:15 -------- d-----w- c:\users\Student\AppData\Roaming\TuneUp Software 2013-10-13 12:14 . 2013-10-13 12:15 -------- d-----w- c:\programdata\TuneUp Software 2013-10-13 12:14 . 2013-10-13 12:14 -------- d-sh--w- c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-11 05:43 . 2013-09-04 01:37 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2013-10-11 05:43 . 2013-09-04 01:37 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2013-10-11 05:43 . 2013-09-04 01:37 325120 ----a-w- c:\windows\system32\drivers\usbport.sys 2013-10-11 05:43 . 2013-09-04 01:37 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys 2013-10-11 05:43 . 2013-09-04 01:37 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2013-10-11 05:43 . 2013-09-04 01:37 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys 2013-10-11 05:43 . 2013-09-04 01:37 7808 ----a-w- c:\windows\system32\drivers\usbd.sys 2013-10-10 16:06 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll 2013-10-10 16:06 . 2013-07-04 11:50 530432 ----a-w- c:\windows\SysWow64\comctl32.dll 2013-10-10 16:06 . 2013-06-06 05:50 41472 ----a-w- c:\windows\system32\lpk.dll 2013-10-10 16:06 . 2013-06-06 05:49 100864 ----a-w- c:\windows\system32\fontsub.dll 2013-10-10 16:06 . 2013-06-06 05:49 14336 ----a-w- c:\windows\system32\dciman32.dll 2013-10-10 16:06 . 2013-06-06 05:47 46080 ----a-w- c:\windows\system32\atmlib.dll 2013-10-10 16:06 . 2013-06-06 04:57 25600 ----a-w- c:\windows\SysWow64\lpk.dll 2013-10-10 16:06 . 2013-06-06 04:51 70656 ----a-w- c:\windows\SysWow64\fontsub.dll 2013-10-10 16:06 . 2013-06-06 04:50 10240 ----a-w- c:\windows\SysWow64\dciman32.dll 2013-10-10 16:06 . 2013-06-06 03:30 368128 ----a-w- c:\windows\system32\atmfd.dll 2013-10-10 16:06 . 2013-06-06 03:01 295424 ----a-w- c:\windows\SysWow64\atmfd.dll 2013-10-10 16:06 . 2013-06-06 03:01 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2013-10-10 16:01 . 2013-06-25 22:55 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2013-10-10 16:01 . 2013-07-12 10:41 185344 ----a-w- c:\windows\system32\drivers\usbvideo.sys 2013-10-10 16:01 . 2013-07-12 10:41 100864 ----a-w- c:\windows\system32\drivers\usbcir.sys 2013-10-10 16:01 . 2013-07-03 04:05 76800 ----a-w- c:\windows\system32\drivers\hidclass.sys 2013-10-10 16:01 . 2013-07-03 04:05 32896 ----a-w- c:\windows\system32\drivers\hidparse.sys 2013-10-10 15:59 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-10-10 15:59 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 15:59 . 2013-07-20 10:33 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 15:59 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-10-30 21:11 . 2012-10-08 16:57 1486688 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll 2013-10-30 21:11 . 2012-10-08 16:57 1486688 ----a-w- c:\windows\system32\drivers\WdfCoInstaller01007.dll 2013-10-18 13:55 . 2012-10-08 17:02 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-10-18 13:55 . 2012-10-08 17:02 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-10-11 01:14 . 2012-10-10 15:01 80541720 ----a-w- c:\windows\system32\MRT.exe 2013-08-29 01:48 . 2013-10-10 16:00 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2013-08-27 17:39 . 2013-08-27 17:39 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2013-08-27 17:38 . 2013-08-27 17:38 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}] 2013-01-29 13:29 170840 ----a-w- c:\program files\IB Updater\Extension32.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{DB616CFF-D989-48A8-9C85-E2A8D56AB2CA}] 2011-11-22 08:59 269824 ----a-w- c:\users\Student\AppData\LocalLow\StumbleUpon\IE\StumbleUpon.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-04-20 18:07 222808 ----a-w- c:\users\Student\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-04-20 18:07 222808 ----a-w- c:\users\Student\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-04-20 18:07 222808 ----a-w- c:\users\Student\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OfficeSyncProcess"="c:\program files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [2013-04-22 720064] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IndicatorUtility"="c:\program files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe" [2010-09-30 48752] "StartFujitsuPointingDeviceUtility"="c:\program files (x86)\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe" [2011-02-02 85104] "IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2011-02-01 112152] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288] "DeskUpdateNotifier"="c:\fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe" [2013-02-26 102968] "AVG_TRAY"="c:\program files (x86)\AVG\AVG10\avgtray.exe" [2012-08-01 2345592] "EKStatusMonitor"="c:\program files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe" [2012-10-15 2844608] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] "TkBellExe"="d:\programme\Update\realsched.exe" [2013-11-02 295512] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] . c:\users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968] OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ LaunchCenter.lnk - c:\program files\Fujitsu\LaunchCenter\lcStarter.exe [2010-11-4 21504] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer3"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG10\avgchsva.exe /sync\0c:\progra~2\AVG\AVG10\avgrsa.exe /sync /restart . R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe;c:\program files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 Internet Manager. RunOuc;Internet Manager. OUC;d:\programme\UpdateDog\ouc.exe;d:\programme\UpdateDog\ouc.exe [x] R2 StumbleUponUpdater;StumbleUpon Updater;c:\users\Student\AppData\LocalLow\StumbleUpon\IE\StumbleUponUpdater.exe;c:\users\Student\AppData\LocalLow\StumbleUpon\IE\StumbleUponUpdater.exe [x] R3 anvsnddrv;AnvSoft Virtual Sound Device;c:\windows\system32\drivers\anvsnddrv.sys;c:\windows\SYSNATIVE\drivers\anvsnddrv.sys [x] R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x] R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys;c:\windows\SYSNATIVE\DRIVERS\ew_usbenumfilter.sys [x] R3 ewusbmbb;HUAWEI USB-WWAN miniport;c:\windows\system32\DRIVERS\ewusbwwan.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbwwan.sys [x] R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb.sys [x] R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys;c:\windows\SYSNATIVE\drivers\intelaud.sys [x] R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\DRIVERS\lgbtpt64.sys;c:\windows\SYSNATIVE\DRIVERS\lgbtpt64.sys [x] R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbs64.sys;c:\windows\SYSNATIVE\DRIVERS\lgbtbs64.sys [x] R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\DRIVERS\lgvmdm64.sys;c:\windows\SYSNATIVE\DRIVERS\lgvmdm64.sys [x] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x] R3 O2MDFRDR;O2MDFRDR;c:\windows\system32\drivers\O2MDFw7x64.sys;c:\windows\SYSNATIVE\drivers\O2MDFw7x64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 SaiKF620;SaiKF620;c:\windows\system32\DRIVERS\SaiKF620.sys;c:\windows\SYSNATIVE\DRIVERS\SaiKF620.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 VSPerfDrv100;Performance Tools Driver 10.0;d:\programme\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys;d:\programme\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [x] R4 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [x] R4 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [x] R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x] R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0105.sys [x] R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x] S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys;c:\windows\SYSNATIVE\DRIVERS\AVGIDSEH.Sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x] S0 BMLoad;Bytemobile Boot Time Load Driver;c:\windows\system32\drivers\BMLoad.sys;c:\windows\SYSNATIVE\drivers\BMLoad.sys [x] S0 FBIOSDRV;Fujitsu BIOS Driver;c:\windows\System32\Drivers\FBIOSDRV.sys;c:\windows\SYSNATIVE\Drivers\FBIOSDRV.sys [x] S0 FJGSDisk;G-Sensor Application Filter Driver;c:\windows\system32\DRIVERS\FJGSDisk.sys;c:\windows\SYSNATIVE\DRIVERS\FJGSDisk.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x] S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x] S2 ATService;AuthenTec Fingerprint Service;c:\program files\Fingerprint Sensor\ATService.exe;c:\program files\Fingerprint Sensor\ATService.exe [x] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG10\avgwdsvc.exe;c:\program files (x86)\AVG\AVG10\avgwdsvc.exe [x] S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [x] S2 NWSAPAutoWorkstationUpdateSvc;SAPSetup Automatic Workstation Update Service;c:\program files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe;c:\program files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe [x] S2 PFNService;PFNService;c:\program files\Fujitsu\Plugfree NETWORK\PFNService.exe;c:\program files\Fujitsu\Plugfree NETWORK\PFNService.exe [x] S2 PowerSavingUtilityService;PowerSavingUtilityService;c:\program files\Fujitsu\PSUtility\PSUService.exe;c:\program files\Fujitsu\PSUtility\PSUService.exe [x] S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x] S2 TabletServiceISD;TabletServiceISD;c:\program files\Tablet\ISD\ISD_Tablet.exe;c:\program files\Tablet\ISD\ISD_Tablet.exe [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S3 acpials;ALS Sensor Filter;c:\windows\system32\DRIVERS\acpials.sys;c:\windows\SYSNATIVE\DRIVERS\acpials.sys [x] S3 ALSysIO;ALSysIO;c:\users\Student\AppData\Local\Temp\ALSysIO64.sys;c:\users\Student\AppData\Local\Temp\ALSysIO64.sys [x] S3 ATSwpWDF;AuthenTec TruePrint USB Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys;c:\windows\SYSNATIVE\DRIVERS\AVGIDSDriver.Sys [x] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys;c:\windows\SYSNATIVE\DRIVERS\AVGIDSFilter.Sys [x] S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S3 Fjbtndrv;Fujitsu Button Driver;c:\windows\system32\drivers\FjBtnDrv.sys;c:\windows\SYSNATIVE\drivers\FjBtnDrv.sys [x] S3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\drivers\FUJ02E3.sys;c:\windows\SYSNATIVE\drivers\FUJ02E3.sys [x] S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x] S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys;c:\windows\SYSNATIVE\DRIVERS\iwdbus.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 O2MDRRDR;O2MDRRDR;c:\windows\system32\drivers\O2MDRw7x64.sys;c:\windows\SYSNATIVE\drivers\O2MDRw7x64.sys [x] S3 O2SDJRDR;O2SDJRDR;c:\windows\system32\drivers\o2sdjw7x64.sys;c:\windows\SYSNATIVE\drivers\o2sdjw7x64.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - ALSYSIO . Inhalt des "geplante Tasks" Ordners . 2013-11-04 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-08 13:55] . 2013-11-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-14 20:11] . 2013-11-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-14 20:11] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-04-20 18:07 261704 ----a-w- c:\users\Student\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-04-20 18:07 261704 ----a-w- c:\users\Student\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-04-20 18:07 261704 ----a-w- c:\users\Student\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATSwpNav"="c:\program files\Fingerprint Sensor\ATSwpNav -run" [X] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-12-07 11663464] "LoadFUJ02E3"="c:\program files\Fujitsu\FUJ02E3\FUJ02E3.exe" [2010-06-08 45680] "FDM7"="c:\program files\Fujitsu\FDM7\FdmDaemon.exe" [2009-10-19 164200] "PSUTility"="c:\program files\Fujitsu\PSUtility\TrayManager.exe" [2010-11-13 199528] "PfNet"="c:\program files\Fujitsu\Plugfree NETWORK\PfNet.exe" [2010-10-07 6311424] "FJBATAID2"="c:\program files\Fujitsu\BatteryAid2\BatteryDaemon.exe" [2010-10-29 124776] "FjStrtAp"="c:\program files\Fujitsu\Utils\FjStrtAp.exe" [2010-12-01 19800] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-20 168216] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-20 392472] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-20 416024] "IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-03-30 1935120] "SSUtility"="c:\program files\Fujitsu\SSUtility\FJSSDMN.exe" [2010-08-16 273256] "FJAutoR"="c:\program files\Fujitsu\AutoRotation\AutoRotation.exe" [2010-08-31 87912] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.de/ig?brand=FTSG&bmod=FTSG&aig=0&reason=1 mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 10.120.136.116 TCP: Interfaces\{7E2A9C4C-6439-4D64-94D7-D1C70414D42F}: NameServer = 10.74.210.210 10.74.210.211 FF - ProfilePath - c:\users\Student\AppData\Roaming\Mozilla\Firefox\Profiles\gw3efxrx.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN35700198291711154&UM=2&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/ig?brand=FTSG&bmod=FTSG&aig=0&reason=1 FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN35700198291711154&UM=2&q= FF - ExtSQL: 2013-11-02 13:15; {DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}; c:\programdata\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF - ExtSQL: 2013-11-02 13:53; fmconverter@gmail.com; c:\program files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox FF - user.js: {336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_status - inactive|||8641367097748679 FF - user.js: {336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_inactive_by_user - true|||8641367097748679 FF - user.js: extensions.funmoods.hmpg - true FF - user.js: extensions.funmoods.hmpgUrl - hxxp://searchfunmoods.com/?f=1&a=nv2&cd=2XzuyEtN2Y1L1Qzuzz0CyBtDyD0AyB0EtA0AtBzy0CyDtCtCtN0D0Tzu0CyEzztAtN1L2XzutBtFtBtFtCtFyDyByBtN1L1Czu1G2XtB&cr=1496079631&ir= FF - user.js: extensions.funmoods.dfltSrch - true FF - user.js: extensions.funmoods.srchPrvdr - Funmoods FF - user.js: extensions.funmoods.dnsErr - true FF - user.js: extensions.funmoods_i.newTab - false FF - user.js: extensions.funmoods.newTabUrl - hxxp://searchfunmoods.com/?f=2&a=nv2&cd=2XzuyEtN2Y1L1Qzuzz0CyBtDyD0AyB0EtA0AtBzy0CyDtCtCtN0D0Tzu0CyEzztAtN1L2XzutBtFtBtFtCtFyDyByBtN1L1Czu1G2XtB&cr=1496079631&ir= FF - user.js: extensions.funmoods.tlbrSrchUrl - hxxp://searchfunmoods.com/?f=3&a=nv2&cd=2XzuyEtN2Y1L1Qzuzz0CyBtDyD0AyB0EtA0AtBzy0CyDtCtCtN0D0Tzu0CyEzztAtN1L2XzutBtFtBtFtCtFyDyByBtN1L1Czu1G2XtB&cr=1496079631&ir=&q= FF - user.js: extensions.funmoods.id - 8C705A7E3A29C511 FF - user.js: extensions.funmoods.instlDay - 15822 FF - user.js: extensions.funmoods.vrsn - 1.8.11.0 FF - user.js: extensions.funmoods.vrsni - 1.8.11.0 FF - user.js: extensions.funmoods_i.vrsnTs - 1.8.11.021:22 FF - user.js: extensions.funmoods.prtnrId - funmoods FF - user.js: extensions.funmoods.prdct - funmoods FF - user.js: extensions.funmoods.aflt - nv2 FF - user.js: extensions.funmoods_i.smplGrp - none FF - user.js: extensions.funmoods.tlbrId - base FF - user.js: extensions.funmoods.instlRef - FF - user.js: extensions.funmoods.dfltLng - FF - user.js: extensions.funmoods.appId - {EA28B360-05E0-4F93-8150-02891F1D8D3C} FF - user.js: extensions.funmoods.excTlbr - false FF - user.js: extensions.funmoods_i.hmpg - true FF - user.js: extensions.irspeeddial.aflt - nv2 FF - user.js: extensions.irspeeddial.instlRef - FF - user.js: extensions.irspeeddial.cr - 1496079631 FF - user.js: extensions.irspeeddial.cd - 2XzuyEtN2Y1L1Qzuzz0CyBtDyD0AyB0EtA0AtBzy0CyDtCtCtN0D0Tzu0CyEzztAtN1L2XzutBtFtBtFtCtFyDyByBtN1L1Czu1G2XtB FF - user.js: extensions.delta.tlbrSrchUrl - FF - user.js: extensions.delta.id - 9c42c5110000000000008c705a7e3a29 FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} FF - user.js: extensions.delta.instlDay - 15917 FF - user.js: extensions.delta.vrsn - 1.8.22.0 FF - user.js: extensions.delta.vrsni - 1.8.22.0 FF - user.js: extensions.delta.vrsnTs - 1.8.22.023:22 FF - user.js: extensions.delta.prtnrId - delta FF - user.js: extensions.delta.prdct - delta FF - user.js: extensions.delta.aflt - babsst FF - user.js: extensions.delta.smplGrp - none FF - user.js: extensions.delta.tlbrId - base FF - user.js: extensions.delta.instlRef - sst FF - user.js: extensions.delta.dfltLng - de FF - user.js: extensions.delta.excTlbr - false FF - user.js: extensions.delta.ffxUnstlRst - true FF - user.js: extensions.delta.admin - false FF - user.js: extensions.delta_i.babTrack - affID=121564&tsp=4960 FF - user.js: extensions.delta_i.babExt - FF - user.js: extensions.delta_i.srcExt - ss FF - user.js: extensions.delta.autoRvrt - false FF - user.js: extensions.delta.rvrt - false FF - user.js: extensions.delta.newTab - false . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-Locked - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-BRAINYOO - d:\programme\BRAINYOO\uninst.exe AddRemove-RealPlayer 16.0 - d:\programme\Update\r1puninst.exe AddRemove-CodeBlocks - d:\programme\CodeBlocks\uninstall.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" "Key"="ActionsPane3" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\hxxp://schemas.microsoft.com/office/smartdocuments/2003\0] "Key"="hxxp://schemas.microsoft.com/office/smartdocuments/2003" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\hxxp://schemas.microsoft.com/office/smartdocuments/2003\0\{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}\Alias] "0"="Microsoft Actions Pane 3" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-11-04 10:54:37 ComboFix-quarantined-files.txt 2013-11-04 09:54 . Vor Suchlauf: 13 Verzeichnis(se), 25.039.020.032 Bytes frei Nach Suchlauf: 17 Verzeichnis(se), 24.538.820.608 Bytes frei . - - End Of File - - 677967B26CDD315974827065DD37A564 Edit: Eben ist mir auch noch aufgefallen, dass fast alle Symbole aus dem "Infobereichsysmbole" (also unten rechts auf dem Bildschirm) verschwunden sind. Oder hat das eines der Programme, die ich für diesen Thread ausgeführt habe, verursacht? VG |
![]() |
Themen zu Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da |
bluescreen, browser, ccsetup, computer, cpu, desktop, device driver, error, excel, farbar, farbar recovery scan tool, firefox, flash player, homepage, hängen, mozilla, newtab, nicht möglich, plug-in, port, realtek, registry, security, server, sicherheit, software, starten, svchost.exe, system, tablet, usb, virus, windows |