| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Internet Explorer öffnet sich !Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.02.2014, 18:02
| #1 |
| |  Internet Explorer öffnet sich ! Hi seit einigen Tagen öffnet sich mein Internet Explorer selbst mit der Seite "getwindowinfo" und dass die Seite nicht geladen werden kann. Habe in einem anderen Beitrag gelesen ich soll FRST installieren und jetzt nach dem Scan den FRST.txt und den Addition.txt hochladen FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-02-2014 01
Ran by Robin (administrator) on LAPTOP-ROBIN on 11-02-2014 17:44:11
Running from C:\Users\Robin\Downloads
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files\FRITZ!Box-Kindersicherung\avmident.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Teruten) C:\Windows\system32\FsUsbExService.Exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
() C:\Windows\system32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files\BlueStacks\HD-SharedFolder.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Agent.exe
(Spotify Ltd) C:\Users\Robin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Windows Net) C:\Users\Robin\AppData\Roaming\Windows Net Data\net.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
() C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Frontend.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\BlueStacks\HD-Adb.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-03] (Synaptics Incorporated)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-09-15] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [PDF Complete] - C:\Program Files\PDF Complete\pdfsty.exe [563736 2010-03-06] (PDF Complete Inc)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [NPSStartup] - [X]
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [KeePass 2 PreLoad] - "C:\Program Files\KeePass Password Safe 2\KeePass.exe" --preload
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [BlueStacks Agent] - C:\Program Files\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Run: [rfxsrvtray] - "C:\Program Files\Tobit Radio.fx\Client\rfx-tray.exe"
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Run: [Spotify Web Helper] - C:\Users\Robin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-25] (Spotify Ltd)
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Run: [KPeerNexonEU] - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-04-29] (NEXON Inc.)
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1966067447-2428371569-2573764070-1004\...\Policies\Explorer: [DisallowRun] 1
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk
ShortcutTarget: Password Safe.lnk -> C:\Program Files\Password Safe\pwsafe.exe (SourceForge.net)
Startup: C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\Robin\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
Startup: C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=42820&tid=3347&st=bs&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=10&cc=&mi=f0edfd7900000000000000ff25e4396d
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9D4342D87B2BCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=42820&tid=3347&st=bs&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=42820&st=home&tid=3347
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=42820&tid=3347&st=bs&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=42820&tid=3347&st=bs&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=42820&tid=3347&st=bs&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=42820&st=home&tid=3347
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=42820&tid=3347&st=bs&q=
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=e5c3a062-e1af-4637-92fd-8565be4f103e&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=e5c3a062-e1af-4637-92fd-8565be4f103e&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://feed.snap.do/?publisher=SnapdoW3i&dpid=SnapdoW3i&co=DE&userid=5a7f4d34-2110-4659-8c3c-53fc23146d8a&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - DefaultScope {EA5CD4FB-CE9F-4E40-856B-B8E0C1F42D7A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - D6D07C15B8BA4E28A080C707102942DF URL = hxxp://search.certified-toolbar.com?si=42820&st=bs&tid=3347&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F0ED00FF25E4396D&affID=119357&tsp=4967
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://feed.snap.do/?publisher=SnapdoW3i&dpid=SnapdoW3i&co=DE&userid=5a7f4d34-2110-4659-8c3c-53fc23146d8a&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {EA5CD4FB-CE9F-4E40-856B-B8E0C1F42D7A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {EFF2F9C4-8237-40E1-947D-FD9C22D7752C} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=VDJ&o=41647959&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=8Q&apn_dtid=YYYYYYYYDE&apn_uid=C004A780-29C2-4E19-8BBE-E1D7EA47B153&apn_sauid=239F6AE5-3212-4B61-A3AC-EC460C812030
BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default
FF SearchEngineOrder.3: Bing
FF NetworkProxy: "type", 0
FF Homepage: about:home|hxxp://www.giga.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npnxgameEU.dll (Nexon)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\Extensions\amazon-icon@giga.de [2014-02-09]
FF Extension: No Name - C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\Extensions\staged [2014-02-09]
FF Extension: DownloadHelper - C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-07]
FF Extension: Movie2kDownloader - C:\Users\Robin\AppData\Roaming\Mozilla\Firefox\Profiles\lvd2rw75.default\Extensions\movie2kdownloader@movie2kdownloader.com.xpi [2012-12-13]
Chrome:
=======
CHR HomePage: chrome://newtab
CHR Plugin: (Shockwave Flash) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Wajam) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins/PriamNPAPI.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.313\npMcAfeeMss.dll No File
CHR Plugin: (Uplay PC) - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-03]
CHR Extension: (Google Drive) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-03]
CHR Extension: (Web Developer) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2013-04-20]
CHR Extension: (YouTube) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-03]
CHR Extension: (Adblock Plus) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-30]
CHR Extension: (Google-Suche) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-03]
CHR Extension: (Price Alarm) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab [2014-02-09]
CHR Extension: (Google Wallet) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]
CHR Extension: (Google Mail) - C:\Users\Robin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-03]
CHR HKLM\...\Chrome\Extension: [blaofbhgbmeikidhlkmjhbkbfohpgekf] - C:\Program Files\Movie2KDownloader.com\Movie2KDownloader10.crx [2013-02-03]
CHR HKLM\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Robin\AppData\Local\Wajam\Chrome\wajam.crx [2012-10-05]
CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Robin\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-02-09]
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-01] (Avira Operations GmbH & Co. KG)
R2 avmident; C:\Program Files\FRITZ!Box-Kindersicherung\avmident.exe [76288 2011-09-27] (AVM Berlin)
R2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2010-03-06] (PDF Complete Inc)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2012-12-11] ()
S2 SystemStoreService; C:\Program Files\SoftwareUpdater\SystemStore.exe [297984 2014-02-11] ()
S3 TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-10] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [106256 2013-12-20] (BlueStack Systems)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R1 MpKsl2115d440; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FB15DB4E-0E35-48E4-BFB9-88F1175BD5CD}\MpKsl2115d440.sys [40392 2014-02-11] (Microsoft Corporation)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [78848 2010-05-20] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-10] (Avira GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [27136 2009-09-16] (Tunngle.net)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [122752 2010-03-29] (Texas Instruments)
S1 ckijylbm; \??\C:\Windows\system32\drivers\ckijylbm.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S1 gahpcaal; \??\C:\Windows\system32\drivers\gahpcaal.sys [X]
S1 ivqofeja; \??\C:\Windows\system32\drivers\ivqofeja.sys [X]
S1 oelltutb; \??\C:\Windows\system32\drivers\oelltutb.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-11 17:44 - 2014-02-11 17:44 - 00022939 _____ () C:\Users\Robin\Downloads\FRST.txt
2014-02-11 17:43 - 2014-02-11 17:44 - 00000000 ____D () C:\FRST
2014-02-11 17:42 - 2014-02-11 17:42 - 01139712 _____ (Farbar) C:\Users\Robin\Downloads\FRST.exe
2014-02-10 20:12 - 2014-02-10 20:12 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2014-02-09 18:23 - 2014-02-09 18:23 - 00000000 ____D () C:\Users\Robin\ChromeExtensions
2014-02-09 18:23 - 2014-02-09 18:23 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\Windows Net Data
2014-02-09 18:23 - 2014-02-09 18:23 - 00000000 ____D () C:\Users\Robin\AppData\Local\Temp7ae8ab883fbb8827a7796e938cf91f25
2014-02-09 18:15 - 2014-02-09 18:15 - 00000000 ____D () C:\Users\Robin\Downloads\Crazy-Machines-2
2014-02-09 18:15 - 2014-02-09 18:15 - 00000000 ____D () C:\Users\Robin\AppData\Local\Temp52916aa912d9596767ab739907bd5c27_
2014-02-09 18:14 - 2014-02-09 18:14 - 01059584 _____ () C:\Users\Robin\Downloads\Crazy-Machines-2-Setup.exe
2014-02-09 18:14 - 2014-02-09 18:14 - 00000000 ____D () C:\Users\Robin\Downloads\Crazy-Machines---Die-Erfinderwerkstatt
2014-02-09 18:14 - 2014-02-09 18:14 - 00000000 ____D () C:\Users\Robin\AppData\Local\Temp52916aa912d9596767ab739907bd5c27
2014-02-09 18:13 - 2014-02-09 18:13 - 01059584 _____ () C:\Users\Robin\Downloads\Crazy-Machines---Die-Erfinderwerkstatt-Setup.exe
2014-02-09 18:10 - 2014-02-09 18:10 - 00209440 _____ (Big Fish Games) C:\Users\Robin\Downloads\crazy-machines-game-s1-l1-gF2572T1L1-d1407136773.exe
2014-02-09 18:10 - 2014-02-09 18:10 - 00000000 ____D () C:\BigFishGamesCache
2014-02-09 18:07 - 2014-02-09 18:08 - 00401760 _____ (Softonic ) C:\Users\Robin\Downloads\SoftonicDownloader_fuer_crazy-machines-ii.exe
2014-02-09 18:07 - 2014-02-09 18:07 - 00535048 _____ () C:\Users\Robin\Downloads\crazy machines setup.exe
2014-02-01 23:46 - 2014-02-01 23:46 - 00002102 _____ () C:\Users\Robin\Desktop\Clash of Clans.lnk
2014-02-01 23:30 - 2014-02-01 23:30 - 00000000 ____D () C:\Program Files\BlueStacks
2014-02-01 23:29 - 2014-02-01 23:31 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-02-01 23:28 - 2014-02-01 23:29 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Robin\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-01-17 11:51 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-17 11:51 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-17 11:51 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-17 11:51 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-17 11:51 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-17 11:51 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-17 11:51 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-17 11:51 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-17 11:51 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2014-02-11 17:44 - 2014-02-11 17:44 - 00022939 _____ () C:\Users\Robin\Downloads\FRST.txt
2014-02-11 17:44 - 2014-02-11 17:43 - 00000000 ____D () C:\FRST
2014-02-11 17:42 - 2014-02-11 17:42 - 01139712 _____ (Farbar) C:\Users\Robin\Downloads\FRST.exe
2014-02-11 17:25 - 2013-02-03 14:32 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-11 17:20 - 2013-11-07 14:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-11 17:11 - 2012-07-22 19:51 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\Spotify
2014-02-11 16:54 - 2009-07-14 05:34 - 00013760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-11 16:54 - 2009-07-14 05:34 - 00013760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-11 16:52 - 2011-03-07 20:06 - 01219423 _____ () C:\Windows\WindowsUpdate.log
2014-02-11 16:41 - 2009-07-14 05:39 - 00091505 _____ () C:\Windows\setupact.log
2014-02-11 16:39 - 2013-02-03 14:32 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 16:39 - 2013-01-17 15:10 - 00000386 _____ () C:\Windows\Tasks\Final Media Player Update Checker.job
2014-02-11 16:38 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-10 20:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-10 20:14 - 2011-03-12 12:42 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\Skype
2014-02-10 20:12 - 2014-02-10 20:12 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2014-02-09 18:23 - 2014-02-09 18:23 - 00000000 ____D () C:\Users\Robin\ChromeExtensions
2014-02-09 18:23 - 2014-02-09 18:23 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\Windows Net Data
2014-02-09 18:23 - 2014-02-09 18:23 - 00000000 ____D () C:\Users\Robin\AppData\Local\Temp7ae8ab883fbb8827a7796e938cf91f25
2014-02-09 18:23 - 2011-03-08 09:13 - 00000000 ____D () C:\Users\Robin
2014-02-09 18:15 - 2014-02-09 18:15 - 00000000 ____D () C:\Users\Robin\Downloads\Crazy-Machines-2
2014-02-09 18:15 - 2014-02-09 18:15 - 00000000 ____D () C:\Users\Robin\AppData\Local\Temp52916aa912d9596767ab739907bd5c27_
2014-02-09 18:14 - 2014-02-09 18:14 - 01059584 _____ () C:\Users\Robin\Downloads\Crazy-Machines-2-Setup.exe
2014-02-09 18:14 - 2014-02-09 18:14 - 00000000 ____D () C:\Users\Robin\Downloads\Crazy-Machines---Die-Erfinderwerkstatt
2014-02-09 18:14 - 2014-02-09 18:14 - 00000000 ____D () C:\Users\Robin\AppData\Local\Temp52916aa912d9596767ab739907bd5c27
2014-02-09 18:13 - 2014-02-09 18:13 - 01059584 _____ () C:\Users\Robin\Downloads\Crazy-Machines---Die-Erfinderwerkstatt-Setup.exe
2014-02-09 18:10 - 2014-02-09 18:10 - 00209440 _____ (Big Fish Games) C:\Users\Robin\Downloads\crazy-machines-game-s1-l1-gF2572T1L1-d1407136773.exe
2014-02-09 18:10 - 2014-02-09 18:10 - 00000000 ____D () C:\BigFishGamesCache
2014-02-09 18:08 - 2014-02-09 18:07 - 00401760 _____ (Softonic ) C:\Users\Robin\Downloads\SoftonicDownloader_fuer_crazy-machines-ii.exe
2014-02-09 18:07 - 2014-02-09 18:07 - 00535048 _____ () C:\Users\Robin\Downloads\crazy machines setup.exe
2014-02-09 12:39 - 2012-07-22 19:52 - 00000000 ____D () C:\Users\Robin\AppData\Local\Spotify
2014-02-08 12:20 - 2012-07-23 11:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-08 12:20 - 2011-06-28 09:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-01 23:46 - 2014-02-01 23:46 - 00002102 _____ () C:\Users\Robin\Desktop\Clash of Clans.lnk
2014-02-01 23:31 - 2014-02-01 23:29 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-02-01 23:31 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-01 23:30 - 2014-02-01 23:30 - 00000000 ____D () C:\Program Files\BlueStacks
2014-02-01 23:29 - 2014-02-01 23:28 - 10245808 _____ (BlueStack Systems Inc.) C:\Users\Robin\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe
2014-01-23 18:59 - 2011-03-08 10:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-23 18:59 - 2009-07-14 03:04 - 00000562 _____ () C:\Windows\win.ini
2014-01-19 19:11 - 2009-07-14 05:33 - 00436560 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-19 08:32 - 2011-03-07 20:35 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-17 13:18 - 2013-09-01 17:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-17 13:14 - 2011-03-08 09:36 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 12:52 - 2013-10-10 16:36 - 00000000 ____D () C:\Users\Robin\AppData\Roaming\.minecraft
Some content of TEMP:
====================
C:\Users\admin\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\admin\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\admin\AppData\Local\Temp\GoogleChromeInstaller.exe
C:\Users\admin\AppData\Local\Temp\installerdll1099058.dll
C:\Users\admin\AppData\Local\Temp\installerdll1371342.dll
C:\Users\admin\AppData\Local\Temp\installerdll1375741.dll
C:\Users\admin\AppData\Local\Temp\installerdll1389438.dll
C:\Users\admin\AppData\Local\Temp\installerdll194658.dll
C:\Users\admin\AppData\Local\Temp\installerdll2083393.dll
C:\Users\admin\AppData\Local\Temp\installerdll237371.dll
C:\Users\admin\AppData\Local\Temp\installerdll280318.dll
C:\Users\admin\AppData\Local\Temp\installerdll722159.dll
C:\Users\admin\AppData\Local\Temp\installerdll726590.dll
C:\Users\admin\AppData\Local\Temp\installerdll742408.dll
C:\Users\admin\AppData\Local\Temp\OriginLauncher1371342.exe
C:\Users\admin\AppData\Local\Temp\OriginLauncher722159.exe
C:\Users\admin\AppData\Local\Temp\rootsupd.exe
C:\Users\admin\AppData\Local\Temp\Setup.exe
C:\Users\admin\AppData\Local\Temp\softonic_s_de3.exe
C:\Users\admin\AppData\Local\Temp\tbinst.exe
C:\Users\admin\AppData\Local\Temp\TOBITCLT.DLL
C:\Users\admin\AppData\Local\Temp\vcredist_x64.exe
C:\Users\admin\AppData\Local\Temp\vcredist_x86.exe
C:\Users\admin\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\Robin\AppData\Local\Temp\amazonicon_v4.exe
C:\Users\Robin\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\Robin\AppData\Local\Temp\avgnt.exe
C:\Users\Robin\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Robin\AppData\Local\Temp\crazy-machines-game-s1-l1-gF2572T1L1-d1407136773.exe
C:\Users\Robin\AppData\Local\Temp\crazy-machines-game-s1-l1-gF2572T1L1-d1407136773{1}.exe
C:\Users\Robin\AppData\Local\Temp\installerdll223097.dll
C:\Users\Robin\AppData\Local\Temp\install_flashplayer11x32ax_gtba_chra_dy_aih[1].exe
C:\Users\Robin\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Robin\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\Robin\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe
C:\Users\Robin\AppData\Local\Temp\NGMDll.dll
C:\Users\Robin\AppData\Local\Temp\NGMResource.dll
C:\Users\Robin\AppData\Local\Temp\nse34BA.exe
C:\Users\Robin\AppData\Local\Temp\nsi3B5E.exe
C:\Users\Robin\AppData\Local\Temp\nsiA9AF.exe
C:\Users\Robin\AppData\Local\Temp\nsn4935.exe
C:\Users\Robin\AppData\Local\Temp\nso9BC9.exe
C:\Users\Robin\AppData\Local\Temp\nsy4271.exe
C:\Users\Robin\AppData\Local\Temp\nsyA220.exe
C:\Users\Robin\AppData\Local\Temp\OptimizerPro_20140120.exe
C:\Users\Robin\AppData\Local\Temp\pcspeedmaxsetup.exe
C:\Users\Robin\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Robin\AppData\Local\Temp\sdapskill.exe
C:\Users\Robin\AppData\Local\Temp\sdaspwn.exe
C:\Users\Robin\AppData\Local\Temp\Setup.exe
C:\Users\Robin\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Robin\AppData\Local\Temp\sp_downloader.exe
C:\Users\Robin\AppData\Local\Temp\tbDVDV.dll
C:\Users\Robin\AppData\Local\Temp\TsuA3D099CE.dll
C:\Users\Robin\AppData\Local\Temp\unicows.dll
C:\Users\Robin\AppData\Local\Temp\uninst1.exe
C:\Users\Robin\AppData\Local\Temp\Uninstaller-1916.exe
C:\Users\Robin\AppData\Local\Temp\Uninstaller-3076.exe
C:\Users\Robin\AppData\Local\Temp\Uninstaller-5952.exe
C:\Users\Robin\AppData\Local\Temp\wajam_install.exe
C:\Users\Robin\AppData\Local\Temp\_isAF3B.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-12 16:18
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-02-2014 01
Ran by Robin at 2014-02-11 17:46:08
Running from C:\Users\Robin\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
Adobe Acrobat 5.0 (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (Version: 3.7.0.1530 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.7.0.1530 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (Version: 12.0.0.44 - Adobe Systems Incorporated)
Apple Application Support (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
Application Profiles (Version: 2.0.4441.36343 - Advanced Micro Devices, Inc.)
ATI Catalyst Install Manager (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avira Free Antivirus (Version: 14.0.2.286 - Avira)
AVM FRITZ!Box-Kindersicherung (Version: 4.2.3 - AVM Berlin)
Bing Bar (Version: 7.0.609.0 - Microsoft Corporation)
BlueStacks App Player (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
BlueStacks Notification Center (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Broadcom 2070 Bluetooth 2.1 + EDR (Version: 6.2.1.1100 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.60.350.6 - Broadcom Corporation)
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2010.0915.323.4157 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2010.0915.323.4157 - ATI) Hidden
CCC Help Chinese Standard (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Chinese Traditional (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Czech (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Danish (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Dutch (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help English (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Finnish (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help French (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help German (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Greek (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Hungarian (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Italian (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Japanese (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Korean (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Norwegian (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Polish (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Portuguese (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Russian (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Spanish (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Swedish (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Thai (Version: 2010.0915.0322.4157 - ATI) Hidden
CCC Help Turkish (Version: 2010.0915.0322.4157 - ATI) Hidden
ccc-core-static (Version: 2010.0915.323.4157 - Ihr Firmenname) Hidden
ccc-utility (Version: 2010.0915.323.4157 - ATI) Hidden
Cisco EAP-FAST Module (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (Version: 1.1.6 - Cisco Systems, Inc.)
Combat Arms EU (Version: - )
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version: - Microsoft)
Euro Truck Simulator 1.00 (Version: 1.00 - )
Final Media Player 2012 (Version: 2012.10.9.0 - Bitberry Software)
Free Audio CD Burner version 1.4.7 (Version: - DVDVideoSoft Limited.)
Free Video to iPod Converter version 5.0.19.1015 (Version: 5.0.19.1015 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.11.31.916 (Version: 3.11.31.916 - DVDVideoSoft Ltd.)
Google Chrome (Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
HP ESU for Microsoft Windows 7 (Version: 1.1.8.1 - Hewlett-Packard Company)
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Officejet Pro 8500 A910 Hilfe (Version: 140.0.2.2 - Hewlett Packard)
HP Update (Version: 5.003.001.001 - Hewlett-Packard)
HP Web Camera (Version: 1.0.0 - Hewlett-Packard) Hidden
HP Webcam (Version: 1.0.19.6 - Roxio)
HP Webcam Driver (Version: 6.1.7600.0049 - Realtek Semiconductor Corp.)
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (Version: 12.3.4.0 - HP)
iTunes (Version: 11.0.3.42 - Apple Inc.)
KeePass Password Safe 2.20.1 (Version: - Dominik Reichl)
Linkury Smartbar (Version: 1.6.1.616 - Linkury Inc.) <==== ATTENTION
Marketsplash Schnellzugriffe (Version: 1.0.1.7 - Hewlett-Packard)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 14.0.1 (x86 de) (Version: 14.0.1 - Mozilla)
Mozilla Firefox 15.0 (x86 de) (HKCU Version: 15.0 - Mozilla)
Mozilla Maintenance Service (Version: 14.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
Need for Speed™ The Run (Version: 1.1.0.0 - Electronic Arts)
OpenOffice.org 3.3 (Version: 3.3.9567 - OpenOffice.org)
Origin (Version: 9.1.3.2636 - Electronic Arts, Inc.)
Password Safe (Version: - )
PC Connectivity Solution (Version: 8.15.0.0 - Nokia)
PDF Complete Special Edition (Version: 3.5.117 - PDF Complete, Inc)
PunkBuster Services (Version: 0.990 - Even Balance, Inc.)
QuickTime (Version: 7.74.80.86 - Apple Inc.)
Realtek Ethernet Controller All-In-One Windows Driver (Version: 1.12.0016 - Realtek)
SAMSUNG Mobile Composite Device Software (Version: - )
Samsung Mobile Modem Device Software (Version: - )
SAMSUNG Mobile Modem Driver Set (Version: - )
Samsung Mobile phone USB driver Drive Software (Version: - )
SAMSUNG Mobile USB Modem 1.0 Software (Version: - )
SAMSUNG Mobile USB Modem Software (Version: - )
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (Version: - )
SamsungConnectivityCableDriver (Version: 6.83.6.2.1 - Samsung)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version: - Microsoft) Hidden
Skype™ 6.10 (Version: 6.10.104 - Skype Technologies S.A.)
Spotify (HKCU Version: 0.9.4.169.gc0399df6 - Spotify AB)
Studie zur Verbesserung von HP Officejet Pro 8500 A910 Produkten (Version: 22.50.231.0 - Hewlett-Packard Co.)
Synaptics Pointing Device Driver (Version: 15.0.24.0 - Synaptics Incorporated)
Tunngle beta (Version: - Tunngle.net GmbH)
Ubisoft Game Launcher (Version: 1.0.0.0 - UBISOFT)
Uninstall 1.0.0.1 (Version: - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version: - Microsoft)
Vocup 1.4.3 (Version: 1.4.3 - Florian Amstutz)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (12/16/2009 6.2.0.9414) (Version: 12/16/2009 6.2.0.9414 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows-Treiberpaket - Nokia pccsmcfd (10/12/2007 6.85.4.0) (Version: 10/12/2007 6.85.4.0 - Nokia)
WinRAR 5.00 (32-bit) (Version: 5.00.0 - win.rar GmbH)
==================== Restore Points =========================
14-12-2013 12:37:02 Windows Update
15-12-2013 11:22:40 Windows Update
19-12-2013 13:41:35 Windows Update
06-01-2014 13:33:20 Windows Update
09-01-2014 18:18:24 Windows Update
14-01-2014 11:05:19 Windows Update
17-01-2014 12:13:36 Windows Update
22-01-2014 12:49:10 Windows Update
23-01-2014 17:45:41 Windows Update
29-01-2014 15:21:22 Windows Update
01-02-2014 22:24:16 Windows Update
08-02-2014 10:57:28 Windows Update
09-02-2014 17:27:20 Microsoft Antimalware Checkpoint
11-02-2014 15:56:54 Removed Java 7 Update 40
==================== Hosts content: ==========================
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05298344-C192-4363-86F0-F6937881F22D} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-19] ()
Task: {2D422E9C-E6B6-44BB-BC31-A28D1DA159FB} - System32\Tasks\HPCustParticipation HP Officejet Pro 8500 A910 => C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {3433225A-8B73-41A8-89CE-1DE241AA4480} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-02-03] (Google Inc.)
Task: {6CABDF9F-755D-4CF3-A9D5-BD7E471D040B} - System32\Tasks\{8E4A773F-8056-40BE-89CB-65A2DC7BA13F} => C:\Program Files\Skype\\Phone\Skype.exe [2013-10-21] (Skype Technologies S.A.)
Task: {76B60F10-3D9A-48F0-99CB-EB1C7C7A411E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-02-03] (Google Inc.)
Task: {C23420E1-37AB-48F0-A9DD-22DED8F876E7} - System32\Tasks\Final Media Player Update Checker => C:\Program Files\FinalMediaPlayer\FMPCheckForUpdates.exe [2012-09-02] (Bitberry Software)
Task: {CF1EBE49-7B91-4F92-A3C2-99C6F3C89BE0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-08] (Adobe Systems Incorporated)
Task: {DC184B90-27E9-4F52-8834-BAB43D3B04DE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {EB001794-20D7-4E98-8B63-5190C0F7AFC7} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-19] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Final Media Player Update Checker.job => C:\Program Files\FinalMediaPlayer\FMPCheckForUpdates.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2009-12-29 13:31 - 2009-12-29 13:31 - 00132384 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-01-17 16:19 - 2011-03-08 00:45 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2013-04-29 15:17 - 2013-04-29 15:17 - 01992328 _____ () C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
2010-04-12 16:59 - 2010-04-12 16:59 - 00098304 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-09-15 03:22 - 2010-09-15 03:22 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-08 17:41 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-08 17:41 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-08 17:41 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-08 17:41 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-08 17:41 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-08 17:41 - 2014-02-02 00:42 - 13616456 _____ () C:\Program Files\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll
2011-09-02 19:08 - 2011-09-02 19:08 - 00410911 _____ () C:\Program Files\BlueStacks\HD-Adb.exe
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/10/2014 07:05:27 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9969
Error: (02/10/2014 07:05:27 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9969
Error: (02/10/2014 07:05:27 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (02/09/2014 06:27:13 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {9cde560a-b00d-4872-801f-60e753823043}
Error: (02/09/2014 06:24:15 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Crazy-Machines-2-Setup.exe, Version: 0.0.0.0, Zeitstempel: 0x52d6ac8c
Name des fehlerhaften Moduls: Crazy-Machines-2-Setup.exe, Version: 0.0.0.0, Zeitstempel: 0x52d6ac8c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c6519
ID des fehlerhaften Prozesses: 0x13fc
Startzeit der fehlerhaften Anwendung: 0xCrazy-Machines-2-Setup.exe0
Pfad der fehlerhaften Anwendung: Crazy-Machines-2-Setup.exe1
Pfad des fehlerhaften Moduls: Crazy-Machines-2-Setup.exe2
Berichtskennung: Crazy-Machines-2-Setup.exe3
Error: (02/09/2014 06:24:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: sdaspwn.exe, Version: 0.0.0.0, Zeitstempel: 0x52d66e16
Name des fehlerhaften Moduls: sdaspwn.exe, Version: 0.0.0.0, Zeitstempel: 0x52d66e16
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000bf231
ID des fehlerhaften Prozesses: 0x1244
Startzeit der fehlerhaften Anwendung: 0xsdaspwn.exe0
Pfad der fehlerhaften Anwendung: sdaspwn.exe1
Pfad des fehlerhaften Moduls: sdaspwn.exe2
Berichtskennung: sdaspwn.exe3
Error: (02/08/2014 05:29:20 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17826796
Error: (02/08/2014 05:29:20 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17826796
Error: (02/08/2014 05:29:20 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (02/08/2014 11:40:10 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: NEXON_EU_Downloader_Engine.exe, Version: 2.5.11.0, Zeitstempel: 0x50ecc98c
Name des fehlerhaften Moduls: NEXON_EU_Downloader_Engine.exe, Version: 2.5.11.0, Zeitstempel: 0x50ecc98c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000019e6
ID des fehlerhaften Prozesses: 0x87c
Startzeit der fehlerhaften Anwendung: 0xNEXON_EU_Downloader_Engine.exe0
Pfad der fehlerhaften Anwendung: NEXON_EU_Downloader_Engine.exe1
Pfad des fehlerhaften Moduls: NEXON_EU_Downloader_Engine.exe2
Berichtskennung: NEXON_EU_Downloader_Engine.exe3
System errors:
=============
Error: (02/11/2014 04:43:44 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (02/10/2014 09:00:58 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (02/10/2014 06:33:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde nicht richtig gestartet.
Error: (02/10/2014 06:33:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde nicht richtig gestartet.
Error: (02/09/2014 11:34:05 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (02/08/2014 00:04:23 PM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (02/08/2014 11:42:15 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (02/06/2014 03:28:44 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.165.3205.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.4.0304.00
Quellpfad: 4.4.0304.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (02/06/2014 03:19:45 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/04/2014 04:25:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Log Rotator Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (02/10/2014 07:05:27 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9969
Error: (02/10/2014 07:05:27 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9969
Error: (02/10/2014 07:05:27 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (02/09/2014 06:27:13 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {9cde560a-b00d-4872-801f-60e753823043}
Error: (02/09/2014 06:24:15 PM) (Source: Application Error)(User: )
Description: Crazy-Machines-2-Setup.exe0.0.0.052d6ac8cCrazy-Machines-2-Setup.exe0.0.0.052d6ac8cc0000005000c651913fc01cf25ba88dec914C:\Users\Robin\Downloads\Crazy-Machines-2-Setup.exeC:\Users\Robin\Downloads\Crazy-Machines-2-Setup.exeff620fe5-91ae-11e3-adb8-e02a82058389
Error: (02/09/2014 06:24:10 PM) (Source: Application Error)(User: )
Description: sdaspwn.exe0.0.0.052d66e16sdaspwn.exe0.0.0.052d66e16c0000005000bf231124401cf25bbaf33a37dC:\Users\Robin\AppData\Local\Temp\sdaspwn.exeC:\Users\Robin\AppData\Local\Temp\sdaspwn.exefc7174a0-91ae-11e3-adb8-e02a82058389
Error: (02/08/2014 05:29:20 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17826796
Error: (02/08/2014 05:29:20 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17826796
Error: (02/08/2014 05:29:20 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (02/08/2014 11:40:10 AM) (Source: Application Error)(User: )
Description: NEXON_EU_Downloader_Engine.exe2.5.11.050ecc98cNEXON_EU_Downloader_Engine.exe2.5.11.050ecc98cc0000005000019e687c01cf24ba1b0748f5C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exeC:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe61b407dd-90ad-11e3-8b58-e02a82058389
==================== Memory info ===========================
Percentage of memory in use: 72%
Total physical RAM: 2812.56 MB
Available physical RAM: 779.22 MB
Total Pagefile: 5623.41 MB
Available Pagefile: 2537.16 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.94 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:79.67 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: D2C16FE5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
==================== End Of Log ============================
 Danke schon mal  |
Baum-Darstellung