Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: internet funktioniert nicht mehr ... aufgrund von trojaner?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 01.03.2014, 09:16   #1
nikita86
 
internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



Hallo ihr lieben.

Bin Auf das Form gestoßen und hoffe mir kann jemand helfen.

Ich habe seit einigen Tagen das Problem, dass ich mitimeinen rechner nicht mehr ins internet komme.

Da vor ein paar tagen mein internet anbieter u.a. das netz ausgebaut hat, dachte ich es kam deshalb zur störung. Hab gestern mit der störungshotline telefoniert. Daran liegts definitiv nicht.

Das wlan funktioniert zudem auf allen anderen geräten. Netzwerkkabel, etc. Ist auch in ordnung.

Ich hatte vor kurzem einen trojaner und frage mich, ob es nun daran liegen könnte. Meint ihr, das könnte das Problem sein?

Habe leider nur antivir in der gratis Version auf dem rechner.

Lg nikita

Alt 01.03.2014, 09:32   #2
schrauber
/// the machine
/// TB-Ausbilder
 

internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



hi,

von einem anderen Rechner laden und per USB transferieren.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 01.03.2014, 11:27   #3
nikita86
 
internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02
Ran by Marina (administrator) on MARINA-PC on 01-03-2014 11:18:01
Running from F:\
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(RealNetworks, Inc.) C:\Program Files\Common Files\Real\Update_OB\realsched.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(APN LLC.) C:\Users\Marina\AppData\Local\VNT\vntldr.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Samsung Electronics) C:\Program Files\Samsung\Kies\KiesAirMessage.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Marina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\system32\srvany.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
() C:\Windows\KMService.exe
() C:\Windows\system32\PSIService.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [104936 2008-07-18] (CyberLink)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-20] (Realtek Semiconductor)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13797920 2009-07-23] (NVIDIA Corporation)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Common Files\Real\Update_OB\realsched.exe [198160 2010-01-05] (RealNetworks, Inc.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [652624 2007-10-25] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1603152 2007-09-13] (CANON INC.)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [47392 2010-04-13] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [AnyConnect SMC] - C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [518392 2011-01-11] (Cisco Systems, Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [421160 2011-06-07] (Apple Inc.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [B2C_AGENT] - C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe [404568 2012-03-28] (LG Electronics)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [309688 2012-11-12] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1758160 2014-02-13] (APN)
HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [195536 2014-02-13] (APN LLC.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [NVIDIA driver monitor] - C:\Users\Public\nvsvc32.exe
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung)
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [KiesAirMessage] - C:\Program Files\Samsung\Kies\KiesAirMessage.exe [577536 2012-11-01] (Samsung Electronics)
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [968120 2012-11-12] (Samsung)
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung)
HKU\S-1-5-21-1706605808-3827666927-3331923069-1000\...\Run: [CDHWfjqz] - C:\ProgramData\CDHWfjqz.exe
Startup: C:\Users\Marina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Marina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.facebook.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  No File
URLSearchHook: HKLM - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
URLSearchHook: HKCU - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {03AEA0EE-96AC-45D0-8E39-0252D162D351} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_US&apn_ptnrs=U3&apn_dtid=YYYYYYYYAT&apn_uid=64EDC0E9-B775-46EE-A460-A6A743FDE8B8&apn_sauid=D8F952E9-DC39-4126-95C3-B8A3D60B99E2
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKLM - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
Toolbar: HKCU - softonic-de3 Toolbar - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files\softonic-de3\tbsoft.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 195.3.96.67 213.33.98.136
Tcpip\..\Interfaces\{38398E64-48A9-4A63-A3B9-90A1B6C2B874}: [NameServer]93.171.202.99
Tcpip\..\Interfaces\{3a539854-6a70-11db-887c-806e6f6e6963}: [NameServer]93.171.202.99
Tcpip\..\Interfaces\{7606793A-BB19-49AE-B3F3-41B45FED3179}: [NameServer]93.171.202.99
Tcpip\..\Interfaces\{AD6970A1-223B-4541-B052-D18312C0D6A6}: [NameServer]93.171.202.99

FireFox:
========
FF ProfilePath: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default
FF DefaultSearchEngine: Ask Search
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Ask Search
FF Homepage: hxxp://avira.search.ask.com/?tpid=AVIRA-V7C&o=APN11394&pf=V7&trgb=ALL&p2=%5EBB1%5EYYYYYY%5EYY%5EAT&gct=hp&apn_ptnrs=%5EBB1&apn_dtid=%5EYYYYYY%5EYY%5EAT&apn_dbr=ff_26.0&apn_uid=5B96D163-B8F6-4C3D-94E4-D67A3F7FE915&itbv=12.10.0.2951&doi=2014-01-02&psv=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/MycameraPlugin - C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\3.0.40723.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.4 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=1.0.3.448 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-20.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-21.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-22.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Conduit Engine  - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\engine@conduit.com [2011-04-02]
FF Extension: No Name - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\nostmp [2011-04-02]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-08-25]
FF Extension: ICQ Toolbar - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-10-17]
FF Extension: DVDVideoSoft Toolbar - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} [2010-03-12]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20]
FF Extension: Greasemonkey - C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\nm3oigw5.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2011-07-29]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Program Files\Real\RealPlayer\browserrecord\firefox\ext
FF Extension: RealPlayer Browser Record Plugin - C:\Program Files\Real\RealPlayer\browserrecord\firefox\ext [2010-01-05]
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-02-03]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Extension: (Google Wallet) - C:\Users\Marina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-14]
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Marina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm [2014-02-14]
CHR HKLM\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx [2014-02-20]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
S2 gupdate1ca8df863179960; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2010-01-05] (Google Inc.)
S3 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
R2 KMService; C:\Windows\system32\srvany.exe [8192 2011-09-16] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [490280 2010-03-25] (Nero AG)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [431864 2011-01-11] (Cisco Systems, Inc.)

==================== Drivers (Whitelisted) ====================

S3 acsint; C:\Windows\System32\DRIVERS\acsint.sys [36624 2011-01-11] (Cisco Systems, Inc.)
S3 acsmux; C:\Windows\System32\DRIVERS\acsmux.sys [46480 2011-01-11] (Cisco Systems, Inc.)
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [554496 2007-09-21] (Ralink Technology Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH)
S3 usbbus; C:\Windows\System32\DRIVERS\lgusbbus.sys [13056 2012-03-02] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgusbdiag.sys [20864 2012-03-02] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgusbmodem.sys [25216 2012-03-02] (LG Electronics Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-01 11:17 - 2014-03-01 11:18 - 00000000 ____D () C:\FRST
2014-02-27 16:55 - 2014-03-01 08:03 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-21 09:48 - 2014-02-21 09:48 - 00000801 _____ () C:\Users\Public\Desktop\Opera 19.lnk
2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Opera Software
2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Local\Opera Software
2014-02-21 09:40 - 2014-02-21 09:42 - 35623952 _____ (Opera Software ASA) C:\Users\Marina\Downloads\Opera_19.0.1326.63_Setup.exe
2014-02-14 14:48 - 2014-02-15 16:34 - 00024576 ____H () C:\Users\Marina\Desktop\photothumb.db
2014-02-14 10:53 - 2014-02-26 07:02 - 00000000 ___RD () C:\Users\Marina\Dropbox
2014-02-14 10:53 - 2014-02-14 10:53 - 00000946 _____ () C:\Users\Marina\Desktop\Dropbox.lnk
2014-02-14 10:50 - 2014-02-14 10:53 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\DropboxMaster
2014-02-14 10:45 - 2014-02-14 10:47 - 37660568 _____ (Dropbox, Inc.) C:\Users\Marina\Downloads\Dropbox 2.6.2.exe
2014-02-14 10:44 - 2014-02-24 16:28 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-14 10:39 - 2014-02-14 10:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 10:06 - 2014-02-14 10:06 - 02072128 _____ (Fastviewer.com) C:\Users\Marina\Downloads\fastviewer.exe
2014-02-13 19:22 - 2014-02-05 09:58 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 19:22 - 2014-02-05 09:56 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 19:22 - 2014-02-05 09:53 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 19:22 - 2014-02-05 09:51 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 19:22 - 2014-02-05 09:50 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 19:22 - 2014-02-05 09:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 19:22 - 2014-02-05 09:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-13 19:22 - 2014-02-05 09:48 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 19:22 - 2014-02-05 09:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-13 19:22 - 2014-02-05 09:48 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 19:22 - 2014-02-05 09:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 19:22 - 2014-02-05 09:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 19:22 - 2014-02-05 09:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 19:22 - 2014-02-05 09:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 19:22 - 2014-02-05 09:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-13 19:22 - 2014-02-05 09:46 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 18:11 - 2013-12-05 03:12 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 20:13 - 2014-02-12 20:13 - 00001499 _____ () C:\Users\Marina\AppData\Local\recently-used.xbel
2014-02-12 20:12 - 2014-02-12 20:12 - 22401973 _____ () C:\Users\Marina\Desktop\DSCN0013.xcf
2014-02-12 20:02 - 2014-02-12 20:12 - 00000000 ____D () C:\Users\Marina\AppData\Local\gtk-2.0
2014-02-12 20:01 - 2014-02-12 20:01 - 00000000 ____D () C:\Users\Marina\.thumbnails
2014-02-12 19:59 - 2014-02-12 20:13 - 00000000 ____D () C:\Users\Marina\.gimp-2.8
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Users\Marina\AppData\Local\gegl-0.2
2014-02-12 19:57 - 2014-02-12 19:57 - 00000886 _____ () C:\Users\Marina\Desktop\GIMP 2.lnk
2014-02-12 19:55 - 2014-02-12 19:56 - 00000000 ____D () C:\Program Files\GIMP 2
2014-02-12 19:50 - 2014-02-12 19:54 - 90396104 _____ (The GIMP Team ) C:\Users\Marina\Downloads\gimp-2.8.10-setup.exe

==================== One Month Modified Files and Folders =======

2014-03-01 11:18 - 2014-03-01 11:17 - 00000000 ____D () C:\FRST
2014-03-01 11:16 - 2006-11-02 11:33 - 01445546 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-01 10:30 - 2012-11-11 16:25 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-01 10:23 - 2010-01-05 12:23 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-01 10:08 - 2009-12-07 15:45 - 01181968 _____ () C:\Windows\WindowsUpdate.log
2014-03-01 10:00 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-01 10:00 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-01 08:03 - 2014-02-27 16:55 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-01 08:03 - 2013-12-23 17:48 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Dropbox
2014-03-01 08:00 - 2010-01-05 12:23 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-01 08:00 - 2009-08-11 10:47 - 00086050 _____ () C:\ProgramData\nvModes.dat
2014-03-01 08:00 - 2009-08-11 10:47 - 00086050 _____ () C:\ProgramData\nvModes.001
2014-03-01 08:00 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 21:57 - 2006-11-02 14:01 - 00032530 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-28 18:44 - 2013-03-22 14:29 - 00000000 ____D () C:\Users\Marina\Desktop\fotos
2014-02-27 12:26 - 2013-10-02 11:37 - 00000000 ____D () C:\Users\Marina\Desktop\L6
2014-02-27 12:24 - 2013-03-16 15:41 - 00000000 ____D () C:\Users\Marina\Desktop\Studium
2014-02-26 07:02 - 2014-02-14 10:53 - 00000000 ___RD () C:\Users\Marina\Dropbox
2014-02-24 16:28 - 2014-02-14 10:44 - 00001967 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-21 10:31 - 2012-11-11 16:25 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-21 10:31 - 2011-08-20 09:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 09:48 - 2014-02-21 09:48 - 00000801 _____ () C:\Users\Public\Desktop\Opera 19.lnk
2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Opera Software
2014-02-21 09:48 - 2014-02-21 09:48 - 00000000 ____D () C:\Users\Marina\AppData\Local\Opera Software
2014-02-21 09:48 - 2009-12-07 15:54 - 00000000 ____D () C:\Program Files\Opera
2014-02-21 09:42 - 2014-02-21 09:40 - 35623952 _____ (Opera Software ASA) C:\Users\Marina\Downloads\Opera_19.0.1326.63_Setup.exe
2014-02-21 09:12 - 2014-01-02 17:48 - 00000000 ____D () C:\Users\Marina\AppData\Local\VNT
2014-02-21 09:12 - 2014-01-02 17:48 - 00000000 ____D () C:\Program Files\VNT
2014-02-20 16:18 - 2013-10-02 11:44 - 00000000 ____D () C:\Users\Marina\Desktop\W2
2014-02-20 15:41 - 2011-09-16 17:10 - 00002617 _____ () C:\Users\Marina\Desktop\Microsoft Word 2010.lnk
2014-02-16 17:18 - 2010-03-09 14:55 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-02-15 16:34 - 2014-02-14 14:48 - 00024576 ____H () C:\Users\Marina\Desktop\photothumb.db
2014-02-14 18:06 - 2012-10-17 20:02 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-14 12:58 - 2008-01-21 03:47 - 00756688 _____ () C:\Windows\PFRO.log
2014-02-14 12:12 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-14 10:53 - 2014-02-14 10:53 - 00000946 _____ () C:\Users\Marina\Desktop\Dropbox.lnk
2014-02-14 10:53 - 2014-02-14 10:50 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\DropboxMaster
2014-02-14 10:53 - 2009-12-07 15:50 - 00000000 ____D () C:\Users\Marina
2014-02-14 10:50 - 2013-12-23 17:49 - 00000000 ____D () C:\Users\Marina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-14 10:47 - 2014-02-14 10:45 - 37660568 _____ (Dropbox, Inc.) C:\Users\Marina\Downloads\Dropbox 2.6.2.exe
2014-02-14 10:39 - 2014-02-14 10:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-14 10:31 - 2010-03-28 11:56 - 00000000 ___RD () C:\Users\Marina\Desktop\Eigene Bilder
2014-02-14 10:06 - 2014-02-14 10:06 - 02072128 _____ (Fastviewer.com) C:\Users\Marina\Downloads\fastviewer.exe
2014-02-13 19:31 - 2013-08-14 20:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 19:29 - 2006-11-02 11:24 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-02-12 20:13 - 2014-02-12 20:13 - 00001499 _____ () C:\Users\Marina\AppData\Local\recently-used.xbel
2014-02-12 20:13 - 2014-02-12 19:59 - 00000000 ____D () C:\Users\Marina\.gimp-2.8
2014-02-12 20:12 - 2014-02-12 20:12 - 22401973 _____ () C:\Users\Marina\Desktop\DSCN0013.xcf
2014-02-12 20:12 - 2014-02-12 20:02 - 00000000 ____D () C:\Users\Marina\AppData\Local\gtk-2.0
2014-02-12 20:01 - 2014-02-12 20:01 - 00000000 ____D () C:\Users\Marina\.thumbnails
2014-02-12 19:59 - 2014-02-12 19:59 - 00000000 ____D () C:\Users\Marina\AppData\Local\gegl-0.2
2014-02-12 19:57 - 2014-02-12 19:57 - 00000886 _____ () C:\Users\Marina\Desktop\GIMP 2.lnk
2014-02-12 19:56 - 2014-02-12 19:55 - 00000000 ____D () C:\Program Files\GIMP 2
2014-02-12 19:54 - 2014-02-12 19:50 - 90396104 _____ (The GIMP Team ) C:\Users\Marina\Downloads\gimp-2.8.10-setup.exe
2014-02-06 17:57 - 2013-09-22 16:22 - 00000000 ____D () C:\Users\Marina\Desktop\L1 neu
2014-02-05 09:58 - 2014-02-13 19:22 - 12345344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-05 09:56 - 2014-02-13 19:22 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-05 09:53 - 2014-02-13 19:22 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-05 09:51 - 2014-02-13 19:22 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-05 09:50 - 2014-02-13 19:22 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-05 09:49 - 2014-02-13 19:22 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-05 09:49 - 2014-02-13 19:22 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-05 09:48 - 2014-02-13 19:22 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-05 09:48 - 2014-02-13 19:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-05 09:48 - 2014-02-13 19:22 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-05 09:48 - 2014-02-13 19:22 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-05 09:48 - 2014-02-13 19:22 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-05 09:47 - 2014-02-13 19:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-05 09:47 - 2014-02-13 19:22 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-05 09:47 - 2014-02-13 19:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-05 09:46 - 2014-02-13 19:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

Some content of TEMP:
====================
C:\Users\Marina\AppData\Local\Temp\AllSharePCSW.exe
C:\Users\Marina\AppData\Local\Temp\APNStub.exe
C:\Users\Marina\AppData\Local\Temp\AskSLib.dll
C:\Users\Marina\AppData\Local\Temp\avgnt.exe
C:\Users\Marina\AppData\Local\Temp\CWPCUNLR.dll
C:\Users\Marina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdds2nj.dll
C:\Users\Marina\AppData\Local\Temp\DRPCUNLR.dll
C:\Users\Marina\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Marina\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Marina\AppData\Local\Temp\GLF15C8.tmp.tbsoft.dll
C:\Users\Marina\AppData\Local\Temp\IcqUpdater.exe
C:\Users\Marina\AppData\Local\Temp\jniverify.dll
C:\Users\Marina\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Marina\AppData\Local\Temp\NEW2F7A.tmp.exe
C:\Users\Marina\AppData\Local\Temp\NEWF1CD.tmp.exe
C:\Users\Marina\AppData\Local\Temp\Offercast_AVIRAV7_.exe
C:\Users\Marina\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Marina\AppData\Local\Temp\setup.exe
C:\Users\Marina\AppData\Local\Temp\softonic-de3.exe
C:\Users\Marina\AppData\Local\Temp\TubeBox_Setup.exe
C:\Users\Marina\AppData\Local\Temp\Uninst.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-01 08:08

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-02-2014 02
Ran by Marina at 2014-03-01 11:18:38
Running from F:\
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe Connect Add-in (HKCU\...\Adobe Connect Add-in) (Version:  - )
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.1.601 - Adobe Systems, Inc.)
Anki (HKLM\...\Anki) (Version:  - )
Apple Application Support (HKLM\...\{B3575D00-27EF-49C2-B9E0-14B3D954E992}) (Version: 1.5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C23CD6DA-1958-43A5-ADD0-59396572E02E}) (Version: 3.4.1.2 - Apple Inc.)
Apple Software Update (HKLM\...\{C6579A65-9CAE-4B31-8B6B-3306E0630A66}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-4300-A758B70C0A03}) (Version: 12.10.3.4488 - APN, LLC)
Bonjour (HKLM\...\{C2E4B5BD-32DB-4817-A060-341AB17C3F90}) (Version: 2.0.5.0 - Apple Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM\...\CANON iMAGE GATEWAY Task) (Version: 1.7.2.11 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (HKLM\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.6.3.9 - Canon Inc.)
Canon MOV Decoder (HKLM\...\Canon MOV Decoder) (Version: 1.5.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM\...\Canon MOV Encoder) (Version: 1.3.0.3 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 3.4.0.8 - Canon Inc.)
Canon MP Navigator EX 1.2 (HKLM\...\MP Navigator EX 1.2) (Version:  - )
Canon MP190 series Benutzerregistrierung (HKLM\...\Canon MP190 series Benutzerregistrierung) (Version:  - )
Canon MP190 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP190_series) (Version:  - )
Canon My Printer (HKLM\...\CanonMyPrinter) (Version:  - )
Canon Utilities CameraWindow (HKLM\...\CameraWindowLauncher) (Version: 7.4.0.7 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM\...\CameraWindowDC8) (Version: 8.1.0.11 - Canon Inc.)
Canon Utilities Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities Movie Uploader for YouTube (HKLM\...\MovieUploaderForYouTube) (Version: 1.0.0.11 - Canon Inc.)
Canon Utilities MyCamera (HKLM\...\MyCamera) (Version: 7.3.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Solution Menu (HKLM\...\CanonSolutionMenu) (Version:  - )
Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 6.5.0.14 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM\...\ZoomBrowser EX Memory Card Utility) (Version: 1.3.0.4 - Canon Inc.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.0.2838 - CDBurnerXP)
Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden
Cisco AnyConnect Secure Mobility Client  (HKLM\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.0.0629 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (Version: 3.0.0629 - Cisco Systems, Inc.) Hidden
Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.3.0.0 - Swiss Academic Software)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation)
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.2806 - CyberLink Corp.)
CyberLink Power2Go (Version: 6.1.2806 - CyberLink Corp.) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.6.2 - Dropbox, Inc.)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
Inkjet Printer/Scanner Extended Survey Program (HKLM\...\CANONIJPLM100) (Version:  - )
iTunes (HKLM\...\{7E6066E6-8B5B-4100-B0FA-1D9E9B663CBA}) (Version: 10.3.1.55 - Apple Inc.)
Java 7 Update 7 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.70 - Oracle)
Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 16 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.4 (HKLM\...\{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}) (Version: 2.0.3008.0 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Search Enhancement Pack (Version: 1.3.59.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40723.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
MobileMe Control Panel (HKLM\...\{BA165460-FCF7-4D6C-A7A2-F2321700720F}) (Version: 3.0.1.1 - Apple Inc.)
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
MyMicroBalance (HKLM\...\{F4DB90F7-3DAE-4797-8A1F-091A98285F3E}) (Version: 2.5.0 - Trusted Bytes Softwareentwicklung e.U.)
Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)
Nero Burning ROM 10 (HKLM\...\{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}) (Version: 10.0.10800 - Nero AG)
Nero BurningROM 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG)
Nero BurnRights 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero Control Center 10 (Version: 10.0.12000.1.4 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero Core Components 10 (Version: 2.0.13700.0.1 - Nero AG) Hidden
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM\...\{B83FC356-B7C0-441F-8A4D-D71E088E7974}) (Version: 9.09.0428 - NVIDIA Corporation)
Opera 12.12 (HKLM\...\Opera 12.12.1707) (Version: 12.12.1707 - Opera Software ASA)
Opera Stable 19.0.1326.63 (HKLM\...\Opera 19.0.1326.63) (Version: 19.0.1326.63 - Opera Software ASA)
phase-6 2.1.2.4b (HKLM\...\phase-6) (Version: 2.1.2.4b - phase-6)
PhotoScape (HKLM\...\PhotoScape) (Version:  - )
QuickTime (HKLM\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
RealPlayer (HKLM\...\RealPlayer 12.0) (Version:  - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5898 - Realtek Semiconductor Corp.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.) Hidden
softonic-de3 Toolbar (HKLM\...\softonic-de3 Toolbar) (Version:  - ) <==== ATTENTION
Sound Organizer (HKLM\...\{010813A5-CE68-4C86-96F4-11CAEA3E6292}) (Version: 1.1.1.12161 - Sony Corporation)
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Windows Live Call (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 14.0.8051.1204 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (HKLM\...\{10A44844-4465-456E-8C97-80BDD4F68845}) (Version: 6.500.3146.0 - Microsoft Corporation)
Windows Live Mail (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{8C1E2925-14F8-45AA-B999-1E2A74BF5607}) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Toolbar (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
XMind (HKLM\...\XMind) (Version: 3.2.1 - XMind Ltd.)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)

==================== Restore Points  =========================

14-12-2013 10:45:51 Geplanter Prüfpunkt
17-12-2013 15:04:52 Windows Update
19-12-2013 07:33:03 Geplanter Prüfpunkt
21-12-2013 10:14:18 Geplanter Prüfpunkt
22-12-2013 10:37:50 Geplanter Prüfpunkt
23-12-2013 10:54:25 Geplanter Prüfpunkt
23-12-2013 17:55:55 Windows Update
24-12-2013 13:03:10 Windows Update
28-12-2013 17:39:30 Windows Update
01-01-2014 16:34:07 avast! antivirus system restore point
02-01-2014 16:15:42 avast! antivirus system restore point
02-01-2014 16:19:05 Windows Update
04-01-2014 17:21:28 Geplanter Prüfpunkt
07-01-2014 17:59:51 Geplanter Prüfpunkt
08-01-2014 16:44:08 Geplanter Prüfpunkt
09-01-2014 14:26:53 Geplanter Prüfpunkt
11-01-2014 08:15:07 Geplanter Prüfpunkt
15-01-2014 19:36:38 Windows Update
16-01-2014 17:15:37 Geplanter Prüfpunkt
17-01-2014 13:50:25 Geplanter Prüfpunkt
22-01-2014 16:50:17 Geplanter Prüfpunkt
23-01-2014 13:17:00 Geplanter Prüfpunkt
28-01-2014 11:49:34 Geplanter Prüfpunkt
07-02-2014 12:11:43 Geplanter Prüfpunkt
08-02-2014 09:18:15 Geplanter Prüfpunkt
13-02-2014 18:21:41 Windows Update
18-02-2014 15:01:11 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {02022553-66C8-4013-A0AE-9847C63F7829} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {6D7FDB36-7257-49ED-9EA8-4EB576F6B6D0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-05] (Google Inc.)
Task: {7F90F4D9-FCF8-44ED-8A9E-43500C59EBBE} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {A0F41418-73DE-4EDF-9F8C-525A501FD861} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-05] (Google Inc.)
Task: {DB07BF75-0EA4-4D11-A86F-680A17FCF679} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-01-02 17:47 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2010-01-30 01:41 - 2010-01-30 01:41 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2008-08-27 15:32 - 2008-08-27 15:32 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2008-06-09 08:55 - 2008-06-09 08:55 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2009-11-03 15:51 - 2009-11-03 15:51 - 00067872 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-14 09:34 - 2014-02-14 09:34 - 01874944 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\9037a4483150bdcdd191b9ce9e437c91\Kies.UI.ni.dll
2014-02-14 09:34 - 2014-02-14 09:34 - 00078848 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\1cc25bba9e22ce40c3d8037b67838dcc\Kies.MVVM.ni.dll
2014-02-14 09:34 - 2014-02-14 09:34 - 00184832 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\d22206c34d2ed6afcd06ca5792e776e2\Kies.Common.DeviceServiceLib.Interface.ni.dll
2014-02-14 09:35 - 2014-02-14 09:35 - 01493504 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PodcastService\69a3c501d3b0cc85efd8dbd469386c51\PodcastService.ni.dll
2014-02-14 09:35 - 2014-02-14 09:35 - 00371712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePhoto\58ca26e468bdb6e7eb43c2485887dede\DevicePhoto.ni.dll
2014-02-14 09:35 - 2014-02-14 09:35 - 00293888 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceVideo\c512aa27514a06f367a57b0d22501820\DeviceVideo.ni.dll
2014-02-14 09:35 - 2014-02-14 09:35 - 00609792 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePodcast\36b10606de1fb3a3d70f9cf679464e85\DevicePodcast.ni.dll
2014-02-14 09:35 - 2014-02-14 09:35 - 12621824 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\58e3a1718554221a9abd1c1990139584\Kies.Theme.ni.dll
2014-02-14 09:34 - 2014-02-14 09:34 - 00570368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\6c84d4f32c49e5149e1e03d526cfb5a0\Kies.Common.DeviceServiceLib.FileService.ni.dll
2014-02-14 09:34 - 2014-02-14 09:34 - 00036864 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\d17be53947f0c4ec081c0b20748ca0b6\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll
2014-02-14 09:34 - 2014-02-14 09:34 - 00232960 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\9f734e967ec35a662f6f75d390619731\ASF_cSharpAPI.ni.dll
2014-03-01 08:03 - 2014-03-01 08:03 - 00041984 _____ () c:\users\marina\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdds2nj.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Marina\AppData\Roaming\Dropbox\bin\libcef.dll
2011-09-16 17:14 - 2011-09-16 17:13 - 00008192 _____ () C:\Windows\system32\srvany.exe
2011-09-16 17:14 - 2011-09-16 17:13 - 00151552 _____ () C:\Windows\KMService.exe
2007-06-05 12:20 - 2007-06-05 12:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows
Description: Cisco AnyConnect VPN Virtual Miniport Adapter for Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 07:32:00 PM) (Source: Application Hang) (User: )
Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: ac0
Anfangszeit: 01cf34b3162ba651
Zeitpunkt der Beendigung: 0

Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:55:02 PM) (Source: Application Hang) (User: )
Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: aa0
Anfangszeit: 01cf34ade52359ac
Zeitpunkt der Beendigung: 0

Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 09:35:35 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/27/2014 06:17:56 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/27/2014 05:58:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/01/2014 10:59:06 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 10:26:59 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 09:02:55 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 08:28:06 AM) (Source: ipnathlp) (User: )
Description: Ein DHCP-Server mit der IP-Adresse 192.168.1.1 wurde von der DHCP-Zuweisung im selben Netzwerk gefunden, wie die Schnittstelle mit der IP-Adresse 192.168.0.1. Die Zuweisung wurde auf der Schnittstelle automatisch deaktiviert, um DHCP-Clientkonflikte zu vermeiden.

Error: (03/01/2014 08:15:13 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 08:01:59 AM) (Source: Service Control Manager) (User: )
Description: 30000vpnagent

Error: (02/28/2014 09:50:07 PM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (02/28/2014 09:10:53 PM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (02/28/2014 08:32:22 PM) (Source: ipnathlp) (User: )
Description: 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner Fehler ist im Speicher-Manager aufgetreten.

Error: (02/28/2014 07:54:12 PM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.


Microsoft Office Sessions:
=========================
Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 07:32:00 PM) (Source: Application Hang)(User: )
Description: KiesAirMessage.exe1.0.0.0ac001cf34b3162ba6510

Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:55:02 PM) (Source: Application Hang)(User: )
Description: KiesAirMessage.exe1.0.0.0aa001cf34ade52359ac0

Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 09:35:35 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/27/2014 06:17:56 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/27/2014 05:58:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 3070.39 MB
Available physical RAM: 1474.61 MB
Total Pagefile: 6358.98 MB
Available Pagefile: 4874.86 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.96 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:581.17 GB) (Free:387.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:14.99 GB) (Free:2.94 GB) FAT32
Drive f: () (Removable) (Total:7.52 GB) (Free:7.5 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596 GB) (Disk ID: F98D6E74)

Partition: GPT Partition Type.

========================================================
Disk: 4 (Size: 8 GB) (Disk ID: 6E652072)
No partition Table on disk 4.

==================== End Of Log ============================
         
und danke, dass du mir helfen willst @ schrauber
__________________

Alt 02.03.2014, 07:54   #4
schrauber
/// the machine
/// TB-Ausbilder
 

internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.



Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool

Setze einen Haken bei folgenden Einträgen
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset IE Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size
  • List Minidump Files
Klicke Go und poste den Inhalt der Result.txt.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 03.03.2014, 15:48   #5
nikita86
 
internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



Code:
ATTFilter
Farbar Service Scanner Version: 25-02-2014
Ran by Marina (administrator) on 02-03-2014 at 10:24:59
Running from "F:\"
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Security Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.
Checking LEGACY_wscsvc: ATTENTION!=====> Unable to open LEGACY_wscsvc\0000 registry key. The key does not exist.


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.


Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****
         
Code:
ATTFilter
MiniToolBox by Farbar  Version: 23-01-2014
Ran by Marina (administrator) on 02-03-2014 at 10:26:19
Running from "F:\"
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========================= IE Proxy Settings: ============================== 

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ============================== 


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

::1             localhost

127.0.0.1       localhost

========================= IP Configuration: ================================

Cisco AnyConnect VPN Virtual Miniport Adapter for Windows = Cisco AnyConnect Secure Mobility Client Connection (Disconnected)
NVIDIA nForce 10/100/1000 Mbps Ethernet  = LAN-Verbindung (Connected)
802.11 n/g/b Wireless LAN USB Adapter = Drahtlosnetzwerkverbindung (Connected)


# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set interface interface="LAN-Verbindung 2" forwarding=enabled advertise=enabled metric=1 nud=enabled
add address name="LAN-Verbindung" address=192.168.0.1
add address name="LAN-Verbindung 2" address=0.0.0.0


popd
# Ende der IPv4-Konfiguration



Windows-IP-Konfiguration

   Hostname  . . . . . . . . . . . . : Marina-PC
   Prim„res DNS-Suffix . . . . . . . : 
   Knotentyp . . . . . . . . . . . . : Hybrid
   IP-Routing aktiviert  . . . . . . : Nein
   WINS-Proxy aktiviert  . . . . . . : Nein

Ethernet-Adapter LAN-Verbindung:

   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : NVIDIA nForce 10/100/1000 Mbps Ethernet 
   Physikalische Adresse . . . . . . : 40-61-86-01-B5-5B
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::2845:87f9:2504:cb96%12(Bevorzugt) 
   IPv4-Adresse  . . . . . . . . . . : 192.168.0.1(Bevorzugt) 
   Subnetzmaske  . . . . . . . . . . : 255.255.255.0
   Standardgateway . . . . . . . . . : 
   DHCPv6-IAID . . . . . . . . . . . : 390095238
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-12-AE-CC-31-40-61-86-01-B5-5B
   DNS-Server  . . . . . . . . . . . : 93.171.202.99
   NetBIOS ber TCP/IP . . . . . . . : Aktiviert

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung:

   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : 802.11 n/g/b Wireless LAN USB Adapter
   Physikalische Adresse . . . . . . : 00-25-D3-4A-26-8E
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::102b:8046:9866:10e8%11(Bevorzugt) 
   IPv4-Adresse (Auto. Konfiguration): 169.254.16.232(Bevorzugt) 
   Subnetzmaske  . . . . . . . . . . : 255.255.0.0
   Standardgateway . . . . . . . . . : fe80::2845:87f9:2504:cb96%11
   DHCPv6-IAID . . . . . . . . . . . : 352331219
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-12-AE-CC-31-40-61-86-01-B5-5B
   DNS-Server  . . . . . . . . . . . : 93.171.202.99
   NetBIOS ber TCP/IP . . . . . . . : Aktiviert

Tunneladapter LAN-Verbindung*:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : isatap.{7606793A-BB19-49AE-B3F3-41B45FED3179}
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 2:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physikalische Adresse . . . . . . : 02-00-54-55-4E-01
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 11:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : isatap.{38398E64-48A9-4A63-A3B9-90A1B6C2B874}
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 12:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : 6TO4 Adapter
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
Server:  UnKnown
Address:  93.171.202.99

Ping-Anforderung konnte Host "google.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.

Server:  UnKnown
Address:  93.171.202.99

Ping-Anforderung konnte Host "yahoo.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.



Ping wird ausgefhrt fr 127.0.0.1 mit 32 Bytes Daten:

Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128

Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128



Ping-Statistik fr 127.0.0.1:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0 (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms

===========================================================================
Schnittstellenliste
 12 ...40 61 86 01 b5 5b ...... NVIDIA nForce 10/100/1000 Mbps Ethernet 
 11 ...00 25 d3 4a 26 8e ...... 802.11 n/g/b Wireless LAN USB Adapter
  1 ........................... Software Loopback Interface 1
 17 ...00 00 00 00 00 00 00 e0  isatap.{7606793A-BB19-49AE-B3F3-41B45FED3179}
 13 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
 15 ...00 00 00 00 00 00 00 e0  isatap.{38398E64-48A9-4A63-A3B9-90A1B6C2B874}
 16 ...00 00 00 00 00 00 00 e0  6TO4 Adapter
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
      169.254.0.0      255.255.0.0   Auf Verbindung    169.254.16.232    286
   169.254.16.232  255.255.255.255   Auf Verbindung    169.254.16.232    286
  169.254.255.255  255.255.255.255   Auf Verbindung    169.254.16.232    286
      192.168.0.0    255.255.255.0   Auf Verbindung       192.168.0.1    276
      192.168.0.1  255.255.255.255   Auf Verbindung       192.168.0.1    276
    192.168.0.255  255.255.255.255   Auf Verbindung       192.168.0.1    276
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung       192.168.0.1    276
        224.0.0.0        240.0.0.0   Auf Verbindung    169.254.16.232    286
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung       192.168.0.1    276
  255.255.255.255  255.255.255.255   Auf Verbindung    169.254.16.232    286
===========================================================================
St„ndige Routen:
  Keine

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel             Gateway
 11    286 ::/0                     fe80::2845:87f9:2504:cb96
  1    306 ::1/128                  Auf Verbindung
 12    276 fe80::/64                Auf Verbindung
 11    286 fe80::/64                Auf Verbindung
 11    286 fe80::102b:8046:9866:10e8/128
                                    Auf Verbindung
 12    276 fe80::2845:87f9:2504:cb96/128
                                    Auf Verbindung
  1    306 ff00::/8                 Auf Verbindung
 12    276 ff00::/8                 Auf Verbindung
 11    286 ff00::/8                 Auf Verbindung
===========================================================================
St„ndige Routen:
  Keine
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [48128] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 09 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Catalog9 20 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 33 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 34 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 35 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 36 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 37 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 38 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 39 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/02/2014 10:24:25 AM) (Source: Application Hang) (User: )
Description: Programm sidebar.exe, Version 6.0.6002.18005 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: af0
Anfangszeit: 01cf35f8de374dd1
Zeitpunkt der Beendigung: 16

Error: (03/02/2014 10:23:28 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/01/2014 03:30:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 07:32:00 PM) (Source: Application Hang) (User: )
Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: ac0
Anfangszeit: 01cf34b3162ba651
Zeitpunkt der Beendigung: 0

Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:55:02 PM) (Source: Application Hang) (User: )
Description: Programm KiesAirMessage.exe, Version 1.0.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: aa0
Anfangszeit: 01cf34ade52359ac
Zeitpunkt der Beendigung: 0

Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/02/2014 10:24:26 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/02/2014 10:23:29 AM) (Source: Service Control Manager) (User: )
Description: 30000vpnagent

Error: (03/01/2014 03:40:56 PM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 03:30:03 PM) (Source: Service Control Manager) (User: )
Description: 30000vpnagent

Error: (03/01/2014 11:48:40 AM) (Source: ipnathlp) (User: )
Description: 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner Fehler ist im Speicher-Manager aufgetreten.

Error: (03/01/2014 10:59:06 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 10:26:59 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 09:02:55 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (03/01/2014 08:28:06 AM) (Source: ipnathlp) (User: )
Description: Ein DHCP-Server mit der IP-Adresse 192.168.1.1 wurde von der DHCP-Zuweisung im selben Netzwerk gefunden, wie die Schnittstelle mit der IP-Adresse 192.168.0.1. Die Zuweisung wurde auf der Schnittstelle automatisch deaktiviert, um DHCP-Clientkonflikte zu vermeiden.

Error: (03/01/2014 08:15:13 AM) (Source: ipnathlp) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.


Microsoft Office Sessions:
=========================
Error: (03/02/2014 10:24:25 AM) (Source: Application Hang)(User: )
Description: sidebar.exe6.0.6002.18005af001cf35f8de374dd116

Error: (03/02/2014 10:23:28 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/01/2014 03:30:03 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/01/2014 08:01:59 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 07:32:00 PM) (Source: Application Hang)(User: )
Description: KiesAirMessage.exe1.0.0.0ac001cf34b3162ba6510

Error: (02/28/2014 07:31:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:55:02 PM) (Source: Application Hang)(User: )
Description: KiesAirMessage.exe1.0.0.0aa001cf34ade52359ac0

Error: (02/28/2014 06:54:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:42:56 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/28/2014 06:15:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


=========================== Installed Programs ============================

Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Connect Add-in
Adobe Flash Player 10 ActiveX (Version: 10.0.32.18)
Adobe Flash Player 12 Plugin (Version: 12.0.0.70)
Adobe Reader X (10.1.9) - Deutsch (Version: 10.1.9)
Adobe Shockwave Player 11.5 (Version: 11.5.1.601)
Anki
Apple Application Support (Version: 1.5.2)
Apple Mobile Device Support (Version: 3.4.1.2)
Apple Software Update (Version: 2.1.3.127)
Avira Free Antivirus (Version: 14.0.3.338)
Avira SearchFree Toolbar (Version: 12.10.3.4488)
Bonjour (Version: 2.0.5.0)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.7.2.11)
Canon Internet Library for ZoomBrowser EX (Version: 1.6.3.9)
Canon MOV Decoder (Version: 1.5.0.7)
Canon MOV Encoder (Version: 1.3.0.3)
Canon MovieEdit Task for ZoomBrowser EX (Version: 3.4.0.8)
Canon MP Navigator EX 1.2
Canon MP190 series Benutzerregistrierung
Canon MP190 series MP Drivers
Canon My Printer
Canon Utilities CameraWindow (Version: 7.4.0.7)
Canon Utilities CameraWindow DC 8 (Version: 8.1.0.11)
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Movie Uploader for YouTube (Version: 1.0.0.11)
Canon Utilities MyCamera (Version: 7.3.0.5)
Canon Utilities PhotoStitch (Version: 3.1.22.46)
Canon Utilities Solution Menu
Canon Utilities ZoomBrowser EX (Version: 6.5.0.14)
Canon ZoomBrowser EX Memory Card Utility (Version: 1.3.0.4)
CDBurnerXP (Version: 4.4.0.2838)
Choice Guard (Version: 1.2.87.0)
Cisco AnyConnect Secure Mobility Client  (Version: 3.0.0629)
Cisco AnyConnect Secure Mobility Client (Version: 3.0.0629)
Citavi (Version: 3.3.0.0)
Compatibility Pack für 2007 Office System (Version: 12.0.6425.1000)
CyberLink Power2Go (Version: 6.1.2806)
Dropbox (Version: 2.6.2)
GIMP 2.8.10 (Version: 2.8.10)
Google Chrome (Version: 33.0.1750.117)
Google Update Helper (Version: 1.3.22.5)
Inkjet Printer/Scanner Extended Survey Program
iTunes (Version: 10.3.1.55)
Java 7 Update 7 (Version: 7.0.70)
Java Auto Updater (Version: 2.1.9.0)
Java(TM) 6 Update 16 (Version: 6.0.160)
Junk Mail filter update (Version: 14.0.8050.1202)
LG United Mobile Driver (Version: 3.8.1)
McAfee Security Scan Plus (Version: 3.8.130.10)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Live Add-in 1.4 (Version: 2.0.3008.0)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6425.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.4763.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.4763.1000)
Microsoft Search Enhancement Pack (Version: 1.3.59.0)
Microsoft Silverlight (Version: 3.0.40723.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
MobileMe Control Panel (Version: 3.0.1.1)
Mozilla Firefox 27.0.1 (x86 de) (Version: 27.0.1)
Mozilla Maintenance Service (Version: 27.0.1)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyFreeCodec
MyMicroBalance (Version: 2.5.0)
Nero Burning ROM 10 (Version: 10.0.10800)
Nero Burning ROM 10 (Version: 10.0.11100.10.100)
Nero BurningROM 10 Help (CHM) (Version: 1.0.10700)
Nero BurnRights 10 (Version: 4.0.11000.12.100)
Nero BurnRights 10 Help (CHM) (Version: 1.0.10600)
Nero Control Center 10 (Version: 10.0.12000.1.4)
Nero ControlCenter 10 Help (CHM) (Version: 1.0.10700)
Nero Core Components 10 (Version: 2.0.13700.0.1)
Nero Update (Version: 1.0.0017)
NVIDIA Drivers (Version: 1.4)
NVIDIA PhysX (Version: 9.09.0428)
Opera 12.12 (Version: 12.12.1707)
Opera Stable 19.0.1326.63 (Version: 19.0.1326.63)
phase-6 2.1.2.4b (Version: 2.1.2.4b)
PhotoScape
QuickTime (Version: 7.69.80.9)
RealPlayer
Realtek High Definition Audio Driver (Version: 6.0.1.5898)
Samsung Kies (Version: 2.2.0.12014_18)
softonic-de3 Toolbar (Version: )
Sound Organizer (Version: 1.1.1.12161)
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Windows Live Call (Version: 14.0.8050.1202)
Windows Live Communications Platform (Version: 14.0.8050.1202)
Windows Live Essentials (Version: 14.0.8050.1202)
Windows Live Fotogalerie (Version: 14.0.8051.1204)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0)
Windows Live Mail (Version: 14.0.8050.1202)
Windows Live Messenger (Version: 14.0.8050.1202)
Windows Live Sync (Version: 14.0.8050.1202)
Windows Live Toolbar (Version: 14.0.8052.1208)
Windows Live Writer (Version: 14.0.8050.1202)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR
XMind (Version: 3.2.1)
XMind 2013 (v3.4.1) (Version: 3.4.1.201401221918)

========================= Memory info: ===================================

Percentage of memory in use: 37%
Total physical RAM: 3070.39 MB
Available physical RAM: 1926.71 MB
Total Pagefile: 6343 MB
Available Pagefile: 5167.99 MB
Total Virtual: 2047.88 MB
Available Virtual: 1947.53 MB

========================= Partitions: =====================================

1 Drive c: (BOOT) (Fixed) (Total:581.17 GB) (Free:387.77 GB) NTFS
2 Drive d: (RECOVER) (Fixed) (Total:14.99 GB) (Free:2.94 GB) FAT32
4 Drive f: () (Removable) (Total:7.52 GB) (Free:7.5 GB) FAT32

========================= Users: ========================================

Benutzerkonten fr \\MARINA-PC

Administrator            Gast                     Marina                   
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

C:\Windows\Minidump\Mini050710-01.dmp

**** End of log ****
         


Alt 04.03.2014, 11:47   #6
schrauber
/// the machine
/// TB-Ausbilder
 

internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



Windows-taste + R drücken, schreibe

ipconfig /flushdns

und drücke Enter. Besser?
__________________
--> internet funktioniert nicht mehr ... aufgrund von trojaner?

Alt 04.03.2014, 15:06   #7
nikita86
 
internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



danke, werde ich gleich probieren, wenn ich zuhause bin.

Ipconfig/flushdns konnte nicht gefunden werden. Stellen sie sicher, dass sie den namen richtig eingegeben haben und wiederholen sie den vorgang.


Alt 05.03.2014, 13:47   #8
schrauber
/// the machine
/// TB-Ausbilder
 

internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



du hast das Leerzeichen vor dem /flushdns vergessen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.03.2014, 14:41   #9
nikita86
 
internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



Danke! Richtig lesen müsste man können.

Hat aber leider auch nichts geholfen.

Hättest du noch irgendeinen tipp?

Lg nikita

Alt 06.03.2014, 10:43   #10
schrauber
/// the machine
/// TB-Ausbilder
 

internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



Google DNS einstellen:

Anleitung: Den Computer auf Google Public DNS umstellen - NETZWELT
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.03.2014, 17:27   #11
nikita86
 
internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



schrauber du bist echt ein wunderheiler!
tausend dank! endlich funktioniert wieder alles und ich muss nicht mehr zwischen laptop, pc und handy rumfuhrwerken. werd mich in den nächsten tagen mit einer kleinen spende erkenntlich zeigen!

lg und vielen vielen dank, nikita

Alt 07.03.2014, 14:24   #12
schrauber
/// the machine
/// TB-Ausbilder
 

internet funktioniert nicht mehr ... aufgrund von trojaner? - Standard

internet funktioniert nicht mehr ... aufgrund von trojaner?



supi, jetzt müssen wir aber noch die URsache dafür finden


Bitte den Google DNS wieder rausnehmen, auf automatisch umstellen. Jetzt mal den Router 30 min vom Strom nehmen. Geht wieder?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu internet funktioniert nicht mehr ... aufgrund von trojaner?
anbieter, andere, anderen, antivir, bieter, frage, funktioniert, funktioniert nicht, funktioniert nicht mehr, geräte, gestern, gratis, hoffe, interne, internet, kurzem, liebe, nicht mehr, problem, rechner, tagen, troja, trojaner, trojaner?, version, wlan



Ähnliche Themen: internet funktioniert nicht mehr ... aufgrund von trojaner?


  1. Internet Explorer funktioniert nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 09.12.2014 (17)
  2. ADWARE - Trojaner - Internet funktioniert nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 04.11.2014 (3)
  3. Internet funktioniert nicht mehr Ordnungsgemäß
    Plagegeister aller Art und deren Bekämpfung - 03.07.2014 (3)
  4. IE funktioniert nicht mehr (vermutlich nach Java Update..)- komme nicht mehr ins Internet
    Log-Analyse und Auswertung - 16.06.2014 (6)
  5. Internet funktioniert nicht mehr
    Netzwerk und Hardware - 12.09.2011 (3)
  6. Internet Brouser funktioniert nicht mehr, habe evtl. Trojaner TR/Crypt.IR.41, HTML
    Plagegeister aller Art und deren Bekämpfung - 06.09.2010 (19)
  7. Internet Explorer funktioniert nicht mehr
    Log-Analyse und Auswertung - 25.01.2010 (1)
  8. Internet funktioniert nicht mehr!
    Log-Analyse und Auswertung - 13.11.2009 (3)
  9. Internet Explorer funktioniert nicht mehr
    Log-Analyse und Auswertung - 08.09.2009 (3)
  10. Internet Explorer funktioniert nicht mehr!
    Log-Analyse und Auswertung - 29.03.2009 (0)
  11. INternet funktioniert nicht mehr
    Netzwerk und Hardware - 06.09.2008 (2)
  12. Internet Explorer Funktioniert nicht mehr.
    Plagegeister aller Art und deren Bekämpfung - 18.01.2008 (23)
  13. Internet Explorer 7.0 funktioniert nicht mehr
    Alles rund um Windows - 25.07.2007 (1)
  14. Internet Explorer funktioniert nicht mehr - Trojaner?!
    Log-Analyse und Auswertung - 11.04.2007 (7)
  15. Trojaner gelöscht, Internet funktioniert nicht mehr!!!
    Plagegeister aller Art und deren Bekämpfung - 07.01.2007 (3)
  16. Internet funktioniert nicht mehr
    Netzwerk und Hardware - 02.11.2006 (2)
  17. Internet funktioniert nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 28.08.2004 (1)

Zum Thema internet funktioniert nicht mehr ... aufgrund von trojaner? - Hallo ihr lieben. Bin Auf das Form gestoßen und hoffe mir kann jemand helfen. Ich habe seit einigen Tagen das Problem, dass ich mitimeinen rechner nicht mehr ins internet komme. - internet funktioniert nicht mehr ... aufgrund von trojaner?...
Archiv
Du betrachtest: internet funktioniert nicht mehr ... aufgrund von trojaner? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.