![]() |
|
Log-Analyse und Auswertung: Email von abuse@telekom bezüglich eventueller zbot/zeus InfektionWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion Hallo, mein Vater hat vor einigen Tagen eine mail von abuse@telekom erhalten, die uns auf eine Aktivität des zbot Trojaners über unseren Anschluss hinwies. Es befinden sich im Haushalt derzeit 3 PCs aktiv im Gebrauch (+ ein weiterer der schon seit längerer Zeit nicht benutzt wurde), weshalb ich nicht weiß, welcher genau betroffen ist. Ich fange einfach mal mit meinem an: FRST Log: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-05-2014 Ran by Maik (administrator) on MAIK-PC on 18-05-2014 11:06:11 Running from C:\Users\Maik\Desktop Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe (Dropbox, Inc.) C:\Users\Maik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (BitTorrent Inc.) C:\Users\Maik\AppData\Roaming\uTorrent\uTorrent.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11930696 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation) HKLM\...\Run: [IMSS] => C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation) HKLM\...\Run: [USB3MON] => C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-11] (Intel Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-05-09] (AVAST Software) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM\...\Run: [] => [X] HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2201032 2014-04-02] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [1081112 2014-04-02] (NVIDIA Corporation) HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\Run: [chromium] => C:\Program Files\Google\Chrome\Application\chrome.exe [841032 2014-05-08] (Google Inc.) HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\Run: [HP Photosmart 6520 series (NET)] => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\MountPoints2: {43d59fc9-89e0-11e3-aeed-806e6f6e6963} - E:\ASRSetup.exe HKU\S-1-5-21-3782365729-1084643665-1953562598-1000\...\MountPoints2: {7ff10c4c-89b0-11e3-aca0-806e6f6e6963} - E:\ASRSetup.exe Startup: C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Maik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope value is missing. BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) Chrome: ======= CHR StartupUrls: "hxxp://www.sweet-page.com/?type=hp&ts=1393676136&from=cor&uid=ST3360320AS_6QF3KHRJXXXX6QF3KHRJ" CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\34.0.1847.137\pdf.dll () CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll No File CHR Plugin: ( "name": "",) - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: ( "name": "",) - C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.510.13) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Extension: (Magic Actions for YouTube™) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-03-30] CHR Extension: (Google Docs) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-30] CHR Extension: (Google Drive) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-30] CHR Extension: (WOT) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-05-17] CHR Extension: (NeoGAF Live Thread) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbfgndoggabppkoehpipfadjelcofmp [2014-01-30] CHR Extension: (YouTube) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-30] CHR Extension: (Google-Suche) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-30] CHR Extension: (AdBlock) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-01-30] CHR Extension: (avast! Online Security) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-30] CHR Extension: (GWT Developer Plugin) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjpnpmbddbjkfaccnmhnkdgjideieim [2014-04-03] CHR Extension: (Animal Crossing Music) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldjcaihhhmemeidcfbcadilcmfdaikkg [2014-01-30] CHR Extension: (Google Wallet) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-30] CHR Extension: (ScriptSafe) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2014-01-30] CHR Extension: (Click&Clean App) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2014-03-30] CHR Extension: (Google Mail) - C:\Users\Maik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-30] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-05-09] ========================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-09] (AVAST Software) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [583680 2013-02-13] (Intel(R) Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [637912 2013-02-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation) S3 iumsvc; C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] () R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1615192 2014-04-02] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19405768 2014-04-02] (NVIDIA Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-09] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-09] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-05-15] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-09] () R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-31] (Disc Soft Ltd) R0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [538608 2013-04-30] (Intel Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [26608 2013-04-30] (Intel Corporation) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-04-11] (Intel Corporation) R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [359408 2013-04-11] (Intel Corporation) R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [792560 2013-04-11] (Intel Corporation) R3 MBfilt; C:\Windows\System32\drivers\MBfilt32.sys [24664 2009-11-18] (Creative Technology Ltd.) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [56432 2013-03-12] (Intel Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-21] (NVIDIA Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-18 11:06 - 2014-05-18 11:06 - 00016847 _____ () C:\Users\Maik\Desktop\FRST.txt 2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\FRST 2014-05-18 11:05 - 2014-05-17 15:33 - 01056768 _____ (Farbar) C:\Users\Maik\Desktop\FRST.exe 2014-05-18 11:04 - 2014-05-18 11:04 - 00000540 _____ () C:\Users\Maik\Desktop\defogger_disable.log 2014-05-18 11:04 - 2014-05-18 11:04 - 00000156 _____ () C:\Users\Maik\defogger_reenable 2014-05-18 11:03 - 2014-05-17 15:31 - 00050477 _____ () C:\Users\Maik\Desktop\Defogger.exe 2014-05-17 18:49 - 2014-05-17 18:49 - 00017654 _____ () C:\Users\Maik\Downloads\Game Center CX Season 06.torrent 2014-05-17 17:33 - 2014-05-17 17:33 - 00014308 _____ () C:\Users\Maik\Downloads\Game Center CX Season 05.torrent 2014-05-17 15:12 - 2014-05-17 15:12 - 00657408 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50475.msi 2014-05-17 15:11 - 2014-05-17 15:11 - 00655360 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50471.msi 2014-05-17 14:49 - 2014-05-17 20:30 - 00000000 ____D () C:\Users\Maik\Desktop\zbotremoval 2014-05-17 07:13 - 2014-05-17 07:15 - 00000000 ____D () C:\Users\Maik\Desktop\Business Applications 2014-05-15 08:47 - 2014-05-15 08:47 - 00018840 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 06 [EB52DFA3].mkv.torrent 2014-05-15 08:47 - 2014-05-15 08:47 - 00012039 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 06 [769F0D72].mkv.torrent 2014-05-15 03:01 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 03:01 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 03:01 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-14 13:04 - 2014-05-14 13:04 - 00000000 ____D () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30 2014-05-14 13:03 - 2014-05-14 13:03 - 04058136 _____ () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30.zip 2014-05-14 13:02 - 2014-05-14 13:02 - 00000000 ____D () C:\Program Files\MySQL 2014-05-14 13:00 - 2014-05-14 13:01 - 06348288 _____ () C:\Users\Maik\Desktop\mysql-connector-java-gpl-5.1.30.msi 2014-05-14 04:13 - 2014-05-09 09:06 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 04:13 - 2014-05-09 09:04 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 04:13 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 04:13 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 04:13 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 04:13 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 04:13 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 04:13 - 2014-04-12 04:11 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 04:13 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 04:13 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 04:13 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2014-05-14 04:13 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 04:13 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 04:13 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 04:13 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wwPacker 2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Program Files\wwPacker 2014-05-12 20:55 - 2014-05-12 20:55 - 00000000 ____D () C:\Users\Maik\AppData\Local\Microsoft_Corporation 2014-05-12 20:50 - 2014-05-12 20:50 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\NuGet 2014-05-12 20:41 - 2014-05-12 20:48 - 00000000 ____D () C:\Users\Maik\Documents\Visual Studio 2013 2014-05-12 20:39 - 2014-05-15 07:09 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-05-12 20:39 - 2014-05-14 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-05-12 20:38 - 2014-05-12 20:38 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-05-12 20:35 - 2014-05-12 20:36 - 00000000 ____D () C:\Program Files\Windows Kits 2014-05-12 20:30 - 2014-05-12 20:30 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer 2014-05-12 20:29 - 2014-05-17 15:42 - 00000000 ____D () C:\Windows\system32\1031 2014-05-12 20:29 - 2014-05-12 20:29 - 00000000 ____D () C:\Windows\system32\1033 2014-05-12 20:26 - 2014-05-17 15:48 - 00000000 ____D () C:\Program Files\Microsoft SDKs 2014-05-12 20:25 - 2014-05-17 15:48 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0 2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143.sdx 2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143 (1).sdx 2014-05-12 18:55 - 2014-05-12 18:55 - 00090823 _____ () C:\Users\Maik\Downloads\delicious-123.zip 2014-05-12 18:32 - 2014-05-12 18:32 - 00000183 _____ () C:\Users\Maik\Downloads\100292801522.sdx 2014-05-12 11:54 - 2014-05-12 11:54 - 00000000 ____D () C:\Users\Maik\Downloads\PinkHourEn-v1063 2014-05-12 11:53 - 2014-05-12 11:53 - 01155893 _____ () C:\Users\Maik\Downloads\PinkHourEn-v1063.zip 2014-05-11 22:18 - 2014-05-11 22:44 - 00000000 ____D () C:\Users\Maik\Desktop\Daimler Bewerbung 2014-05-09 20:34 - 2014-05-09 20:34 - 00020626 _____ () C:\Users\Maik\Downloads\[T-N]GameCenterCX2ndSeason.torrent 2014-05-09 12:41 - 2014-05-09 12:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-05-09 12:41 - 2014-05-09 12:41 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-05-07 03:01 - 2014-05-15 03:26 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-06 15:05 - 2014-05-06 15:05 - 00013139 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 05 [A26F06D2].mkv.torrent 2014-05-06 14:00 - 2014-05-06 14:00 - 01063705 _____ () C:\Users\Maik\Downloads\01-1-DatenModellierung.pptx 2014-05-05 21:05 - 2014-05-05 21:05 - 03104214 _____ () C:\Users\Maik\Documents\OLAP.xlsx 2014-05-04 21:53 - 2014-05-04 21:53 - 00015119 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 04 [3837093A].mkv.torrent 2014-05-04 21:52 - 2014-05-04 21:52 - 00011300 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 05 [C0D8C172].mkv.torrent 2014-05-04 13:04 - 2014-05-04 13:04 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager 2014-05-01 10:38 - 2014-05-01 10:38 - 00909257 _____ () C:\Users\Maik\Downloads\Devices_HiRes_Web_All.zip 2014-04-30 10:42 - 2014-03-21 21:43 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys 2014-04-30 10:37 - 2014-04-30 10:43 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA Corporation 2014-04-30 10:36 - 2014-04-30 10:38 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA 2014-04-30 10:36 - 2014-04-02 15:27 - 01081112 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll 2014-04-30 10:35 - 2014-05-18 08:15 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-04-30 10:35 - 2014-04-30 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-04-30 10:35 - 2014-04-30 10:35 - 00000000 ____D () C:\Program Files\AGEIA Technologies 2014-04-30 10:35 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe 2014-04-30 10:34 - 2014-03-04 16:29 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-04-30 10:34 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-04-30 10:34 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll 2014-04-30 10:34 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-04-30 10:34 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-04-30 10:34 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-04-30 10:34 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-04-30 10:34 - 2014-03-04 07:35 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin 2014-04-30 10:31 - 2014-03-21 21:43 - 00033568 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 23716640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 17559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 15783992 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 14709720 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 10523480 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-04-30 10:31 - 2014-03-04 16:29 - 09728064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 09690424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 02956632 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 02715264 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 02411976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 01049888 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3233523.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00894296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3233523.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00865224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00847136 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00832936 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshim.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00305600 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim32.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00148016 _____ (NVIDIA Corporation) C:\Windows\system32\nvinit.dll 2014-04-30 10:31 - 2014-03-04 16:29 - 00019204 _____ () C:\Windows\system32\nvinfo.pb 2014-04-30 10:31 - 2013-11-28 15:38 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys 2014-04-30 10:31 - 2013-11-28 15:38 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll 2014-04-30 10:31 - 2013-11-22 10:36 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll 2014-04-28 08:47 - 2014-04-28 08:47 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-04-28 08:47 - 2014-04-28 08:47 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-04-28 08:47 - 2014-04-28 08:47 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-04-28 08:47 - 2014-04-28 08:47 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-04-28 08:47 - 2014-04-28 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-28 08:45 - 2014-04-28 08:46 - 00921512 _____ (Oracle Corporation) C:\Users\Maik\Downloads\chromeinstall-7u55.exe 2014-04-28 08:36 - 2014-04-28 08:36 - 00000000 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log 2014-04-27 16:48 - 2014-05-17 17:23 - 00000000 ____D () C:\Users\Maik\Documents\Praktikum 2014-04-27 16:33 - 2014-05-04 16:49 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\HpUpdate 2014-04-27 16:33 - 2014-04-27 16:33 - 00002248 _____ () C:\Users\Public\Desktop\HP Photosmart 6520 series.lnk 2014-04-27 16:33 - 2014-04-27 16:33 - 00001180 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 6520 series.lnk 2014-04-27 16:33 - 2014-04-27 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-04-27 16:33 - 2012-10-17 04:04 - 00580712 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMAF11.dll 2014-04-27 16:32 - 2014-04-27 16:35 - 00000000 ____D () C:\Users\Maik\AppData\Local\HP 2014-04-27 16:32 - 2014-04-27 16:33 - 00000000 ____D () C:\Program Files\HP 2014-04-27 16:32 - 2014-04-27 16:32 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-04-27 16:32 - 2014-04-27 16:32 - 00000000 ____D () C:\ProgramData\HP 2014-04-27 16:27 - 2014-04-27 16:29 - 72335864 _____ () C:\Users\Maik\Downloads\PS6520_1315.exe 2014-04-26 20:53 - 2014-04-26 20:53 - 00018880 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 04 [F7AB09E3].mkv.torrent 2014-04-25 11:51 - 2014-04-25 11:57 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\ImgBurn 2014-04-25 11:17 - 2014-04-25 11:17 - 00001827 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk 2014-04-25 11:17 - 2014-04-25 11:17 - 00001815 _____ () C:\Users\Public\Desktop\ImgBurn.lnk 2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn 2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\Program Files\ImgBurn 2014-04-25 11:12 - 2014-04-25 11:14 - 03469871 _____ (LIGHTNING UK!) C:\Users\Maik\Downloads\SetupImgBurn_2.5.8.0.exe 2014-04-25 10:45 - 2014-05-12 19:45 - 00014072 _____ () C:\Users\Maik\Downloads\SecureDownloadManager.log 2014-04-25 10:45 - 2014-04-25 10:45 - 00000183 _____ () C:\Users\Maik\Downloads\100288449952.sdx 2014-04-25 10:44 - 2014-04-25 10:44 - 00720896 _____ () C:\Users\Maik\Downloads\SDM_DE.msi 2014-04-25 10:44 - 2014-04-25 10:44 - 00003133 _____ () C:\Users\Maik\Desktop\Secure Download Manager.lnk 2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\e-academy Inc 2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Local\e-academy Inc 2014-04-25 02:16 - 2014-04-25 02:16 - 01070232 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX 2014-04-23 03:01 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-23 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-23 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-23 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-23 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-23 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-23 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-23 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-23 03:01 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-23 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-23 03:01 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-23 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-23 03:01 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-23 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-23 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-23 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-23 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-23 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-23 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-23 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-23 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-23 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-23 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-23 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-21 21:53 - 2014-04-21 21:53 - 00013097 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 03 [A0A2B473].mkv.torrent 2014-04-20 19:35 - 2014-04-20 19:35 - 00015718 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 03 [4553DD44].mkv.torrent ==================== One Month Modified Files and Folders ======= 2014-05-18 11:06 - 2014-05-18 11:06 - 00016847 _____ () C:\Users\Maik\Desktop\FRST.txt 2014-05-18 11:06 - 2014-05-18 11:06 - 00000000 ____D () C:\FRST 2014-05-18 11:06 - 2014-01-30 18:33 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\uTorrent 2014-05-18 11:04 - 2014-05-18 11:04 - 00000540 _____ () C:\Users\Maik\Desktop\defogger_disable.log 2014-05-18 11:04 - 2014-05-18 11:04 - 00000156 _____ () C:\Users\Maik\defogger_reenable 2014-05-18 11:04 - 2014-01-30 21:03 - 00000000 ____D () C:\Users\Maik 2014-05-18 11:03 - 2014-01-30 17:21 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Skype 2014-05-18 10:48 - 2014-01-30 21:06 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-18 09:57 - 2014-01-30 21:03 - 01617228 _____ () C:\Windows\WindowsUpdate.log 2014-05-18 08:23 - 2009-07-14 06:34 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-18 08:23 - 2009-07-14 06:34 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-18 08:22 - 2014-01-31 16:14 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-18 08:21 - 2014-02-03 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-05-18 08:18 - 2014-01-30 17:15 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-05-18 08:17 - 2014-01-30 17:19 - 00000000 ___RD () C:\Users\Maik\Dropbox 2014-05-18 08:17 - 2014-01-30 17:17 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Dropbox 2014-05-18 08:15 - 2014-04-30 10:35 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-18 08:15 - 2014-01-30 21:06 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-18 08:15 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-18 08:15 - 2009-07-14 06:39 - 00040278 _____ () C:\Windows\setupact.log 2014-05-17 20:30 - 2014-05-17 14:49 - 00000000 ____D () C:\Users\Maik\Desktop\zbotremoval 2014-05-17 19:10 - 2014-01-30 17:28 - 00000000 ____D () C:\Users\Maik\Desktop\Maik 2014-05-17 18:49 - 2014-05-17 18:49 - 00017654 _____ () C:\Users\Maik\Downloads\Game Center CX Season 06.torrent 2014-05-17 17:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-05-17 17:33 - 2014-05-17 17:33 - 00014308 _____ () C:\Users\Maik\Downloads\Game Center CX Season 05.torrent 2014-05-17 17:23 - 2014-04-27 16:48 - 00000000 ____D () C:\Users\Maik\Documents\Praktikum 2014-05-17 15:58 - 2010-11-20 23:01 - 01621742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-17 15:49 - 2014-01-30 18:21 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-17 15:49 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild 2014-05-17 15:48 - 2014-05-12 20:26 - 00000000 ____D () C:\Program Files\Microsoft SDKs 2014-05-17 15:48 - 2014-05-12 20:25 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0 2014-05-17 15:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-05-17 15:43 - 2014-02-03 18:08 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-05-17 15:42 - 2014-05-12 20:29 - 00000000 ____D () C:\Windows\system32\1031 2014-05-17 15:33 - 2014-05-18 11:05 - 01056768 _____ (Farbar) C:\Users\Maik\Desktop\FRST.exe 2014-05-17 15:31 - 2014-05-18 11:03 - 00050477 _____ () C:\Users\Maik\Desktop\Defogger.exe 2014-05-17 15:12 - 2014-05-17 15:12 - 00657408 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50475.msi 2014-05-17 15:11 - 2014-05-17 15:11 - 00655360 _____ () C:\Users\Maik\Downloads\MicrosoftFixit50471.msi 2014-05-17 07:15 - 2014-05-17 07:13 - 00000000 ____D () C:\Users\Maik\Desktop\Business Applications 2014-05-16 08:53 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-05-15 22:51 - 2014-01-30 17:11 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-05-15 17:05 - 2014-01-30 17:05 - 00777488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-05-15 17:05 - 2014-01-30 17:05 - 00411680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-05-15 17:05 - 2014-01-30 17:05 - 00068312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-05-15 09:00 - 2014-03-13 09:48 - 00000000 ____D () C:\Users\Maik\Desktop\Plauschangriff 2014-05-15 08:47 - 2014-05-15 08:47 - 00018840 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 06 [EB52DFA3].mkv.torrent 2014-05-15 08:47 - 2014-05-15 08:47 - 00012039 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 06 [769F0D72].mkv.torrent 2014-05-15 08:30 - 2014-04-03 12:54 - 00000000 ____D () C:\Users\Maik\AppData\Local\Eclipse 2014-05-15 08:30 - 2014-04-03 12:50 - 00000000 ____D () C:\Program Files\eclipse 2014-05-15 07:09 - 2014-05-12 20:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-05-15 03:26 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 03:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-05-15 03:03 - 2009-07-14 04:04 - 00000478 _____ () C:\Windows\win.ini 2014-05-14 13:44 - 2014-04-03 12:54 - 00000000 ____D () C:\Users\Maik\workspace 2014-05-14 13:35 - 2014-04-05 22:12 - 00000000 ____D () C:\Users\Maik\git 2014-05-14 13:04 - 2014-05-14 13:04 - 00000000 ____D () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30 2014-05-14 13:03 - 2014-05-14 13:03 - 04058136 _____ () C:\Users\Maik\Downloads\mysql-connector-java-5.1.30.zip 2014-05-14 13:02 - 2014-05-14 13:02 - 00000000 ____D () C:\Program Files\MySQL 2014-05-14 13:01 - 2014-05-14 13:00 - 06348288 _____ () C:\Users\Maik\Desktop\mysql-connector-java-gpl-5.1.30.msi 2014-05-14 03:02 - 2014-05-12 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-05-13 22:35 - 2014-01-30 17:19 - 00001013 _____ () C:\Users\Maik\Desktop\Dropbox.lnk 2014-05-13 22:35 - 2014-01-30 17:18 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wwPacker 2014-05-13 22:29 - 2014-05-13 22:29 - 00000000 ____D () C:\Program Files\wwPacker 2014-05-12 20:55 - 2014-05-12 20:55 - 00000000 ____D () C:\Users\Maik\AppData\Local\Microsoft_Corporation 2014-05-12 20:55 - 2014-02-03 18:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2014-05-12 20:50 - 2014-05-12 20:50 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\NuGet 2014-05-12 20:48 - 2014-05-12 20:41 - 00000000 ____D () C:\Users\Maik\Documents\Visual Studio 2013 2014-05-12 20:38 - 2014-05-12 20:38 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-05-12 20:36 - 2014-05-12 20:35 - 00000000 ____D () C:\Program Files\Windows Kits 2014-05-12 20:30 - 2014-05-12 20:30 - 00000000 ____D () C:\Program Files\Microsoft Help Viewer 2014-05-12 20:29 - 2014-05-12 20:29 - 00000000 ____D () C:\Windows\system32\1033 2014-05-12 20:27 - 2014-01-30 17:52 - 00000000 ____D () C:\Program Files\Microsoft.NET 2014-05-12 19:45 - 2014-04-25 10:45 - 00014072 _____ () C:\Users\Maik\Downloads\SecureDownloadManager.log 2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143.sdx 2014-05-12 19:22 - 2014-05-12 19:22 - 00000183 _____ () C:\Users\Maik\Downloads\100292805143 (1).sdx 2014-05-12 18:55 - 2014-05-12 18:55 - 00090823 _____ () C:\Users\Maik\Downloads\delicious-123.zip 2014-05-12 18:32 - 2014-05-12 18:32 - 00000183 _____ () C:\Users\Maik\Downloads\100292801522.sdx 2014-05-12 11:54 - 2014-05-12 11:54 - 00000000 ____D () C:\Users\Maik\Downloads\PinkHourEn-v1063 2014-05-12 11:53 - 2014-05-12 11:53 - 01155893 _____ () C:\Users\Maik\Downloads\PinkHourEn-v1063.zip 2014-05-11 22:44 - 2014-05-11 22:18 - 00000000 ____D () C:\Users\Maik\Desktop\Daimler Bewerbung 2014-05-09 20:34 - 2014-05-09 20:34 - 00020626 _____ () C:\Users\Maik\Downloads\[T-N]GameCenterCX2ndSeason.torrent 2014-05-09 12:42 - 2014-01-30 17:05 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-05-09 12:41 - 2014-05-09 12:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-05-09 12:41 - 2014-05-09 12:41 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-05-09 12:41 - 2014-01-30 17:05 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1400166343318 2014-05-09 12:41 - 2014-01-30 17:05 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1400166343318 2014-05-09 12:41 - 2014-01-30 17:05 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-05-09 12:41 - 2014-01-30 17:05 - 00180632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-05-09 12:41 - 2014-01-30 17:05 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-05-09 12:41 - 2014-01-30 17:05 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-05-09 12:41 - 2014-01-30 17:05 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-05-09 09:06 - 2014-05-14 04:13 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 09:04 - 2014-05-14 04:13 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-06 15:05 - 2014-05-06 15:05 - 00013139 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 05 [A26F06D2].mkv.torrent 2014-05-06 14:00 - 2014-05-06 14:00 - 01063705 _____ () C:\Users\Maik\Downloads\01-1-DatenModellierung.pptx 2014-05-06 05:25 - 2014-05-15 03:01 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 05:07 - 2014-05-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 04:10 - 2014-05-15 03:01 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-05 21:05 - 2014-05-05 21:05 - 03104214 _____ () C:\Users\Maik\Documents\OLAP.xlsx 2014-05-04 21:53 - 2014-05-04 21:53 - 00015119 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 04 [3837093A].mkv.torrent 2014-05-04 21:52 - 2014-05-04 21:52 - 00011300 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 05 [C0D8C172].mkv.torrent 2014-05-04 18:13 - 2014-01-30 21:15 - 00000000 ____D () C:\ProgramData\Intel 2014-05-04 16:49 - 2014-04-27 16:33 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\HpUpdate 2014-05-04 13:04 - 2014-05-04 13:04 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager 2014-05-04 13:04 - 2014-01-30 21:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-04 13:04 - 2014-01-30 21:07 - 00000000 ____D () C:\Program Files\Intel 2014-05-01 15:12 - 2014-04-02 18:58 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\TS3Client 2014-05-01 10:38 - 2014-05-01 10:38 - 00909257 _____ () C:\Users\Maik\Downloads\Devices_HiRes_Web_All.zip 2014-04-30 10:49 - 2014-04-30 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-04-30 10:43 - 2014-04-30 10:37 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA Corporation 2014-04-30 10:42 - 2014-01-30 16:54 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-04-30 10:42 - 2014-01-30 16:54 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-04-30 10:38 - 2014-04-30 10:36 - 00000000 ____D () C:\Users\Maik\AppData\Local\NVIDIA 2014-04-30 10:35 - 2014-04-30 10:35 - 00000000 ____D () C:\Program Files\AGEIA Technologies 2014-04-30 10:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help 2014-04-28 08:47 - 2014-04-28 08:47 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-04-28 08:47 - 2014-04-28 08:47 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-04-28 08:47 - 2014-04-28 08:47 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-04-28 08:47 - 2014-04-28 08:47 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-04-28 08:47 - 2014-04-28 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-28 08:47 - 2014-02-06 17:36 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-28 08:46 - 2014-04-28 08:45 - 00921512 _____ (Oracle Corporation) C:\Users\Maik\Downloads\chromeinstall-7u55.exe 2014-04-28 08:36 - 2014-04-28 08:36 - 00000000 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log 2014-04-28 08:36 - 2014-01-30 18:38 - 00000000 ____D () C:\Program Files\Java 2014-04-28 00:31 - 2014-02-04 14:07 - 00009606 _____ () C:\Users\Maik\Documents\Spieleliste2014.xlsx 2014-04-27 20:57 - 2010-11-20 23:48 - 00115868 _____ () C:\Windows\PFRO.log 2014-04-27 18:14 - 2014-01-30 19:01 - 00000000 ____D () C:\Users\Maik\Documents\Studium 2014-04-27 16:35 - 2014-04-27 16:32 - 00000000 ____D () C:\Users\Maik\AppData\Local\HP 2014-04-27 16:33 - 2014-04-27 16:33 - 00002248 _____ () C:\Users\Public\Desktop\HP Photosmart 6520 series.lnk 2014-04-27 16:33 - 2014-04-27 16:33 - 00001180 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Photosmart 6520 series.lnk 2014-04-27 16:33 - 2014-04-27 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-04-27 16:33 - 2014-04-27 16:32 - 00000000 ____D () C:\Program Files\HP 2014-04-27 16:32 - 2014-04-27 16:32 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-04-27 16:32 - 2014-04-27 16:32 - 00000000 ____D () C:\ProgramData\HP 2014-04-27 16:32 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32 2014-04-27 16:29 - 2014-04-27 16:27 - 72335864 _____ () C:\Users\Maik\Downloads\PS6520_1315.exe 2014-04-26 20:53 - 2014-04-26 20:53 - 00018880 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 04 [F7AB09E3].mkv.torrent 2014-04-26 09:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Cursors 2014-04-25 11:57 - 2014-04-25 11:51 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\ImgBurn 2014-04-25 11:17 - 2014-04-25 11:17 - 00001827 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk 2014-04-25 11:17 - 2014-04-25 11:17 - 00001815 _____ () C:\Users\Public\Desktop\ImgBurn.lnk 2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn 2014-04-25 11:17 - 2014-04-25 11:17 - 00000000 ____D () C:\Program Files\ImgBurn 2014-04-25 11:14 - 2014-04-25 11:12 - 03469871 _____ (LIGHTNING UK!) C:\Users\Maik\Downloads\SetupImgBurn_2.5.8.0.exe 2014-04-25 10:45 - 2014-04-25 10:45 - 00000183 _____ () C:\Users\Maik\Downloads\100288449952.sdx 2014-04-25 10:44 - 2014-04-25 10:44 - 00720896 _____ () C:\Users\Maik\Downloads\SDM_DE.msi 2014-04-25 10:44 - 2014-04-25 10:44 - 00003133 _____ () C:\Users\Maik\Desktop\Secure Download Manager.lnk 2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Roaming\e-academy Inc 2014-04-25 10:44 - 2014-04-25 10:44 - 00000000 ____D () C:\Users\Maik\AppData\Local\e-academy Inc 2014-04-25 02:16 - 2014-04-25 02:16 - 01070232 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX 2014-04-21 21:53 - 2014-04-21 21:53 - 00013097 _____ () C:\Users\Maik\Downloads\[Vivid] Isshuukan Friends - 03 [A0A2B473].mkv.torrent 2014-04-20 19:35 - 2014-04-20 19:35 - 00015718 _____ () C:\Users\Maik\Downloads\[Vivid] Mushishi Zoku Shou - 03 [4553DD44].mkv.torrent Some content of TEMP: ==================== C:\Users\Maik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpap9cgr.dll C:\Users\Maik\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Maik\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\Maik\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Maik\AppData\Local\Temp\nvSCPAPISvr.exe C:\Users\Maik\AppData\Local\Temp\nvStInst.exe C:\Users\Maik\AppData\Local\Temp\ose00000.exe C:\Users\Maik\AppData\Local\Temp\ose00001.exe C:\Users\Maik\AppData\Local\Temp\PidGenX.dll C:\Users\Maik\AppData\Local\Temp\Quarantine.exe C:\Users\Maik\AppData\Local\Temp\vcredist_2013_x86.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe [2014-05-14 04:13] - [2014-03-04 11:17] - 0304128 ____A (Microsoft Corporation) 998507B046BA314CE8245364C686FA67 C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-09 02:37 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:17-05-2014 Ran by Maik at 2014-05-18 11:06:40 Running from C:\Users\Maik\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.31139 - BitTorrent Inc.) Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2018 - Avast Software) Battle.net (HKLM\...\Battle.net) (Version: - Blizzard Entertainment) Blender (HKLM\...\Blender) (Version: 2.70 - Blender Foundation) CrystalDiskInfo 6.1.1 (HKLM\...\CrystalDiskInfo_is1) (Version: 6.1.1 - Crystal Dew World) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd) Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{341FFD7F-3127-466D-88F7-CE4DE78A48F1}) (Version: - Microsoft) Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.) Entity Framework Tools for Visual Studio 2013 (HKLM\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation) Erforderliche Komponenten für SSDT (HKLM\...\{3FF082A7-A5DE-4BDA-B56A-1D2BEFD617A3}) (Version: 11.1.3000.0 - Microsoft Corporation) Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.) Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden Hearthstone (HKLM\...\Hearthstone) (Version: - Blizzard Entertainment) HP Photosmart 6520 series - Grundlegende Software für das Gerät (HKLM\...\{EE3D7A4C-CEA2-4ECA-A456-7A3F3F7D3270}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Update (HKLM\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard) ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 12.6.0.1033 - Intel Corporation) Hidden Intel(R) Update Manager (HKLM\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.102 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) KCP-0.5.5.4 (HKLM\...\Kawaii Codec Pack_is1) (Version: 0.5.5.4 - Haruhichan.com) Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft .NET Framework 4 Multi-Targeting Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM\...\{21B0F482-5EF9-45DA-8840-340AFE705A6C}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft AppLocale (HKLM\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS) Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.1 (HKLM\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.1 (Version: 2.1.21005 - Microsoft Corporation) Hidden Microsoft Help Viewer 2.1 Sprachpaket - DEU (HKLM\...\Microsoft Help Viewer 2.1 Sprachpaket - DEU) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.1 Sprachpaket - DEU (Version: 2.1.21005 - Microsoft Corporation) Hidden Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{E41DF93D-DC9B-4B22-A968-07077C574E43}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{D4E30517-FE6F-491E-942F-AE10E1B18F38}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{7401A902-8F22-4C66-9FE4-CAC3373DFD06}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM\...\{EC75BD20-F9CA-4E77-825F-ABD77E95BE91}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{CAAD4A3A-27DE-4506-93AB-A016D9064945}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{387C998E-3990-4503-91BF-88A7D5873EEB}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL-Sprachdienst (HKLM\...\{1D812D86-D8EF-41AC-A518-BA12E1913747}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 DEU (HKLM\...\{7CC4FADE-70AC-4560-9418-639D71A4767C}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (12.0.30919.1) (HKLM\...\{7CC03C58-3471-43D2-A251-EC9AE225E772}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM\...\{D434E072-F482-4F52-AB97-7B19DD5DAEB5}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - ) Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM\...\{43341417-7882-4F34-8390-53DFD00F6C0F}) (Version: 11.1.3366.16 - Microsoft Corporation) MySQL Connector J (HKLM\...\{9B0DB369-396B-4A81-94FE-5631916D6C6F}) (Version: 5.1.30 - Oracle Corporation) NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA GeForce Experience 2.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 12.4.55 (Version: 12.4.55 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 12.4.55 (Version: 12.4.55 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 12.4.55 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.22 (Version: 1.2.22 - NVIDIA Corporation) Hidden Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation) PCSX2 - Playstation 2 Emulator (HKLM\...\pcsx2-r5875) (Version: - ) Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.68.201.2013 - Realtek) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.) Secure Download Manager (HKLM\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.) SHIELD Streaming (Version: 1.8.323 - NVIDIA Corporation) Hidden Skype™ 6.13 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.13.104 - Skype Technologies S.A.) Steam (HKLM\...\Steam) (Version: - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer) The Binding of Isaac (HKLM\...\Steam App 113200) (Version: - Edmund McMillen and Florian Himsl) Update for (KB2504637) (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition (HKLM\...\{90150000-0015-0407-0000-0000000FF1CE}_Office15.PROPLUS_{02DD2FBD-76D9-4B8B-AAE6-657542F4F6E6}) (Version: - Microsoft) Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FB31ABE4-BB41-4E9A-A252-1A4BC9DC8C43}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2880475) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{830E5E0C-B48A-4FBE-83BE-28418740DED5}) (Version: - Microsoft) Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{F15AA550-A0B9-44AD-9067-2294CCA51F1C}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7FBE2D23-9F3C-4983-B927-2A4BF600B7A7}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2880980) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A10C00F8-0A83-4A74-86C5-3D0F9879E101}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2880980) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{A10C00F8-0A83-4A74-86C5-3D0F9879E101}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F307363-49DA-4AE7-9D9D-DAA1FF59274F}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6E6B2968-B9D7-40C9-9FC2-8E729DDBB39C}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{49893259-C896-4972-9B6C-6B75790945F1}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AFDC9BDD-5608-4A21-8066-13E2ACE1EDB4}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F8AD68D-9F41-446E-AA81-C43BF88671BF}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCD0EA38-A8FB-4F3D-B04E-DFFB38BC7849}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9E03AB38-EF60-4DE6-92FB-656E23403BFA}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{E58009CD-D950-4CAE-89B4-E97C3B78319B}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{03FC8649-9511-4FB1-BE34-67A442505DCF}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B299B17D-874D-43DD-84AA-414BD9C70021}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{65D789FD-9118-45AF-8DE4-F49F358A8525}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{B9DB28D9-15D0-4DDE-A123-C9B82AC9A579}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5EFADE14-CE0B-43BF-ADD2-850FCB79485F}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{8E942418-D7DE-48A4-8210-AD994006EFAA}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{188DFB16-BA3F-4AD3-9432-45C8FA64EC8B}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2826040) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B7EA8070-C37F-4617-82F4-52CF3304595A}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C5CF8938-646A-41A5-A4E6-6EEE4205CBA4}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{954A0EA5-CCCB-4B4E-8664-40E2CC8BBCBB}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4B1A48FA-CAE2-49BB-A912-6F96AE7875D9}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837644) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9BC5FF1D-9626-44D7-BC7F-EB44BD8BDB9F}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2863825) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{96754DD8-5AF9-4CF8-A5A9-19770CD9AFBC}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2863844) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{8AEAF88E-A488-4C1E-B10D-F00143BA650F}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880464) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{06EF2BF7-7351-4D70-A0D5-588FCCF9808D}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880476) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{DDF64A37-8E32-406E-A94C-9F5B03661A21}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version: - Microsoft) Update for Microsoft OneDrive for Business (KB2880480) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7655E7AA-268C-4F74-AC05-8D56F75C664A}) (Version: - Microsoft) Update for Microsoft OneDrive for Business (KB2880480) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7655E7AA-268C-4F74-AC05-8D56F75C664A}) (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUS_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2878315) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{47A62B15-D0BF-4A2E-BCE2-939DB491D387}) (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2878315) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{47A62B15-D0BF-4A2E-BCE2-939DB491D387}) (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2726952) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{173C8CEB-B73E-4C38-AF3A-05EA5BB860D4}) (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2726952) 32-Bit Edition (HKLM\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUS_{173C8CEB-B73E-4C38-AF3A-05EA5BB860D4}) (Version: - Microsoft) Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{166909FC-6736-4EE5-9491-1BF9A4EE84E7}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version: - Microsoft) Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{A7CD05CC-CA85-428C-91FD-74A908D126E1}) (Version: - Microsoft) Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version: - Microsoft) Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version: - Microsoft) Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version: - Microsoft) Update for Microsoft Word 2013 (KB2880455) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{BCF1F149-B9D9-49D9-B829-FCDA37F7FF0C}) (Version: - Microsoft) WinRAR 5.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) ==================== Restore Points ========================= 14-05-2014 01:00:11 Windows Update 14-05-2014 11:01:07 Installed MySQL Connector J 15-05-2014 01:01:01 Windows Update 17-05-2014 13:12:09 Installed Microsoft Fix it 50471 17-05-2014 13:30:42 Microsoft Visual Studio Professional 2013 18-05-2014 06:20:01 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {133F78AF-81D8-4F58-B1FE-EA8C4FCF9173} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {1D0E6321-4F51-403F-A798-69915083C272} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-30] (Google Inc.) Task: {285C9968-36C7-40CD-985A-A061FEEB3F18} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] () Task: {42A6AFB0-A703-4768-994A-CCE038A148ED} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] () Task: {5D251ED6-AA5E-40A7-80CE-7CC4D5C1363E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-09] (AVAST Software) Task: {AEC932FB-575F-4626-874E-D9EE9E4C42D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-01-30] (Google Inc.) Task: {BBA31198-D566-477D-88F1-7427D989B4DE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {D21051FA-C113-4D06-B3C5-E5CF890B9EF8} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Maik-PC-Maik Maik-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-04-08] (Microsoft Corporation) Task: {E9ACF4C0-F948-4362-BB37-FC55467199CF} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {FBACB863-3C46-4214-B014-7DC4BABB1EC2} - System32\Tasks\ScanToPCActivationApp.exe_{D111EF33-291B-46B8-AD6A-48A74609EAC3} => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-05-17 13:32 - 2014-05-17 13:32 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051700\algo.dll 2014-05-18 08:15 - 2014-05-18 08:15 - 02253312 _____ () C:\Program Files\AVAST Software\Avast\defs\14051701\algo.dll 2014-04-30 10:34 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2014-01-30 17:05 - 2014-01-30 17:05 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-05-18 08:17 - 2014-05-18 08:17 - 00041984 _____ () c:\users\maik\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpap9cgr.dll 2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Maik\AppData\Roaming\Dropbox\bin\libcef.dll 2014-01-30 21:16 - 2013-03-12 14:19 - 01199576 _____ () C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-05-15 22:50 - 2014-05-08 01:29 - 00065352 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll 2014-05-15 22:50 - 2014-05-08 01:29 - 00674632 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\libglesv2.dll 2014-05-15 22:50 - 2014-05-08 01:29 - 00093000 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\libegl.dll 2014-05-15 22:50 - 2014-05-08 01:29 - 04081480 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\pdf.dll 2014-05-15 22:50 - 2014-05-08 01:29 - 00390472 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll 2014-05-15 22:50 - 2014-05-08 01:29 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (05/18/2014 08:17:46 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 Error: (05/18/2014 08:17:01 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/17/2014 11:49:15 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/17/2014 03:43:28 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: ) Description: Help Content Manager exited with error: NoBooksToUninstall Error: (05/17/2014 03:41:34 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: ) Description: Der Hilfeinhalts-Manager wurde mit einem Fehler beendet: NoBooksToUninstall Error: (05/17/2014 01:33:09 PM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 Error: (05/17/2014 08:02:39 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 Error: (05/16/2014 08:51:09 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/16/2014 08:46:57 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/15/2014 07:13:28 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011007}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127 System errors: ============= Error: (05/18/2014 00:43:35 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (05/15/2014 03:12:51 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (05/15/2014 00:30:01 AM) (Source: volmgr) (EventID: 45) (User: ) Description: Das System konnte den Treiber für das Speicherabbild nicht laden. Error: (05/09/2014 00:56:22 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (05/09/2014 00:53:51 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (05/08/2014 06:42:02 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht. Error: (05/06/2014 00:20:14 AM) (Source: volmgr) (EventID: 45) (User: ) Description: Das System konnte den Treiber für das Speicherabbild nicht laden. Error: (05/06/2014 00:19:31 AM) (Source: volmgr) (EventID: 45) (User: ) Description: Das System konnte den Treiber für das Speicherabbild nicht laden. Error: (05/04/2014 06:08:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (05/02/2014 06:05:39 AM) (Source: volmgr) (EventID: 45) (User: ) Description: Das System konnte den Treiber für das Speicherabbild nicht laden. Microsoft Office Sessions: ========================= Error: (05/18/2014 08:17:46 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL) Error: (05/18/2014 08:17:01 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/17/2014 11:49:15 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Photosmart 6520 series\DriverStore\Pipeline\amd64\hpinkinsAF11.exe Error: (05/17/2014 03:43:28 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: ) Description: Help Content Manager exited with error: NoBooksToUninstall Error: (05/17/2014 03:41:34 PM) (Source: HlpCtntMgr) (EventID: 1003) (User: ) Description: Der Hilfeinhalts-Manager wurde mit einem Fehler beendet: NoBooksToUninstall Error: (05/17/2014 01:33:09 PM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL) Error: (05/17/2014 08:02:39 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL) Error: (05/16/2014 08:51:09 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Microsoft Visual Studio 12.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe Error: (05/16/2014 08:46:57 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Photosmart 6520 series\DriverStore\Pipeline\amd64\hpinkinsAF11.exe Error: (05/15/2014 07:13:28 AM) (Source: MsiInstaller) (EventID: 1024) (User: Maik-PC) Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011007}1625(NULL)(NULL)(NULL) ==================== Memory info =========================== Percentage of memory in use: 72% Total physical RAM: 3535.71 MB Available physical RAM: 972.53 MB Total Pagefile: 7069.71 MB Available Pagefile: 4221.85 MB Total Virtual: 2047.88 MB Available Virtual: 1900.32 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:209.86 GB) (Free:39.37 GB) NTFS Drive d: () (Fixed) (Total:125.39 GB) (Free:23.62 GB) NTFS Drive e: (ASRock SupportCD) (CDROM) (Total:2.97 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 335 GB) (Disk ID: 3886347C) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=210 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=125 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2014-05-18 11:45:53 Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\00000064 ST336032 rev.3.AA 335,35GB Running: Gmer-19357.exe; Driver: C:\Users\Maik\AppData\Local\Temp\kxldypoc.sys ---- System - GMER 2.1 ---- SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwAddBootEntry [0x926FAAA0] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwAssignProcessToJobObject [0x926FB57E] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateEvent [0x927075C8] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateEventPair [0x92707614] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateIoCompletion [0x927077AE] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateMutant [0x92707536] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwCreateSection [0x8CB606D2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateSemaphore [0x9270757E] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateThread [0x926FBAB4] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateThreadEx [0x926FBCD0] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwCreateTimer [0x92707768] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDebugActiveProcess [0x926FC36C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDeleteBootEntry [0x926FAB06] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwDuplicateObject [0x926FFB40] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwLoadDriver [0x926FA6F2] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwMapViewOfSection [0x8CB607B2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwModifyBootEntry [0x926FAB6C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwNotifyChangeKey [0x926FFF36] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwNotifyChangeMultipleKeys [0x926FCE54] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenEvent [0x927075F2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenEventPair [0x92707636] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenIoCompletion [0x927077D2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenMutant [0x9270755C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenProcess [0x926FF43A] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenSection [0x927076E6] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenSemaphore [0x927075A6] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenThread [0x926FF822] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwOpenTimer [0x9270778C] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwProtectVirtualMemory [0x8CB60556] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueryObject [0x926FCCC8] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwQueueApcThreadEx [0x926FC9D6] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetBootEntryOrder [0x926FABD2] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetBootOptions [0x926FAC38] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwSetContextThread [0x8CB608AE] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetSystemInformation [0x926FA78C] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSetSystemPowerState [0x926FA95E] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwShutdownSystem [0x926FA8EC] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSuspendProcess [0x926FC536] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSuspendThread [0x926FC698] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwSystemDebugControl [0x926FA9E6] SSDT \SystemRoot\system32\drivers\aswSP.sys ZwTerminateProcess [0x8CB60624] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwTerminateThread [0x926FC1C6] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwVdmControl [0x926FAC9E] SSDT \SystemRoot\system32\drivers\aswSnx.sys ZwWriteVirtualMemory [0x926FB5DA] ---- Kernel code sections - GMER 2.1 ---- .text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 82E75A15 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EAF212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} .text ntkrnlpa.exe!KeRemoveQueueEx + 10CB 82EB6460 4 Bytes [A0, AA, 6F, 92] .text ntkrnlpa.exe!KeRemoveQueueEx + 1153 82EB64E8 4 Bytes [7E, B5, 6F, 92] {JLE 0xffffffb7; OUTS DX, DWORD [ESI]; XCHG EDX, EAX} .text ntkrnlpa.exe!KeRemoveQueueEx + 11A7 82EB653C 8 Bytes [C8, 75, 70, 92, 14, 76, 70, ...] {ENTER 0x7075, 0x92; ADC AL, 0x76; JO 0xffffff9a} .text ntkrnlpa.exe!KeRemoveQueueEx + 11B3 82EB6548 4 Bytes [AE, 77, 70, 92] {SCASB ; JA 0x73; XCHG EDX, EAX} .text ntkrnlpa.exe!KeRemoveQueueEx + 11CF 82EB6564 4 Bytes [36, 75, 70, 92] {JNZ 0x73; XCHG EDX, EAX} .text ... PAGE ntkrnlpa.exe!ZwReplyWaitReceivePortEx + 108 830714EF 4 Bytes CALL 926FD517 \SystemRoot\system32\drivers\aswSnx.sys PAGE ntkrnlpa.exe!ZwAlpcSendWaitReceivePort + 122 8308B357 4 Bytes CALL 926FD52D \SystemRoot\system32\drivers\aswSnx.sys init C:\Windows\system32\drivers\MBfilt32.sys entry point in "init" section [0x9BA9D090] ---- User code sections - GMER 2.1 ---- .text C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe[164] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\csrss.exe[548] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\wininit.exe[632] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\csrss.exe[648] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\services.exe[696] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text ... .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1556] kernel32.dll!SetUnhandledExceptionFilter 7632F5AB 8 Bytes [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP } .text C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1556] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\Dwm.exe[1596] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\taskhost.exe[1608] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1696] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Windows\system32\nvvsvc.exe[1704] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text ... .text C:\Program Files\AVAST Software\Avast\AvastUI.exe[4696] kernel32.dll!SetUnhandledExceptionFilter 7632F5AB 8 Bytes [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP } .text C:\Program Files\AVAST Software\Avast\AvastUI.exe[4696] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Program Files\HP\HP Software Update\hpwuschd2.exe[4716] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Program Files\Common Files\Java\Java Update\jusched.exe[4748] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe[4912] kernel32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe[5080] KERNEL32.dll!GetBinaryTypeW + 70 76346AAC 1 Byte [62] .text ... ---- EOF - GMER 2.1 ---- Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.05.15.07 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.17107 Maik :: MAIK-PC [Administrator] 15.05.2014 18:15:52 MBAM-log-2014-05-15 (19-54-38).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 413201 Laufzeit: 1 Stunde(n), 37 Minute(n), 18 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\Maik\Downloads\SetupImgBurn_2.5.8.0.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir (PUP.Optional.WpManager) -> Keine Aktion durchgeführt. (Ende) MfG |
Themen zu Email von abuse@telekom bezüglich eventueller zbot/zeus Infektion |
administrator, antivirus, association, chromium, conduit.search, conduit.search entfernen, defender, email, fehlercode 1, installation, lightning, microsoft fix it, onedrive, outlook 2013, programm, pup.optional.conduit.a, pup.optional.iminent.a, pup.optional.opencandy, pup.optional.searchprotect.a, pup.optional.wpmanager, registry, security, services.exe, svchost.exe, sweet-page, sweet-page entfernen, vcredist, win32/conduit.searchprotect.h, win32/conduit.searchprotect.n, win32/toolbar.conduit.r, win64/conduit.searchprotect.a, windows |