Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Suspicious.cloud.9 verhindert https-Seiten

Suspicious.cloud.9 verhindert https-Seiten


Plagegeister aller Art und deren Bekämpfung: Suspicious.cloud.9 verhindert https-Seiten

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 13.06.2014, 12:38   #1
Preciosa
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


Liebe Community,

ich habe mich soeben hier angemeldet, da ich diesmal nicht mehr alleine zurecht komme. Bisher habe ich es immer durch das Lesen hier geschafft, Probleme und auch Trojaner zu beseitigen, bin aber nur interessierter User, leider kein Experte.

Problem: Seit gestern Früh verweigerten alle Browser (Internet Explorer, Google Chrome, Mozilla Firefox, Opera) die Durchführung von https-Seiten. Avira fand nichts, AdwCleaner war nicht erfolgreich in der Beseitigung. Norton meldete zwei Funde von suspicious.cloud.9 und hat die angeblich auch beseitigt. Die Logfiles existieren leider nicht mehr, da ich heute den Laptop neu aufgesetzt habe (PC auffrischen). Das Problem besteht leider immer noch, ich kann nun nicht einmal mein Windows registrieren (Product Key vorhanden, aber erfordert ja https-Seite!). Viele Downloads, die ihr empfehlt, kann ich ebenso wenig durchführen. Ich nutze Windows 8.1 und war immer sehr sorgfältig mit den Updates. Da mein Smartphone ebenso betroffen ist, denke ich, dass sich das Virus durch den Google Account übertragen hat. Was kann ich tun? Zweit-Computer ist leider nicht vorhanden...

Alt 13.06.2014, 13:16   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 13.06.2014, 13:24   #3
Preciosa
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


Genau das hatte ich stundenlang erfolglos versucht (==> Filepony lässt sich öffnen, stellt Download bereit, danach aber wieder: "Kann nicht angezeigt werden), musste nun mit viel Bauchschmerzen auf einen dubiösen Server ausweichen, hatte aber Glück. Hier nun also das File (mit vielen Errors, da Windows nicht registriert!):

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-03-2014
Ran by Preciosa at 2014-06-13 14:14:46
Running from C:\Users\Preciosa\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 11 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Bitcasa version 0.9.20.4135 (HKLM\...\{EDA09459-AD7D-4434-BA0C-647F6703EA12}_is1) (Version: 0.9.20.4135 - Bitcasa Inc.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.6 - Samsung Electronics CO.,LTD.)
Elements 11 Organizer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Help Desk (HKLM\...\{22B32087-797D-4A1B-AFA7-072C87580ADC}) (Version: 1.0.9 - Samsung Electronics CO., LTD.)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36843 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2963 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
Norton Internet Security (HKLM-x32\...\NIS) (Version: 20.3.0.36 - Symantec Corporation)
Opera Stable 22.0.1471.50 (HKLM-x32\...\Opera 22.0.1471.50) (Version: 22.0.1471.50 - Opera Software ASA)
Phone Screen Sharing (HKLM-x32\...\{DF02C515-40B5-45AC-A601-5DC69D03885C}) (Version: 1.0.0.1 - RSUPPORT)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Plants vs. Zombies (HKLM-x32\...\Plants vs. Zombies) (Version:  - PopCap Games)
PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Raccolta foto (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.4.907.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6818 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.9.6 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.40 - Samsung Electronics CO., LTD.) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.16.0 - SAMSUNG Electronics Co., Ltd.)
Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.)
Side Sync (HKLM-x32\...\{34BEB782-66B1-4772-8E3E-71B758BA848B}) (Version: 1.0.2 - Samsung Electronics CO., LTD.)
Support Center (HKLM\...\{5422229D-6131-404C-8107-9B3F87EF65BB}) (Version: 2.1.90 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.9 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{43C711D9-67C9-4793-80D4-E957D638D531}) (Version: 2.1.14 - Samsung Electronics CO., LTD.)
User Guide (HKLM-x32\...\{029A9E80-E460-4108-8825-3A449EC9A26A}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

==================== Restore Points  =========================


==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {1AE6E271-F1BE-4587-AB77-17406076944D} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-09-13] (Intel Corporation)
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {26C7384C-2CB4-4A7D-852D-BA7F0FF6760B} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\WSCStub.exe [2013-02-14] (Symantec Corporation)
Task: {31AFDA1E-8F14-459E-A145-38A29C2D27D5} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\SymErr.exe [2013-01-25] (Symantec Corporation)
Task: {3B77F310-0704-48DE-AE50-9219D84E140A} - System32\Tasks\Microsoft\Windows\SysResetDelayedCleanup => Rundll32.exe ResetEng.dll,RjvDelayedCleanupEntryPoint
Task: {541EFCEC-97AC-4798-A889-148992A2BB32} - System32\Tasks\SideSyncAutoRun => C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe [2013-03-09] (Samsung Electronics CO., LTD.)
Task: {737D72A0-A539-4688-8C1C-C9860CA9D894} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2013-03-12] (SEC)
Task: {9246EA83-3997-4269-872A-6A60FCBDB9E3} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-02-26] (Samsung Electronics CO., LTD.)
Task: {92EA1FE4-EA84-4361-8732-D847C4DD5532} - System32\Tasks\Microsoft\WINRE\WinRE-Repair => C:\windows\System32\reagentc.exe [2012-10-24] (Microsoft Corporation)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {AB96B97B-39C2-46A2-876A-EEB6AE199033} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup => C:\WINDOWS\system32\dism.exe [2012-07-26] (Microsoft Corporation)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CD11AF42-F93F-4A8F-9695-C0A4CF8FF49C} - System32\Tasks\Opera scheduled Autoupdate 1402660006 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-27] (Opera Software)
Task: {E56013A4-8B9A-4314-BB24-9BFC0EE14FA4} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2013-02-01] (Samsung Electronics CO., LTD.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {EF061B38-C9FF-4B47-9EE4-92EC5BDA9A54} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-09-13] (Intel Corporation)
Task: {F4D03190-9CAC-47B5-A60E-4487F2A91985} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\SymErr.exe [2013-01-25] (Symantec Corporation)
Task: {F8E9F306-F34A-402E-A5B7-FB560F72E779} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup

==================== Loaded Modules (whitelisted) =============

2013-02-01 03:52 - 2013-02-01 03:52 - 00085040 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2013-01-24 17:09 - 2013-01-24 17:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-24 17:05 - 2013-01-24 17:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-01-24 17:12 - 2013-01-24 17:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2013-01-16 07:27 - 2013-01-16 07:27 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-26 09:56 - 2013-02-26 09:56 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-09-13 10:24 - 2012-09-13 10:24 - 00119808 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
2014-06-13 13:46 - 2014-05-27 12:00 - 01396344 _____ () C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
2013-02-01 03:52 - 2013-02-01 03:52 - 00029232 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 01106480 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00111152 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00027184 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00111152 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00060976 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2013-02-01 03:52 - 2013-02-01 03:52 - 00103472 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2013-05-16 09:04 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-03-09 21:58 - 2013-03-09 21:58 - 00192048 _____ () C:\Program Files (x86)\Samsung\Side Sync\SideSyncNetworkFramework.dll
2013-05-16 09:12 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.3.0.36\wincfi39.dll
2013-05-16 06:45 - 2013-01-14 20:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-05-16 09:12 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\wincfi39.dll
2011-08-15 13:12 - 2011-08-15 13:12 - 02603520 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtCore4.dll
2012-09-13 09:14 - 2012-09-13 09:14 - 00015872 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\featureController.dll
2011-08-15 13:12 - 2011-08-15 13:12 - 01006592 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtNetwork4.dll
2011-08-15 13:15 - 2011-08-15 13:15 - 00382464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtXml4.dll
2011-08-17 09:41 - 2011-08-17 09:41 - 00400384 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\sqlite3.dll
2011-08-17 09:48 - 2011-08-17 09:48 - 00322048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\log4cplus.dll
2011-08-17 09:48 - 2011-08-17 09:48 - 00195584 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\libgsoap.dll
2011-08-15 12:23 - 2011-08-15 12:23 - 00062464 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\zlib1.dll
2012-09-13 09:13 - 2012-09-13 09:13 - 00473088 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\DeviceProfile.dll
2012-09-13 09:23 - 2012-09-13 09:23 - 00499552 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\plugin\PServerPlugin.dll
2012-09-13 09:12 - 2012-09-13 09:12 - 00013824 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\eventsSender.dll
2011-07-19 09:05 - 2011-07-19 09:05 - 14978048 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtWebKit4.dll
2011-08-15 13:17 - 2011-08-15 13:17 - 09224704 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\QtGui4.dll
2011-07-19 09:04 - 2011-07-19 09:04 - 00317952 _____ () C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\phonon4.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Preciosa\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/13/2014 02:12:10 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.2.9200.16433 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 9fc

Startzeit: 01cf86f5ad4816be

Endzeit: 0

Anwendungspfad: C:\WINDOWS\Explorer.EXE

Berichts-ID: ecf777e4-f2f3-11e3-be81-1867b099c193

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/13/2014 01:57:10 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EFD
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD
SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac

Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EFD

Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD
SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac

Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EFD

Error: (06/13/2014 00:54:11 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80072EFD
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD
SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac

Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service) (User: )
Description: Lizenzerwerb-Fehlerdetails. 
hr=0x80072EFD

Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0x80072EFD
SKU-ID=9e4b231b-3e45-41f4-967f-c914f178b6ac


System errors:
=============
Error: (06/13/2014 00:50:35 PM) (Source: DCOM) (User: PINKY)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (06/13/2014 00:50:35 PM) (Source: DCOM) (User: PINKY)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (06/13/2014 11:28:35 AM) (Source: DCOM) (User: PINKY)
Description: Microsoft.WindowsLive.Platform.Service.RemoteProcess


Microsoft Office Sessions:
=========================
Error: (06/13/2014 02:12:10 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.2.9200.164339fc01cf86f5ad4816be0C:\WINDOWS\Explorer.EXEecf777e4-f2f3-11e3-be81-1867b099c193

Error: (06/13/2014 01:57:10 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFDRuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac

Error: (06/13/2014 01:57:09 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD00010001(0x00000000, 13:57:08:744 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM)
00020001(0x00000000, 13:57:08:746)
00030001(0x00000000, 13:57:08:747 - https://activation.sls.microsoft.com)
00030002(0x00000000, 13:57:08:747 - 0)
00040001(0x00000000, 13:57:08:747 - https://activation.sls.microsoft.com)
00040002(0x00000000, 13:57:08:753 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 13:57:08:754 - 0, 1)
00040006(0x00000001, 13:57:08:754 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 13:57:08:754 - 0)
00020008(0x80072EFD, 13:57:09:944 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>MfU9DrlQERtktfhO/bdFZtdV5M3naA64a78durO7Wsl2Zajj6u+Yh0VLaGh/1HaTQVLEQRvI+2LawZSc4qXaIetVbVI8EcMVBH1L9tJib0GLjwA+lKlZyfa/QoKFNp5Zh//szOF70e+d+eSua1mJyt0KUbO+8HBPC3t2nTbxo/2ogAatId+DBQsJ6EoOJcmzclqs5scatc4WOYmQkSuG+ojXcsBXyjVzIZ2KJP325JXhpix4LYyh9ICxZmp8JlksIij9VUiNDYkanGGlJ9ugf+ZyrvcT7dO9As6D3DUUUGndVLChPEUzAUej1/rReJI2mdZCftw3U3pndI0r06le3Otz1V2alX+ow5Uvc+nknDxvZ+fiPdDil2nCs6Sox2T/CdhFarZ3n1HAUessbWNzA7SokpP2VjZTADvtesqT4g+hoes/cW2KD97dvKl8sGCfHt1qySYZpoK900j9oeSZiKNttSpsgJZZ7SgDJiZJ84U3fdFANohk5ZDI+fKKW4mwGdK4w7C3oMYnqVc6JA26vcKbb1cnI45GJ5n4oQBxnWbHiCEJxY9zQFlRfqURxIEbxnVdqQnx4Kvmx59N8wX1za0MQOSSyDzuVjBD5VHCz5H2C5r7hAjZe7iu86FbCRrelxNgdm6P5LHg38di5eeEGrJjP/itSKEOfs0L/2V18u6ft6rJCZyAszilEoGjr/iU/f+liTCRpGT4ggxlu50WDReLq5c1rqhaR8XWMho+2nSmAW+Uy3RhV06+rhKViFMvafLYP3LLEqxhuoqymSRVOpQ28UzVAPSG03Zk2/nppGIeG/2F6NO/ttzCzRn5jkkn1HHuJ9k2Jbd/ZSE0qgPHKF+rMqXoDYsuFhR24cuNydt8niMT8hqodDXHJSl+L7C6ftiAougGzH37zeNzxBoNNtAg7oSZeh8l5o0VKGMIcT2E0Gbil66dqf66yDiWNGgkcwx/Qj6/e5QgoS923QNrchMW/s8AkKK7KUTnya2z4a7rZpw0IjOy2CZCrwbvd4gY+PcUnVt1bw8fX+PYQEEH2sf8ciNvd3FlE96wI8WW2PbCnA9Pq/44qq8as0VOgHURPrz3+XU2cMNJwc4/fSj3ZnOWfQhiXi/5TpMfibVVOMUsb8kdfsslZhSrRWEwYQPMP4gJ+o8/wDhGGovVtzOmUZ/2/keV6abnIfni7nJdqvO01i7rKpIVWRtY8ERYIxm1wFC9E+pUwZwAzVa+3mYH0XfwjKfSgYbWKK9fhITX+l2Omj3CJgNZQ8x2WhF/v6DIsTdhYuqNkZcOF6pgTCoa+YtRkPtQJpgNKV/0FcS7zk2tuT4AuO6sQwbw4uJSUKH8vfH3sKIgLJxvY2TYP6Rnlbj25YqhJUxiXY+MAGUOTPNuxGCLqeVb5Oo+837Qo9RnWELEs01ogncevpphg4c6viKcK8z6F1Nu65lGGLnunZC/R1xNHbIAjW7Z6UzgvuAORtdPiUGaKfCnZORgEnefrRHUO7240rpmX/QKzMsMvVa1ivDbpnk3RJhV3paCT/9gj/I5x6o7oF3Ncg4nrCTElnsa2xpXxwP3DDNoXW5Vp8b2qvq3vPhjmwGq2PpUT+pvBa49WV/rORKEEsoaGvRSiPb/+FAuyYFkNUg7I6nYHv92UDP173OECV5+AeldRu388JReYQDzKzBmvGL6xV4TWe0Hv3OLI7dLjeFSKXFlVqRx5mahTRsoZWrBu6m3BpwoILbtpJG1mh309jbZDy+wyySeEMW6qXRjiDCd9fk8n8ApUuS0vgah/NgnOPFMqopVkY0fYY34wV2AHTqjnLjdttbi1ltbhxe1UcgnOiWmnysRQHQo6Z9Z03R+ofg9CBo0KmXGjgEssK52yqnyR336bP+wNWJioIGyhNuHYWNMRSddlyIsDY1Yi33MrdV+lBAmmBv/VcF8w+/DKfhUZrC1nFoeSbzDMUuvrpJ/w4NZHrq46cUq3nROJsF+MZroEXDknsakCOvVFF8Til7KnoJu82OO3XVAQ5E1GpBHT/lmgznNhOfFyAKhK5SsG8YKcxEyAIMwHnt4Npd09HUciCdcEa6GgdnNtTFY/hIFV3P9kMvPv/iT8DoRzOv1f+Gyi4DTI2EJfRmr/k8tVmTwE5Kl+PScKwgFxajoUqCgQYvV/CYiUbuwZzfh7VCV46qBo8hQr/b8wTeGxyTS5wwAunDQuB4EgkTdV1ajKJRzXgoHAURRh13Xo/vQb/Tdj/SBgUPCvR9P/nAQajv03f1eq71lpVllY5DMJQl7ZPZqyicJ2npZSZtUSKEWImgsKzq52qTpxVzquq/U0BFBTmpPgPb8LIjn12z0qVT77wR0Nac51bfI21KcmEegk2NwPC9FlT9roKGN+MGUOwVX9+NvnonQBjzJGBwpFZ09uB5U3i3jmArwDguNG88OnUThp49w3EczTMFxaZaGmazcEGk/PVN6DO8LCYU3GppA5m87Bm1oLD/qMtEuK11yFjHYsNgXsNEYSG0ZpROF+0Ec33YPxlXddrlMbjy/j1pgfz8n5wa3//JmTkxNTi7IrTxC1QdozChFaE+tv2vx8AO8AC5IZsYpBhDMXZDLZ/3RgdCG/ukEaHxREpJN2P+jMXSCid4XXHPm3JkxwhFgpTkz1FoKLqBiw3jqnJnal03B4MUt0NZHkmuM/1czJwjYJwJfLtcyodgKy5lqIxtCBoZ8AS2mgivXU1s3zokalH9XCnPMtS6XiEkdfWa9juEOq9mnDu1fla50umg+2T3MbhVIXNQVD7K06MZ0yvmdHGf+SfW0SvCy/07B00w5GmHF36hntpNMRiHiIR5EOHWk0Xgaib+dYkrvnFqWjKgSEfNLnepN3YpDfwE50ptNSl/YU3envGo00BYlnl+xV/CvbmRTRIVTqU3Kl5W89dIaVcV3S4MdlLs9r+gQEmbo8tYmYgbze7gEovbji/Tv6RiaESKkuueaTsPWoK9GZWJXquc2x9OKbUQxheUapbaJNsSGb/zKSc5AL3MwPbDZoGIFqopEcLWDvefGAb74S0gz/bfU2fdDwQxligOyU2HcCMmzE0KdTuxbK/nHCgVD7z7fI5aA81EivQCXoDi6fTHZkUVDg6w6sVLgkoX61XnSMJ15umXFtuMlEknTAgRr4YNycENCf1ecOhs0iaiq3VtHFmt+pIHnVld4yW5st5MFzHkqx1yl+1t9ODiQ7CNtdW4jGkiUyYuCyQ3CiYNDR/4j8YK9RvWzdXurHuYevgBylr3ffb1Vk0L4l59gtyWiT88SKrok/LJ4KBNxhayFWugz0mnw4hl6EX2had16a6VHPZnHA/bS+yKxAJv2EDJ6gnG58y8VExzh54UwU50NoR/71sCDFoHIG56nxh+XrXx3bzJqG7kC2VZGApH9v1EXc0772oCF0RcsgyXyzTLHrqyg6iL/8Qi+T4HaoIPAIbdVkJUCC0Dz+a3iAvb4qIwXCsYSKcF3MuFFifU7xCa33P6/Fir8YpT6EtUZesCYOFaSKRIbGVlK51KYRWMjnq5upMXApU95aKaUgigxOGZ64HMhvcTgkszQBcAHimJN1/Zl8yQQsq/Wm6zewfg4PWYsWD3+eLuSF9KvSqMK9CtYTYNduSpMd8VEczb0aGo84usMNZN81TBF7I8Fq6v8pr3EOPKHojLoJWvbAgg5f22Bv1zSH7k1jVCGzwBOEGxSIRusxzbAN5GnwahvkosbcfmDxqCYZ6WgEMRAxfdrr5rFDwPKmV5hB2U4TsI9CKztxmuNmXfoeRmU6FXoJAbvicNgpI/aaVLWnEejVGydzBPUhrdGqKTYl5XvMCLxiVT5WktAojGwvVQ4rw8nse2s4lPjxp62PRh4vaDTRML/eJlQoMU2HGh5vKwnFPw/wrWsOylD8F54qNMaOmyOlrFMWRa+Wg/eAROOCokt1xFReTps8SphafU+JbvEHNfkffWmHzhjRFJWENX7u6bVKX9YrlV8RNdzWn1S/ZmbfjfPBZ7+y3q3ZsWdjIu090ZmyUQc+oK+PWb+eawERh+BWDDE/lm1919if1PDL8wr6ASVoolQ8lqmWfw76m1efz2O6Psm/Jcy8lGGZI/nbA05gqSmYrVK6wMk3xYa2B1YouFfQ7GsgZkd75O25fpRAg4zQ3gh3hskRIDB+qZvtlwzdcz2azRSvWpNKjdBPOzSYdR0lUR3nsEUlNEYfLTG21K2hvLljOmOSwdLkg5fzgw8Q32RCsLxM2JKvf0yJgKRVdhXqiWbWRQ6/mKgGyv+6F7FCN8lhKenoe0NbjmwWJE5nZZBJYenFDLAkjZwm+0E9rQamwWfAeVuxS4WKqg16lb//aT5unQqi8gBQo855Y8UrlyP+BY6loKqChBtcK1RyNlTV9B14OpbX5eyx0eGh9JdCjX3RCneJAzteJCsONErDZM/K7SVu5ZMY3lHMVg86J5+5fuSuj/ut5RK9UA6LISqxOG29fHCR/651hZ8KUi4e5No9L9Q0qxm/ZJiob8RxjWavSaxiucdEbooqzUZVorL3BFGj4WroatyNw1uBS+x2X9ElupxmF/9KMqNL+80Ri5EQ9UH7VMLaaiPXxC3ajtfLimui5pbzK1F1AqmL8zbO4JcRujbvN/CBZiqfvKycYHW4qWrN6TLQAExVr/6L1fcn5qwgvgPAnSSFh222Jm3Pybo1ue0SJ6l215kbckzW0e1tfSI1+7Bse7OBQMvziJP5Ku8evfNZawnooYTincQN6ej2y/P0hqfdB/Rx/j4VDxJ6nVutTv61VfGMUqPfmE4hpaqN0NJYRT9ImKtPH7Xo6+5zZWYD485pVYtmHMJ5sVj/uL4Jd99fMQKW+q016lMv4bE4XFuiCkIzzeMHsb432z8IU/wIXpyffihf/sug6xsZ2V1FHQnAsZ1RyUqY10sb9MLCyi0IHkLfSYFbSZzuBjmvd9NKT9igRUxD9JrNwzwAAk73exiq/CZH9gLCi5DgYojuKgDVH2tUHXVzpq3LqW7j58woTug4LDNuJNrlaoTryhfS4l2mQPA7BpyFYh+J6NXJdpHaMIJeHk6JNcVShCIYJZj3Cus1GnpIRASmdhntmv2+N4FBN04BMjtlyGeMTTtmGvQL5SFaGTwqKuvwaakH9v7iNrNIqBXVzp8ei4NWj0BQJp7J0ApxuZPyKLwWGfcn4GhbmbGW3mZ3GBfz1mFqDbWyXMb/rb3t0JpPx/luUNMNdPC/OqkJ7bRm9s+oobSzaCjP5zLzmr+Rx7UVJnbS3RWM818UMMiZydWlqm3q+/JIocb6Mdn+X4j2IQQOAhLdU6bmCfTKvWvYcHzwwqsm0SFF/zx2U1tX+ZUsNuLkGRYhGOzu2rfr7Hl4GbAW40mwA2Im8wTQj6tbGsNGwoOVtY852ftawXiAYF7ahiARAkAIBy5TqCiJL+j76cu7rLBnmc602ahS+rouBaxYt8a0lRVb+IB6z7u5a9785+15aSqkLXZXCbQhYsSdjjsaYGyjo5op2J0l8xdTLbCj2uBO81KTJuQKbC0QvY7Y1KBoH/MdN29Q+Un+l4ao/qQ2LeOlQgFVysS0qm60s74nhyFBRacbxa/MoMLRrAdnzc9fh+ZQVA6+HGxLutOwTAlo0pCAuwbMzxXYQ1kHU5ecbmToia7iV4HJMw94hjMuKFDb1nJN/mTh6RspALHDkDgumr0sAHeq14iWq15X1iM0G9xQcqwal9KeUBircSoH+/EDs4l76zQQd34Om8ZET+vUIhNMsakntxQrSmCFvIJ5u+pq8ntEthGNX3N3l3SpX0Cozy/59vvVyEvizTG6EnNi8XXqNM8MfMNlGgoGpL8L11POwGEXRhqQBEMm+IhYhcml/uL0s15oO82Nv8X2qKrUKTXvLtrdlQ5zCThNX01KHKNMzKKnt1JQhAvaJBVRdeZbB+VwP1W8K2X7BBlzFGukFWKZRw9VT58Oma/3DhLdr5FVcbokPODmDIIoX8CF07e40TkyYiYz789hfGSEEyK52auU1THcjEFHG9ukBvEGrJae745Y9/GJWkJsTtugp2DFUwCkIPQHVQ8xpfCeeP7u5a6IgDtiPSPhmDKpiYOTPkThA0LihUOwPWDGDjliFm0XWgfbnRj8DP8Rb/hyQdPPe4xh+rRllER1QDiBfzqZMWBU54vtXCLT4bTVW1sZOgaf2Vlcxbyoh1t/JdjAnEmSIJxUfvfOBfyl4CsHPMFod9vnXAHBJ4omnXwf9xNeg74zwNIvxnEDqWKT070+MyUj8d8op9FmlSv2hRQJvwj1VxhCG5SnMfIoQw1A0NBJ/yQ497kwcuxdv6Jj0WhkVJWj2THq0+i8rFfujlUz2i3ifc9MghlOKsrQquyyIZ9vQ0epaKBupU+ZikZHtf9jSzHfw5HN6PMBXO0PG/E221JjB3oJxaCKHm6bB6c7QRy+FtZbmWHLrfdNwRXRWScWEe+yqZs/xfxq8Ci+xkgavqrA0uSA7tnC1dyKGbSQ960qbgzZehaY9yxssJTpUeaNwFeDM8lx2+FwAHvkzWMAcnkrnbQgwrt9YDB6if6J+wNbMXoh736X4GkA3JMKmpLmGn9wV0Q+/LweFFH9+Gms5O/sZZ3yjwjO7JYBXtMrFcNkxpsY0dTbLSX2O8NEfGWI3mKcsLpWuWFE2v6LPVbCw3o/53IlDbG8CcIa9KiYijjD/d6D1b5Z1/35ODSjtHj7/jiK+9C44dybib6I3pR2tcRmGgUxK0pxBcRAv9zd2LMDo2i9diGHTc7LPuLf0qQAQKL4d6aYfqdpo+wMdtwEisV9/yD9m1aIwRQkRqx+ebz7nEc6nG7P2ZXTKDvzj9THXuw/P0maPKOxN+7nCY8BZqnPswwpcFyBKOvBHDZDpM19sVsyeA3DgWqd1k0/lKsk4aImO27x1VpxHrdjRXys01I5v9vR62zlI1R3b2otaFx4tX7FNVNpSzZF3XwMgTT2WnA/Xz2o0wJoslYOpywIVzs9iGpMi2yD4bK+N9HgqAfxRyjPRDiYXmMErkD+nB7CaLCP5V4BiaFx0bDH49AAGRuog93hySagW2Ou0A7f8nFae1H6On5hAtWFOrMHwiamwwtFxNleilG5HxpgFOCRCwNTpYvAR3wb7crfTTn4xybHUOc77gf3SFlqP87IDOFgff2igFXgE4FAhB//+gHJuGSQoRtrHmT6ATga17UtnJKYHFSg+9r5pcLSslrrJasm1QgREbVtYOzvhoTodRLRXpjeA2Do3AFPXWEdhE7eBBBuGgmgABHJ1UL3GvlaLOhFVGWQK5uEO3utMVY5bH45p7WcMsWsPz7BB30YGiTYfv7LqDQcrwWL5rBqEONWkLEOf+8qqZcRYuOisjhnplFYq6KPlMVTbkVv2h+2mnqsW1SuvREQBDvUj0Uf/myJi7sIKKa2aPYijFaKwqT1YnP/lX1hSR1fBH0yeZ7DrH3oiiTvmnxwxm0V+mkLqI0o6IwEDP6A5o0Q83PALbcEISbJ5uwKpEMcwgVaGQEeOIgs5GSFUt3DBkoUvS8AWYlQChzXogYxpvn7xzvjuaji3TYyyiZYA/BVqqOvIy4zpdxNsQljcgqpaUGMXC0YoYU8Cbv56KbZ5g+CCY5yN+00DkjIYoxqMVqlI45efm+XDrokgW6wtEdxP8BVYFzoak0lV4Rl3Ftv6KCtgUY6Vu/v4wAQrg9m9F89gR6d9YCDOcK4ZR49TAOzkbPnBFShs4CwD7WjMQadOGQkcPVbnO94Dl3HhUGabsj8MIYIHk1idF6jarQM2gNLBuucmIC0a+gqN1dhuOvqv0GL7/yCL9tJIun3CeEng2Q75+WlSouVKErVhTd7VCKzXsreWXDTXtmq8f/cgLks6l3vq7BO7WGkemX4LMfnC9ie54bLX9Hod6Zi8TgdOZpEHUYm3J4w2mgvXQipSbsukBg6O23ku8lVXtUPAA49KNi9VnEPI4/6EPsCXV+Rv1/jphZryheNPRkzSPDbdZ5rATBdvEDUOqUCGlA3/VwYqaRsBYOHV+OpvgQUe4c+OMEcJHMws4g6HRueq47vNc929HbCvzAKfCKwyN8pk1INZ6/10PXVndONW4/O5eCQICkPCNO+J6EdE47BmO/5eeyeaskpWsfu+cbbMntIrwrDNo9R7ukcwUHyXHEeA4DHfgupt54MGk3FNU580dv3su7aoPfK1UanNq9TV0cyeUpA+5fWpVGo+RO6Y/ZKefj/Ftx+L708bWKUA8SygiriB51VkIM5DMBOiCQqE8wLHWFJMVJdcXKfsN3ooLO36rN5DqlZrZcnqEMVS7tKnYB9XRJpZ1W/e6LIxk259EUPFkx7ZQ7yTGT5Lmtnv3tI2oIBBeIb/nf0+1o8DfPUAqH7i9NDf3XrZ8PL9hUijiQ5CGGCttu04iVO0nLyf4LHmguayIEIUeDcm49c8xLdfCKE69MlLS1k102VPY4aandb/oz4zHsUJgRinpak6IajOOBYrG6aaZD/Ev8X/bvBDkzYWHb3PHQ7YjSRQo43TZNCtEXlfxOipUGGA7SFKVzA+abKP4ayS/a1WEjnHk5syVWJlq+SkFPnpq+i0rz2c7+0qO9bUENiK9scwMDOB11eLhZ4tAfr27dHll1H9Eiy0W9QcZTV9fGwbpUtPOTHhDxM/h4hmwcQbEVghYFXlpMnU/7Hie97zZ3+p0ik48ic6aw4heaKLCPhb5+7573aW5nVY5cNqkRk5PE37DICUhltsNn9Fw0QK3ChWKgYiyTmjn/foD58SINKFcydbmGZSDTX6mD5q8XRqGOShh13aGosDQmDuTAH3kK3zbofp8+/GKf8xvB00AiL0RiaQIFo3P8IdBZeIJNZiGqeOuP16gJZsl5zappR08tbSBz+IZeAv8a1/JgmBs0ryMeoa4F3uoy49FVnIjXBkwX2uiTzXWiznquns6GKuuwjcnJluKEYlHFLGKVuu91VzFClfj9V4fKnQcVr0kfIypSeE035M5xWSIJA/f4mibxlepGxMmgaEw9GPnvZG/GhKp5ReDrkeVenqn2tyyXMf/ed3S2XDo+xuGYgyQ6ov9rGwjzhqEcHTgIHZhJTZAgXkzMIGRN8B82obeHMmYtFGSxwmyLZvw3+qI6CZJP4zyuFgtAg8oZm2YpBhfS3cCV09nzs97RcGoL5kOq0ftftme9zBNQuF5LhbmRlgtPKDqM1mH87b4taE9+8HKfFNJ0iukDD83Aec0dequ3s+vZf1jXB6HVwDJeOzAolHpgVGpKKa2GagIZNlePYUBmbLd2kwq7W8eSOfbeYrSLU7YjMdKw3hT5LNgFccdp6/vU8XYjy/193DD1/kCSDaxMWieV6CrrIfDLuvjjDN7IFeGinaN8kUOLAjHH8p5hFugYpdPe7VvZfCcYshowHik0WwSENOKGy5L9DZ+kRXwts84LC4Rgjh0K9/v8MsYlOp5NhnuPbb/pz1imVL5AiQh4TGbW5jQiGw7nqXnTEAi2ZhXtpJ1a1QS0582a2wAtwdOczDg3SMxaELZ8BFo2mkz5Rf+R6KVgVLREPy0WXNi9nBefDCfrVqIYyzhOp3Bqa/YEUHQpu8o9BzVJ0gLSDy1cn6YI0Oha56uVcb7H/NU6KKEC37TUItKXNN3yiuHaiBh6Z4wQJ00+AJdcx4aWF1SoSzF2aGTYzMFa3s7dCslGmvE+X+Rm46z5T9B4y/adJIWMOXZcQiJdt8OZAJ9GFeSjOGGWMrE7MiCMj6MEBse7VSQmCFaeEVPtFMEOJra9GDIljPszWI28QjtEtDVmFjjhi7voBzfH2qrIeFwlx/I9p6mj5fC4pK05ruhqf6PxTWmVMhsIT2cbDSUatJSDR0djyr93PPflk0OW1Gb5p2epYJrpbePTczY+xjLLK6uxn5pwhXbXJ/h5HkLZyB6+Mnn3FSItzqgTwcIFa/d9o84PxgcVTNGTmQ4xJ0zCM2EYU5OIBhVMG/vhlI9vT5WF7b3lPHocJRg8IjvEk8yD7XekAqzX/HQpZDsonQSXOzTIyBT/mNG/kRPCNJJIUtgwjLnpWRP9epfI0lwOR/8T6EavkqJ45TmVEot4BC0LAmjgAsbb6Z40CB4OxcSvLoAVK+Cr/3y19srYDP14NssZYEoXYt2gvhudHbRz9GMwa4fitBFI+Jly3c8f7zbDQ+4955Xyhminiy1wZBmTZxkTuKh6EHCv2ymvTIMRrwse63keyi9KjHCNV8oqBXTzf9EFOuznoh+1QYMJuirVVZNCrE1+R2Hj6DOOFWf2pQHcEsJCwEwi0sX7NibFtGvnuWjnqLFE8EBTpgcgm1oCVecLWRaAdN86KlCBgzxyOstQea6XByLH9+ecKbT7DUrTgXpuQnFTabTZ1Kyg2dOTwu7Iy0N0SSBFjoqw8KNMNTg6oszfr7q0wp7ULYJbi98RPbArrF9tAFOLJFi31Zf3rQq6MUcUUPlO1B/+tXtcj/S369GrLTMPyHblqPKTU3leFfrZhO4QI9GSsfKIIFmpcHqWCbgxHpdzdVGwBAXO2ZmNB+98AQoTBLddV46EChpE7KTnfIjlEM4nehypKK7KgDtaUS100S26p4nIg1W0qSo/SARBLQ6IvluNyW7PcFU4nLNtN6Odbb5N+vg+pu32oayS47k8M91GOJqitOCJ71yaZaqvIPVVRR8kW3U2HDm5uwgrO8YhJIWi8xcIlLBCL47qNuHmS5n2K1DGZhA6SjL90cio1ceB9PSbqKPjCUjMBuAzkSqbEe3oHsl6oGzJwMTYNeTnX6E3G8QMI3oyBKJXtBMBOFnyWrRFRwD/n52StVZTYXbd0ExXCnKldrA33V+qS4wBflRUhvbfjTlneeeYBltugax6dwnU2yoyqcf7F7RJE0DD978ga+4+lmeD9qnZxEnmOUdH9dF3K11uBXnvYR822sEF4UyVyF3ZU5Va5IC1oYnL40XfYyk9fm3mv9wrzQ7qgXvyVyWgOre2JT2ikE7AMekC1rQo5Q69Ci8KN2sWJmFKUoK/R9DJo0aaPWOuUlYNYi2RUgzC6rNt4qJftUf8eHc800eVthsDBFFHSIHfqqu5sdW/4S/ioL+Mq7KRa3/Jk8Aw0jCd7xFElFNyDCaqGouW6o6fbpq1igoG7xShioI7dwmb4TXOVQlxlCmNYL+DfzhP5U1OqtvvKpyMcSFvOdFP+WvXrqL8iJ5seQRSXeuuIRVJCkQp9SUIuLDAVeaw0Alz7pGdrX3w1zEvzrQPU0Ob8UoGKso1dkFogz5ZTUMFf/lrdkEeE93PI1l02ujl9zUIPZ71CZ9vIHlqaSef9yLQwq2wruuvXDjOTmwz2kPF7xrXytw1Pbl2hevDujZy9h5cXb1jcTx9PyyIwdfDVJAl4lqttcNz9XTLEfE6sNFXFUrz+X2uize9zuz1lsZ6djb5ZRofaTwUhDy4S3IBO2VungCcYHXXPj8zXGL9o0HW+SLr9FkWFRYn27M3x3XUiEKmwhd2dyZtlH8eeP5cYxknvuWuqZXKayHmW2MXOa1P3J244UfWQJsmvCJEEp47DlE08FWCMwjphSV8dCNHrbreJ4hJjdAhZtm+UVdkMH27UcSYp6HF1BsiljVZtvL9pkbuxs6vAI5JxP3eDePMkp+Jw59KmYr1vNgq285/CuzdqnYY+Uo2+xNFuQahKygqtYzJAROjeOa0JO1Jndul5niFgbLjEKfppTf4Z+nYJAvq8kjBdppUyOskoaK4092Dua8v1u+3Gi/8mjCLD7BMbNCfWoY+KZu2k1M1aNa75+5TGCc6gSX6cDw9f8rlDj5ISwHBfqbz4QW9CV7hPxedA+vsSCJgxgOM7dPV992BibH9+xvqExDE254LpR2CKQ56dkREpdj0Jm8/gyVN01lYTwSq3GMKbR0Fsyg+4dIkp7ZlvDGWJPCmHT4mKRptAyxwLhYMzgRR3OKbavCr9yHrakXa3jUmWPdc5hMlro8wGU9etTCkGZEkeLE5owXo5eH18lsNL16TXkoXxyqrKTfHyMs6JV0aRJxJmeyLgUMAy/+cDQVmyhc3fdTI4VzRWCREmNQizMfzDa7gWvBoqdcYBnJQ18q3BLBeA2BGt5LAefpE+I55RlzRYukRdl7WnOrfNw8JmVTZ8NSoeSMbGRL+2O6q0nDWy4+b4mtn6qVPrAU9Y+Zs4YrS8RtLfeD1x81Z+GkamBg3C8tldBnAtzRefH+QRWMfyJ0t43OariyJRPZayWYrUX9WftBeRglCBLLX1HLqOCwfnnE4D0CGlGXTON/bsK4FM3gf+Z82jTnND1VOqtaFhnTPLA+mvoMHtSLz1JxE7TksnQY4q675J6hoQ0bxQrXNgBi268m+TrFhTdLVolexgPxQMZ5FxcCMqx5xiIsYrplO7MZ/2jhtnwjVHdY9o24gn/DHgLUmNOG/2dZ79w3Ou1Thq2HdNfZztWYL0lfP3IpJZJsaqbmGv8+SxeliqbHPUO1psZYjfSQ+0I90mpSXPk6Bj0u9CvfenLmFTcev+tcnRGM51kSHMbgNYzjLJxUIwnBSHFGTWoG8Gmy/x6bXj9dFz/lfwLp0KvRcvOyDOPPt+SC9YoblFKeslKncZ+aWapNuE8BRlAZL+tJr3Qs2LJEQTsdkGHcigOgAyC0XCwT07pdN1+NHxPSU1a60qUuHtiYt7IyyUR1clt+3MsoawEp7rqa2krNDsqbxlyVX9OEHHg/2JZrWWkNErggXOmfurxqpGZZ2JxLWf4CoQb3rNsHVl/JOQiL8Jao0zcQvCTrhdt88E5HU/EQNNIp+clsFBKgYfn8Zk/YZE4tNnGPp8NCIEl/ndFyDScNSld49Kry/nAnaPA7WuP3YEH0Ce/bU7QIkUAzTe+A0dt87foSrHa6PbG9ymscCBNrHYq00LTUCTqXn5K+LnZ3oswx6177L6Zcql4Rer7jEa6+lP1hDO+kaaiOSKT8leIWwANyCboLPBVNx2H5BWLzFju1154f/fj+JwcXGXr3oLzQpEp7KMor+cUOvscy2o0bMuUwEw98JwOa2Y3cbgtahRBTMVcB17wEwsMuRzwXvQ5x5zGcOkc3DTQTZdDv/PjcoBZs55oHnlVncXyJEtNIMvBbIHdQ5zb4Ye+3YUZ694rnah/eTA4HDe7Tv76m1YudgtnBgY9/37NYF5w/jz3cRXy/8GAcBtUYNl70hFhKavKP90sqyA8F9RP99PQu32AGj2o9L70ocFlixIWzHdnTNvM5V9SfaGBmN5NnUOPk3xoSb14z7CAU7fnNsTT5NOQI4EZBAwS/mWkfudDzBdH1NHJ3QKMB8M91DCve59OCxn0rbE0q5RZQkjcZDjbPwy1krJdp94H4la1vCPK5OJMmV8tc3qnBH+jCOP9IXT/34G2lyTP7R9D7DJXsW6hHZ2iZRj79LGFPiWI5kZ8FVwDLxmY/b0LLd5KuDV3ZfeF+f74VKG3PMxRB7VgTU82320szKu9dE/wjZI+62dzG/v40wclBMM13+lZy0HgcmLQkIm1tmZfgbJnWeWYPnbvSfmb1bmjzDziWN3A30dODTgX4D1s/CtWB6apPF6YV1VYz8rltUjXMwSdoUjahZPMCJxChjxfw9PSXaOIOgTFfS+o76Kyc9XV/DNkalBTjV0e1HRtkRiMSLPu5P9qo45w7Q7+16buBp2eEp8BejO8ln1gLxI1CaKgNtmK2zh0e4Gj4WPBPDvaxmEya+g43qU6iP+1qq0nfUtYCN1mQIGLYGzO8RFnN4AHvV+uNRodudp0Kz2OvpdmEWOWGa//gHjKKFzZ80vYe++1qlbNCus3cyGCchFMLj3j5GrWL7R2AAs7cAezWF6xFeXniuWORqb1cBM/QdCmNaEKLNI3wLErUXB3DvN8g6ptwkyicmH0AKUDDIV6jOiWs/p/oLiZnwxR2gfrcAbvDmjYLzSwmKx0R2KruIXonVDAuKAo2imXiCDMd85PG3dQWPpevTjVtNG+5w5+UGmYNfW+OerY3EP4cqJ7LDhcc3OCHF+MKLD8jGOsaqg/oue/yeObqTZ3dwGloMzS4sPcnXl/5YUvWB/Z/0+4QmEzb6EiTEzQe0CCtMBUfKqa8DrCFkm8atS1Q0nSjWKeRRdhCKwjcLBQTHr35hgrJ8Lu5InkQv8Jy4FmiPqSsDua5xCE9RZSus0CiRWUk0d4dfEGB6fiMWvdraQPAaHldzX5E6EAubaAAPHt/1HoX1JaTeR2n/zxPEZQ+LUN54RoG9bvOnfFdaud+LxCFZj9dgfjyRX+XtOGucOQuqI1tFdSxjBl1gatHLrvy8hb57SgYvy1vB4nwstxdPNLWeWNKIP1mkZQ==</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[16]"><TokenEntry><Name>SessionKey</Name><Value>hG6GmXQ4XpCP4rWqTD4xXd3JlFWPGFHrVw1F6V6jy5rlgk+P53ZLKmqMH3GTmHViXH2jEpSFSGo+e3Rv52Jtsl4cC10QI79WRYNrRtykiPwgQFxdvCdjZ5/enppQLu6RR1hKbCSsNUtid0aDBmIa74fqMeTA5unHa6lZ0ip41TiZhECZFlnUXUHEM53zQk8RtxvTjPtfeU5MnnyizbrLXYNKOWYVFlgl9jR9uIo2qnnUiwAhX5p5SYm7CR3xWuWzHIROLnyXXyyR6VJ5dwPDrH1ZPNtZln7GEQlYBfaReHYOvsuhOofORfpkDJFiaut8yTFzxYjMojzuda94nSmyIg==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>18iocqsgX9avz5YUZg4pxqpFHrOXW/3iwSyuBK0f4OE=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>NgRT8Giayl27f4+HemVmipDZii8waH3upqn0Rgb1G47BuE3PsNRJIhvuanpO81vGl1jNvfI3wlQJzqUrhXDLS+1q3YqiPGqVTSA5MXAI0lU=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>hwHt5lN6MP7eTDRhDhaqk13EdWAkykKYBsB+xBF9ZXk=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>18iocqsgX9avz5YUZg4pxkK4zNPPqhC3amAAVfV5Z68=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>IPh38bcgJ41TST99gnYSGQ9e1JdZ1SQ9oLVv1r/fw5OczhFZ4B2LZl73Mqhc3ljFKBMv1CqoH8UYZmn617pfr5byVtpT7MMAzKlerzFQ1ok=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>WZDi8jKiHZMtD1Ga0thxDeWXXyQf+711h49BRLLqdXI=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>WZDi8jKiHZMtD1Ga0thxDRB3nP3jWs5+l5ZW+n3osNg=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>Vm8RKe+gTJEUt9La/mX8Sg==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>Vm8RKe+gTJEUt9La/mX8Sg==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>bMyt/e7EZY8kBkh/1eDOKikhRyqbTdmF87rs/RqkBMhxicKrfK2xHySxAvwTHcYLBqTMhfDmOcEjjLUlw5MCaA==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>ohgddpTZxOhWY+LGHsc7n7D6l71lMz9ZKsu0HHSsdV/eqR6kZ4acJmSgLyKXbfnXQsAHY3PWLPbwNFLtHYEfyA==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>/y2yYCLuXFTxQ0Y0th+nE7RGBYIeWHguutENgYqA0aw=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>/y2yYCLuXFTxQ0Y0th+nE7RGBYIeWHguutENgYqA0aw=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>aK1eeyqAYK+NPfAmlkpxmXT1fRaj1OB0TrmJpPHRG9VhuhjMP1JwdsTGeoOwLzAj</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>aK1eeyqAYK+NPfAmlkpxmXT1fRaj1OB0TrmJpPHRG9VhuhjMP1JwdsTGeoOwLzAj</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EFD, 13:57:09:959 - <NULL>)
00010003(0x80072EFD, 13:57:09:959)

Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac

Error: (06/13/2014 01:57:08 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD00010001(0x00000000, 13:57:07:205 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM)
00020001(0x00000000, 13:57:07:207)
00030001(0x00000000, 13:57:07:209 - https://activation.sls.microsoft.com)
00030002(0x00000000, 13:57:07:209 - 0)
00040001(0x00000000, 13:57:07:209 - https://activation.sls.microsoft.com)
00040002(0x00000000, 13:57:07:213 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 13:57:07:214 - 0, 1)
00040006(0x00000001, 13:57:07:214 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 13:57:07:214 - 0)
00020008(0x80072EFD, 13:57:08:452 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[16]"><TokenEntry><Name>SessionKey</Name><Value>cn56rgOcAi11OHvN4TBfdGwFJYqk2sBfR8bMlbICEFPIyuqo2z9Ou/hlM1G4m0VqS8JFvVFar+HKCYhwP8lCm1WUEg+shrmdKUbpzPDzU3a+J1lsND8B4gmktRu6/G6x48k8bjwg0SAunehJymhlXG49vey7Zs80DZwuTcuxvdYIODFuVepZKXm6qXHWARrfzDp4VUhfrvx8MkwwranFtSbc+O38LOeH63H2V4TqnFUFLZ3mDPqNlnyFav6y2haHm5pf3umgFY0swigtWfHHo+jGPdqu2H4kdtiEptbxSPL6/Gvher3OFXcFLizdGdFfJ+7GVTd/wyeBGvCwnt8qnQ==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>zetsuUhjFDKH7EKQHqwgSI04U/fXXAc8ZHDQnhiDb3U=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>1YgauoEp2i2mYQ/OEjRGPRcubvfeDzncSS9MYncRe7b+pYOfNsFkOcvsuS3vzMzrARzV72AD1y3SQegfJUjMA+aQEfFgwnbqADUoNMC1+mA=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>WNuDBr1mUsBEmw5mWFYQ2kV+uhIGGZ+WGUoLa1arILU=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>zetsuUhjFDKH7EKQHqwgSIzGEw+4v5JK7vKgjckL/fE=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>c/OC633NBB6K+Ny71nFZ1vHPam2fr+6/EOFjbBiv05nY/ZLgxdQ+PweToUkqt9ncbZlN/BkWK1fOsktd3i6imdvgqOGPA+UEdmrFv8agSiM=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>Ns3rMRrEb984PtYSmkCRBViMrU7JCLZcp1l467JqQw8=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>Ns3rMRrEb984PtYSmkCRBXNkL9KcjQdXc1HdYr1PazU=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>1MPqt7hgRviPhlnCgK3drw==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>1MPqt7hgRviPhlnCgK3drw==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>srWRYHZucMIU8/c/cuclK/7G+o8mZOvdXleDUlK+8b/XxXmP19jwdpdAO6Pj320AY/GBNwOoImTx4pq9swNJlQ==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>Lzzgy5XAQcjQwkTbWF/rcIumkLVAvhmUPjC29YNFJN10Ar4zYbagtwbgG5Y0doS0dtGPTTb2L2JEhvjZ/tDMCA==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>4jQMmV0qYHvjzD/02SETJT1JOkgDLEBO1NcdjAj62Jk=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>4jQMmV0qYHvjzD/02SETJT1JOkgDLEBO1NcdjAj62Jk=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>ueA6+9oe2XXd2XL12kPtLKOoO/jQYOB9ZLVE2MF6ivuRSlWU64paec6Obz4mrSFN</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>ueA6+9oe2XXd2XL12kPtLKOoO/jQYOB9ZLVE2MF6ivuRSlWU64paec6Obz4mrSFN</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EFD, 13:57:08:470 - <NULL>)
00010003(0x80072EFD, 13:57:08:470)

Error: (06/13/2014 00:54:11 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFDRuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9e4b231b-3e45-41f4-967f-c914f178b6ac;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac

Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD00010001(0x00000000, 12:54:10:897 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=DM)
00020001(0x00000000, 12:54:10:897)
00030001(0x00000000, 12:54:10:897 - https://activation.sls.microsoft.com)
00030002(0x00000000, 12:54:10:897 - 0)
00040001(0x00000000, 12:54:10:897 - https://activation.sls.microsoft.com)
00040002(0x00000000, 12:54:10:897 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 12:54:10:913 - 0, 1)
00040006(0x00000001, 12:54:10:913 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 12:54:10:913 - 0)
00020008(0x80072EFD, 12:54:10:913 - SOAPAction: "hxxp://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:soapenc="hxxp://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="hxxp://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[16]"><TokenEntry><Name>SessionKey</Name><Value>st2l6cKMaPx2THYyw+GKHjY93tVJ2J20AM12j16ibFm0yfCmKY0TqfaVMlzlCZg1gSvHB6eAsvn9xcL3e6EfDTVs8Yt2rCVIUCtMtU3UcJt+LkpQ/IswEZgiPOKi0MlPu1ODfJ5N/Gm0DEl5GlXTNLf0+CbT3/SeK/k6DckH4xfiuofEDSX8PllME7HmotqNa1z6lweJGfr+vgGmzwYkdPXzg58LI9oUmskRWOKqoiD6q7w2XfEhI5QCgv45zLUehRoKnDobvzAhX+9gWfDKxDoS+DlvV+5lBd3DHKM2+GFacxwVTuwNb8ifE57esfUg1RZe294qEcoD4teZSM5IaQ==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>Y+YPGDJoWCCj8QaJ7ePLFdxxxDw7B5PCrHO2eX+WXls=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>s+DXDcbBN9CMgsCtcK7nG03mFZ7MXDSSUzXRsrNay/5tCxrGpHj72NMGLvV6fmQUjHVHSjyZ72Yu5EV2nREU5Sywhwg7zJbDWJ3OxNuMpIs=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>bIv9RoPrWK6/ytb9GQiNkeLejgHgA0EvkIr7Hj75k2U=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>Y+YPGDJoWCCj8QaJ7ePLFf0GaIC/WKsUDdRotGcdbmY=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>XIwNAVcZa6LivjPesyq/ieY+SlYe9RdG8qKxi5/I6FgLf/am1arZrTdB1W656RHfrygQpP+ieX6NzQx401M8HpMnv4cEkPodHH4XEIy5zkA=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>dv5LxMHQ6wg0NlhMaqUoRiDQ/sOM7vDdyhWk9WIKe9A=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>dv5LxMHQ6wg0NlhMaqUoRhd2Sc+WTmzlea7FgovjCv8=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>rPSzbphPB8TtwIHSy/tN+g==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>rPSzbphPB8TtwIHSy/tN+g==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>pz/s6GHFD6BISZEnH1CbHybXttUD3kYRReeR2nxtLeIKRvAkP58nq9EwSQUdYwClUSni+9N+TtF7NUIyPA9Wsg==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>JOPWW+l6bWuxigEPxrnCeikPDxpHkAi9vIrmMUyzUatZyWNovxmflVrkAzrmOmJ07YLzwv0+Vuy2ttqTxAEtqw==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>agYhvS4zZF2+Hz7HZyh9KHFrDB8S186DyqqAkdW4ebc=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>agYhvS4zZF2+Hz7HZyh9KHFrDB8S186DyqqAkdW4ebc=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>tr3tRFh4lE1wdT1kGpMBMvQvPnq4CO7UeGIHV1HL2qKgTejp9ybT3HpRIqo6Y7OB</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>tr3tRFh4lE1wdT1kGpMBMvQvPnq4CO7UeGIHV1HL2qKgTejp9ybT3HpRIqo6Y7OB</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EFD, 12:54:10:928 - <NULL>)
00010003(0x80072EFD, 12:54:10:928)

Error: (06/13/2014 00:54:10 PM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EFD9e4b231b-3e45-41f4-967f-c914f178b6ac


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 3969.93 MB
Available physical RAM: 2689.7 MB
Total Pagefile: 7553.93 MB
Available Pagefile: 6145.86 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:440.42 GB) (Free:359.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: DD49C7C1)

Partition: GPT Partition Type.

==================== End Of Log ============================
__________________
Geändert von Preciosa (13.06.2014 um 13:27 Uhr) Grund: Genauere Erklärung

Alt 14.06.2014, 12:55   #4
schrauber
/// the machine
/// TB-Ausbilder
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


Da fehlt noch die FRST.txt
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 14.06.2014, 14:40   #5
Preciosa
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


Es tut mir furchtbar Leid, dass ich die vergessen habe!


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2014 (ATTENTION: ====> FRST version is 101 days old and could be outdated)
Ran by Preciosa (administrator) on PINKY on 13-06-2014 14:13:45
Running from C:\Users\Preciosa\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
() C:\Program Files (x86)\Opera\22.0.1471.50\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\22.0.1471.50\opera.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [4365824 2012-12-27] (Bitcasa, Inc)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-07] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\RunOnce: [SymSilent] - "C:\Program Files (x86)\SymSilent\SymSilent.exe" /service /_spawn [925584 2014-06-13] (Symantec Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-24] ( (Atheros Communications))
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.at/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {706C3937-4161-4756-B6D5-B970A3FD84EE} URL = 
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 5.175.194.40 8.8.8.8

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-24] (Qualcomm Atheros Commnucations)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1594416 2013-02-01] (Samsung Electronics CO., LTD.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe [144520 2012-12-23] (Symantec Corporation)
R2 SWUpdateService; C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2921520 2013-04-09] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130107.001\BHDrvx64.sys [1384608 2012-11-19] (Symantec Corporation)
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [222952 2013-01-24] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1403000.024\ccSetx64.sys [168096 2012-11-15] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-13] (Symantec Corporation)
U3 EraserUtilDrv11313; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11313.sys [142128 2014-06-13] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130113.001\IDSVia64.sys [513184 2012-11-15] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20140612.024\ENG64.SYS [126040 2014-06-13] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20140612.024\EX64.SYS [2099288 2014-06-13] (Symantec Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1403000.024\SRTSP64.SYS [796248 2013-01-28] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1403000.024\SRTSPX64.SYS [36952 2013-01-28] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1403000.024\SYMDS64.SYS [493656 2013-01-21] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1403000.024\SYMEFA64.SYS [1139800 2013-01-30] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1403000.024\SymELAM.sys [23448 2012-11-15] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-05-16] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1403000.024\Ironx64.SYS [224416 2012-11-15] (Symantec Corporation)
R3 SymNetS; C:\Windows\system32\drivers\NISx64\1403000.024\SYMNETS.SYS [432800 2013-01-30] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-13 14:13 - 2014-06-13 14:13 - 00012113 _____ () C:\Users\Preciosa\Downloads\FRST.txt
2014-06-13 14:13 - 2014-06-13 14:13 - 00000000 ____D () C:\FRST
2014-06-13 14:12 - 2014-06-13 14:12 - 02156544 _____ (Farbar) C:\Users\Preciosa\Downloads\frst64.exe
2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Opera Software
2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Opera Software
2014-06-13 13:46 - 2014-06-13 13:46 - 00003840 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1402660006
2014-06-13 13:46 - 2014-06-13 13:46 - 00001133 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-06-13 13:46 - 2014-06-13 13:46 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-13 13:45 - 2014-06-13 13:46 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup (1).exe
2014-06-13 13:14 - 2014-06-13 13:14 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Macromedia
2014-06-13 12:53 - 2014-06-13 12:53 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros.lnk
2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros (2).lnk
2014-06-13 12:03 - 2014-06-13 12:03 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-06-13 12:03 - 2014-06-13 12:03 - 00000000 ____D () C:\Windows.old
2014-06-13 11:35 - 2014-06-13 11:45 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2966991898-3599612516-2177771990-1001
2014-06-13 11:32 - 2014-06-13 11:32 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\bitcasa
2014-06-13 11:31 - 2014-06-13 11:31 - 00000000 ____D () C:\$WINDOWS.~BT
2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Power2Go8
2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\BMExplorer
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Atheros
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Adobe
2014-06-13 11:25 - 2014-06-13 12:28 - 00032600 _____ () C:\WINDOWS\DPINST.LOG
2014-06-13 11:25 - 2014-06-13 11:25 - 00001442 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-13 11:25 - 2014-06-13 11:25 - 00001202 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Adobe
2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Samsung
2014-06-13 11:21 - 2013-02-27 11:01 - 132678241 _____ () C:\WINDOWS\[0407]SamsungStory01_ger.scr
2014-06-13 11:20 - 2014-06-13 11:20 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\VirtualStore
2014-06-13 11:16 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Packages
2014-06-13 11:16 - 2014-06-13 11:17 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-06-13 11:16 - 2014-06-13 11:16 - 00000000 _____ () C:\WINDOWS\system32\Drivers\144D_SAMSUNG_na_300E5EV_P07R.mrk
2014-06-13 11:14 - 2014-06-13 11:14 - 00000020 ___SH () C:\Users\Preciosa\ntuser.ini
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-13 11:07 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa
2014-06-13 11:07 - 2014-06-13 11:09 - 00017148 _____ () C:\WINDOWS\diagwrn.xml
2014-06-13 11:07 - 2014-06-13 11:09 - 00017148 _____ () C:\WINDOWS\diagerr.xml
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Vorlagen
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Startmenü
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Netzwerkumgebung
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Lokale Einstellungen
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Eigene Dateien
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Druckumgebung
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Musik
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Bilder
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Verlauf
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Anwendungsdaten
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Anwendungsdaten
2014-06-13 11:07 - 2013-05-16 08:21 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-13 11:07 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-13 11:07 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-13 11:07 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-13 10:22 - 2014-06-13 11:31 - 00000000 ___HD () C:\$SysReset
2014-06-13 01:39 - 2014-06-13 01:39 - 00000120 ___RH () C:\Users\Preciosa\Downloads\Stinger.opt
2014-06-13 01:30 - 2014-06-13 01:36 - 240202472 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV_21.1.0.18_SYMTB_TMD_MRFTT_819_10129.exe
2014-06-13 01:27 - 2014-06-13 01:34 - 00000844 _____ () C:\Users\Preciosa\Downloads\Stinger_13062014_012727.html
2014-06-13 01:24 - 2014-06-13 01:24 - 12314472 _____ (McAfee Inc) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager [1].exe
2014-06-13 01:23 - 2014-06-13 01:23 - 00719128 _____ ( ) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager.exe
2014-06-13 01:06 - 2014-06-13 01:06 - 00011868 _____ () C:\Users\Preciosa\Documents\Scan Results.140613-0106.txt
2014-06-13 00:09 - 2014-06-13 00:10 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup.exe
2014-06-12 22:31 - 2014-06-12 22:42 - 42402488 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV-ESD-21.3.0-GE.exe
2014-06-12 22:08 - 2014-06-12 22:12 - 94714880 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast_free_antivirus_setup2018 (1).exe
2014-06-12 21:54 - 2014-06-12 21:55 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153.exe
2014-06-12 21:54 - 2014-06-12 21:55 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153 (1).exe
2014-06-12 20:35 - 2014-06-12 20:35 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HijackThis.exe
2014-06-12 20:09 - 2014-06-12 20:09 - 19480992 _____ (SUPERAntiSpyware) C:\Users\Preciosa\Downloads\SUPERAntiSpyware.exe
2014-06-12 20:06 - 2014-06-12 20:06 - 00012253 _____ () C:\Users\Preciosa\Downloads\hijackthis.log
2014-06-12 20:04 - 2014-06-12 20:04 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HiJackThis204.exe
2014-06-12 20:02 - 2014-06-12 20:21 - 03180502 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup (1).exe
2014-06-12 19:43 - 2014-06-12 20:02 - 02852518 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup.exe
2014-06-12 19:14 - 2014-06-12 19:14 - 01707144 _____ () C:\Users\Preciosa\Downloads\Adaware_Installer11.2.5952.0.exe
2014-06-12 19:12 - 2014-06-12 19:19 - 04487240 _____ (AVG Technologies) C:\Users\Preciosa\Downloads\avg_avct_stb_all_2014_4592.exe
2014-06-12 19:07 - 2014-06-12 19:07 - 00000000 ____D () C:\Users\Preciosa\Documents\ProcAlyzer Dumps
2014-06-12 18:42 - 2014-06-12 18:52 - 00003592 _____ () C:\Users\Preciosa\Desktop\Nmc_2014-06-12_18-42-34.log
2014-06-12 18:39 - 2014-06-12 18:42 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Preciosa\Downloads\spybot-2.3.exe
2014-06-12 18:33 - 2014-06-12 18:40 - 334943320 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware_Cleaner.exe
2014-06-12 18:09 - 2014-06-12 18:16 - 312761032 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware208_Cleaner.exe
2014-06-12 17:06 - 2014-06-12 17:07 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k (1).com
2014-06-12 17:06 - 2014-06-12 17:06 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k.com
2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212.exe
2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212 (1).exe
2014-06-12 16:58 - 2014-06-12 16:58 - 02953520 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast-browser-cleanup_9.0.0.224.exe
2014-06-11 22:39 - 2014-06-11 22:39 - 00000000 _____ () C:\Users\Preciosa\Downloads\Number of results
2014-06-01 01:38 - 2014-06-01 01:38 - 00531312 _____ () C:\Users\Preciosa\Downloads\HDvid-codec-Chrome (2).exe

==================== One Month Modified Files and Folders =======

2014-06-13 14:13 - 2014-06-13 14:13 - 00012113 _____ () C:\Users\Preciosa\Downloads\FRST.txt
2014-06-13 14:13 - 2014-06-13 14:13 - 00000000 ____D () C:\FRST
2014-06-13 14:12 - 2014-06-13 14:12 - 02156544 _____ (Farbar) C:\Users\Preciosa\Downloads\frst64.exe
2014-06-13 14:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-13 13:58 - 2013-05-16 06:50 - 00739234 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Opera Software
2014-06-13 13:47 - 2014-06-13 13:47 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Opera Software
2014-06-13 13:46 - 2014-06-13 13:46 - 00003840 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1402660006
2014-06-13 13:46 - 2014-06-13 13:46 - 00001133 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-06-13 13:46 - 2014-06-13 13:46 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-13 13:46 - 2014-06-13 13:45 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup (1).exe
2014-06-13 13:41 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-06-13 13:14 - 2014-06-13 13:14 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Macromedia
2014-06-13 13:00 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-06-13 12:56 - 2013-05-16 21:49 - 00780976 _____ () C:\WINDOWS\system32\perfh010.dat
2014-06-13 12:56 - 2013-05-16 21:49 - 00152608 _____ () C:\WINDOWS\system32\perfc010.dat
2014-06-13 12:56 - 2013-05-16 21:39 - 00753134 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-13 12:56 - 2013-05-16 21:39 - 00155826 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-13 12:56 - 2013-05-16 21:29 - 00790022 _____ () C:\WINDOWS\system32\perfh00C.dat
2014-06-13 12:56 - 2013-05-16 21:29 - 00155084 _____ () C:\WINDOWS\system32\perfc00C.dat
2014-06-13 12:56 - 2012-07-26 09:28 - 03624158 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-13 12:55 - 2013-05-16 09:14 - 00000000 ____D () C:\ProgramData\WinClon
2014-06-13 12:53 - 2014-06-13 12:53 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-06-13 12:52 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-13 12:51 - 2013-05-16 08:26 - 03293656 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-13 12:50 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros.lnk
2014-06-13 12:32 - 2014-06-13 12:32 - 00003922 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros (2).lnk
2014-06-13 12:28 - 2014-06-13 11:25 - 00032600 _____ () C:\WINDOWS\DPINST.LOG
2014-06-13 12:03 - 2014-06-13 12:03 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-06-13 12:03 - 2014-06-13 12:03 - 00000000 ____D () C:\Windows.old
2014-06-13 12:03 - 2012-07-26 10:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-06-13 11:45 - 2014-06-13 11:35 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2966991898-3599612516-2177771990-1001
2014-06-13 11:32 - 2014-06-13 11:32 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\bitcasa
2014-06-13 11:31 - 2014-06-13 11:31 - 00000000 ____D () C:\$WINDOWS.~BT
2014-06-13 11:31 - 2014-06-13 10:22 - 00000000 ___HD () C:\$SysReset
2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Power2Go8
2014-06-13 11:27 - 2014-06-13 11:27 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\BMExplorer
2014-06-13 11:27 - 2013-05-16 09:32 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ___RD () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Atheros
2014-06-13 11:26 - 2014-06-13 11:26 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Adobe
2014-06-13 11:26 - 2014-06-13 11:07 - 00000000 ____D () C:\Users\Preciosa
2014-06-13 11:25 - 2014-06-13 11:25 - 00001442 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-13 11:25 - 2014-06-13 11:25 - 00001202 _____ () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Roaming\Adobe
2014-06-13 11:25 - 2014-06-13 11:25 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Samsung
2014-06-13 11:25 - 2014-06-13 11:16 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\Packages
2014-06-13 11:25 - 2013-05-16 21:11 - 00000000 ____D () C:\WINDOWS\MSetup
2014-06-13 11:23 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-13 11:20 - 2014-06-13 11:20 - 00000000 ____D () C:\Users\Preciosa\AppData\Local\VirtualStore
2014-06-13 11:19 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-13 11:17 - 2014-06-13 11:16 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-06-13 11:16 - 2014-06-13 11:16 - 00000000 _____ () C:\WINDOWS\system32\Drivers\144D_SAMSUNG_na_300E5EV_P07R.mrk
2014-06-13 11:16 - 2013-05-16 09:12 - 00000000 ____D () C:\ProgramData\Norton
2014-06-13 11:16 - 2013-05-16 08:52 - 00000000 ____D () C:\ProgramData\Samsung
2014-06-13 11:16 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-13 11:15 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-13 11:14 - 2014-06-13 11:14 - 00000020 ___SH () C:\Users\Preciosa\ntuser.ini
2014-06-13 11:14 - 2012-08-06 00:07 - 00000000 ___DC () C:\WINDOWS\Panther
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-13 11:10 - 2014-06-13 11:10 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-13 11:10 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows NT
2014-06-13 11:10 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default
2014-06-13 11:09 - 2014-06-13 11:07 - 00017148 _____ () C:\WINDOWS\diagwrn.xml
2014-06-13 11:09 - 2014-06-13 11:07 - 00017148 _____ () C:\WINDOWS\diagerr.xml
2014-06-13 11:09 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-06-13 11:09 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-06-13 11:09 - 2012-07-26 09:21 - 00024107 _____ () C:\WINDOWS\setupact.log
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Vorlagen
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Startmenü
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Netzwerkumgebung
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Lokale Einstellungen
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Eigene Dateien
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Druckumgebung
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Musik
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Documents\Eigene Bilder
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Verlauf
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\AppData\Local\Anwendungsdaten
2014-06-13 11:07 - 2014-06-13 11:07 - 00000000 _SHDL () C:\Users\Preciosa\Anwendungsdaten
2014-06-13 10:27 - 2014-03-23 16:26 - 00000000 __RDO () C:\Users\Preciosa\SkyDrive
2014-06-13 01:39 - 2014-06-13 01:39 - 00000120 ___RH () C:\Users\Preciosa\Downloads\Stinger.opt
2014-06-13 01:36 - 2014-06-13 01:30 - 240202472 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV_21.1.0.18_SYMTB_TMD_MRFTT_819_10129.exe
2014-06-13 01:34 - 2014-06-13 01:27 - 00000844 _____ () C:\Users\Preciosa\Downloads\Stinger_13062014_012727.html
2014-06-13 01:24 - 2014-06-13 01:24 - 12314472 _____ (McAfee Inc) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager [1].exe
2014-06-13 01:23 - 2014-06-13 01:23 - 00719128 _____ ( ) C:\Users\Preciosa\Downloads\stinger64_CB-DL-Manager.exe
2014-06-13 01:06 - 2014-06-13 01:06 - 00011868 _____ () C:\Users\Preciosa\Documents\Scan Results.140613-0106.txt
2014-06-13 00:10 - 2014-06-13 00:09 - 27623336 _____ (Opera Software ASA) C:\Users\Preciosa\Downloads\Opera_22.0.1471.50_Setup.exe
2014-06-12 22:42 - 2014-06-12 22:31 - 42402488 ____N (Symantec Corporation) C:\Users\Preciosa\Downloads\NAV-ESD-21.3.0-GE.exe
2014-06-12 22:12 - 2014-06-12 22:08 - 94714880 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast_free_antivirus_setup2018 (1).exe
2014-06-12 21:55 - 2014-06-12 21:54 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153.exe
2014-06-12 21:55 - 2014-06-12 21:54 - 40514640 _____ (Google Inc.) C:\Users\Preciosa\Downloads\ChromeStandaloneSetup_35.0.1916.153 (1).exe
2014-06-12 20:35 - 2014-06-12 20:35 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HijackThis.exe
2014-06-12 20:21 - 2014-06-12 20:02 - 03180502 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup (1).exe
2014-06-12 20:09 - 2014-06-12 20:09 - 19480992 _____ (SUPERAntiSpyware) C:\Users\Preciosa\Downloads\SUPERAntiSpyware.exe
2014-06-12 20:06 - 2014-06-12 20:06 - 00012253 _____ () C:\Users\Preciosa\Downloads\hijackthis.log
2014-06-12 20:04 - 2014-06-12 20:04 - 00388608 _____ (Trend Micro Inc.) C:\Users\Preciosa\Downloads\HiJackThis204.exe
2014-06-12 20:02 - 2014-06-12 19:43 - 02852518 _____ (Emsisoft GmbH ) C:\Users\Preciosa\Downloads\EmsisoftAntiMalwareSetup.exe
2014-06-12 19:19 - 2014-06-12 19:12 - 04487240 _____ (AVG Technologies) C:\Users\Preciosa\Downloads\avg_avct_stb_all_2014_4592.exe
2014-06-12 19:14 - 2014-06-12 19:14 - 01707144 _____ () C:\Users\Preciosa\Downloads\Adaware_Installer11.2.5952.0.exe
2014-06-12 19:07 - 2014-06-12 19:07 - 00000000 ____D () C:\Users\Preciosa\Documents\ProcAlyzer Dumps
2014-06-12 18:52 - 2014-06-12 18:42 - 00003592 _____ () C:\Users\Preciosa\Desktop\Nmc_2014-06-12_18-42-34.log
2014-06-12 18:42 - 2014-06-12 18:39 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Preciosa\Downloads\spybot-2.3.exe
2014-06-12 18:40 - 2014-06-12 18:33 - 334943320 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware_Cleaner.exe
2014-06-12 18:17 - 2013-11-18 03:41 - 00000000 ____D () C:\AdwCleaner
2014-06-12 18:16 - 2014-06-12 18:09 - 312761032 _____ (Norman Shark AS) C:\Users\Preciosa\Downloads\Norman_Malware208_Cleaner.exe
2014-06-12 17:07 - 2014-06-12 17:06 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k (1).com
2014-06-12 17:06 - 2014-06-12 17:06 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Preciosa\Downloads\SpyHunter-Installer-k.com
2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212.exe
2014-06-12 17:02 - 2014-06-12 17:02 - 01333465 _____ () C:\Users\Preciosa\Downloads\adwcleaner_3.212 (1).exe
2014-06-12 16:58 - 2014-06-12 16:58 - 02953520 _____ (AVAST Software) C:\Users\Preciosa\Downloads\avast-browser-cleanup_9.0.0.224.exe
2014-06-12 15:43 - 2013-11-16 12:16 - 00000000 __RHD () C:\MSOCache
2014-06-12 14:26 - 2013-11-08 20:45 - 00000000 ____D () C:\Users\Preciosa\Documents\Bluetooth Folder
2014-06-11 22:39 - 2014-06-11 22:39 - 00000000 _____ () C:\Users\Preciosa\Downloads\Number of results
2014-06-01 01:38 - 2014-06-01 01:38 - 00531312 _____ () C:\Users\Preciosa\Downloads\HDvid-codec-Chrome (2).exe

Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-08-05 23:07

==================== End Of Log ============================
--- --- ---

--- --- ---

[/CODE]

Das Problem mit den https-Seiten konnte ich zwischenzeitlich umgehen, indem ich eine Fake-DNS eingegeben habe:
8.8.8.8.
8.8.4.4.
Somit ist mein Windows wieder registriert. Nach wie vor aber bekomme ich die Meldung "Verbindung zu Windows SmartScreen ist derzeit nicht möglich. Auch ein Update auf Windows 8.1 ist unmöglich. Die Installation wird vorbereitet, danach lädt aber nichts. Ein komplettes Deinstallieren von Norton hat keine Veränderung gebracht... Vielen Dank für die Hilfe!


Alt 15.06.2014, 06:15   #6
schrauber
/// the machine
/// TB-Ausbilder
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
--> Suspicious.cloud.9 verhindert https-Seiten

Alt 15.06.2014, 12:28   #7
Preciosa
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


Code:
ATTFilter
ComboFix 14-06-13.01 - Preciosa 15.06.2014  13:14:13.1.2 - x64
Microsoft Windows 8  6.2.9200.0.1252.49.1031.18.3970.2738 [GMT 2:00]
ausgeführt von:: c:\users\Preciosa\Desktop\ComboFix.exe
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-05-15 bis 2014-06-15  ))))))))))))))))))))))))))))))
.
.
2014-06-15 11:22 . 2014-06-15 11:22	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-06-15 11:22 . 2014-06-15 11:22	--------	d-----w-	c:\users\Administrator\AppData\Local\temp
2014-06-15 10:35 . 2014-04-30 14:20	10702536	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B8C2BE-85E2-4BEE-B94C-FFD2283F6046}\mpengine.dll
2014-06-14 23:17 . 2014-03-28 08:23	19759104	----a-w-	c:\windows\system32\shell32.dll
2014-06-14 23:16 . 2014-05-03 05:47	3246592	----a-w-	c:\windows\system32\rdpcorets.dll
2014-06-14 23:16 . 2014-05-03 03:34	235520	----a-w-	c:\windows\system32\rdpudd.dll
2014-06-14 23:15 . 2014-04-23 09:50	1031560	------w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{07304D5C-EDB8-4C63-B7C8-AB28CDF4DA72}\gapaengine.dll
2014-06-14 21:57 . 2014-06-14 22:00	--------	d-----r-	c:\windows\BrowserChoice
2014-06-14 21:51 . 2012-11-26 02:15	16114176	----a-w-	c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-06-14 21:51 . 2012-11-26 02:14	15541248	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-06-14 21:35 . 2012-10-12 05:39	82944	----a-w-	c:\windows\SysWow64\dskquota.dll
2014-06-14 21:35 . 2012-10-12 06:13	109568	----a-w-	c:\windows\system32\dskquota.dll
2014-06-14 21:35 . 2012-10-24 04:54	396008	----a-w-	c:\windows\system32\hal.dll
2014-06-14 21:20 . 2012-11-20 05:17	1184256	----a-w-	c:\windows\system32\Display.dll
2014-06-14 21:20 . 2012-11-20 05:24	1164800	----a-w-	c:\windows\SysWow64\Display.dll
2014-06-14 21:20 . 2012-11-20 05:02	6656	----a-w-	c:\windows\SysWow64\KBDKURD.DLL
2014-06-14 21:20 . 2012-11-20 04:59	7168	----a-w-	c:\windows\system32\KBDKURD.DLL
2014-06-14 20:40 . 2013-08-16 05:22	4917760	----a-w-	c:\windows\system32\sppsvc.exe
2014-06-14 20:39 . 2013-07-08 22:46	543744	----a-w-	c:\windows\system32\wwanmm.dll
2014-06-14 20:38 . 2013-06-01 09:21	106496	----a-w-	c:\windows\system32\samlib.dll
2014-06-14 20:02 . 2014-06-14 20:02	--------	d-----w-	c:\program files (x86)\MyFree Codec
2014-06-14 19:57 . 2014-06-14 19:57	--------	d-----w-	c:\program files (x86)\MarkAny
2014-06-14 19:52 . 2013-09-04 03:11	576512	----a-w-	c:\windows\system32\drivers\afd.sys
2014-06-14 19:51 . 2013-10-19 05:45	62976	----a-w-	c:\windows\system32\imagehlp.dll
2014-06-14 19:51 . 2013-10-19 04:04	59392	----a-w-	c:\windows\SysWow64\imagehlp.dll
2014-06-14 19:51 . 2013-07-06 00:15	652288	----a-w-	c:\windows\system32\comctl32.dll
2014-06-14 19:51 . 2013-07-04 02:13	541696	----a-w-	c:\windows\SysWow64\comctl32.dll
2014-06-14 19:51 . 2013-12-09 00:45	523776	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-06-14 19:51 . 2013-12-08 23:59	600064	----a-w-	c:\windows\system32\vbscript.dll
2014-06-14 19:51 . 2013-06-22 05:45	785624	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2014-06-14 19:51 . 2013-06-22 05:45	54488	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2014-06-14 19:51 . 2013-07-01 22:14	25600	----a-w-	c:\windows\system32\drivers\usbprint.sys
2014-06-14 19:50 . 2013-07-05 22:02	99328	----a-w-	c:\windows\system32\drivers\usbcir.sys
2014-06-14 19:50 . 2013-07-05 22:01	210560	----a-w-	c:\windows\system32\drivers\usbvideo.sys
2014-06-14 19:20 . 2014-01-20 03:00	270496	------w-	c:\windows\system32\MpSigStub.exe
2014-06-14 19:17 . 2014-04-03 11:19	328024	----a-w-	c:\windows\system32\drivers\Classpnp.sys
2014-06-14 19:17 . 2014-04-03 03:44	619008	----a-w-	c:\windows\system32\drivers\srv2.sys
2014-06-14 19:17 . 2014-03-24 23:42	305152	----a-w-	c:\windows\SysWow64\wusa.exe
2014-06-14 19:17 . 2014-03-24 22:56	309760	----a-w-	c:\windows\system32\wusa.exe
2014-06-14 19:17 . 2014-04-19 09:39	628024	----a-w-	c:\windows\system32\NotificationUI.exe
2014-06-14 19:15 . 2013-10-31 05:56	915968	----a-w-	c:\windows\system32\MPSSVC.dll
2014-06-14 19:15 . 2013-10-31 05:56	758784	----a-w-	c:\windows\system32\FirewallAPI.dll
2014-06-14 19:15 . 2013-10-31 04:01	550400	----a-w-	c:\windows\SysWow64\FirewallAPI.dll
2014-06-14 19:15 . 2013-10-31 03:42	74752	----a-w-	c:\windows\system32\drivers\mpsdrv.sys
2014-06-14 19:15 . 2013-10-13 20:49	100696	----a-w-	c:\windows\system32\drivers\disk.sys
2014-06-14 19:15 . 2013-08-27 05:21	227840	----a-w-	c:\windows\system32\WebClnt.dll
2014-06-14 19:15 . 2013-08-27 05:19	104448	----a-w-	c:\windows\system32\davclnt.dll
2014-06-14 19:15 . 2013-08-26 22:29	199168	----a-w-	c:\windows\SysWow64\WebClnt.dll
2014-06-14 19:15 . 2013-08-26 22:28	86016	----a-w-	c:\windows\SysWow64\davclnt.dll
2014-06-14 19:13 . 2014-03-01 09:47	1258496	----a-w-	c:\windows\system32\kernel32.dll
2014-06-14 19:13 . 2014-02-26 23:18	370688	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2014-06-14 19:13 . 2014-02-26 23:18	215040	----a-w-	c:\windows\system32\drivers\mrxsmb20.sys
2014-06-14 19:13 . 2014-03-01 09:47	1120768	----a-w-	c:\windows\system32\gpedit.dll
2014-06-14 19:13 . 2013-11-25 23:17	83968	----a-w-	c:\windows\system32\drivers\hidclass.sys
2014-06-14 19:13 . 2014-03-01 08:07	1075200	----a-w-	c:\windows\SysWow64\gpedit.dll
2014-06-14 19:13 . 2014-02-26 23:18	247808	----a-w-	c:\windows\system32\drivers\srvnet.sys
2014-06-14 19:13 . 2014-02-15 04:15	78336	----a-w-	c:\windows\system32\drivers\IPMIDrv.sys
2014-06-14 19:13 . 2013-06-29 03:08	32768	----a-w-	c:\windows\system32\drivers\hidparse.sys
2014-06-14 19:13 . 2013-05-04 04:48	27648	----a-w-	c:\windows\system32\drivers\hidusb.sys
2014-06-14 17:43 . 2013-10-01 23:37	1569280	----a-w-	c:\windows\SysWow64\crypt32.dll
2014-06-14 17:43 . 2013-10-01 23:26	1890816	----a-w-	c:\windows\system32\crypt32.dll
2014-06-14 17:42 . 2013-05-23 23:02	1314816	----a-w-	c:\windows\system32\rpcrt4.dll
2014-06-14 17:42 . 2013-05-23 22:25	694272	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2014-06-14 16:37 . 2014-05-03 06:34	6974808	----a-w-	c:\windows\system32\ntoskrnl.exe
2014-06-14 16:37 . 2014-05-03 06:33	1824808	----a-w-	c:\windows\system32\ntdll.dll
2014-06-14 16:37 . 2014-05-03 04:51	1408976	----a-w-	c:\windows\SysWow64\ntdll.dll
2014-06-14 16:37 . 2014-05-01 22:37	1023488	----a-w-	c:\windows\system32\localspl.dll
2014-06-14 16:37 . 2014-04-29 22:32	126464	----a-w-	c:\windows\system32\Robocopy.exe
2014-06-14 16:37 . 2014-04-29 22:32	106496	----a-w-	c:\windows\SysWow64\Robocopy.exe
2014-06-14 16:37 . 2014-04-23 23:51	566784	----a-w-	c:\windows\SysWow64\WSShared.dll
2014-06-14 16:37 . 2014-04-23 23:51	124928	----a-w-	c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-14 16:37 . 2014-04-23 23:38	693760	----a-w-	c:\windows\system32\WSShared.dll
2014-06-14 16:37 . 2014-02-08 04:34	71168	----a-w-	c:\windows\system32\drivers\hdaudbus.sys
2014-06-14 16:37 . 2014-01-31 00:48	143872	----a-w-	c:\windows\SysWow64\Windows.ApplicationModel.Store.dll
2014-06-14 16:37 . 2014-04-23 23:38	163840	----a-w-	c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-14 16:12 . 2014-06-14 16:18	--------	d-----w-	c:\windows\system32\MRT
2014-06-14 15:59 . 2014-02-08 04:34	4036608	----a-w-	c:\windows\system32\win32k.sys
2014-06-14 15:41 . 2014-06-12 12:49	61112	----a-w-	c:\windows\system32\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64.sys
2014-06-14 15:40 . 2014-06-14 15:40	--------	d-----w-	c:\programdata\Atheros
2014-06-14 15:30 . 2014-05-24 02:47	1084928	----a-w-	c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-06-14 15:30 . 2014-05-24 02:46	148992	----a-w-	c:\program files\Internet Explorer\jsdebuggeride.dll
2014-06-14 15:30 . 2014-05-24 02:46	19290112	----a-w-	c:\windows\system32\mshtml.dll
2014-06-14 15:30 . 2014-05-24 02:46	3958784	----a-w-	c:\windows\system32\jscript9.dll
2014-06-14 15:30 . 2014-05-24 02:46	2650112	----a-w-	c:\windows\system32\iertutil.dll
2014-06-14 15:30 . 2014-05-24 01:25	2862080	----a-w-	c:\windows\SysWow64\jscript9.dll
2014-06-14 15:30 . 2014-05-24 01:25	108032	----a-w-	c:\program files (x86)\Internet Explorer\jsdebuggeride.dll
2014-06-14 15:04 . 2014-06-14 15:07	--------	d-----w-	c:\program files\Common Files\QCA_Bluetooth
2014-06-14 15:03 . 2014-06-14 15:05	--------	d-----w-	c:\program files (x86)\Bluetooth Suite
2014-06-14 14:36 . 2014-06-14 15:40	--------	d-----w-	c:\program files (x86)\ScanTack
2014-06-14 14:35 . 2014-06-14 14:35	--------	d-----w-	c:\program files (x86)\predm
2014-06-14 14:31 . 2014-04-29 22:32	1301504	----a-w-	c:\windows\system32\gdi32.dll
2014-06-14 14:31 . 2014-04-29 22:22	1023488	----a-w-	c:\windows\SysWow64\gdi32.dll
2014-06-14 13:40 . 2013-04-23 22:56	1255936	----a-w-	c:\windows\system32\certutil.exe
2014-06-14 13:40 . 2013-04-23 23:13	1013248	----a-w-	c:\windows\SysWow64\certutil.exe
2014-06-14 13:40 . 2013-04-23 23:12	109056	----a-w-	c:\windows\SysWow64\cryptnet.dll
2014-06-14 13:40 . 2013-04-23 22:55	141312	----a-w-	c:\windows\system32\cryptnet.dll
2014-06-14 13:02 . 2014-06-14 13:02	--------	d-----w-	c:\program files (x86)\SchoenerFernsehen
2014-06-14 13:02 . 2014-04-25 12:49	20312	----a-w-	c:\windows\system32\roboot64.exe
2014-06-14 13:01 . 2014-06-14 13:01	50784	----a-w-	c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2014-06-14 13:01 . 2014-06-14 13:01	17536	----a-w-	c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-06-14 12:24 . 2013-03-02 08:23	375808	----a-w-	c:\windows\SysWow64\ReAgent.dll
2014-06-14 12:24 . 2013-03-02 02:44	1011200	----a-w-	c:\windows\system32\reseteng.dll
2014-06-14 12:24 . 2013-05-26 23:17	35328	----a-w-	c:\windows\SysWow64\atmlib.dll
2014-06-14 12:24 . 2013-05-26 22:59	46080	----a-w-	c:\windows\system32\atmlib.dll
2014-06-14 12:24 . 2013-05-25 03:15	362496	----a-w-	c:\windows\system32\atmfd.dll
2014-06-14 12:24 . 2013-05-25 02:32	300032	----a-w-	c:\windows\SysWow64\atmfd.dll
2014-06-14 12:11 . 2013-07-01 01:42	79192	----a-w-	c:\windows\system32\drivers\usbehci.sys
2014-06-14 12:11 . 2013-07-01 01:42	623448	----a-w-	c:\windows\system32\drivers\usbhub.sys
2014-06-14 12:11 . 2013-07-01 01:42	498008	----a-w-	c:\windows\system32\drivers\usbport.sys
2014-06-14 12:11 . 2013-07-01 01:42	21848	----a-w-	c:\windows\system32\drivers\usbd.sys
2014-06-14 12:11 . 2013-06-29 03:07	32256	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2014-06-14 12:11 . 2013-06-29 03:06	120832	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2014-06-14 12:07 . 2014-06-14 12:07	--------	d-----w-	c:\program files (x86)\Microsoft Silverlight
2014-06-13 20:17 . 2013-02-02 05:41	1437184	----a-w-	c:\windows\SysWow64\GdiPlus.dll
2014-06-13 20:17 . 2013-02-02 05:31	1690624	----a-w-	c:\windows\system32\GdiPlus.dll
2014-06-13 20:17 . 2013-04-11 22:30	1421312	----a-w-	c:\windows\SysWow64\DWrite.dll
2014-06-13 20:17 . 2013-04-11 22:22	1838080	----a-w-	c:\windows\system32\DWrite.dll
2014-06-13 20:06 . 2013-03-06 07:10	112872	----a-w-	c:\windows\system32\consent.exe
2014-06-13 20:06 . 2013-03-06 06:29	70144	----a-w-	c:\windows\system32\appinfo.dll
2014-06-13 20:04 . 2013-05-15 02:25	888320	----a-w-	c:\windows\system32\autochk.exe
2014-06-13 20:04 . 2013-05-15 02:25	542208	----a-w-	c:\windows\system32\untfs.dll
2014-06-13 20:04 . 2013-05-15 02:24	793088	----a-w-	c:\windows\SysWow64\autochk.exe
2014-06-13 20:04 . 2013-05-15 02:24	482816	----a-w-	c:\windows\SysWow64\untfs.dll
2014-06-13 20:04 . 2013-12-04 23:43	583680	----a-w-	c:\windows\system32\msdrm.dll
2014-06-13 20:04 . 2013-12-04 23:37	451072	----a-w-	c:\windows\SysWow64\msdrm.dll
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-13 13:56 . 2012-07-26 08:13	23264	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-05-31 05:16 . 2013-05-16 06:25	703992	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-05-31 05:16 . 2013-05-16 06:25	105464	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-04-25 15:17 . 2014-04-25 15:17	82888	----a-w-	c:\windows\SysWow64\mfcm110.dll
2014-04-25 15:17 . 2014-04-25 15:17	82888	----a-w-	c:\windows\SysWow64\mfcm110u.dll
2014-04-25 15:17 . 2014-04-25 15:17	4446152	----a-w-	c:\windows\SysWow64\mfc110u.dll
2014-04-25 15:17 . 2014-04-25 15:17	4411848	----a-w-	c:\windows\SysWow64\mfc110.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{d332cff8-358e-4c9e-8af3-a08872ef22c1}]
2014-06-14 14:11	249632	----a-w-	c:\program files (x86)\ScanTack\BE26E637-FAB9-405F-9542-D1136AF8C4DC.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-06-13 12:56	220632	----a-w-	c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-06-13 12:56	220632	----a-w-	c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-06-13 12:56	220632	----a-w-	c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay]
@="{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}"
[HKEY_CLASSES_ROOT\CLSID\{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}]
2012-08-06 03:41	158224	----a-w-	c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-08-06 03:41	158224	----a-w-	c:\windows\SysWOW64\CbFsMntNtf3.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"pgcchelper"="c:\users\Preciosa\AppData\Local\pgcchelper\pgcchelper.exe" [2013-08-21 465920]
"Quick Starter"="c:\program files (x86)\Samsung\Quick Starter\Quick Starter.exe" [2014-04-29 2358064]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2014-05-28 1563440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-08-15 97392]
"CLMLServer_For_P2G8"="c:\program files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" [2012-06-08 111120]
"CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2012-07-12 491120]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-04-04 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2014-05-28 310064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"DisableCAD"= 1 (0x1)
.
R2 SWUpdateService;SW Update Service;c:\programdata\Samsung\SW Update Service\SWMAgent.exe;c:\programdata\Samsung\SW Update Service\SWMAgent.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 {9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64;{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64;c:\windows\system32\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64.sys;c:\windows\SYSNATIVE\drivers\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}Gw64.sys [x]
S1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys;c:\windows\SYSNATIVE\drivers\cbfs3.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 Easy Launcher;Easy Launcher;c:\program files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe;c:\program files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [x]
S2 ETDService;Elan Service;c:\program files\Elantech\ETDService.exe;c:\program files\Elantech\ETDService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 OfficeSvc;Microsoft Office-Dienst;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Update ScanTack;Update ScanTack;c:\program files (x86)\ScanTack\updateScanTack.exe;c:\program files (x86)\ScanTack\updateScanTack.exe [x]
S2 Util ScanTack;Util ScanTack;c:\program files (x86)\ScanTack\bin\utilScanTack.exe;c:\program files (x86)\ScanTack\bin\utilScanTack.exe [x]
S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\System32\drivers\btath_bus.sys;c:\windows\SYSNATIVE\drivers\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\System32\drivers\btath_hcrp.sys;c:\windows\SYSNATIVE\drivers\btath_hcrp.sys [x]
S3 BTATH_HID;Bluetooth HID Device;c:\windows\system32\DRIVERS\btath_hid.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hid.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\System32\drivers\btath_rcp.sys;c:\windows\SYSNATIVE\drivers\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
S3 ETD;Samsung PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RadioHIDMini;Radio HID Mini-driver;c:\windows\System32\drivers\RadioHIDMini.sys;c:\windows\SYSNATIVE\drivers\RadioHIDMini.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-13 13:05	1091912	----a-w-	c:\program files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-13 12:54]
.
2014-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-13 12:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-06-13 12:56	244696	----a-w-	c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-06-13 12:56	244696	----a-w-	c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-06-13 12:56	244696	----a-w-	c:\users\Preciosa\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-06-13 12:48	2324576	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-06-13 12:48	2324576	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-06-13 12:48	2324576	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay]
@="{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}"
[HKEY_CLASSES_ROOT\CLSID\{01271CDF-E110-4F3A-AFA6-5A9EA8B176C2}]
2012-08-06 03:42	190480	----a-w-	c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BitcasaIconOverlay]
@="{A6975448-A999-49BB-B3E4-7730CF6A82C0}"
[HKEY_CLASSES_ROOT\CLSID\{A6975448-A999-49BB-B3E4-7730CF6A82C0}]
2012-12-27 07:58	570880	----a-w-	c:\program files\Bitcasa\ExplorerMenu.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BitcasaProgressOverlay]
@="{6FB8D52A-0064-45B2-B687-F596FEAD09C2}"
[HKEY_CLASSES_ROOT\CLSID\{6FB8D52A-0064-45B2-B687-F596FEAD09C2}]
2012-12-27 07:58	570880	----a-w-	c:\program files\Bitcasa\ExplorerMenu.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-08-06 03:42	190480	----a-w-	c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-12-12 13263072]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2013-01-04 1260256]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
"Bitcasa"="c:\program files\Bitcasa\Bitcasa.exe" [2012-12-27 4365824]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-03-17 172016]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-03-17 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-03-17 442352]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.at/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 5.175.194.40 8.8.8.8
TCP: Interfaces\{B33A6BFF-C613-4F0B-AC85-3816CCF1C98A}: NameServer = 8.8.8.8,8.8.4.4
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-fst_it_141 - (no file)
Wow6432Node-HKLM-Run-t4pc_en_5 - (no file)
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2014-06-15  13:25:37
ComboFix-quarantined-files.txt  2014-06-15 11:25
.
Vor Suchlauf: 12 Verzeichnis(se), 400*240*533*504 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 400*389*210*112 Bytes frei
.
- - End Of File - - 5160B6BE57FF46A26D34D4E8FEE746E0
5FB38429D5D77768867C76DCBDB35194

Alt 16.06.2014, 07:33   #8
schrauber
/// the machine
/// TB-Ausbilder
 
Suspicious.cloud.9 verhindert https-Seiten - Standard

Suspicious.cloud.9 verhindert https-Seiten


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Suspicious.cloud.9 verhindert https-Seiten
account, angeblich, angemeldet, avira, beseitigen, browser, explorer, firefox, google, google account, heute, https, internet, internet explorer, laptop, logfiles, mozilla, neu, nicht mehr, nichts, norton, opera, probleme, smartphone, suspicious.cloud.9, trojaner, verhindert, virus, windows


« Trojaner mitb entfernen - Sparkassen Info | Win 8: Probleme mit dem Online Banking »


Ähnliche Themen: Suspicious.cloud.9 verhindert https-Seiten


  1. "Suspicious.Cloud.9" (Trojaner) und "SAPE.DnwldSponsor.2" (Virus?, vielleicht False Positive)
    Plagegeister aller Art und deren Bekämpfung - 22.08.2015 (23)
  2. HTTPS: Darstellungs- und Ajax-Probleme bei HTTPS-Seiten - Chrome und Firefox
    Plagegeister aller Art und deren Bekämpfung - 16.08.2015 (11)
  3. Suspicious.Cloud.9
    Plagegeister aller Art und deren Bekämpfung - 16.01.2015 (7)
  4. suspicious.cloud.7 und suspicious.cloud.9 - ist es riskant, eine einzelne Datei (Excel) auf ein sauberes System zu kopieren?
    Plagegeister aller Art und deren Bekämpfung - 23.08.2014 (3)
  5. Maleware Suspicious.cloud ? Ist mein Rechner befallen?
    Log-Analyse und Auswertung - 24.05.2014 (15)
  6. Trojan.ADH.2 und Suspicious.Cloud.9
    Plagegeister aller Art und deren Bekämpfung - 19.02.2014 (9)
  7. Infizierte Registrierungsschlüssel sowie suspicious.cloud.9.
    Plagegeister aller Art und deren Bekämpfung - 24.12.2013 (9)
  8. Windows 7: Norton meldet Fund von Suspicious.Cloud.5
    Plagegeister aller Art und deren Bekämpfung - 08.12.2013 (9)
  9. Suspicious.Cloud.7.EP von Norton gefunden
    Plagegeister aller Art und deren Bekämpfung - 16.10.2013 (13)
  10. Probleme mit HTTPS seiten
    Log-Analyse und Auswertung - 04.09.2013 (3)
  11. Suspicious.Cloud.2 - bit8ae0.temp - Norton hat einen Virus gefunden!
    Plagegeister aller Art und deren Bekämpfung - 07.08.2013 (6)
  12. Suspicious.cloud.5 (groupon virus)
    Log-Analyse und Auswertung - 11.03.2013 (3)
  13. cloud behaviour .suspicious@1
    Plagegeister aller Art und deren Bekämpfung - 12.07.2012 (24)
  14. 50€-Trojaner "Suspicious.Cloud.7.EP"
    Plagegeister aller Art und deren Bekämpfung - 11.04.2012 (25)
  15. Windows gesperrt suspicious cloud 50€ zahlen
    Plagegeister aller Art und deren Bekämpfung - 05.04.2012 (5)
  16. Suspicious.Cloud.7.EP
    Plagegeister aller Art und deren Bekämpfung - 02.04.2012 (53)
  17. https-Seiten und die verschiedenen Internetbrowser
    Überwachung, Datenschutz und Spam - 12.02.2011 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Suspicious.cloud.9 verhindert https-Seiten - Liebe Community, ich habe mich soeben hier angemeldet, da ich diesmal nicht mehr alleine zurecht komme. Bisher habe ich es immer durch das Lesen hier geschafft, Probleme und auch Trojaner - Suspicious.cloud.9 verhindert https-Seiten...
Archiv
Du betrachtest: Suspicious.cloud.9 verhindert https-Seiten auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132