| |
| |||||||
Log-Analyse und Auswertung: Sparkasse Online Banking gesperrt wegen TroyanerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
18.09.2014, 16:24
| #1 |
 |  Sparkasse Online Banking gesperrt wegen Troyaner Hallo Zusammen, ich habe in meinem Stress eine Email geöffnet, die als Rechnung getarnt war. Da es sich um eine Zip Datei handelte, habe ich sofort alles beendet es war wohl schon zu spät Kurze Zeit später war mein bankkonto auch schon gesperrt. ich habe Norton Security und habe einen komplett Scan laufen lassen. Er hat auch einiges gereinigt, war mir aber nicht so sicher.... habe Adwcleaner laufen lassen. Log hier : Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014 Ran by Ilka_sa at 2014-09-18 17:16:39 Running from C:\Users\Ilka_sa\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.7.700.224 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) aioscnnr (x32 Version: 5.7.5.30 - Your Company Name) Hidden aioscnnr (x32 Version: 7.6.11.10 - Your Company Name) Hidden AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{46DA7FD9-8BC1-7BA8-98D1-27F46647871B}) (Version: 8.0.891.0 - Advanced Micro Devices, Inc.) Amyuni PDF Converter (HKLM-x32\...\Amyuni PDF Converter) (Version: - ) Architekt 3D X7 Professional (HKLM-x32\...\{A552CCF8-51D3-49D9-AD30-A939626F2299}) (Version: 17.0.0 - Avanquest Software) Ask Toolbar (HKLM-x32\...\{4F524A2D-5637-4300-76A7-A758B70C1002}) (Version: 12.16.2.57 - APN, LLC) <==== ATTENTION ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.2.0.1 - ASUSTek COMPUTER INC.) ASUS GPU Tweak (x32 Version: 2.2.0.1 - ASUSTek COMPUTER INC.) Hidden ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0023 - ASUS) AuthenTec TrueSuite (HKLM\...\{399C855A-6384-4C5D-A2C4-8C55B2C36E33}) (Version: 2.0.0.45 - AuthenTec, Inc.) AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.) Canon iP7200 series Benutzerregistrierung (HKLM-x32\...\Canon iP7200 series Benutzerregistrierung) (Version: - Canon Inc.) Canon iP7200 series On-screen Manual (HKLM-x32\...\Canon iP7200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon iP7200 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP7200_series) (Version: - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.) center (x32 Version: 6.2.5.0 - Eastman Kodak Company) Hidden Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills) ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS) Creative Pack Volume 1 (HKLM-x32\...\{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}) (Version: 3.0.1 - Corel Corporation) Crystal Reports for .NET Framework 2.0 (x86) (HKLM-x32\...\{7C05EEDD-E565-4E2B-ADE4-0C784C17311C}) (Version: 10.2.0 - Business Objects) Crystal Reports für .NET Framework 2.0 Language Pack (x86) - DEU (HKLM-x32\...\{AC94622D-D899-44DF-9857-7DD31958C541}) (Version: 10.2.0 - Business Objects) Dazzle Video Capture DVC100 X64 Driver 1.06 (HKLM-x32\...\{BFF23267-1D19-444E-93E2-E5059BE805EA}) (Version: 1.06.0000 - Pinnacle) DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC) DriverTuner 3.1.0.0 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.0 - LionSea SoftWare) Dual Smart Solution (HKLM-x32\...\{E61F7C73-277C-44CE-87C4-B574BF0F3803}) (Version: 2.5 - LG Soft India Pvt Ltd) essentials (x32 Version: 6.0.14.0 - Eastman Kodak Company) Hidden Firebird 2.1.5.18496 (Win32) (HKLM-x32\...\FBDBServer_2_1_is1) (Version: 2.1.5.18496 - Firebird Project) FlowFact (HKLM-x32\...\FlowFact) (Version: 18.0.463 - FlowFact AG Köln) FlowFact MobileSync Service (HKLM-x32\...\{A438428D-5DCC-4652-86A3-12E6558F2C0B}) (Version: 2.55 - FlowFact) Fritz8 (HKLM-x32\...\{08741CAB-494B-483F-9E24-D4D9FF0AA6AD}) (Version: 1 - ) GDR 5057 for SQL Server Database Services 2005 ENU (KB2494120) (HKLM-x32\...\KB2494120_SQL9) (Version: 9.4.5057 - Microsoft Corporation) GDR 5057 for SQL Server Integration Services 2005 ENU (KB2494120) (HKLM-x32\...\KB2494120_DTS9) (Version: 9.4.5057 - Microsoft Corporation) GDR 5057 for SQL Server Tools and Workstation Components 2005 ENU (KB2494120) (HKLM-x32\...\KB2494120_SQLTools9) (Version: 9.4.5057 - Microsoft Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Gourmania (HKLM-x32\...\Gourmania) (Version: - ) Haufe Formular-Manager (HKLM-x32\...\{9353F6E9-13B7-43B4-8FA5-CB46CA22671B}) (Version: 2.1.8.0 - Haufe) Haufe iDesk-Browser (HKLM-x32\...\{86A6555F-BE9C-4A40-B9FC-D4E00CE94F8E}) (Version: 7.04.05.3872 - Haufe) Haufe iDesk-Service (HKLM-x32\...\{6EDF5D40-6287-4042-BCEC-DD0171BDF8AE}) (Version: 7.05.22.3919 - Haufe) Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills) Hollywood FX Volumes 1-3 (HKLM-x32\...\{E3D181F8-246B-497F-945E-6DB98CBA6677}) (Version: 2.0.1 - Corel Corporation) Hotfix für Microsoft Visual Studio 2005 Premier Partner Edition - DEU (KB2938803) (HKLM-x32\...\KB2938803.T369_127ToU880_127) (Version: 1 - Microsoft Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation) Java 2 Runtime Environment, SE v1.4.2_13 (HKLM-x32\...\{7148F0A8-6813-11D6-A77B-00B0D0142130}) (Version: 1.4.2_13 - Sun Microsystems, Inc.) Java 7 Update 10 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417010FF}) (Version: 7.0.100 - Oracle) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle) Kodak AIO Printer (Version: 7.0.3.0 - Eastman Kodak Company) Hidden KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.6.12.20 - Eastman Kodak Company) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (HKLM-x32\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Standard 2007 (HKLM-x32\...\STANDARDR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation) Microsoft SQL Server 2005 (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Integration Services (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Microsoft SQL Server 2005-Abwärtskompatibilität (HKLM\...\{5C1551CE-CEE3-4FD7-8819-0D29CD375BCE}) (Version: 8.05.2312 - Microsoft Corporation) Microsoft SQL Server 2005-Onlinedokumentation (Deutsch) (HKLM-x32\...\{20FE5512-F318-4232-9001-468840009F2F}) (Version: 9.00.1399.06 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{DD43EEEC-E68A-440B-9027-6A0D344B612B}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{7C39E0D1-E138-42B1-B083-213EC2CF7692}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{D434E072-F482-4F52-AB97-7B19DD5DAEB5}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{1FBEA8BA-D40B-48BC-85BC-EE2D5575F27C}) (Version: 9.00.5000.00 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2005 Premier Partner Edition - DEU (HKLM-x32\...\{8ACBD00C-9999-49E5-8E46-95EB392BC81B}) (Version: 8.0.50728 - Microsoft Corporation) Microsoft Visual Studio 2005 Premier Partner Edition - DEU Service Pack 1 (KB926606) (HKLM-x32\...\KB926606.T2_127ToU265_127) (Version: 1 - Microsoft Corporation) Miet- und Wohnungseigentumsrecht (HKLM-x32\...\{4F0F14FC-3240-4C11-87A8-67421135F1C9}) (Version: 1.1.0.0 - Haufe) Mozilla Firefox 32.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.1 (x86 de)) (Version: 32.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - ) Mystery Cookbook (HKLM-x32\...\Mystery Cookbook) (Version: - ) Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2) Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon) Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.6.0 - Nikon) Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.5.0.19 - Symantec Corporation) NVIDIA Grafiktreiber 306.68 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.68 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 306.68 (Version: 306.68 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden OfficeReady Software for KODAK ESP Office All-in-One Printers (HKLM-x32\...\{420C7754-7758-49F5-807A-A3F9F2790704}) (Version: 1.00.000 - TemplateZone) OfficeReadyToolBarSetup (HKLM-x32\...\{50DECEE8-63A6-4EE0-8EDD-655A01B16D28}) (Version: 1.0.0 - KMT Software, Inc.) Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.7 - Nikon) Pinnacle Studio 17 - Install Manager (HKLM-x32\...\{F04D92CC-5C3A-46FA-9C98-6EACBDD262FF}) (Version: 17.0.127 - Corel Corporation) Pinnacle Studio 17 - Standard Content Pack (HKLM-x32\...\{BA98BFA8-5EDF-450B-A92E-C096DC135D0E}) (Version: 17.0 - Corel Corporation) Pinnacle Studio 17 (HKLM-x32\...\{3DA8F808-72E2-4361-82EC-433081D23005}) (Version: 17.5.0.327 - Corel Corporation) PirateVille (HKLM-x32\...\PirateVille) (Version: - ) Premium Pack Volumes 1-2 (HKLM-x32\...\{88C4D8A6-9954-46A0-965D-92E55DAB8734}) (Version: 2.0.1 - Corel Corporation) PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Ihr Firmenname) Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30087 - Realtek Semiconductor Corp.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.) ScoreFitter Volumes 1-2 (HKLM-x32\...\{0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C}) (Version: 2.0.1 - Corel Corporation) Scrabble3D (HKLM-x32\...\{008A8360-961D-4599-BB45-092FF937C06F}) (Version: 3.1.1.1 - Heiko Tietze) Security Update für Microsoft Visual Studio 2005 Premier Partner Edition - DEU (KB2251481) (HKLM-x32\...\KB2251481.T369_127ToU865_127) (Version: 3 - Microsoft Corporation) Service Pack 4 für SQL Server 2005-Datenbankdienste DEU (KB2463332) (HKLM-x32\...\KB2463332_SQL9) (Version: 9.4.5000 - Microsoft Corporation) Service Pack 4 für SQL Server Integration Services 2005 DEU (KB2463332) (HKLM-x32\...\KB2463332_DTS9) (Version: 9.4.5000 - Microsoft Corporation) Service Pack 4 für Tools und Arbeitsstationskomponenten für SQL Server 2005 DEU (KB2463332) (HKLM-x32\...\KB2463332_SQLTools9) (Version: 9.4.5000 - Microsoft Corporation) Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM-x32\...\{09959E11-AD5D-408E-96AF-E3346954D6B8}) (Version: 1.0.0 - Microsoft) Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM-x32\...\{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}) (Version: 1.0.0 - Microsoft) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.) SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden SmartSound Sonicfire Pro 5.8 (HKLM-x32\...\InstallShield_{E5184D41-7796-4127-BBE4-46993F9FAAF3}) (Version: 5.8.0 - SmartSound Software Inc.) SmartSound Sonicfire Pro 5.8 (x32 Version: 5.8.0 - SmartSound Software Inc.) Hidden Software-Edition 2. 2012 - DEMO-INSTALLATION (HKLM-x32\...\{4543C6FA-89E7-4F1E-89A2-32F3FFEBB47E}) (Version: 29.0 - Sprengnetter GmbH) Software-Edition 2. 2012 - DEMO-INSTALLATION (x32 Version: 29.0 - Sprengnetter GmbH) Hidden Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) Sprill Bermuda (HKLM-x32\...\Sprill Bermuda) (Version: - ) SQLXML4 (HKLM\...\{BFBF33B5-AEFE-454B-A189-DF5013028535}) (Version: 9.00.5000.00 - Microsoft Corporation) Sweet Home 3D version 4.3 (HKLM\...\Sweet Home 3D_is1) (Version: - eTeks) Title Extreme (HKLM-x32\...\{F7214014-27EE-4237-9978-2F9D1551559B}) (Version: 2.0.1 - Corel Corporation) Tools für Microsoft SQL Server 2005 (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_STANDARDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_STANDARDR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2889914) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{F3F83933-75FC-4B60-84F2-3F8FA63D042E}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_STANDARDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_STANDARDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_STANDARDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_STANDARDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Update für Microsoft Visual Studio 2005 Premier Partner Edition - DEU (KB932234) (HKLM-x32\...\KB932234.T369_127ToU411_127) (Version: 1 - Microsoft Corporation) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.6.0 - Nikon) XANIA Browser (HKLM-x32\...\{5F83E18D-9330-11D6-9710-0050BF0F5249}) (Version: 33 - ) XMedia Recode Version 3.1.4.9 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.4.9 - XMedia Recode) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 07-09-2014 20:02:45 Windows-Sicherung 11-09-2014 04:42:36 Windows Update 14-09-2014 21:18:06 Windows-Sicherung ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1DFEEE41-8BEC-4B5A-A1D6-8D1D566EAC80} - System32\Tasks\{8D68E16F-FC00-43FA-BBCA-BFB1DA642499} => C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\devenv.exe [2007-02-14] (Microsoft Corporation) Task: {2BF46644-9499-49FD-B2AB-E40775933658} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\WSCStub.exe [2014-07-31] (Symantec Corporation) Task: {597A3E79-80E7-490A-A851-748E0ABA5299} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-23] (Google Inc.) Task: {5F0E5627-F629-477B-8484-C1AA9E4A2923} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-09-14] (ASUSTek Computer Inc.) Task: {9B8A2DA1-EFBA-49D4-9A3F-1F2BF222E126} - System32\Tasks\{7BF207B7-C82F-4404-8BF8-5A5BCC751E15} => C:\Program Files (x86)\FlowFact\FlowFact.exe [2013-10-31] (FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de) Task: {A01E63E8-7636-4DBA-BFB0-C2A9F8D673C0} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {BEA1C089-4975-4B93-8A42-B0B85A817AC3} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {DE3D19B0-8CAE-46EE-996C-5317116F5D4F} - System32\Tasks\{4A7226A2-21E9-4A20-A967-BBB7A808F22C} => C:\Program Files (x86)\FlowFact\FlowFact.exe [2013-10-31] (FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de) Task: {E40A956E-7FAE-4B7C-AEC0-CE0A96210D1D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {E493A32F-8933-499F-9192-03C07B77164C} - System32\Tasks\{072208EE-0D1D-4D17-9C06-3F201D955301} => C:\Program Files (x86)\FlowFact\FlowFact.exe [2013-10-31] (FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de) Task: {F27B87E6-21C3-48A0-8ED0-9BB88063BB71} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-23] (Google Inc.) Task: {FECF6753-FD0E-43CD-A43E-7339D5DB6634} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] () Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-12-23 20:18 - 2012-09-17 23:23 - 00086888 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-01-17 12:24 - 2012-01-17 12:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe 2007-05-22 04:08 - 2007-05-22 04:08 - 00071472 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe 2014-09-16 14:56 - 2012-03-28 14:49 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2007-05-22 04:02 - 2007-05-22 04:02 - 00010528 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskpython.exe 2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe 2007-05-22 04:08 - 2007-05-22 04:08 - 00104240 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\pywintypes24.dll 2007-05-22 04:02 - 2007-05-22 04:02 - 00071456 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\zlib.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00032560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32process.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00019752 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32event.pyd 2007-05-22 04:02 - 2007-05-22 04:02 - 00055072 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\_socket.pyd 2007-05-22 04:02 - 2007-05-22 04:02 - 00017696 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\_ssl.pyd 2007-05-22 03:57 - 2007-05-22 03:57 - 00833320 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\LIBEAY32.dll 2007-05-22 03:57 - 2007-05-22 03:57 - 00161576 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\SSLEAY32.dll 2007-05-22 04:08 - 2007-05-22 04:08 - 00075560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32api.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00019752 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32evtlog.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00030000 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\servicemanager.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00083752 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32file.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00021800 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32pipe.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00108336 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32security.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00038192 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32service.pyd 2007-05-22 04:02 - 2007-05-22 04:02 - 00141088 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\pyexpat.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00021808 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.cPersistence.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00014632 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.TimeStamp.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00021296 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.cPickleCache.pyd 2007-05-22 04:02 - 2007-05-22 04:02 - 00014112 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\select.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00021296 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\ExtensionClass._ExtensionClass.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00027440 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\AccessControl.cAccessControl.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00026928 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Acquisition._Acquisition.pyd 2007-05-22 04:19 - 2007-05-22 04:19 - 00013600 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Record._Record.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00020792 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\DocumentTemplate.cDocumentTemplate.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00059176 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._OOBTree.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._OIBTree.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._IOBTree.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._IIBTree.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00011064 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\ComputedAttribute._ComputedAttribute.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00011568 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Persistence._Persistence.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00010544 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\MethodObject._MethodObject.pyd 2007-05-22 04:19 - 2007-05-22 04:19 - 00010528 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\ZODB.winlock.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00011560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Missing._Missing.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00012080 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\MultiMapping._MultiMapping.pyd 2007-05-22 04:19 - 2007-05-22 04:19 - 00010528 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Products.ZCTextIndex.stopper.pyd 2007-05-22 04:19 - 2007-05-22 04:19 - 00010536 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Products.ZCTextIndex.okascore.pyd 2007-05-22 04:10 - 2007-05-22 04:10 - 00337696 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\_jpype.pyd 2006-12-06 10:08 - 2006-12-06 10:08 - 00548864 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\OSR32V8.dll 2007-05-22 04:19 - 2007-05-22 04:19 - 00013608 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\normalizer.pyd 2007-05-22 04:19 - 2007-05-22 04:19 - 00013104 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\indexsupport.pyd 2007-05-22 04:04 - 2007-05-22 04:04 - 00272168 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\M2Crypto\__m2crypto.pyd 2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._fsBTree.pyd 2007-05-22 04:08 - 2007-05-22 04:08 - 00024872 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32wnet.pyd 2007-05-22 04:09 - 2007-05-22 04:09 - 00091944 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\psycopg2\_psycopg.pyd 2007-02-26 12:55 - 2007-02-26 12:55 - 00094208 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\LIBPQ.dll 2007-05-22 04:19 - 2007-05-22 04:19 - 00018224 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\TXNGSplitter.pyd 2007-05-22 04:19 - 2007-05-22 04:19 - 00075560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\Levenshtein.pyd 2014-05-10 05:19 - 2014-09-14 12:40 - 03716720 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: USB2.0-CRW Description: USB2.0-CRW Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Virtual Bluetooth Support (Include Audio) Description: Virtual Bluetooth Support (Include Audio) Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5} Manufacturer: Qualcomm Atheros Communications Service: AthBTPort Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Wireless 11g USB 2.0 Stick #4 Description: Wireless 11g USB 2.0 Stick Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: 802.11 Wireless Service: rt70x64 Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: SM-Bus-Controller Description: SM-Bus-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Bluetooth Audio Device Description: Bluetooth Audio Device Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Qualcomm Atheros Communications Service: BTATH_A2DP Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Bluetooth LWFLT Device Description: Bluetooth LWFLT Device Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5} Manufacturer: Qualcomm Atheros Communications Service: BTATH_LWFLT Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (09/18/2014 05:10:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Ausnahmecode: 0xc0000094 Fehleroffset: 0x00021372 ID des fehlerhaften Prozesses: 0x814 Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0 Pfad der fehlerhaften Anwendung: GPUTweak.exe1 Pfad des fehlerhaften Moduls: GPUTweak.exe2 Berichtskennung: GPUTweak.exe3 Error: (09/18/2014 05:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2014 04:30:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Ausnahmecode: 0xc0000094 Fehleroffset: 0x00021372 ID des fehlerhaften Prozesses: 0x764 Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0 Pfad der fehlerhaften Anwendung: GPUTweak.exe1 Pfad des fehlerhaften Moduls: GPUTweak.exe2 Berichtskennung: GPUTweak.exe3 Error: (09/18/2014 04:30:15 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/18/2014 11:09:56 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Ausnahmecode: 0xc0000094 Fehleroffset: 0x00021372 ID des fehlerhaften Prozesses: 0x33c Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0 Pfad der fehlerhaften Anwendung: GPUTweak.exe1 Pfad des fehlerhaften Moduls: GPUTweak.exe2 Berichtskennung: GPUTweak.exe3 Error: (09/18/2014 11:09:39 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/17/2014 11:34:35 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Ausnahmecode: 0xc0000094 Fehleroffset: 0x00021372 ID des fehlerhaften Prozesses: 0x7d0 Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0 Pfad der fehlerhaften Anwendung: GPUTweak.exe1 Pfad des fehlerhaften Moduls: GPUTweak.exe2 Berichtskennung: GPUTweak.exe3 Error: (09/17/2014 11:34:12 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/17/2014 10:07:50 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: NIS.exe, Version: 12.11.2.9, Zeitstempel: 0x5355938e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000374 Fehleroffset: 0x000ce753 ID des fehlerhaften Prozesses: 0xb6c Startzeit der fehlerhaften Anwendung: 0xNIS.exe0 Pfad der fehlerhaften Anwendung: NIS.exe1 Pfad des fehlerhaften Moduls: NIS.exe2 Berichtskennung: NIS.exe3 Error: (09/16/2014 05:53:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a Ausnahmecode: 0xc0000094 Fehleroffset: 0x00021372 ID des fehlerhaften Prozesses: 0xbb8 Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0 Pfad der fehlerhaften Anwendung: GPUTweak.exe1 Pfad des fehlerhaften Moduls: GPUTweak.exe2 Berichtskennung: GPUTweak.exe3 System errors: ============= Error: (09/18/2014 05:09:50 PM) (Source: SNMP) (EventID: 1500) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (09/18/2014 05:04:42 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (09/18/2014 05:01:58 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (09/18/2014 04:33:42 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (09/18/2014 04:31:36 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (09/18/2014 04:30:24 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Error: (09/18/2014 04:30:00 PM) (Source: SNMP) (EventID: 1500) (User: ) Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten. Error: (09/18/2014 04:29:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (09/18/2014 04:29:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht. Error: (09/18/2014 04:27:16 PM) (Source: ipnathlp) (EventID: 31004) (User: ) Description: 0 Microsoft Office Sessions: ========================= Error: (09/10/2014 04:32:19 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 60 seconds with 0 seconds of active time. This session ended with a crash. Error: (08/24/2014 01:32:41 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 429201 seconds with 3540 seconds of active time. This session ended with a crash. Error: (08/15/2014 05:37:06 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 163147 seconds with 0 seconds of active time. This session ended with a crash. Error: (06/13/2014 05:54:29 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 562350 seconds with 1140 seconds of active time. This session ended with a crash. Error: (05/23/2014 11:16:51 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 589391 seconds with 540 seconds of active time. This session ended with a crash. Error: (05/23/2014 11:15:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 338130 seconds with 60 seconds of active time. This session ended with a crash. Error: (07/11/2013 02:50:14 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 778168 seconds with 2460 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz Percentage of memory in use: 34% Total physical RAM: 8069.54 MB Available physical RAM: 5253.02 MB Total Pagefile: 28240.26 MB Available Pagefile: 25556.27 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:146.26 GB) (Free:11.89 GB) NTFS Drive d: () (Fixed) (Total:585.94 GB) (Free:56.34 GB) NTFS Drive e: (CANON_IJ) (CDROM) (Total:0.49 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: AC448E83) Partition: GPT Partition Type. ==================== End Of Log ============================ Danach habe ich FRST laufen lassen Log hier: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014 Ran by Ilka_sa (administrator) on IMBIMMOBILIEN on 18-09-2014 17:15:24 Running from C:\Users\Ilka_sa\Desktop Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe () C:\Windows\SysWOW64\ASGT.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Windows\System32\CISVC.EXE (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe () C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskservice.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe () C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskpython.exe (Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\nis.exe (Microsoft Corporation) C:\Windows\System32\snmp.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\nis.exe () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\cltlmh.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [] => [X] HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764032 2012-08-10] (Qualcomm Atheros) HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-08-10] (Atheros Communications) HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2045440 2010-09-02] (Eastman Kodak Company) HKLM\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [IMPALARM] => [X] HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064 2012-09-14] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [178848 2012-07-17] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe HKLM-x32\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.EXE HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [20131121] => C:\Program Files\AVAST Software\Avast\setup\emupdate\804612b0-0e3d-4c73-bfff-f746951c079e.exe /check HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.) HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin) HKLM-x32\...\Run: [srvlvideo] => C:\Program Files (x86)\Windows NT\srvlvideo.lnk [682 2014-09-18] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2589184 2012-08-09] (ASUS) HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-23] (Google Inc.) HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung) HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung) HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [Spotify Web Helper] => C:\Users\Ilka_sa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-06] (Spotify Ltd) HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {0ceca8fd-3d7d-11e4-9d9c-20689dbf4fcf} - F:\pushinst.exe HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {16b6a9c7-4c84-11e2-92eb-806e6f6e6963} - E:\Msetup4.exe HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {875fe9aa-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {875fe9c6-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {9113187d-4cdc-11e2-9cd0-20689dbf4fcf} - F:\AutoRun.exe HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] => "C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe" HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-23] (Google Inc.) HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [SDP] => C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {16b6a9c7-4c84-11e2-92eb-806e6f6e6963} - E:\Autorun.exe HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {875fe9aa-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {875fe9c6-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {9113187d-4cdc-11e2-9cd0-20689dbf4fcf} - F:\AutoRun.exe AppInit_DLLs: C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [247144 2012-09-17] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203112 2012-09-17] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dual Smart Solution.lnk ShortcutTarget: Dual Smart Solution.lnk -> C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe (LG Electronics) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0B0ACDDE94E0CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=NIS&pvid=20.4.0.40 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,CustomizeSearch = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchURL = hxxp://home.microsoft.com/access/autosearch.asp?p=%s HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Handler: haufereader - No CLSID Value - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll No File Handler-x32: haufereader - No CLSID Value - Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024 FF SearchEngineOrder.1: Ask Search FF Homepage: hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Ask Toolbar - C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2013-11-09] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\coFFPlgn FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\coFFPlgn [2014-09-18] Chrome: ======= CHR HomePage: Default -> F6F7D93D1618F7ACAC734B16B8BC0054425F78E5D720C239F5AC81A5B58E3051 CHR DefaultSearchKeyword: Default -> trovi.search CHR DefaultSearchURL: Default -> hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321902&octid=EB_ORIGINAL_CTID&ISID=MD0ADA291-542A-47DF-A494-DF90116487F0&SearchSource=58&CUI=&UM=5&UP=SPD9923E70-D736-4EF7-A2B4-C27F35D833EC&q=UCM_SEARCH_TERM&SSPV= CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Profile: C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-10] CHR Extension: (YouTube) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-23] CHR Extension: (Google-Suche) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-23] CHR Extension: (Norton Identity Safe) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-10] CHR Extension: (Google Wallet) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02] CHR Extension: (Google Mail) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-23] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2012-05-18] (Firebird Project) [File not signed] R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2785280 2012-05-18] (Firebird Project) [File not signed] R2 HRService; C:\Program Files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe [71472 2007-05-22] () S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] () R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation) R2 MsDtsServer; C:\Program Files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe [202592 2011-03-25] (Microsoft Corporation) R2 msftesql; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe [91992 2010-03-26] (Microsoft Corporation) R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation) R2 MSSQLSERVER; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29294432 2011-03-25] (Microsoft Corporation) R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\NIS.exe [276376 2014-07-31] (Symantec Corporation) R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation) R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-21] (Microsoft Corporation) S3 SQLSERVERAGENT; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLAGENT90.EXE [346976 2010-12-10] (Microsoft Corporation) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [1586904 2014-09-13] (Symantec Corporation) S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-08-10] (Qualcomm Atheros) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1505000.013\ccSetx64.sys [162392 2014-02-25] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-10] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-10] (Symantec Corporation) R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\IPSDefs\20140917.001\IDSvia64.sys [633560 2014-08-29] (Symantec Corporation) R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-23] (ASUSTeK Computer Inc.) S3 LGDDCDevice; C:\Windows\SysWOW64\LGI2CDriver.sys [16384 2012-10-17] (LG Soft India) [File not signed] S3 LGII2CDevice; C:\Windows\SysWOW64\LGPII2CDriver.sys [10752 2012-11-23] (LG Soft India) [File not signed] R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation) R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\VirusDefs\20140917.022\ENG64.SYS [129752 2014-08-23] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\VirusDefs\20140917.022\EX64.SYS [2137304 2014-08-23] (Symantec Corporation) S3 rt70x64; C:\Windows\System32\DRIVERS\netr7064.sys [388448 2010-04-27] (Ralink Technology Corp.) R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1505000.013\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1505000.013\SRTSPX64.SYS [36952 2013-10-30] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NISx64\1505000.013\SYMDS64.SYS [493656 2013-10-30] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NISx64\1505000.013\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-04-20] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1505000.013\Ironx64.SYS [264280 2013-10-30] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1505000.013\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation) S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 GPUZ; \??\C:\Users\Ilka_sa\AppData\Local\Temp\GPUZ.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X] S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-18 17:15 - 2014-09-18 17:16 - 00025871 _____ () C:\Users\Ilka_sa\Desktop\FRST.txt 2014-09-18 17:15 - 2014-09-18 17:15 - 00000000 ___DC () C:\FRST 2014-09-18 17:14 - 2014-09-18 17:14 - 02105856 _____ (Farbar) C:\Users\Ilka_sa\Desktop\FRST64.exe 2014-09-18 17:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-18 17:04 - 2014-09-18 17:13 - 00000000 ___DC () C:\AdwCleaner 2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe 2014-09-16 16:47 - 2014-09-18 10:45 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick 2014-09-16 16:47 - 2014-09-16 16:47 - 00011197 _____ () C:\Windows\AVMInstall.Log 2014-09-16 16:47 - 2014-09-16 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN 2014-09-16 16:46 - 2014-09-16 16:47 - 00011850 _____ () C:\Windows\avmfwlanci.log 2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Windows\AVM_Driver 2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Users\Ilka_sa\AVM_Driver 2014-09-16 16:46 - 2012-08-21 01:00 - 00982784 _____ (AVM GmbH) C:\Windows\system32\Drivers\fwlanusb5.sys 2014-09-16 16:46 - 2012-08-21 01:00 - 00099840 _____ (AVM Berlin) C:\Windows\system32\fwlan5ci.dll 2014-09-16 16:46 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys 2014-09-16 16:10 - 2014-09-16 16:10 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Canon 2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu 2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJEGV 2014-09-16 14:48 - 2014-09-16 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Benutzerregistrierung 2014-09-16 14:47 - 2014-09-16 14:47 - 00002034 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk 2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-09-16 14:44 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-09-16 14:44 - 2014-09-16 14:44 - 00000000 ____D () C:\Program Files\Canon 2014-09-16 14:43 - 2014-09-16 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Manual 2014-09-16 14:43 - 2014-09-16 14:43 - 00002375 _____ () C:\Users\Public\Desktop\Canon iP7200 series Online-Handbuch.lnk 2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series 2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-16 14:42 - 2012-04-16 05:00 - 00389120 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL 2014-09-16 14:42 - 2012-03-28 19:01 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL 2014-09-16 14:42 - 2012-03-28 19:01 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL 2014-09-16 14:41 - 2014-09-16 16:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-09-16 14:41 - 2014-09-16 14:41 - 00000000 ___HD () C:\ProgramData\CanonIJETV 2014-09-11 06:57 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-11 06:57 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-11 06:57 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 06:57 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 06:57 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 06:57 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-11 06:57 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 06:57 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 06:57 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 06:57 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-11 06:57 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-11 06:57 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-11 06:57 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-11 06:57 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 06:57 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-11 06:57 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 06:57 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-11 06:57 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 06:57 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-11 06:57 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-11 06:57 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-11 06:57 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 06:57 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-11 06:57 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-11 06:57 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-11 06:57 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-11 06:57 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-11 06:57 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-11 06:57 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-11 06:57 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 06:57 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-11 06:57 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-11 06:57 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 06:57 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-11 06:57 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-11 06:57 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-11 06:57 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-11 06:57 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 06:57 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-11 06:57 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 06:57 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-11 06:57 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-11 06:57 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-11 06:57 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-11 06:57 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-11 06:57 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 06:57 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-11 06:57 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 06:57 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-11 06:57 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-11 06:57 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-09-11 06:57 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 06:57 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-11 06:57 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-11 06:57 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-11 06:57 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-11 06:42 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-11 06:42 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-10 16:49 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-10 16:49 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-10 16:49 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-10 16:49 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-10 16:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-10 16:49 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-10 16:49 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-10 16:49 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-10 16:49 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-10 09:59 - 2014-09-10 09:59 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-09-03 13:38 - 2014-09-10 09:37 - 00000000 ____D () C:\Users\Ilka_sa\Documents\Fax 2014-08-28 13:28 - 2014-08-28 13:28 - 00000000 ___DC () C:\Gebührenrechnung 2014016 2014-08-28 12:07 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 12:07 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-28 12:07 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-24 18:08 - 2014-08-24 18:08 - 00000000 ___DC () C:\Mietunterlagen Mausbach Herr Schildt ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-18 17:16 - 2014-09-18 17:15 - 00025871 _____ () C:\Users\Ilka_sa\Desktop\FRST.txt 2014-09-18 17:15 - 2014-09-18 17:15 - 00000000 ___DC () C:\FRST 2014-09-18 17:14 - 2014-09-18 17:14 - 02105856 _____ (Farbar) C:\Users\Ilka_sa\Desktop\FRST64.exe 2014-09-18 17:14 - 2012-12-23 00:16 - 01610764 _____ () C:\Windows\WindowsUpdate.log 2014-09-18 17:13 - 2014-09-18 17:04 - 00000000 ___DC () C:\AdwCleaner 2014-09-18 17:12 - 2012-12-23 01:53 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-18 17:10 - 2014-02-10 16:38 - 00000440 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-09-18 17:09 - 2013-01-03 17:35 - 00000000 ____D () C:\ProgramData\Kodak 2014-09-18 17:09 - 2012-12-23 01:53 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-18 17:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-18 17:08 - 2010-11-21 05:47 - 02043080 _____ () C:\Windows\PFRO.log 2014-09-18 17:08 - 2009-07-14 06:51 - 00054660 _____ () C:\Windows\setupact.log 2014-09-18 17:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files (x86)\Windows NT 2014-09-18 17:06 - 2012-12-23 00:19 - 00000000 ____D () C:\Users\Ilka_sa 2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe 2014-09-18 16:40 - 2012-12-25 20:51 - 00000000 ____D () C:\Users\Ilka_sa\Documents\FlowFact 2014-09-18 16:37 - 2009-07-14 06:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-18 16:37 - 2009-07-14 06:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-18 11:11 - 2012-12-23 02:32 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-09-18 10:45 - 2014-09-16 16:47 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick 2014-09-18 03:56 - 2013-07-27 05:25 - 00000095 _____ () C:\Users\Ilka_sa\AppData\Roaming\WB.CFG 2014-09-17 10:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-09-17 10:12 - 2012-12-25 11:35 - 00000000 ____D () C:\Program Files (x86)\FlowFact 2014-09-16 16:52 - 2014-09-16 14:41 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-09-16 16:47 - 2014-09-16 16:47 - 00011197 _____ () C:\Windows\AVMInstall.Log 2014-09-16 16:47 - 2014-09-16 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN 2014-09-16 16:47 - 2014-09-16 16:46 - 00011850 _____ () C:\Windows\avmfwlanci.log 2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Windows\AVM_Driver 2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Users\Ilka_sa\AVM_Driver 2014-09-16 16:10 - 2014-09-16 16:10 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Canon 2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu 2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJEGV 2014-09-16 14:48 - 2014-09-16 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Benutzerregistrierung 2014-09-16 14:48 - 2013-01-03 17:38 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-09-16 14:47 - 2014-09-16 14:47 - 00002034 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk 2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\Program Files\Common Files\CANON 2014-09-16 14:47 - 2014-09-16 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-09-16 14:44 - 2014-09-16 14:44 - 00000000 ____D () C:\Program Files\Canon 2014-09-16 14:44 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Manual 2014-09-16 14:43 - 2014-09-16 14:43 - 00002375 _____ () C:\Users\Public\Desktop\Canon iP7200 series Online-Handbuch.lnk 2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series 2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ____D () C:\Windows\system32\STRING 2014-09-16 14:41 - 2014-09-16 14:41 - 00000000 ___HD () C:\ProgramData\CanonIJETV 2014-09-15 16:19 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-09-15 10:27 - 2012-12-23 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-14 12:40 - 2014-05-10 05:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-13 08:22 - 2013-01-17 14:46 - 00361116 _____ () C:\Users\Ilka_sa\AppData\Local\installer.log 2014-09-11 07:00 - 2012-12-23 01:29 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-11 06:55 - 2013-08-06 03:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 06:43 - 2012-12-23 19:36 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-10 09:59 - 2014-09-10 09:59 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-09-10 09:53 - 2014-04-20 15:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2014-09-10 09:53 - 2014-04-20 09:01 - 00002528 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk 2014-09-10 09:53 - 2012-12-25 02:43 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-09-10 09:53 - 2012-12-25 02:43 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64 2014-09-10 09:37 - 2014-09-03 13:38 - 00000000 ____D () C:\Users\Ilka_sa\Documents\Fax 2014-09-03 13:45 - 2013-07-05 18:53 - 00052736 ___SH () C:\Users\Ilka_sa\Thumbs.db 2014-08-29 08:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-08-29 06:47 - 2009-07-14 06:45 - 00421368 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-28 13:28 - 2014-08-28 13:28 - 00000000 ___DC () C:\Gebührenrechnung 2014016 2014-08-28 12:20 - 2013-12-10 16:26 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Local\Deployment 2014-08-24 18:08 - 2014-08-24 18:08 - 00000000 ___DC () C:\Mietunterlagen Mausbach Herr Schildt 2014-08-23 04:07 - 2014-08-28 12:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 03:45 - 2014-08-28 12:07 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-23 02:59 - 2014-08-28 12:07 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-21 23:25 - 2012-12-23 21:26 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Local\CrashDumps 2014-08-19 20:05 - 2014-09-11 06:57 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-19 19:39 - 2014-09-11 06:57 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-19 01:01 - 2014-09-11 06:57 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-19 00:29 - 2014-09-11 06:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-19 00:29 - 2014-09-11 06:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-19 00:26 - 2014-09-11 06:57 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-19 00:20 - 2014-09-11 06:57 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-19 00:19 - 2014-09-11 06:57 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-19 00:15 - 2014-09-11 06:57 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-19 00:15 - 2014-09-11 06:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-19 00:14 - 2014-09-11 06:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-19 00:14 - 2014-09-11 06:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-19 00:08 - 2014-09-11 06:57 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-19 00:08 - 2014-09-11 06:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-19 00:08 - 2014-09-11 06:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-19 00:05 - 2014-09-11 06:57 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-19 00:03 - 2014-09-11 06:57 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-19 00:03 - 2014-09-11 06:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-19 00:03 - 2014-09-11 06:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe Files to move or delete: ==================== C:\Users\Ilka_sa\Setup.exe Some content of TEMP: ==================== C:\Users\Ilka_sa\AppData\Local\Temp\1wgcmku6.dll C:\Users\Ilka_sa\AppData\Local\Temp\680.3190092245834_Update.exe C:\Users\Ilka_sa\AppData\Local\Temp\APNSetup.exe C:\Users\Ilka_sa\AppData\Local\Temp\BackupSetup.exe C:\Users\Ilka_sa\AppData\Local\Temp\bundlesweetimsetup.exe C:\Users\Ilka_sa\AppData\Local\Temp\DataCard_Setup64.exe C:\Users\Ilka_sa\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Ilka_sa\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Ilka_sa\AppData\Local\Temp\executeuninstall.exe C:\Users\Ilka_sa\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Ilka_sa\AppData\Local\Temp\ICReinstall_CodecPackage.exe C:\Users\Ilka_sa\AppData\Local\Temp\incredibar_installer.exe C:\Users\Ilka_sa\AppData\Local\Temp\InitBDE.exe C:\Users\Ilka_sa\AppData\Local\Temp\jre-6u38-windows-i586-iftw_2be54934.exe C:\Users\Ilka_sa\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Ilka_sa\AppData\Local\Temp\MSETUP4.EXE C:\Users\Ilka_sa\AppData\Local\Temp\ose00000.exe C:\Users\Ilka_sa\AppData\Local\Temp\PDFCreator-1_3_2_setup.exe C:\Users\Ilka_sa\AppData\Local\Temp\Quarantine.exe C:\Users\Ilka_sa\AppData\Local\Temp\sdpupdater.exe C:\Users\Ilka_sa\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Ilka_sa\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Ilka_sa\AppData\Local\Temp\SHSetup.exe C:\Users\Ilka_sa\AppData\Local\Temp\uninst1.exe C:\Users\Ilka_sa\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\Ilka_sa\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-17 10:35 ==================== End Of Log ============================ Kann mir jemand sagen ob mein System jetzt wieder clean ist? Oder muss ich etwa alles neu installieren, das wäre da es ein geschäftliches Notebook sehr aufwendig. Vielen Dank für Eure Hilfe Lg Ilka |
Baum-Darstellung