Trojaner-Board - Windows 7: Viel Werbung und Videos im Hintergrund

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows 7: Viel Werbung und Videos im Hintergrund (https://www.trojaner-board.de/141880-windows-7-viel-werbung-videos-hintergrund.html)

321meins

20.09.2013 16:51

Windows 7: Viel Werbung und Videos im Hintergrund

Hallo,

seit einiger Zeit habe ich vermehrt Werbung in Foren und Facebook. Zudem tritt seit ein paar Tagen ab und an der Sound von Werbevideos auf, die ich aber nicht sehe, sondern nur höre. Dagegen hilft nur den Tab zu schließen. Ich surfe mit Chrome.

Virenschutz habe ich Norton Internet Security, aber scheinbar ist da trotzdem irgendwo noch was versteckt. Norton findet zwar immer wieder Tracking Cookies, aber behoben ist das Problem dadurch nicht.

Hier kommt der Buchstabenhaufen der Logs :crazy: ich hoffe ihr könnt mir weiterhelfen

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01

Ran by Janine (administrator) on FUJI on 20-09-2013 17:18:01

Running from C:\Users\Janine\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Windows\vVX3000.exe

(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Google Update] - C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-25] (Google Inc.)

MountPoints2: E - E:\FRT_Install.exe

MountPoints2: {170b0609-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

MountPoints2: {170b061d-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)

HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [80480 2013-06-26] (Nullsoft, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: :0

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9EC287D89D3CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://google.de/

CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Norton Identity Protection) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
 

==================== Services (Whitelisted) =================
 

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130919.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130919.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)

S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)

S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)

S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)

S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)

S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)

S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)

S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)

S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)

S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)

S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)

S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)

S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)

S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)

S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

S3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-03-19] (Sony Ericsson Mobile Communications)

R3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-20 17:17 - 2013-09-20 17:17 - 01950622 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST

2013-09-20 17:16 - 2013-09-20 17:16 - 01083549 _____ (Farbar) C:\Users\Janine\Downloads\FRST.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log

2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable

2013-09-18 21:08 - 2013-09-18 21:08 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-09-12 07:08 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 07:08 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 07:08 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 07:08 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 07:08 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 07:08 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 07:08 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 07:08 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 07:08 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 07:08 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 07:08 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 07:08 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-11 19:20 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 19:20 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 19:20 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 19:20 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 19:20 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 19:20 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 19:20 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 19:20 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 19:20 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 19:20 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 19:20 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 19:20 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 19:20 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 19:20 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 19:20 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 19:20 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 19:20 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-03 18:45 - 2013-09-03 18:45 - 00000000 ____D C:\Program Files (x86)\USB Audio

2013-08-30 06:44 - 2013-09-18 21:10 - 00000000 ____D C:\AdwCleaner

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Malwarebytes

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-08-29 19:17 - 2013-08-29 19:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Janine\Downloads\mbam-setup-1.75.0.1300.exe

2013-08-29 18:59 - 2013-08-29 18:59 - 00688992 ____R (Swearware) C:\Users\Janine\Downloads\dds.exe

2013-08-25 08:42 - 2013-08-25 08:42 - 00001657 _____ C:\Users\Public\Desktop\iMesh.lnk
 

==================== One Month Modified Files and Folders =======
 

2013-09-20 17:17 - 2013-09-20 17:17 - 01950622 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST

2013-09-20 17:16 - 2013-09-20 17:16 - 01083549 _____ (Farbar) C:\Users\Janine\Downloads\FRST.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log

2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable

2013-09-20 17:15 - 2011-02-23 20:11 - 00000000 ____D C:\Users\Janine

2013-09-20 16:50 - 2011-06-25 09:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job

2013-09-20 16:43 - 2012-03-30 06:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-20 16:09 - 2011-02-23 20:08 - 01096322 _____ C:\Windows\WindowsUpdate.log

2013-09-20 15:37 - 2011-03-19 18:26 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson

2013-09-20 15:37 - 2011-03-19 18:23 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson

2013-09-20 15:37 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-20 11:04 - 2012-03-30 06:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-20 11:03 - 2012-03-30 06:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-20 11:03 - 2011-06-03 23:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-20 11:02 - 2011-06-25 09:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job

2013-09-19 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-19 08:18 - 2009-07-14 06:51 - 00175097 _____ C:\Windows\setupact.log

2013-09-18 22:46 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-18 22:46 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-18 21:13 - 2012-10-12 17:29 - 00000000 ____D C:\Users\Janine\FM_Transmitter_02

2013-09-18 21:13 - 2012-08-17 09:21 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics

2013-09-18 21:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-18 21:12 - 2011-03-01 21:50 - 00085132 _____ C:\Windows\PFRO.log

2013-09-18 21:10 - 2013-08-30 06:44 - 00000000 ____D C:\AdwCleaner

2013-09-18 21:08 - 2013-09-18 21:08 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-09-12 18:43 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 18:42 - 2009-07-14 06:45 - 00294344 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 07:07 - 2013-07-27 03:10 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 06:58 - 2011-02-23 21:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-08 09:39 - 2011-09-01 19:21 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Winamp

2013-09-03 18:45 - 2013-09-03 18:45 - 00000000 ____D C:\Program Files (x86)\USB Audio

2013-09-03 17:56 - 2012-01-31 14:14 - 00000000 ____D C:\Users\Janine\Documents\Konto Janine

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Malwarebytes

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-08-29 19:17 - 2013-08-29 19:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Janine\Downloads\mbam-setup-1.75.0.1300.exe

2013-08-29 18:59 - 2013-08-29 18:59 - 00688992 ____R (Swearware) C:\Users\Janine\Downloads\dds.exe

2013-08-25 08:42 - 2013-08-25 08:42 - 00001657 _____ C:\Users\Public\Desktop\iMesh.lnk

2013-08-23 07:04 - 2013-07-10 07:07 - 00000000 ____D C:\Users\Janine\AppData\Local\NPE

2013-08-21 19:33 - 2009-07-14 19:58 - 00654400 _____ C:\Windows\system32\perfh007.dat

2013-08-21 19:33 - 2009-07-14 19:58 - 00130240 _____ C:\Windows\system32\perfc007.dat

2013-08-21 19:33 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
 

Some content of TEMP:

====================

C:\Users\Janine\AppData\Local\Temp\AskSLib.dll

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32axau_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32ax_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-19 11:35
 

==================== End Of Log ============================

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01

Ran by Janine at 2013-09-20 17:18:55

Running from C:\Users\Janine\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)

Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)

Advertising Center (x32 Version: 0.0.0.1)

Avanquest update (x32 Version: 1.28)

AVS Screen Capture version 2.0.1 (x32)

AVS Update Manager 1.0 (x32)

AVS Video Converter 8 (x32)

AVS Video Recorder 2.4 (x32)

AVS Video ReMaker 4.0.2.126 (x32)

AVS4YOU Software Navigator 1.4 (x32)

Content Manager 2 (x32 Version: 3.4.1.11834)

D3DX10 (x32 Version: 15.4.2368.0902)

DVD Flick 1.3.0.7 (x32 Version: 1.3.0.7)

Free M4a to MP3 Converter 7.1 (x32)

Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0)

Free YouTube to MP3 Converter version 3.9.33 (x32)

GIMP 2.8.6 (Version: 2.8.6)

Google Chrome (HKCU Version: 29.0.1547.66)

ImagXpress (x32 Version: 7.0.74.0)

Java 7 Update 15 (x32 Version: 7.0.150)

Java Auto Updater (x32 Version: 2.1.9.0)

Lyrics Finder (x32)

Media Go (x32 Version: 2.1.392)

Media Go Video Playback Engine 1.88.116.12060 (x32 Version: 1.88.116.12060)

MFC RunTime files (x32 Version: 1.0.0)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Corporation (Version: 9.1.0.0)

Microsoft Corporation (x32 Version: 9.1.0.0)

Microsoft LifeCam (Version: 3.22.270.0)

Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable - KB2467175 (x32 Version: 8.0.51011)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

MP4 To MP3 Converter V3.0 (x32)

MSVCRT (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)

Nero 9 Essentials (x32)

Nero BurnRights (x32 Version: 3.4.10.100)

Nero BurnRights Help (x32 Version: 3.4.4.100)

Nero ControlCenter (x32 Version: 9.0.0.1)

Nero CoverDesigner (x32 Version: 4.4.9.203)

Nero CoverDesigner Help (x32 Version: 4.4.6.100)

Nero DiscSpeed (x32 Version: 5.4.7.202)

Nero DiscSpeed Help (x32 Version: 5.4.4.100)

Nero DriveSpeed (x32 Version: 4.4.10.100)

Nero DriveSpeed Help (x32 Version: 4.4.4.100)

Nero InfoTool (x32 Version: 6.4.7.204)

Nero InfoTool Help (x32 Version: 6.4.4.100)

Nero Installer (x32 Version: 4.4.8.1)

Nero StartSmart (x32 Version: 9.4.11.207)

Nero StartSmart Help (x32 Version: 9.4.1.100)

Nero StartSmart OEM (x32 Version: 9.4.10.100)

neroxml (x32 Version: 1.0.0)

Norton Internet Security (x32 Version: 20.4.0.40)

OpenOffice.org 3.3 (x32 Version: 3.3.9567)

PlayStation(R)Network Downloader (x32 Version: 2.07.00849)

PlayStation(R)Store (x32 Version: 4.7.14.14146)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)

Skype Click to Call (x32 Version: 5.6.8442)

Skype™ 5.10 (x32 Version: 5.10.116)

Sony PC Companion 2.10.108 (x32 Version: 2.10.108)

Spotify (HKCU Version: 0.8.4.124.ga3559d86)

swMSM (x32 Version: 12.0.0.1)

Uninstall 1.0.0.1 (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Zip Opener (HKCU)

Ver 1.2.0 (x32)

Winamp (x32 Version: 5.64 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3508.1109)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3508.1109)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

WinRAR

WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928)

WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7304)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)
 

==================== Restore Points  =========================
 

24-08-2013 12:56:01 Geplanter Prüfpunkt

02-09-2013 14:27:34 Geplanter Prüfpunkt

12-09-2013 04:42:59 Windows Modules Installer

12-09-2013 04:49:31 Windows Modules Installer

19-09-2013 09:42:06 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started

Task: {4F74EC6C-39AE-4805-B88C-B5E1AB106398} - System32\Tasks\{46BFADCD-A8AB-474A-8B35-B4C9F64196C3} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)

Task: {554D27B3-117B-46BE-85EE-C240EA7E0B2D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)

Task: {69019E76-8D07-498E-A649-01FB6810A3C5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)

Task: {7BA9D501-A71D-49E1-99BE-45FFD2971C3A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)

Task: {9CA17B01-7F3B-46D9-9A9C-C9B0C09585C1} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {B94597EA-A5DE-41E2-8DA1-89558228BD64} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)

Task: {C5373CC3-CA53-4BAB-AA74-707088BDF4C0} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: {CD122EE0-D50A-4645-8FDC-67EF5D2E3EDB} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {F9533743-4F24-4805-8864-940CD3E4E304} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\imaadp32.acm

2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\msg711.acm

2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\msgsm32.acm

2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\msadp32.acm

2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2010-08-25 20:05 - 2010-08-25 20:05 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc

2013-02-27 18:32 - 2013-02-13 13:35 - 08907856 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 02583552 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtCorers48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 09005056 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtGuirs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 01031680 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtNetworkrs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 00355840 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtXmlrs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 00755712 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtSqlrs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 01342464 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtScriptrs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 02403840 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\Qt3Supportrs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 13112832 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtWebKitrs48.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 00109056 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtTestrs48.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll

2013-02-27 18:32 - 2013-02-13 13:36 - 02980944 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 02152528 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 00283136 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtSvgrs48.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 01604176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 01716304 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll

2013-02-27 18:32 - 2013-02-12 13:25 - 04128848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 00272384 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\phononrs48.dll

2013-01-17 15:30 - 2013-02-12 13:03 - 01041408 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll

2013-01-17 15:30 - 2013-02-12 13:03 - 00094208 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll

2013-01-17 15:30 - 2013-01-16 10:51 - 00075264 _____ (Zlib) C:\Program Files (x86)\WISO\Steuersoftware 2013\zlib.dll

2013-01-17 15:30 - 2013-02-12 13:03 - 00251392 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 01467984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll

2013-02-27 18:33 - 2012-11-01 15:32 - 02635264 ____N (Digia Plc) C:\Program Files (x86)\WISO\Steuersoftware 2013\QtXmlpatternsrs48.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 04923984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01367632 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01747024 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01556048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01150032 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01202768 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 01310800 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 06758480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01230848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01313872 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll

2011-01-17 17:19 - 2011-11-07 20:24 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

2013-07-09 06:59 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll

2013-09-04 06:42 - 2013-09-02 22:34 - 47074256 _____ (Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\chrome.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 09962960 _____ (The ICU Project) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\icudt.dll

2013-09-16 19:39 - 2013-09-16 19:39 - 00982864 _____ (Symantec Corporation) C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0\npcoplgn.dll

2013-09-04 06:42 - 2013-09-02 20:46 - 00081768 _____ (Microsoft Corporation) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\xinput1_3.dll

2013-09-04 06:42 - 2013-09-02 20:46 - 03231688 _____ (Microsoft Corporation) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\D3DCompiler_46.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 00709584 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\libglesv2.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 00099792 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\libegl.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 04053456 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 00410576 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 02110928 _____ (Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\libpeerconnection.dll

2013-09-04 06:42 - 2013-09-02 22:35 - 01604560 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll

2013-07-09 06:59 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: seehcri

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Microsoft-Adapter für Miniports virtueller WiFis

Description: Microsoft-Adapter für Miniports virtueller WiFis

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: vwifimp

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/19/2013 11:35:05 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (09/19/2013 04:36:57 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16686, Zeitstempel: 0x52058cf0

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0c

ID des fehlerhaften Prozesses: 0xbb30

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (09/19/2013 04:12:21 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16686, Zeitstempel: 0x52058cf0

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0c

ID des fehlerhaften Prozesses: 0x214

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (09/12/2013 06:59:47 PM) (Source: MsiInstaller) (User: Fuji)

Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011004}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 

Error: (09/12/2013 06:45:34 PM) (Source: MsiInstaller) (User: Fuji)

Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011004}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 

Error: (09/12/2013 06:41:28 AM) (Source: System Restore) (User: )

Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).
 

Error: (09/07/2013 01:37:36 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (08/30/2013 07:52:54 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (08/29/2013 09:55:35 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (08/24/2013 02:49:07 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 
 

System errors:

=============

Error: (09/20/2013 04:09:38 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/20/2013 11:47:22 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/20/2013 11:02:15 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/19/2013 05:51:03 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/19/2013 00:40:10 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/19/2013 08:18:50 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/18/2013 10:38:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Search" wurde nicht richtig gestartet.
 

Error: (09/18/2013 07:30:14 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/18/2013 01:53:25 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/18/2013 01:53:24 PM) (Source: ipnathlp) (User: )

Description: 0
 
 

Microsoft Office Sessions:

=========================

Error: (09/19/2013 11:35:05 AM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (09/19/2013 04:36:57 AM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE10.0.9200.1668652058cf0MMDevApi.dll6.1.7601.175144ce7b892c000000500023b0cbb3001ceb4ddb545d12dC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dll59d7a5e1-20d4-11e3-9a9a-e839df082830
 

Error: (09/19/2013 04:12:21 AM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE10.0.9200.1668652058cf0MMDevApi.dll6.1.7601.175144ce7b892c000000500023b0c21401ceb4afb3ce5d82C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dlle9f22804-20d0-11e3-9a9a-e839df082830
 

Error: (09/12/2013 06:59:47 PM) (Source: MsiInstaller)(User: Fuji)

Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011004}1625(NULL)(NULL)(NULL)
 

Error: (09/12/2013 06:45:34 PM) (Source: MsiInstaller)(User: Fuji)

Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011004}1625(NULL)(NULL)(NULL)
 

Error: (09/12/2013 06:41:28 AM) (Source: System Restore)(User: )

Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101
 

Error: (09/07/2013 01:37:36 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (08/30/2013 07:52:54 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (08/29/2013 09:55:35 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (08/24/2013 02:49:07 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 51%

Total physical RAM: 3892.55 MB

Available physical RAM: 1901.51 MB

Total Pagefile: 7783.29 MB

Available Pagefile: 5644.81 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:465.66 GB) (Free:403.67 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0DCE7163)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Code:

GMER 2.1.19163 - hxxp://www.gmer.net

Rootkit scan 2013-09-20 17:35:02

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS545050B9A300 rev.PB4OC61J 465,76GB

Running: gmer_2.1.19163.exe; Driver: C:\Users\Janine\AppData\Local\Temp\pxldypod.sys
 
 

---- Kernel code sections - GMER 2.1 ----
 

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                            fffff80002fb8000 45 bytes [00, 00, 37, 00, 4D, 6D, 43, ...]

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 591                                                            fffff80002fb802f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]
 

---- User code sections - GMER 2.1 ----
 

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtTerminateProcess                          000000007714fcb0 5 bytes JMP 00000001002a091c

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                        000000007714fe14 5 bytes JMP 00000001002a0048

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtOpenEvent                                 000000007714fea8 5 bytes JMP 00000001002a02ee

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateThread                              0000000077150004 5 bytes JMP 00000001002a04b2

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                      0000000077150038 5 bytes JMP 00000001002a09fe

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtResumeThread                              0000000077150068 5 bytes JMP 00000001002a0ae0

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtTerminateThread                           0000000077150084 5 bytes JMP 0000000100020050

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateMutant                              000000007715079c 5 bytes JMP 00000001002a012a

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                  000000007715088c 5 bytes JMP 00000001002a0758

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtCreateThreadEx                            00000000771508a4 5 bytes JMP 00000001002a0676

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtLoadDriver                                0000000077150df4 5 bytes JMP 00000001002a03d0

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtSetContextThread                          0000000077151920 5 bytes JMP 00000001002a0594

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtSetSystemInformation                      0000000077151be4 5 bytes JMP 00000001002a083a

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\ntdll.dll!NtSuspendThread                             0000000077151d70 5 bytes JMP 00000001002a020c

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206            000000007539524f 7 bytes JMP 00000001002a0f52

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                00000000753953d0 7 bytes JMP 00000001002b0210

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149               0000000075395677 1 byte JMP 00000001002b0048

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151               0000000075395679 5 bytes {JMP 0xffffffff8af1a9d1}

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!CreateServiceA + 542                      000000007539589a 7 bytes JMP 00000001002a0ca6

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!CreateServiceW + 382                      0000000075395a1d 7 bytes JMP 00000001002b03d8

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                 0000000075395c9b 7 bytes JMP 00000001002b012c

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!ControlServiceExA + 231                   0000000075395d87 7 bytes JMP 00000001002b02f4

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123  0000000075397240 7 bytes JMP 00000001002a0e6e

.text     C:\Users\Janine\Downloads\gmer_2.1.19163.exe[14900] C:\Windows\syswow64\USER32.dll!RecordShutdownReason + 882                 0000000076bf1492 7 bytes JMP 00000001002b04bc
 

---- EOF - GMER 2.1 ----

aharonov

20.09.2013 17:02

Hallo,

Zitat:

Ich surfe mit Chrome.

Und wie ist es denn im Internet Explorer? Siehst du dort auch diese Werbung und hörst den Sound oder nicht?

321meins

20.09.2013 17:27

so Buttons wie "schützen sie ihren PC..." tauchen im IE auch auf. Den Videoton konnte ich dort noch nicht hören.

aharonov

20.09.2013 17:31

ok.

Schritt 1

Gehe zu Start --> Systemsteuerung und öffne Programme und Funktionen.
Suche und deinstalliere dort der Reihe nach folgende Einträge:
- Lyrics Finder
- Update for Zip Opener
Schliesse das Fenster wieder und führe einen Neustart durch, wenn das gefordert wurde.

Schritt 2

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3

Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Bitte poste in deiner nächsten Antwort:

Log von AdwCleaner
Log von FRST

321meins

20.09.2013 17:47

Code:

# AdwCleaner v3.004 - Bericht erstellt am 20/09/2013 um 18:39:25

# Updated 15/09/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Janine - FUJI

# Gestartet von : C:\Users\Janine\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16686
 
 

-\\ Google Chrome v
 

[ Datei : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [1145 octets] - [20/09/2013 18:38:11]

AdwCleaner[S0].txt - [1067 octets] - [20/09/2013 18:39:25]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1127 octets] ##########

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01

Ran by Janine (administrator) on FUJI on 20-09-2013 18:42:52

Running from C:\Users\Janine\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Windows\vVX3000.exe

() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe

(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Reader_sl.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Google Update] - C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-25] (Google Inc.)

MountPoints2: E - E:\FRT_Install.exe

MountPoints2: {170b0609-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

MountPoints2: {170b061d-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)

HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [80480 2013-06-26] (Nullsoft, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: :0

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9EC287D89D3CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://google.de/

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\29.0.1547.66\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File

CHR Plugin: (Media Go Detector) - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)

CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\Janine\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File

CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Norton Identity Protection) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
 

==================== Services (Whitelisted) =================
 

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130919.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130919.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)

S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)

S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)

S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130920.002\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)

S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)

S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)

S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)

S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)

S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)

S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)

S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)

S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)

S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)

S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)

S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)

S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)

S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)

S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

S3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-03-19] (Sony Ericsson Mobile Communications)

S3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-20 18:37 - 2013-09-20 18:37 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-09-20 17:35 - 2013-09-20 17:35 - 00005207 _____ C:\Users\Janine\Desktop\gmer.log

2013-09-20 17:20 - 2013-09-20 17:20 - 00377856 _____ C:\Users\Janine\Downloads\gmer_2.1.19163.exe

2013-09-20 17:20 - 2013-09-20 17:20 - 00033373 _____ C:\Users\Janine\Desktop\FRST.txt

2013-09-20 17:20 - 2013-09-20 17:20 - 00025351 _____ C:\Users\Janine\Desktop\Addition.txt

2013-09-20 17:18 - 2013-09-20 17:19 - 00025351 _____ C:\Users\Janine\Downloads\Addition.txt

2013-09-20 17:17 - 2013-09-20 17:17 - 01950622 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST

2013-09-20 17:16 - 2013-09-20 17:16 - 01083549 _____ (Farbar) C:\Users\Janine\Downloads\FRST.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log

2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable

2013-09-12 07:08 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 07:08 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 07:08 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 07:08 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 07:08 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 07:08 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 07:08 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 07:08 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 07:08 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 07:08 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 07:08 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 07:08 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-11 19:20 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 19:20 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 19:20 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 19:20 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 19:20 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 19:20 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 19:20 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 19:20 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 19:20 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 19:20 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 19:20 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 19:20 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 19:20 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 19:20 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 19:20 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 19:20 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 19:20 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-03 18:45 - 2013-09-03 18:45 - 00000000 ____D C:\Program Files (x86)\USB Audio

2013-08-30 06:44 - 2013-09-20 18:39 - 00000000 ____D C:\AdwCleaner

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Malwarebytes

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-08-29 19:17 - 2013-08-29 19:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Janine\Downloads\mbam-setup-1.75.0.1300.exe

2013-08-29 18:59 - 2013-08-29 18:59 - 00688992 ____R (Swearware) C:\Users\Janine\Downloads\dds.exe
 

==================== One Month Modified Files and Folders =======
 

2013-09-20 18:43 - 2012-03-30 06:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-20 18:42 - 2012-08-17 09:21 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics

2013-09-20 18:41 - 2011-03-01 21:50 - 00085710 _____ C:\Windows\PFRO.log

2013-09-20 18:41 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-20 18:41 - 2009-07-14 06:51 - 00175153 _____ C:\Windows\setupact.log

2013-09-20 18:40 - 2011-02-23 20:08 - 01098817 _____ C:\Windows\WindowsUpdate.log

2013-09-20 18:39 - 2013-08-30 06:44 - 00000000 ____D C:\AdwCleaner

2013-09-20 18:37 - 2013-09-20 18:37 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-09-20 17:50 - 2011-06-25 09:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job

2013-09-20 17:35 - 2013-09-20 17:35 - 00005207 _____ C:\Users\Janine\Desktop\gmer.log

2013-09-20 17:20 - 2013-09-20 17:20 - 00377856 _____ C:\Users\Janine\Downloads\gmer_2.1.19163.exe

2013-09-20 17:20 - 2013-09-20 17:20 - 00033373 _____ C:\Users\Janine\Desktop\FRST.txt

2013-09-20 17:20 - 2013-09-20 17:20 - 00025351 _____ C:\Users\Janine\Desktop\Addition.txt

2013-09-20 17:19 - 2013-09-20 17:18 - 00025351 _____ C:\Users\Janine\Downloads\Addition.txt

2013-09-20 17:17 - 2013-09-20 17:17 - 01950622 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST

2013-09-20 17:16 - 2013-09-20 17:16 - 01083549 _____ (Farbar) C:\Users\Janine\Downloads\FRST.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log

2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable

2013-09-20 17:15 - 2011-02-23 20:11 - 00000000 ____D C:\Users\Janine

2013-09-20 15:37 - 2011-03-19 18:26 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson

2013-09-20 15:37 - 2011-03-19 18:23 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson

2013-09-20 15:37 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-20 11:04 - 2012-03-30 06:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-20 11:03 - 2012-03-30 06:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-20 11:03 - 2011-06-03 23:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-20 11:02 - 2011-06-25 09:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job

2013-09-19 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-18 22:46 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-18 22:46 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-18 21:13 - 2012-10-12 17:29 - 00000000 ____D C:\Users\Janine\FM_Transmitter_02

2013-09-12 18:43 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 18:42 - 2009-07-14 06:45 - 00294344 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 07:07 - 2013-07-27 03:10 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 06:58 - 2011-02-23 21:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-08 09:39 - 2011-09-01 19:21 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Winamp

2013-09-03 18:45 - 2013-09-03 18:45 - 00000000 ____D C:\Program Files (x86)\USB Audio

2013-09-03 17:56 - 2012-01-31 14:14 - 00000000 ____D C:\Users\Janine\Documents\Konto Janine

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Malwarebytes

2013-08-29 19:18 - 2013-08-29 19:18 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-08-29 19:17 - 2013-08-29 19:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Janine\Downloads\mbam-setup-1.75.0.1300.exe

2013-08-29 18:59 - 2013-08-29 18:59 - 00688992 ____R (Swearware) C:\Users\Janine\Downloads\dds.exe

2013-08-23 07:04 - 2013-07-10 07:07 - 00000000 ____D C:\Users\Janine\AppData\Local\NPE

2013-08-21 19:33 - 2009-07-14 19:58 - 00654400 _____ C:\Windows\system32\perfh007.dat

2013-08-21 19:33 - 2009-07-14 19:58 - 00130240 _____ C:\Windows\system32\perfc007.dat

2013-08-21 19:33 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
 

Some content of TEMP:

====================

C:\Users\Janine\AppData\Local\Temp\AskSLib.dll

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32axau_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32ax_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-19 11:35
 

==================== End Of Log ============================

--- --- ---

aharonov

20.09.2013 17:52

Ist die Situation unverändert?

321meins

20.09.2013 18:00

Jetzt taucht nur noch normale AdChoices Werbung auf wie Otto etc.

Danke für die super schnelle Hilfe

aharonov

21.09.2013 16:21

Ok, noch eine Kontrolle:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

321meins

21.09.2013 23:04

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=e51cb0e04527314f9a1b503589e04f89

# engine=15210

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-09-21 05:45:13

# local_time=2013-09-21 07:45:13 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=3591 16777213 100 91 253912 142410897 0 0

# compatibility_mode=5893 16776574 100 94 6144288 131415363 0 0

# compatibility_mode=7937 16777214 0 25 6144129 6144129 0 0

# scanned=189918

# found=0

# cleaned=0

# scan_time=7923

Der Videoton ist heute nochmal aufgetaucht. Im Hintergrund beim Facebookspiel Farmville.

aharonov

22.09.2013 21:55

Ok.

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

321meins

28.09.2013 08:19

Code:

09:15:43.0131 57800  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42

09:15:43.0887 57800  ============================================================

09:15:43.0887 57800  Current date / time: 2013/09/28 09:15:43.0887

09:15:43.0887 57800  SystemInfo:

09:15:43.0888 57800  

09:15:43.0888 57800  OS Version: 6.1.7601 ServicePack: 1.0

09:15:43.0888 57800  Product type: Workstation

09:15:43.0888 57800  ComputerName: FUJI

09:15:43.0888 57800  UserName: Janine

09:15:43.0888 57800  Windows directory: C:\Windows

09:15:43.0888 57800  System windows directory: C:\Windows

09:15:43.0888 57800  Running under WOW64

09:15:43.0888 57800  Processor architecture: Intel x64

09:15:43.0888 57800  Number of processors: 2

09:15:43.0888 57800  Page size: 0x1000

09:15:43.0888 57800  Boot type: Normal boot

09:15:43.0888 57800  ============================================================

09:15:48.0318 57800  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

09:15:48.0365 57800  ============================================================

09:15:48.0365 57800  \Device\Harddisk0\DR0:

09:15:48.0367 57800  MBR partitions:

09:15:48.0367 57800  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

09:15:48.0367 57800  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000

09:15:48.0367 57800  ============================================================

09:15:48.0547 57800  C: <-> \Device\Harddisk0\DR0\Partition2

09:15:48.0736 57800  ============================================================

09:15:48.0736 57800  Initialize success

09:15:48.0736 57800  ============================================================

09:16:05.0183 46716  ============================================================

09:16:05.0183 46716  Scan started

09:16:05.0183 46716  Mode: Manual; SigCheck; TDLFS; 

09:16:05.0183 46716  ============================================================

09:16:08.0394 46716  ================ Scan system memory ========================

09:16:08.0394 46716  System memory - ok

09:16:08.0395 46716  ================ Scan services =============================

09:16:08.0566 46716  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

09:16:08.0995 46716  1394ohci - ok

09:16:09.0029 46716  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

09:16:09.0078 46716  ACPI - ok

09:16:09.0111 46716  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

09:16:09.0275 46716  AcpiPmi - ok

09:16:09.0382 46716  [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

09:16:09.0412 46716  AdobeARMservice - ok

09:16:09.0559 46716  [ 24A0876D07EF356DCBC1D7A7929354AB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

09:16:09.0592 46716  AdobeFlashPlayerUpdateSvc - ok

09:16:09.0642 46716  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

09:16:09.0692 46716  adp94xx - ok

09:16:09.0726 46716  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

09:16:09.0768 46716  adpahci - ok

09:16:09.0818 46716  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

09:16:09.0853 46716  adpu320 - ok

09:16:09.0885 46716  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

09:16:10.0104 46716  AeLookupSvc - ok

09:16:10.0146 46716  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

09:16:10.0268 46716  AFD - ok

09:16:10.0297 46716  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

09:16:10.0327 46716  agp440 - ok

09:16:10.0360 46716  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

09:16:10.0433 46716  ALG - ok

09:16:10.0458 46716  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

09:16:10.0486 46716  aliide - ok

09:16:10.0513 46716  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

09:16:10.0541 46716  amdide - ok

09:16:10.0582 46716  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

09:16:10.0660 46716  AmdK8 - ok

09:16:10.0678 46716  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

09:16:10.0725 46716  AmdPPM - ok

09:16:10.0770 46716  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

09:16:10.0803 46716  amdsata - ok

09:16:10.0847 46716  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

09:16:10.0883 46716  amdsbs - ok

09:16:10.0902 46716  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

09:16:10.0932 46716  amdxata - ok

09:16:10.0982 46716  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

09:16:11.0165 46716  AppID - ok

09:16:11.0191 46716  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

09:16:11.0331 46716  AppIDSvc - ok

09:16:11.0393 46716  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll

09:16:11.0456 46716  Appinfo - ok

09:16:11.0488 46716  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys

09:16:11.0519 46716  arc - ok

09:16:11.0542 46716  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

09:16:11.0575 46716  arcsas - ok

09:16:11.0608 46716  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

09:16:11.0737 46716  AsyncMac - ok

09:16:11.0765 46716  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

09:16:11.0793 46716  atapi - ok

09:16:11.0863 46716  [ 8C56E93749BA53A4B645963D3439E01E ] athr            C:\Windows\system32\DRIVERS\athrx.sys

09:16:11.0957 46716  athr - ok

09:16:12.0016 46716  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

09:16:12.0161 46716  AudioEndpointBuilder - ok

09:16:12.0178 46716  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

09:16:12.0287 46716  AudioSrv - ok

09:16:12.0337 46716  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

09:16:12.0474 46716  AxInstSV - ok

09:16:12.0525 46716  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

09:16:12.0609 46716  b06bdrv - ok

09:16:12.0659 46716  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

09:16:12.0716 46716  b57nd60a - ok

09:16:12.0760 46716  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

09:16:12.0911 46716  BDESVC - ok

09:16:12.0934 46716  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

09:16:13.0058 46716  Beep - ok

09:16:13.0130 46716  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

09:16:13.0243 46716  BFE - ok

09:16:13.0735 46716  [ 4AD1940DAAAC84036B65EF78BAE42208 ] BHDrvx64        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130924.001\BHDrvx64.sys

09:16:13.0878 46716  BHDrvx64 - ok

09:16:13.0912 46716  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

09:16:14.0110 46716  BITS - ok

09:16:14.0126 46716  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

09:16:14.0168 46716  blbdrive - ok

09:16:14.0258 46716  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

09:16:14.0332 46716  bowser - ok

09:16:14.0392 46716  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

09:16:14.0505 46716  BrFiltLo - ok

09:16:14.0520 46716  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

09:16:14.0557 46716  BrFiltUp - ok

09:16:14.0592 46716  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

09:16:14.0669 46716  Browser - ok

09:16:14.0698 46716  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

09:16:14.0783 46716  Brserid - ok

09:16:14.0800 46716  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

09:16:14.0857 46716  BrSerWdm - ok

09:16:14.0882 46716  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

09:16:14.0943 46716  BrUsbMdm - ok

09:16:14.0970 46716  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

09:16:15.0015 46716  BrUsbSer - ok

09:16:15.0043 46716  [ 832B121E4532919CC49F2438F1DCAA21 ] BthAvrcp        C:\Windows\system32\DRIVERS\BthAvrcp.sys

09:16:15.0086 46716  BthAvrcp - ok

09:16:15.0130 46716  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys

09:16:15.0350 46716  BthEnum - ok

09:16:15.0380 46716  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

09:16:15.0429 46716  BTHMODEM - ok

09:16:15.0474 46716  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

09:16:15.0538 46716  BthPan - ok

09:16:15.0604 46716  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys

09:16:15.0681 46716  BTHPORT - ok

09:16:15.0713 46716  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

09:16:15.0827 46716  bthserv - ok

09:16:15.0879 46716  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys

09:16:16.0255 46716  BTHUSB - ok

09:16:16.0354 46716  [ 56685951208AC81CF923B9B08BEDF3B7 ] ccSet_NIS       C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys

09:16:16.0384 46716  ccSet_NIS - ok

09:16:16.0399 46716  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

09:16:16.0537 46716  cdfs - ok

09:16:16.0606 46716  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

09:16:16.0657 46716  cdrom - ok

09:16:16.0716 46716  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

09:16:16.0828 46716  CertPropSvc - ok

09:16:16.0891 46716  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

09:16:16.0967 46716  circlass - ok

09:16:17.0025 46716  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

09:16:17.0080 46716  CLFS - ok

09:16:17.0260 46716  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

09:16:17.0287 46716  clr_optimization_v2.0.50727_32 - ok

09:16:17.0343 46716  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

09:16:17.0370 46716  clr_optimization_v2.0.50727_64 - ok

09:16:17.0431 46716  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

09:16:17.0478 46716  clr_optimization_v4.0.30319_32 - ok

09:16:17.0514 46716  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

09:16:17.0542 46716  clr_optimization_v4.0.30319_64 - ok

09:16:17.0571 46716  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

09:16:17.0615 46716  CmBatt - ok

09:16:17.0637 46716  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

09:16:17.0666 46716  cmdide - ok

09:16:17.0713 46716  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys

09:16:17.0782 46716  CNG - ok

09:16:17.0809 46716  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

09:16:17.0838 46716  Compbatt - ok

09:16:17.0879 46716  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

09:16:17.0932 46716  CompositeBus - ok

09:16:17.0958 46716  COMSysApp - ok

09:16:17.0997 46716  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

09:16:18.0026 46716  crcdisk - ok

09:16:18.0074 46716  [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

09:16:18.0153 46716  CryptSvc - ok

09:16:18.0194 46716  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

09:16:18.0320 46716  DcomLaunch - ok

09:16:18.0364 46716  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

09:16:18.0484 46716  defragsvc - ok

09:16:18.0530 46716  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

09:16:18.0639 46716  DfsC - ok

09:16:18.0698 46716  [ 41AC348DBD378F618CB4FDEE54270692 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys

09:16:18.0745 46716  dg_ssudbus - ok

09:16:18.0790 46716  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

09:16:18.0861 46716  Dhcp - ok

09:16:18.0890 46716  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

09:16:19.0016 46716  discache - ok

09:16:19.0058 46716  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys

09:16:19.0089 46716  Disk - ok

09:16:19.0115 46716  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

09:16:19.0185 46716  Dnscache - ok

09:16:19.0227 46716  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

09:16:19.0337 46716  dot3svc - ok

09:16:19.0362 46716  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

09:16:19.0476 46716  DPS - ok

09:16:19.0522 46716  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

09:16:19.0567 46716  drmkaud - ok

09:16:19.0621 46716  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

09:16:19.0692 46716  DXGKrnl - ok

09:16:19.0717 46716  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

09:16:19.0827 46716  EapHost - ok

09:16:19.0943 46716  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

09:16:20.0140 46716  ebdrv - ok

09:16:20.0190 46716  [ A2DA3D8E0B336E13F7A155B5789B58CF ] eeCtrl          C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

09:16:20.0233 46716  eeCtrl - ok

09:16:20.0276 46716  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

09:16:20.0330 46716  EFS - ok

09:16:20.0414 46716  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

09:16:20.0519 46716  ehRecvr - ok

09:16:20.0541 46716  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

09:16:20.0585 46716  ehSched - ok

09:16:20.0623 46716  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

09:16:20.0674 46716  elxstor - ok

09:16:20.0709 46716  [ 23C3061D2F7F8BCB6140A098447035B4 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

09:16:20.0737 46716  EraserUtilRebootDrv - ok

09:16:20.0762 46716  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

09:16:20.0806 46716  ErrDev - ok

09:16:20.0848 46716  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

09:16:20.0963 46716  EventSystem - ok

09:16:20.0991 46716  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

09:16:21.0109 46716  exfat - ok

09:16:21.0138 46716  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

09:16:21.0249 46716  fastfat - ok

09:16:21.0310 46716  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

09:16:21.0405 46716  Fax - ok

09:16:21.0440 46716  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

09:16:21.0485 46716  fdc - ok

09:16:21.0517 46716  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

09:16:21.0635 46716  fdPHost - ok

09:16:21.0655 46716  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

09:16:21.0760 46716  FDResPub - ok

09:16:21.0796 46716  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

09:16:21.0834 46716  FileInfo - ok

09:16:21.0857 46716  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

09:16:21.0982 46716  Filetrace - ok

09:16:22.0011 46716  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

09:16:22.0055 46716  flpydisk - ok

09:16:22.0104 46716  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

09:16:22.0143 46716  FltMgr - ok

09:16:22.0217 46716  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll

09:16:22.0330 46716  FontCache - ok

09:16:22.0376 46716  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

09:16:22.0400 46716  FontCache3.0.0.0 - ok

09:16:22.0425 46716  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

09:16:22.0455 46716  FsDepends - ok

09:16:22.0494 46716  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

09:16:22.0522 46716  Fs_Rec - ok

09:16:22.0579 46716  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

09:16:22.0622 46716  fvevol - ok

09:16:22.0644 46716  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

09:16:22.0678 46716  gagp30kx - ok

09:16:22.0728 46716  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

09:16:22.0855 46716  gpsvc - ok

09:16:22.0876 46716  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

09:16:22.0941 46716  hcw85cir - ok

09:16:22.0991 46716  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

09:16:23.0062 46716  HdAudAddService - ok

09:16:23.0103 46716  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

09:16:23.0163 46716  HDAudBus - ok

09:16:23.0196 46716  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

09:16:23.0247 46716  HidBatt - ok

09:16:23.0274 46716  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

09:16:23.0324 46716  HidBth - ok

09:16:23.0353 46716  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

09:16:23.0405 46716  HidIr - ok

09:16:23.0434 46716  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

09:16:23.0540 46716  hidserv - ok

09:16:23.0593 46716  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

09:16:23.0623 46716  HidUsb - ok

09:16:23.0659 46716  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

09:16:23.0769 46716  hkmsvc - ok

09:16:23.0810 46716  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

09:16:23.0872 46716  HomeGroupListener - ok

09:16:23.0908 46716  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

09:16:23.0953 46716  HomeGroupProvider - ok

09:16:23.0998 46716  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

09:16:24.0029 46716  HpSAMD - ok

09:16:24.0080 46716  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

09:16:24.0210 46716  HTTP - ok

09:16:24.0238 46716  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

09:16:24.0268 46716  hwpolicy - ok

09:16:24.0297 46716  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

09:16:24.0332 46716  i8042prt - ok

09:16:24.0384 46716  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

09:16:24.0432 46716  iaStorV - ok

09:16:24.0504 46716  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

09:16:24.0563 46716  idsvc - ok

09:16:24.0676 46716  [ A1258065E8B16E23E2AFDE72FB5559BC ] IDSVia64        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130926.001\IDSvia64.sys

09:16:24.0721 46716  IDSVia64 - ok

09:16:25.0008 46716  [ 677AA5991026A65ADA128C4B59CF2BAD ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

09:16:25.0491 46716  igfx - ok

09:16:25.0538 46716  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

09:16:25.0567 46716  iirsp - ok

09:16:25.0622 46716  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

09:16:25.0753 46716  IKEEXT - ok

09:16:25.0786 46716  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

09:16:25.0815 46716  intelide - ok

09:16:25.0871 46716  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

09:16:25.0925 46716  intelppm - ok

09:16:25.0951 46716  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

09:16:26.0072 46716  IPBusEnum - ok

09:16:26.0129 46716  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

09:16:26.0248 46716  IpFilterDriver - ok

09:16:26.0303 46716  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

09:16:26.0384 46716  iphlpsvc - ok

09:16:26.0410 46716  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

09:16:26.0443 46716  IPMIDRV - ok

09:16:26.0471 46716  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

09:16:26.0579 46716  IPNAT - ok

09:16:26.0610 46716  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

09:16:26.0707 46716  IRENUM - ok

09:16:26.0725 46716  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

09:16:26.0753 46716  isapnp - ok

09:16:26.0788 46716  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

09:16:26.0830 46716  iScsiPrt - ok

09:16:26.0853 46716  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys

09:16:26.0886 46716  kbdclass - ok

09:16:26.0908 46716  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys

09:16:26.0953 46716  kbdhid - ok

09:16:26.0977 46716  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

09:16:27.0006 46716  KeyIso - ok

09:16:27.0050 46716  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

09:16:27.0082 46716  KSecDD - ok

09:16:27.0094 46716  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

09:16:27.0128 46716  KSecPkg - ok

09:16:27.0157 46716  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

09:16:27.0263 46716  ksthunk - ok

09:16:27.0304 46716  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

09:16:27.0427 46716  KtmRm - ok

09:16:27.0484 46716  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

09:16:27.0597 46716  LanmanServer - ok

09:16:27.0625 46716  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

09:16:27.0733 46716  LanmanWorkstation - ok

09:16:27.0796 46716  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

09:16:27.0895 46716  lltdio - ok

09:16:27.0931 46716  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

09:16:28.0034 46716  lltdsvc - ok

09:16:28.0062 46716  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

09:16:28.0157 46716  lmhosts - ok

09:16:28.0216 46716  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

09:16:28.0260 46716  LSI_FC - ok

09:16:28.0318 46716  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

09:16:28.0360 46716  LSI_SAS - ok

09:16:28.0383 46716  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

09:16:28.0413 46716  LSI_SAS2 - ok

09:16:28.0434 46716  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

09:16:28.0467 46716  LSI_SCSI - ok

09:16:28.0498 46716  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

09:16:28.0594 46716  luafv - ok

09:16:28.0633 46716  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

09:16:28.0684 46716  Mcx2Svc - ok

09:16:28.0712 46716  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

09:16:28.0741 46716  megasas - ok

09:16:28.0767 46716  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

09:16:28.0808 46716  MegaSR - ok

09:16:28.0831 46716  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

09:16:28.0937 46716  MMCSS - ok

09:16:28.0952 46716  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

09:16:29.0062 46716  Modem - ok

09:16:29.0087 46716  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

09:16:29.0134 46716  monitor - ok

09:16:29.0159 46716  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

09:16:29.0191 46716  mouclass - ok

09:16:29.0232 46716  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

09:16:29.0277 46716  mouhid - ok

09:16:29.0318 46716  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

09:16:29.0349 46716  mountmgr - ok

09:16:29.0379 46716  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

09:16:29.0413 46716  mpio - ok

09:16:29.0429 46716  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

09:16:29.0535 46716  mpsdrv - ok

09:16:29.0580 46716  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

09:16:29.0720 46716  MpsSvc - ok

09:16:29.0756 46716  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

09:16:29.0814 46716  MRxDAV - ok

09:16:29.0847 46716  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

09:16:29.0915 46716  mrxsmb - ok

09:16:29.0946 46716  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

09:16:29.0999 46716  mrxsmb10 - ok

09:16:30.0028 46716  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

09:16:30.0085 46716  mrxsmb20 - ok

09:16:30.0144 46716  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

09:16:30.0172 46716  msahci - ok

09:16:30.0288 46716  [ A592A054D78750B4D73ABAA4C94DECDF ] MSCamSvc        C:\Program Files\Microsoft LifeCam\MSCamS64.exe

09:16:30.0318 46716  MSCamSvc - ok

09:16:30.0349 46716  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

09:16:30.0382 46716  msdsm - ok

09:16:30.0396 46716  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

09:16:30.0452 46716  MSDTC - ok

09:16:30.0500 46716  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

09:16:30.0597 46716  Msfs - ok

09:16:30.0618 46716  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

09:16:30.0736 46716  mshidkmdf - ok

09:16:30.0778 46716  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

09:16:30.0809 46716  msisadrv - ok

09:16:30.0870 46716  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

09:16:31.0098 46716  MSiSCSI - ok

09:16:31.0108 46716  msiserver - ok

09:16:31.0158 46716  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

09:16:31.0409 46716  MSKSSRV - ok

09:16:31.0437 46716  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

09:16:31.0589 46716  MSPCLOCK - ok

09:16:31.0621 46716  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

09:16:31.0714 46716  MSPQM - ok

09:16:31.0813 46716  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

09:16:31.0849 46716  MsRPC - ok

09:16:31.0885 46716  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

09:16:31.0908 46716  mssmbios - ok

09:16:31.0948 46716  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

09:16:32.0037 46716  MSTEE - ok

09:16:32.0058 46716  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

09:16:32.0107 46716  MTConfig - ok

09:16:32.0143 46716  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

09:16:32.0167 46716  Mup - ok

09:16:32.0209 46716  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

09:16:32.0334 46716  napagent - ok

09:16:32.0393 46716  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

09:16:32.0457 46716  NativeWifiP - ok

09:16:32.0559 46716  [ 702E07EC32F96ACDB873E9A5465D4401 ] NAVENG          C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130927.002\ENG64.SYS

09:16:32.0587 46716  NAVENG - ok

09:16:32.0655 46716  [ 302EA314A1AF0D7CEF0A3D0195F79561 ] NAVEX15         C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130927.002\EX64.SYS

09:16:32.0771 46716  NAVEX15 - ok

09:16:32.0827 46716  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

09:16:32.0896 46716  NDIS - ok

09:16:32.0927 46716  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

09:16:33.0037 46716  NdisCap - ok

09:16:33.0063 46716  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

09:16:33.0169 46716  NdisTapi - ok

09:16:33.0204 46716  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

09:16:33.0309 46716  Ndisuio - ok

09:16:33.0343 46716  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

09:16:33.0452 46716  NdisWan - ok

09:16:33.0512 46716  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

09:16:33.0629 46716  NDProxy - ok

09:16:33.0804 46716  [ B90E093E7A7250906F1054418B5339C0 ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

09:16:33.0867 46716  Nero BackItUp Scheduler 4.0 - ok

09:16:33.0909 46716  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

09:16:34.0027 46716  NetBIOS - ok

09:16:34.0071 46716  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

09:16:34.0205 46716  NetBT - ok

09:16:34.0221 46716  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

09:16:34.0253 46716  Netlogon - ok

09:16:34.0294 46716  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

09:16:34.0422 46716  Netman - ok

09:16:34.0453 46716  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

09:16:34.0580 46716  netprofm - ok

09:16:34.0620 46716  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

09:16:34.0648 46716  NetTcpPortSharing - ok

09:16:34.0675 46716  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

09:16:34.0706 46716  nfrd960 - ok

09:16:34.0779 46716  [ 1BF9D6476061B31CD7FC2BF848529A56 ] NIS             C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

09:16:34.0810 46716  NIS - ok

09:16:34.0883 46716  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

09:16:34.0937 46716  NlaSvc - ok

09:16:34.0960 46716  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

09:16:35.0065 46716  Npfs - ok

09:16:35.0097 46716  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

09:16:35.0210 46716  nsi - ok

09:16:35.0245 46716  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

09:16:35.0352 46716  nsiproxy - ok

09:16:35.0427 46716  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

09:16:35.0532 46716  Ntfs - ok

09:16:35.0557 46716  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

09:16:35.0662 46716  Null - ok

09:16:35.0698 46716  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

09:16:35.0732 46716  nvraid - ok

09:16:35.0751 46716  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

09:16:35.0787 46716  nvstor - ok

09:16:35.0815 46716  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

09:16:35.0848 46716  nv_agp - ok

09:16:35.0874 46716  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

09:16:35.0906 46716  ohci1394 - ok

09:16:35.0941 46716  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

09:16:36.0020 46716  p2pimsvc - ok

09:16:36.0043 46716  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

09:16:36.0085 46716  p2psvc - ok

09:16:36.0109 46716  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

09:16:36.0143 46716  Parport - ok

09:16:36.0177 46716  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

09:16:36.0208 46716  partmgr - ok

09:16:36.0236 46716  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

09:16:36.0303 46716  PcaSvc - ok

09:16:36.0343 46716  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

09:16:36.0378 46716  pci - ok

09:16:36.0409 46716  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

09:16:36.0438 46716  pciide - ok

09:16:36.0466 46716  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

09:16:36.0503 46716  pcmcia - ok

09:16:36.0519 46716  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

09:16:36.0550 46716  pcw - ok

09:16:36.0576 46716  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

09:16:36.0707 46716  PEAUTH - ok

09:16:36.0799 46716  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

09:16:36.0849 46716  PerfHost - ok

09:16:36.0923 46716  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

09:16:37.0072 46716  pla - ok

09:16:37.0117 46716  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

09:16:37.0193 46716  PlugPlay - ok

09:16:37.0228 46716  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

09:16:37.0276 46716  PNRPAutoReg - ok

09:16:37.0308 46716  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

09:16:37.0346 46716  PNRPsvc - ok

09:16:37.0393 46716  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

09:16:37.0513 46716  PolicyAgent - ok

09:16:37.0553 46716  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

09:16:37.0665 46716  Power - ok

09:16:37.0694 46716  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

09:16:37.0801 46716  PptpMiniport - ok

09:16:37.0830 46716  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys

09:16:37.0873 46716  Processor - ok

09:16:37.0966 46716  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

09:16:38.0085 46716  ProfSvc - ok

09:16:38.0099 46716  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

09:16:38.0130 46716  ProtectedStorage - ok

09:16:38.0173 46716  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

09:16:38.0279 46716  Psched - ok

09:16:38.0317 46716  [ A73512132ECB2CD721E163ABCEAC359F ] qicflt          C:\Windows\system32\DRIVERS\qicflt.sys

09:16:38.0342 46716  qicflt - ok

09:16:38.0393 46716  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

09:16:38.0490 46716  ql2300 - ok

09:16:38.0523 46716  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

09:16:38.0558 46716  ql40xx - ok

09:16:38.0590 46716  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

09:16:38.0653 46716  QWAVE - ok

09:16:38.0678 46716  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

09:16:38.0739 46716  QWAVEdrv - ok

09:16:38.0753 46716  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

09:16:38.0868 46716  RasAcd - ok

09:16:38.0914 46716  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

09:16:39.0036 46716  RasAgileVpn - ok

09:16:39.0072 46716  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

09:16:39.0192 46716  RasAuto - ok

09:16:39.0228 46716  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

09:16:39.0349 46716  Rasl2tp - ok

09:16:39.0397 46716  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

09:16:39.0531 46716  RasMan - ok

09:16:39.0598 46716  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

09:16:39.0745 46716  RasPppoe - ok

09:16:39.0853 46716  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

09:16:39.0996 46716  RasSstp - ok

09:16:40.0096 46716  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

09:16:40.0233 46716  rdbss - ok

09:16:40.0287 46716  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

09:16:40.0370 46716  rdpbus - ok

09:16:40.0431 46716  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

09:16:40.0585 46716  RDPCDD - ok

09:16:40.0833 46716  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

09:16:41.0039 46716  RDPENCDD - ok

09:16:41.0128 46716  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

09:16:41.0232 46716  RDPREFMP - ok

09:16:41.0290 46716  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

09:16:41.0367 46716  RDPWD - ok

09:16:41.0421 46716  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

09:16:41.0453 46716  rdyboost - ok

09:16:41.0478 46716  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

09:16:41.0583 46716  RemoteAccess - ok

09:16:41.0620 46716  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

09:16:41.0773 46716  RemoteRegistry - ok

09:16:41.0834 46716  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

09:16:42.0369 46716  RFCOMM - ok

09:16:42.0399 46716  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

09:16:42.0585 46716  RpcEptMapper - ok

09:16:42.0626 46716  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

09:16:42.0695 46716  RpcLocator - ok

09:16:42.0739 46716  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

09:16:42.0838 46716  RpcSs - ok

09:16:42.0881 46716  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

09:16:42.0967 46716  rspndr - ok

09:16:43.0012 46716  [ 4B42BC58294E83A6A92EC8B88C14C4A3 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

09:16:43.0047 46716  RTL8167 - ok

09:16:43.0095 46716  [ 032F537623A7B2FB81AAA184C30B70C3 ] s0017bus        C:\Windows\system32\DRIVERS\s0017bus.sys

09:16:43.0115 46716  s0017bus - ok

09:16:43.0131 46716  [ 9964A28E569B4FF105B446EF8978FD5C ] s0017mdfl       C:\Windows\system32\DRIVERS\s0017mdfl.sys

09:16:43.0152 46716  s0017mdfl - ok

09:16:43.0179 46716  [ 06347087D274C23DCFA8C4AB5C4314DB ] s0017mdm        C:\Windows\system32\DRIVERS\s0017mdm.sys

09:16:43.0199 46716  s0017mdm - ok

09:16:43.0215 46716  [ F0F0747B3FA50272DE6B1BF575FA4700 ] s0017mgmt       C:\Windows\system32\DRIVERS\s0017mgmt.sys

09:16:43.0234 46716  s0017mgmt - ok

09:16:43.0254 46716  [ 7224412CEA2FF2DF7D4842C1B0E71045 ] s0017nd5        C:\Windows\system32\DRIVERS\s0017nd5.sys

09:16:43.0272 46716  s0017nd5 - ok

09:16:43.0294 46716  [ 3FEADBC7F09B8B596CBFB82F12ABA87F ] s0017obex       C:\Windows\system32\DRIVERS\s0017obex.sys

09:16:43.0315 46716  s0017obex - ok

09:16:43.0367 46716  [ 2B63BEA31D939888B2A8F3F14D89B5C1 ] s0017unic       C:\Windows\system32\DRIVERS\s0017unic.sys

09:16:43.0395 46716  s0017unic - ok

09:16:43.0429 46716  [ 301FBA4594FB5C0A469299A65106B4AA ] s1018bus        C:\Windows\system32\DRIVERS\s1018bus.sys

09:16:43.0449 46716  s1018bus - ok

09:16:43.0478 46716  [ D1D7C744F79710357E60FC04D125ED01 ] s1018mdfl       C:\Windows\system32\DRIVERS\s1018mdfl.sys

09:16:43.0495 46716  s1018mdfl - ok

09:16:43.0515 46716  [ 7DBE12CCCD837D4266B2DDD80A329C09 ] s1018mdm        C:\Windows\system32\DRIVERS\s1018mdm.sys

09:16:43.0534 46716  s1018mdm - ok

09:16:43.0563 46716  [ 065FF5E62D2D18A6D93FD925546CD549 ] s1018mgmt       C:\Windows\system32\DRIVERS\s1018mgmt.sys

09:16:43.0583 46716  s1018mgmt - ok

09:16:43.0597 46716  [ 5101D815BDF0D667E3D5F0EA727CAAEE ] s1018nd5        C:\Windows\system32\DRIVERS\s1018nd5.sys

09:16:43.0621 46716  s1018nd5 - ok

09:16:43.0647 46716  [ 13F220C65B444AC9BDA49DACFC3230BB ] s1018obex       C:\Windows\system32\DRIVERS\s1018obex.sys

09:16:43.0675 46716  s1018obex - ok

09:16:43.0697 46716  [ CE7D8BCE80211D8A35F6BD7A87791860 ] s1018unic       C:\Windows\system32\DRIVERS\s1018unic.sys

09:16:43.0725 46716  s1018unic - ok

09:16:43.0764 46716  [ 0031DD0C5D4446DA0A3E02617DC6D642 ] s1039bus        C:\Windows\system32\DRIVERS\s1039bus.sys

09:16:43.0792 46716  s1039bus - ok

09:16:43.0814 46716  [ 98C7DBE2290D8CB0235E9528F6A1A53D ] s1039mdfl       C:\Windows\system32\DRIVERS\s1039mdfl.sys

09:16:43.0837 46716  s1039mdfl - ok

09:16:43.0861 46716  [ 7EF052A067D862ECD2A2335914611074 ] s1039mdm        C:\Windows\system32\DRIVERS\s1039mdm.sys

09:16:43.0890 46716  s1039mdm - ok

09:16:43.0909 46716  [ BCC3F31F1FE1E78A5BA2CD6A0E44BA64 ] s1039mgmt       C:\Windows\system32\DRIVERS\s1039mgmt.sys

09:16:43.0937 46716  s1039mgmt - ok

09:16:43.0985 46716  [ A0CF11BFFA41176CCD54E701CEB68921 ] s1039nd5        C:\Windows\system32\DRIVERS\s1039nd5.sys

09:16:44.0007 46716  s1039nd5 - ok

09:16:44.0024 46716  [ BD2DA968C5DCEF51BA8014FBAC7A0B6A ] s1039obex       C:\Windows\system32\DRIVERS\s1039obex.sys

09:16:44.0067 46716  s1039obex - ok

09:16:44.0095 46716  [ 96B4051B65C1974258A8A33A03C0B082 ] s1039unic       C:\Windows\system32\DRIVERS\s1039unic.sys

09:16:44.0125 46716  s1039unic - ok

09:16:44.0145 46716  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

09:16:44.0177 46716  SamSs - ok

09:16:44.0207 46716  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

09:16:44.0240 46716  sbp2port - ok

09:16:44.0271 46716  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

09:16:44.0382 46716  SCardSvr - ok

09:16:44.0418 46716  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

09:16:44.0519 46716  scfilter - ok

09:16:44.0592 46716  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

09:16:44.0836 46716  Schedule - ok

09:16:44.0874 46716  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

09:16:45.0014 46716  SCPolicySvc - ok

09:16:45.0028 46716  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

09:16:45.0116 46716  SDRSVC - ok

09:16:45.0176 46716  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

09:16:45.0343 46716  secdrv - ok

09:16:45.0396 46716  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

09:16:45.0499 46716  seclogon - ok

09:16:45.0552 46716  [ EDE7A1D2715AAC2190D51DC07AFD44E3 ] seehcri         C:\Windows\system32\DRIVERS\seehcri.sys

09:16:45.0592 46716  seehcri ( UnsignedFile.Multi.Generic ) - warning

09:16:45.0592 46716  seehcri - detected UnsignedFile.Multi.Generic (1)

09:16:45.0623 46716  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

09:16:45.0719 46716  SENS - ok

09:16:45.0737 46716  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

09:16:45.0804 46716  SensrSvc - ok

09:16:45.0818 46716  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

09:16:45.0845 46716  Serenum - ok

09:16:45.0874 46716  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

09:16:45.0908 46716  Serial - ok

09:16:45.0957 46716  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

09:16:45.0982 46716  sermouse - ok

09:16:46.0030 46716  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

09:16:46.0147 46716  SessionEnv - ok

09:16:46.0181 46716  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

09:16:46.0229 46716  sffdisk - ok

09:16:46.0236 46716  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

09:16:46.0278 46716  sffp_mmc - ok

09:16:46.0297 46716  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

09:16:46.0351 46716  sffp_sd - ok

09:16:46.0386 46716  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

09:16:46.0430 46716  sfloppy - ok

09:16:46.0477 46716  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

09:16:46.0599 46716  SharedAccess - ok

09:16:46.0638 46716  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

09:16:46.0755 46716  ShellHWDetection - ok

09:16:46.0793 46716  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

09:16:46.0831 46716  SiSRaid2 - ok

09:16:46.0863 46716  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

09:16:46.0916 46716  SiSRaid4 - ok

09:16:46.0969 46716  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

09:16:47.0032 46716  SkypeUpdate - ok

09:16:47.0080 46716  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

09:16:47.0364 46716  Smb - ok

09:16:47.0416 46716  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

09:16:47.0471 46716  SNMPTRAP - ok

09:16:47.0593 46716  [ 5177D14A78E60FD61DCFC6B388E7E971 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe

09:16:47.0625 46716  Sony PC Companion ( UnsignedFile.Multi.Generic ) - warning

09:16:47.0625 46716  Sony PC Companion - detected UnsignedFile.Multi.Generic (1)

09:16:47.0665 46716  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

09:16:47.0701 46716  spldr - ok

09:16:47.0750 46716  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

09:16:47.0880 46716  Spooler - ok

09:16:48.0016 46716  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

09:16:48.0327 46716  sppsvc - ok

09:16:48.0354 46716  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

09:16:48.0667 46716  sppuinotify - ok

09:16:48.0771 46716  [ 2FD9346F9D76CB4192D37329CFA47A82 ] SRTSP           C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS

09:16:48.0861 46716  SRTSP - ok

09:16:48.0879 46716  [ 0E76CEF892C45734F7AED09FDDF35D4D ] SRTSPX          C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS

09:16:48.0899 46716  SRTSPX - ok

09:16:48.0939 46716  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

09:16:49.0007 46716  srv - ok

09:16:49.0040 46716  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

09:16:49.0085 46716  srv2 - ok

09:16:49.0110 46716  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

09:16:49.0160 46716  srvnet - ok

09:16:49.0201 46716  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

09:16:49.0295 46716  SSDPSRV - ok

09:16:49.0319 46716  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

09:16:49.0453 46716  SstpSvc - ok

09:16:49.0499 46716  [ B4C983DA20E2970E21893BF0E4EE2AD8 ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys

09:16:49.0521 46716  ssudmdm - ok

09:16:49.0558 46716  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

09:16:49.0580 46716  stexstor - ok

09:16:49.0634 46716  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

09:16:49.0694 46716  stisvc - ok

09:16:49.0721 46716  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys

09:16:49.0741 46716  swenum - ok

09:16:49.0767 46716  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

09:16:50.0005 46716  swprv - ok

09:16:50.0057 46716  [ 52DC0048D667757A8A2E4C87182890AC ] SymDS           C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS

09:16:50.0083 46716  SymDS - ok

09:16:50.0189 46716  [ 599872BAD7CFB45C7CE47CDED4B726D8 ] SymEFA          C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS

09:16:50.0282 46716  SymEFA - ok

09:16:50.0340 46716  [ F19E5E37ED8134B9E5F6287F2D3A75D7 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

09:16:50.0366 46716  SymEvent - ok

09:16:50.0382 46716  [ ADF37F1A715D6C56C8E065FD8569A9A4 ] SymIRON         C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS

09:16:50.0426 46716  SymIRON - ok

09:16:50.0522 46716  [ 9CDCA70485BD6B9D230365F67C31F132 ] SymNetS         C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS

09:16:50.0572 46716  SymNetS - ok

09:16:50.0838 46716  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

09:16:51.0117 46716  SysMain - ok

09:16:51.0153 46716  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

09:16:51.0210 46716  TabletInputService - ok

09:16:51.0237 46716  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

09:16:51.0376 46716  TapiSrv - ok

09:16:51.0459 46716  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

09:16:51.0576 46716  TBS - ok

09:16:51.0687 46716  [ DB74544B75566C974815E79A62433F29 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

09:16:51.0806 46716  Tcpip - ok

09:16:51.0992 46716  [ DB74544B75566C974815E79A62433F29 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

09:16:52.0129 46716  TCPIP6 - ok

09:16:52.0198 46716  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

09:16:52.0245 46716  tcpipreg - ok

09:16:52.0316 46716  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

09:16:52.0425 46716  TDPIPE - ok

09:16:52.0465 46716  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

09:16:52.0508 46716  TDTCP - ok

09:16:52.0554 46716  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

09:16:52.0682 46716  tdx - ok

09:16:52.0712 46716  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys

09:16:52.0767 46716  TermDD - ok

09:16:52.0799 46716  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

09:16:53.0196 46716  TermService - ok

09:16:53.0244 46716  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

09:16:53.0300 46716  Themes - ok

09:16:53.0331 46716  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

09:16:53.0436 46716  THREADORDER - ok

09:16:53.0466 46716  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

09:16:53.0580 46716  TrkWks - ok

09:16:53.0664 46716  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

09:16:53.0767 46716  TrustedInstaller - ok

09:16:53.0829 46716  [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

09:16:53.0929 46716  tssecsrv - ok

09:16:53.0990 46716  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

09:16:54.0071 46716  TsUsbFlt - ok

09:16:54.0148 46716  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

09:16:54.0228 46716  tunnel - ok

09:16:54.0257 46716  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

09:16:54.0284 46716  uagp35 - ok

09:16:54.0326 46716  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

09:16:54.0405 46716  udfs - ok

09:16:54.0439 46716  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

09:16:54.0474 46716  UI0Detect - ok

09:16:54.0544 46716  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

09:16:54.0605 46716  uliagpkx - ok

09:16:54.0637 46716  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys

09:16:54.0683 46716  umbus - ok

09:16:54.0711 46716  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

09:16:54.0737 46716  UmPass - ok

09:16:54.0773 46716  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

09:16:54.0977 46716  upnphost - ok

09:16:55.0039 46716  [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

09:16:55.0073 46716  usbaudio - ok

09:16:55.0090 46716  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

09:16:55.0142 46716  usbccgp - ok

09:16:55.0188 46716  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

09:16:55.0227 46716  usbcir - ok

09:16:55.0249 46716  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

09:16:55.0295 46716  usbehci - ok

09:16:55.0359 46716  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

09:16:55.0408 46716  usbhub - ok

09:16:55.0438 46716  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

09:16:55.0491 46716  usbohci - ok

09:16:55.0533 46716  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

09:16:55.0588 46716  usbprint - ok

09:16:55.0652 46716  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

09:16:55.0691 46716  usbscan - ok

09:16:55.0728 46716  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

09:16:55.0810 46716  USBSTOR - ok

09:16:55.0824 46716  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

09:16:55.0869 46716  usbuhci - ok

09:16:55.0896 46716  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys

09:16:55.0948 46716  usbvideo - ok

09:16:55.0981 46716  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

09:16:56.0095 46716  UxSms - ok

09:16:56.0123 46716  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

09:16:56.0153 46716  VaultSvc - ok

09:16:56.0186 46716  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

09:16:56.0215 46716  vdrvroot - ok

09:16:56.0254 46716  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

09:16:56.0381 46716  vds - ok

09:16:56.0420 46716  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

09:16:56.0460 46716  vga - ok

09:16:56.0490 46716  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

09:16:56.0629 46716  VgaSave - ok

09:16:56.0716 46716  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

09:16:56.0760 46716  vhdmp - ok

09:16:56.0796 46716  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

09:16:56.0827 46716  viaide - ok

09:16:56.0853 46716  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

09:16:56.0884 46716  volmgr - ok

09:16:57.0111 46716  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

09:16:57.0231 46716  volmgrx - ok

09:16:57.0298 46716  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

09:16:57.0431 46716  volsnap - ok

09:16:57.0465 46716  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

09:16:57.0499 46716  vsmraid - ok

09:16:57.0565 46716  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

09:16:57.0754 46716  VSS - ok

09:16:57.0768 46716  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

09:16:57.0884 46716  vwifibus - ok

09:16:57.0918 46716  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

09:16:58.0043 46716  vwififlt - ok

09:16:58.0118 46716  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

09:16:58.0208 46716  vwifimp - ok

09:16:58.0393 46716  [ C366AE91D2CC2C1C25380061D235C36B ] VX3000          C:\Windows\system32\DRIVERS\VX3000.sys

09:16:58.0514 46716  VX3000 - ok

09:16:58.0556 46716  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

09:16:58.0680 46716  W32Time - ok

09:16:58.0713 46716  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

09:16:58.0759 46716  WacomPen - ok

09:16:58.0816 46716  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

09:16:58.0935 46716  WANARP - ok

09:16:58.0949 46716  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

09:16:59.0090 46716  Wanarpv6 - ok

09:16:59.0232 46716  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

09:16:59.0368 46716  WatAdminSvc - ok

09:16:59.0467 46716  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

09:16:59.0579 46716  wbengine - ok

09:16:59.0609 46716  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

09:16:59.0653 46716  WbioSrvc - ok

09:16:59.0703 46716  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

09:16:59.0759 46716  wcncsvc - ok

09:16:59.0782 46716  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

09:16:59.0847 46716  WcsPlugInService - ok

09:16:59.0876 46716  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys

09:16:59.0902 46716  Wd - ok

09:16:59.0962 46716  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

09:17:00.0023 46716  Wdf01000 - ok

09:17:00.0037 46716  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

09:17:00.0141 46716  WdiServiceHost - ok

09:17:00.0147 46716  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

09:17:00.0195 46716  WdiSystemHost - ok

09:17:00.0234 46716  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

09:17:00.0300 46716  WebClient - ok

09:17:00.0343 46716  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

09:17:00.0462 46716  Wecsvc - ok

09:17:00.0474 46716  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

09:17:00.0586 46716  wercplsupport - ok

09:17:00.0619 46716  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

09:17:00.0730 46716  WerSvc - ok

09:17:00.0775 46716  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

09:17:00.0869 46716  WfpLwf - ok

09:17:00.0879 46716  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

09:17:00.0908 46716  WIMMount - ok

09:17:00.0922 46716  WinDefend - ok

09:17:00.0935 46716  WinHttpAutoProxySvc - ok

09:17:01.0007 46716  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

09:17:01.0107 46716  Winmgmt - ok

09:17:01.0182 46716  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

09:17:01.0358 46716  WinRM - ok

09:17:01.0426 46716  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

09:17:01.0486 46716  WinUsb - ok

09:17:01.0537 46716  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

09:17:01.0627 46716  Wlansvc - ok

09:17:01.0776 46716  [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

09:17:01.0906 46716  wlidsvc - ok

09:17:01.0931 46716  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

09:17:01.0995 46716  WmiAcpi - ok

09:17:02.0067 46716  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

09:17:02.0147 46716  wmiApSrv - ok

09:17:02.0221 46716  WMPNetworkSvc - ok

09:17:02.0265 46716  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

09:17:02.0328 46716  WPCSvc - ok

09:17:02.0361 46716  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

09:17:02.0423 46716  WPDBusEnum - ok

09:17:02.0449 46716  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

09:17:02.0559 46716  ws2ifsl - ok

09:17:02.0597 46716  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

09:17:02.0665 46716  wscsvc - ok

09:17:02.0670 46716  WSearch - ok

09:17:02.0767 46716  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

09:17:02.0909 46716  wuauserv - ok

09:17:02.0947 46716  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

09:17:03.0025 46716  WudfPf - ok

09:17:03.0101 46716  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

09:17:03.0531 46716  WUDFRd - ok

09:17:03.0559 46716  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

09:17:03.0631 46716  wudfsvc - ok

09:17:03.0688 46716  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll

09:17:03.0844 46716  WwanSvc - ok

09:17:03.0924 46716  ================ Scan global ===============================

09:17:03.0950 46716  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

09:17:03.0988 46716  [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll

09:17:04.0002 46716  [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll

09:17:04.0033 46716  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

09:17:04.0064 46716  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

09:17:04.0071 46716  [Global] - ok

09:17:04.0072 46716  ================ Scan MBR ==================================

09:17:04.0088 46716  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

09:17:05.0028 46716  \Device\Harddisk0\DR0 - ok

09:17:05.0029 46716  ================ Scan VBR ==================================

09:17:05.0059 46716  [ 09E2D839CCBED7A756E13FAD9EA7F992 ] \Device\Harddisk0\DR0\Partition1

09:17:05.0071 46716  \Device\Harddisk0\DR0\Partition1 - ok

09:17:05.0087 46716  [ A9077E1A568CFBE44D71CA43DF0CC375 ] \Device\Harddisk0\DR0\Partition2

09:17:05.0089 46716  \Device\Harddisk0\DR0\Partition2 - ok

09:17:05.0090 46716  ============================================================

09:17:05.0090 46716  Scan finished

09:17:05.0090 46716  ============================================================

09:17:05.0107 34716  Detected object count: 2

09:17:05.0107 34716  Actual detected object count: 2

09:17:16.0248 34716  seehcri ( UnsignedFile.Multi.Generic ) - skipped by user

09:17:16.0249 34716  seehcri ( UnsignedFile.Multi.Generic ) - User select action: Skip 

09:17:16.0249 34716  Sony PC Companion ( UnsignedFile.Multi.Generic ) - skipped by user

09:17:16.0249 34716  Sony PC Companion ( UnsignedFile.Multi.Generic ) - User select action: Skip

Ich habe jetzt noch AdBlock bei Chrome aktiviert, bisher ist noch nichts ungewöhnliches aufgetaucht.

aharonov

01.10.2013 14:50

Läuft immer noch alles normal oder sind wieder Probleme aufgetaucht?

321meins

05.10.2013 08:53

Liste der Anhänge anzeigen (Anzahl: 1)

Jetzt habe ich in Foren einige Wörter unterstrichen

aharonov

05.10.2013 10:18

Dann ist da wieder Adware hinzugekommen.

Starte noch einmal FRST.

Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.

321meins

05.10.2013 16:03

Hab ich mir schon gedacht, hartnäckiges Zeugs

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by Janine (administrator) on FUJI on 05-10-2013 17:00:15

Running from C:\Users\Janine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VJ11R1I

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Windows\vVX3000.exe

() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_175_ActiveX.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Google Update] - C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-25] (Google Inc.)

MountPoints2: E - E:\FRT_Install.exe

MountPoints2: {170b0609-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

MountPoints2: {170b061d-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)

HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [80480 2013-06-26] (Nullsoft, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: :0

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9EC287D89D3CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://google.de/

CHR Plugin: (Shockwave Flash) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File

CHR Plugin: (Media Go Detector) - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)

CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\Janine\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File

CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (AdBlock) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_0

CHR Extension: (Norton Identity Protection) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Plus-HD-2.3) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec\1.25.74_0

CHR Extension: (Gmail) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
 

==================== Services (Whitelisted) =================
 

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [1525848 2013-09-24] (Symantec Corporation)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [1525848 2013-09-24] (Symantec Corporation)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20131004.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20131004.001\IDSvia64.sys [520280 2013-08-20] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131004.035\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131004.035\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131004.035\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131004.035\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)

S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)

S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)

S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)

S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)

S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)

S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)

S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)

S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)

S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)

S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)

S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)

S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)

S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)

S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

S3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-03-19] (Sony Ericsson Mobile Communications)

R3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-28 09:15 - 2013-09-28 09:15 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Janine\Downloads\tdsskiller.exe

2013-09-21 17:28 - 2013-09-21 17:28 - 02347384 _____ (ESET) C:\Users\Janine\Downloads\esetsmartinstaller_enu.exe

2013-09-20 18:45 - 2013-09-20 18:45 - 00035678 _____ C:\Users\Janine\Downloads\FRST1.txt

2013-09-20 18:43 - 2013-09-20 18:44 - 00035678 _____ C:\Users\Janine\Downloads\FRST.txt

2013-09-20 18:37 - 2013-09-20 18:37 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-09-20 17:20 - 2013-09-20 17:20 - 00377856 _____ C:\Users\Janine\Downloads\gmer_2.1.19163.exe

2013-09-20 17:18 - 2013-09-20 17:19 - 00025351 _____ C:\Users\Janine\Downloads\Addition.txt

2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST

2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log

2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable

2013-09-12 07:08 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-12 07:08 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-12 07:08 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-12 07:08 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-12 07:08 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-12 07:08 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-12 07:08 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-12 07:08 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-12 07:08 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-12 07:08 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-12 07:08 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-12 07:08 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-12 07:08 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 07:08 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-11 19:20 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 19:20 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 19:20 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 19:20 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 19:20 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 19:20 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 19:20 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 19:20 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 19:20 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 19:20 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 19:20 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 19:20 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 19:20 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 19:20 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 19:20 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 19:20 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 19:20 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 19:20 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 19:20 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 19:20 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 19:20 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-05 16:50 - 2011-06-25 09:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job

2013-10-05 16:43 - 2012-03-30 06:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-10-05 16:34 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-05 16:34 - 2009-07-14 06:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-05 16:30 - 2011-02-23 20:08 - 01388517 _____ C:\Windows\WindowsUpdate.log

2013-10-05 16:26 - 2012-08-17 09:21 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics

2013-10-05 16:26 - 2011-03-01 21:50 - 00086886 _____ C:\Windows\PFRO.log

2013-10-05 16:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-10-05 16:26 - 2009-07-14 06:51 - 00188257 _____ C:\Windows\setupact.log

2013-10-05 09:51 - 2013-06-30 17:42 - 00000000 ____D C:\Users\Janine\.gimp-2.8

2013-10-05 08:41 - 2011-06-25 09:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job

2013-09-28 09:15 - 2013-09-28 09:15 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Janine\Downloads\tdsskiller.exe

2013-09-22 11:04 - 2011-09-01 19:21 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Winamp

2013-09-21 17:28 - 2013-09-21 17:28 - 02347384 _____ (ESET) C:\Users\Janine\Downloads\esetsmartinstaller_enu.exe

2013-09-20 18:48 - 2013-08-30 06:44 - 00000000 ____D C:\AdwCleaner

2013-09-20 18:45 - 2013-09-20 18:45 - 00035678 _____ C:\Users\Janine\Downloads\FRST1.txt

2013-09-20 18:44 - 2013-09-20 18:43 - 00035678 _____ C:\Users\Janine\Downloads\FRST.txt

2013-09-20 18:37 - 2013-09-20 18:37 - 01039554 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-09-20 17:20 - 2013-09-20 17:20 - 00377856 _____ C:\Users\Janine\Downloads\gmer_2.1.19163.exe

2013-09-20 17:19 - 2013-09-20 17:18 - 00025351 _____ C:\Users\Janine\Downloads\Addition.txt

2013-09-20 17:17 - 2013-09-20 17:17 - 00000000 ____D C:\FRST

2013-09-20 17:15 - 2013-09-20 17:15 - 00050477 _____ C:\Users\Janine\Downloads\Defogger.exe

2013-09-20 17:15 - 2013-09-20 17:15 - 00000474 _____ C:\Users\Janine\Downloads\defogger_disable.log

2013-09-20 17:15 - 2013-09-20 17:15 - 00000000 _____ C:\Users\Janine\defogger_reenable

2013-09-20 17:15 - 2011-02-23 20:11 - 00000000 ____D C:\Users\Janine

2013-09-20 15:37 - 2011-03-19 18:26 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson

2013-09-20 15:37 - 2011-03-19 18:23 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson

2013-09-20 15:37 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-20 11:04 - 2012-03-30 06:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-20 11:03 - 2012-03-30 06:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-20 11:03 - 2011-06-03 23:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-19 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-18 21:13 - 2012-10-12 17:29 - 00000000 ____D C:\Users\Janine\FM_Transmitter_02

2013-09-12 18:43 - 2011-02-23 20:12 - 00000000 ___RD C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 18:42 - 2009-07-14 06:45 - 00294344 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-12 07:07 - 2013-07-27 03:10 - 00000000 ____D C:\Windows\system32\MRT

2013-09-12 06:58 - 2011-02-23 21:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

Some content of TEMP:

====================

C:\Users\Janine\AppData\Local\Temp\AskSLib.dll

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32axau_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32ax_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-21 20:26
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by Janine at 2013-10-05 17:01:33

Running from C:\Users\Janine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VJ11R1I

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)

Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)

Advertising Center (x32 Version: 0.0.0.1)

Avanquest update (x32 Version: 1.28)

AVS Screen Capture version 2.0.1 (x32)

AVS Update Manager 1.0 (x32)

AVS Video Converter 8 (x32)

AVS Video Recorder 2.4 (x32)

AVS Video ReMaker 4.0.2.126 (x32)

AVS4YOU Software Navigator 1.4 (x32)

Content Manager 2 (x32 Version: 3.4.1.11834)

D3DX10 (x32 Version: 15.4.2368.0902)

DVD Flick 1.3.0.7 (x32 Version: 1.3.0.7)

Free M4a to MP3 Converter 7.1 (x32)

Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0)

Free YouTube to MP3 Converter version 3.9.33 (x32)

GIMP 2.8.6 (Version: 2.8.6)

Google Chrome (HKCU Version: 30.0.1599.69)

ImagXpress (x32 Version: 7.0.74.0)

Java 7 Update 15 (x32 Version: 7.0.150)

Java Auto Updater (x32 Version: 2.1.9.0)

Media Go (x32 Version: 2.1.392)

Media Go Video Playback Engine 1.88.116.12060 (x32 Version: 1.88.116.12060)

MFC RunTime files (x32 Version: 1.0.0)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Corporation (Version: 9.1.0.0)

Microsoft Corporation (x32 Version: 9.1.0.0)

Microsoft LifeCam (Version: 3.22.270.0)

Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable - KB2467175 (x32 Version: 8.0.51011)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

MP4 To MP3 Converter V3.0 (x32)

MSVCRT (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)

Nero 9 Essentials (x32)

Nero BurnRights (x32 Version: 3.4.10.100)

Nero BurnRights Help (x32 Version: 3.4.4.100)

Nero ControlCenter (x32 Version: 9.0.0.1)

Nero CoverDesigner (x32 Version: 4.4.9.203)

Nero CoverDesigner Help (x32 Version: 4.4.6.100)

Nero DiscSpeed (x32 Version: 5.4.7.202)

Nero DiscSpeed Help (x32 Version: 5.4.4.100)

Nero DriveSpeed (x32 Version: 4.4.10.100)

Nero DriveSpeed Help (x32 Version: 4.4.4.100)

Nero InfoTool (x32 Version: 6.4.7.204)

Nero InfoTool Help (x32 Version: 6.4.4.100)

Nero Installer (x32 Version: 4.4.8.1)

Nero StartSmart (x32 Version: 9.4.11.207)

Nero StartSmart Help (x32 Version: 9.4.1.100)

Nero StartSmart OEM (x32 Version: 9.4.10.100)

neroxml (x32 Version: 1.0.0)

Norton Internet Security (x32 Version: 20.4.0.40)

OpenOffice.org 3.3 (x32 Version: 3.3.9567)

PlayStation(R)Network Downloader (x32 Version: 2.07.00849)

PlayStation(R)Store (x32 Version: 4.7.14.14146)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)

Skype Click to Call (x32 Version: 5.6.8442)

Skype™ 5.10 (x32 Version: 5.10.116)

Sony PC Companion 2.10.108 (x32 Version: 2.10.108)

Spotify (HKCU Version: 0.8.4.124.ga3559d86)

swMSM (x32 Version: 12.0.0.1)

Uninstall 1.0.0.1 (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Ver 1.2.0 (x32)

Winamp (x32 Version: 5.64 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3508.1109)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3508.1109)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

WinRAR

WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928)

WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7304)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)
 

==================== Restore Points  =========================
 

24-08-2013 12:56:01 Geplanter Prüfpunkt

02-09-2013 14:27:34 Geplanter Prüfpunkt

12-09-2013 04:42:59 Windows Modules Installer

12-09-2013 04:49:31 Windows Modules Installer

19-09-2013 09:42:06 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {4F74EC6C-39AE-4805-B88C-B5E1AB106398} - System32\Tasks\{46BFADCD-A8AB-474A-8B35-B4C9F64196C3} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)

Task: {554D27B3-117B-46BE-85EE-C240EA7E0B2D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)

Task: {69019E76-8D07-498E-A649-01FB6810A3C5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)

Task: {7BA9D501-A71D-49E1-99BE-45FFD2971C3A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)

Task: {9CA17B01-7F3B-46D9-9A9C-C9B0C09585C1} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {B94597EA-A5DE-41E2-8DA1-89558228BD64} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)

Task: {C5373CC3-CA53-4BAB-AA74-707088BDF4C0} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: {CD122EE0-D50A-4645-8FDC-67EF5D2E3EDB} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-02-27 18:32 - 2013-02-13 13:35 - 08907856 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll

2013-02-27 18:32 - 2013-02-13 13:36 - 02980944 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 02152528 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 01604176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll

2013-02-27 18:33 - 2013-02-13 13:34 - 01716304 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll

2013-02-27 18:32 - 2013-02-12 13:25 - 04128848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll

2013-01-17 15:30 - 2013-02-12 13:03 - 01041408 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll

2013-01-17 15:30 - 2013-02-12 13:03 - 00094208 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll

2013-01-17 15:30 - 2013-02-12 13:03 - 00251392 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 01467984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 04923984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01367632 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01747024 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01556048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01150032 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01202768 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll

2013-02-27 18:33 - 2013-02-13 13:35 - 01310800 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 06758480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01230848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll

2013-02-27 18:32 - 2013-02-13 13:35 - 01313872 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll

2011-01-17 17:19 - 2011-11-07 20:24 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

2013-07-09 06:59 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll

2013-10-05 13:54 - 2013-10-03 08:02 - 00698832 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\libglesv2.dll

2013-10-05 13:54 - 2013-10-03 08:02 - 00099792 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\libegl.dll

2013-10-05 13:54 - 2013-10-03 08:03 - 04055504 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\pdf.dll

2013-10-05 13:54 - 2013-10-03 08:03 - 00415184 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll

2013-10-05 13:54 - 2013-10-03 08:02 - 01604560 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll

2013-07-09 06:59 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll

2013-10-05 13:54 - 2013-10-03 08:03 - 13611984 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: seehcri

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Microsoft-Adapter für Miniports virtueller WiFis

Description: Microsoft-Adapter für Miniports virtueller WiFis

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: vwifimp

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/05/2013 04:13:07 PM) (Source: Application Hang) (User: )

Description: Programm IEXPLORE.EXE, Version 10.0.9200.16686 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 8590
 

Startzeit: 01cec1d3a8386f6d
 

Endzeit: 63
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Berichts-ID:
 

Error: (09/24/2013 01:10:44 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16686, Zeitstempel: 0x52058cf0

Name des fehlerhaften Moduls: AUDIOSES.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b725

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00008d5d

ID des fehlerhaften Prozesses: 0x6b30

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (09/23/2013 05:17:59 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (09/22/2013 10:51:06 AM) (Source: Application Hang) (User: )

Description: Programm chrome.exe, Version 29.0.1547.76 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: bbc
 

Startzeit: 01ceb767da524eae
 

Endzeit: 83
 

Anwendungspfad: C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
 

Berichts-ID: 0bf0e4c4-2364-11e3-af9a-e839df082830
 

Error: (09/21/2013 08:27:24 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/21/2013 08:26:31 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (09/21/2013 05:36:34 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/21/2013 05:29:52 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/21/2013 05:29:48 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/21/2013 05:29:48 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (10/05/2013 01:17:25 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (10/05/2013 08:39:55 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (10/05/2013 08:39:49 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (10/04/2013 04:14:31 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (10/04/2013 06:37:20 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (10/04/2013 06:37:14 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/30/2013 07:39:09 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/30/2013 06:46:46 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/30/2013 01:47:15 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (09/29/2013 00:23:06 PM) (Source: ipnathlp) (User: )

Description: 0
 
 

Microsoft Office Sessions:

=========================

Error: (10/05/2013 04:13:07 PM) (Source: Application Hang)(User: )

Description: IEXPLORE.EXE10.0.9200.16686859001cec1d3a8386f6d63C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Error: (09/24/2013 01:10:44 AM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE10.0.9200.1668652058cf0AUDIOSES.DLL6.1.7601.175144ce7b725c000000500008d5d6b3001ceb8abe353d4bdC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\AUDIOSES.DLL5f4075b1-24a5-11e3-af9a-e839df082830
 

Error: (09/23/2013 05:17:59 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (09/22/2013 10:51:06 AM) (Source: Application Hang)(User: )

Description: chrome.exe29.0.1547.76bbc01ceb767da524eae83C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe0bf0e4c4-2364-11e3-af9a-e839df082830
 

Error: (09/21/2013 08:27:24 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
 

Error: (09/21/2013 08:26:31 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (09/21/2013 05:36:34 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (09/21/2013 05:29:52 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Janine\Downloads\esetsmartinstaller_enu.exe
 

Error: (09/21/2013 05:29:48 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Janine\Downloads\esetsmartinstaller_enu.exe
 

Error: (09/21/2013 05:29:48 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Janine\Downloads\esetsmartinstaller_enu.exe
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 44%

Total physical RAM: 3892.55 MB

Available physical RAM: 2173.95 MB

Total Pagefile: 7783.29 MB

Available Pagefile: 5953.84 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:465.66 GB) (Free:400.77 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0DCE7163)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

aharonov

05.10.2013 16:18

Wie sieht es nach diesem Fix aus?

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

CHR Extension: (Plus-HD-2.3) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec\1.25.74_0

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

321meins

06.10.2013 10:03

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013

Ran by Janine at 2013-10-06 11:02:58 Run:1

Running from C:\Users\Janine\Downloads

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

CHR Extension: (Plus-HD-2.3) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec\1.25.74_0

         

*****************
 

C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec => Moved successfully.
 

==== End of Fixlog ====

aharonov

06.10.2013 13:10

Wie sieht es jetzt aus? Immer noch unterstrichene Wörter?

321meins

06.10.2013 17:02

Jetzt sieht alles wieder normal aus. :dankeschoen:

Kann man das irgendwie vermeiden das sich sowas wieder einschleicht? (Außer das www meiden:lach:)

aharonov

06.10.2013 18:25

Zitat:

Kann man das irgendwie vermeiden das sich sowas wieder einschleicht?

Etwas vorsichtig sein mit der Installation von Freeware-Programmen. Die bringen gerne solche Sachen mit..

Dann räumen wir noch auf.

Cleanup

Zum Schluss werden wir jetzt noch unsere Tools (inklusive der Quarantäne-Ordner) wegräumen, die verseuchten Systemwiederherstellungspunkte löschen und alle Einstellungen wieder herrichten. Auch diese Schritte sind noch wichtig und sollten in der angegebenen Reihenfolge ausgeführt werden.

Starte defogger und drücke den Button Re-enable.
Den ESET Online Scanner kannst du behalten, um ab und zu (monatlich) für eine Zweitmeinung dein System damit zu scannen. Falls du ESET deinstallieren möchtest, dann kannst du das ebenfalls über die Systemsteuerung tun.
Downloade dir bitte auf jeden Fall DelFix auf deinen Desktop.
- Schliesse alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- DelFix entfernt u.a. alle von uns verwendeten Programme und löscht sich anschliessend selbst.
Wenn jetzt noch etwas übriggeblieben ist, dann kannst du es einfach manuell löschen.

>> OK <<
Wir sind durch, deine Logs sehen für mich im Moment sauber aus. :daumenhoc

Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst.

Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann.

Epilog: Tipps, Dos & Don'ts

Aktualität von System und Software

Das Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:

Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren

Auch die installierte Software sollte immer in der aktuellsten Version vorliegen.
Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.

Mit diesem kleinen Plugin-Check kannst du regelmässig diese Komponenten auf deren Aktualität überprüfen.
Achte auch darauf, dass alte, nicht mehr verwendete Versionen deinstalliert sind.
Optional: Das Programm Secunia Personal Software Inspector kann dich dabei unterstützen, stets die aktuellen Versionen sämtlicher installierter Software zu nutzen.

Sicherheits-Software

Eine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt).
Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.

Nutze einen Virenscanner mit Hintergrundwächter mit stets aktueller Datenbank. Welches Produkt gewählt wird, spielt keine so entscheidende Rolle. Es gibt kommerzielle Versionen, aber ein kostenloser Scanner mit den Grundfunktionen wie beispielsweise Avast! Free Antivirus sollte ausreichen. Betreibe aber keinesfalls zwei Wächter parallel, die würden sich gegenseitig behindern.
Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.
Zusätzlich zum Virenscanner kannst du dein System regelmässig mit einem On-Demand Antimalwareprogramm scannen. Empfehlenswert ist die Free-Version von Malwarebytes Anti-Malware. Vor jedem Scan die Datenbank updaten.
Optional: Das Programm Sandboxie führt Anwendungen in einer isolierten Umgebung ("Sandkasten") aus, so dass keine Änderungen am System vorgenommen werden können. Wenn du deinen Browser darin startest, vermindert sich die Chance, dass beim Surfen eingefangene Malware sich dauerhaft im System festsetzen kann.
Optional: Das Addon WOT (web of trust) warnt dich vor einer als schädlich gemeldeten Website, bevor sie geladen wird. Für verschiedene Browser erhältlich.

Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt.
Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:

NoScript verhindert standardmässig das Ausführen von aktiven Inhalten (Java, JavaScript, Flash, ..) für sämtliche Websites. Du kannst selber nach dem Prinzip einer Whitelist festlegen, welchen Seiten du vertrauen und Scripts erlauben willst, auch temporär.
Adblock Plus blockt die meisten Werbebanner weg. Solche Banner können nebst ihrer störenden Erscheinung auch als Infektionsherde fungieren.

(Un-)Sicheres Verhalten im Internet

Nebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert.

Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.

Illegale Cracks, Keygens und Serials sind ein ausgesprochen einfacher (und ein beliebter) Weg, um Malware zu verbreiten.
Bei Dateien aus Peer-to-Peer- und Filesharingprogrammen oder von Filehostern kannst du dir nie sicher sein, ob auch wirklich drin ist, was drauf steht.

Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).

Surfe mit Vorsicht und lass dich nicht von irgendwie interessant erscheinenden Elementen zu einem vorschnellen Klick verleiten. Lass dich nicht von Popups täuschen, die aussehen wie System- oder Virenmeldungen.
Sei skeptisch bei unerwarteten E-Mails, insbesondere wenn sie Anhänge enthalten. Auch wenn sie auf den ersten Blick authentisch wirken, persönliche Daten von dir enthalten oder vermeintlich von einem bekannten Absender stammen: Lieber nochmals in Ruhe überdenken oder nachfragen, anstatt einfach mal Links oder ausführbare Anhänge öffnen oder irgendwo deine Daten eingeben.
Auch in sozialen Netzwerken oder über Instant Messaging Systeme können schädliche Links oder Dateien die Runde machen. Erhältst du von einem deiner Freunde eine Nachricht, die merkwürdig ist oder so sensationell interessant oder skandalös tönt, dass man einfach draufklicken muss, dann hat bei ihm/ihr wahrscheinlich Neugier über Verstand gesiegt und du solltest nicht denselben Fehler machen.
Lass die Dateiendungen anzeigen, so dass du dich nicht täuschen lässt, wenn eine ausführbare Datei über ein doppelte Dateiendung kaschiert wird, z.B. Nacktfoto.jpg.exe.

Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.

Lade Software in erster Priorität immer direkt vom Hersteller herunter. Viele Softwareportale (z.B. Softonic) packen noch unnützes Zeug mit in die Installation. Alternativ dazu wähle ein sauberes Portal wie Filepony oder heise.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen fürs Programm irrelevanten Ergänzungen.

Allgemeine Hinweise

Abschliessend noch ein paar grundsätzliche Bemerkungen:

Dein Benutzerkonto für den alltäglichen Gebrauch sollte nicht über Administratorenrechte verfügen. Nutze ein Konto mit eingeschränkten Rechten (Windows XP) bzw. aktiviere die Benutzerkontensteuerung (UAC) auf der höchsten Stufe (Windows Vista / 7).
Erstelle regelmässig Backups deiner Daten und Dokumente auf externen Datenträgern, bei wichtigen Dateien mindestens zweifach. Nicht nur ein Malwarebefall kann schmerzhaften Datenverlust nach sich ziehen sondern auch ein gewöhnlicher Festplattendefekt.
Die Autorun/Autoplay-Funktion stellt ein Risiko dar, denn sie ermöglicht es, dass beispielsweise beim Einstecken eines entsprechend infizierten USB-Sticks der Befall auf den Rechner überspringt. Überlege dir, ob du diese Funktion nicht besser deaktivieren möchtest.
Wähle deine Passwörter gemäss den gängigen Regeln, um besser gegen Brute-Force- und Wörterbuchattacken gewappnet zu sein. Benutze jedes deiner Passwörter nur einmal und ändere sie regelmässig.
Der Nutzen von Registry-Cleanern zur Performancesteigerung ist umstritten. Auf jeden Fall lässt sich damit grosser Schaden anrichten, wenn man nicht weiss, was man tut. Wir empfehlen deshalb, die Finger von der Registry zu lassen. Um von Zeit zu Zeit die temporären Dateien zu löschen, genügt TFC.

Wenn du möchtest, kannst du das Forum mit einer kleinen Spende unterstützen.
Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. ;)

321meins

08.10.2013 18:03

Super, ein ganz großes :dankeschoen: für die schnelle und kompetente Hilfe. Es läuft alles wieder normal und bleibt hoffentlich auch so :Boogie:

aharonov

08.10.2013 18:04

Danke für die Rückmeldung.

Freut mich, dass wir helfen konnten. :abklatsch:

Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun.

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten.
Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.

321meins

27.12.2013 19:29

So es gab zu Weihnachten wohl auch Geschenke für den Laptop...

Ads by Plus HD.3 und rvzr Fenster öffnen sich.

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-12-2013 01

Ran by Janine (administrator) on FUJI on 27-12-2013 19:28:25

Running from C:\Users\Janine\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Microsoft Corporation) C:\Windows\vVX3000.exe

() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe

(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)

HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [80480 2013-06-26] (Nullsoft, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Google Update] - C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-25] (Google Inc.)

MountPoints2: E - E:\FRT_Install.exe

MountPoints2: {170b0609-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

MountPoints2: {170b061d-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: :0

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9EC287D89D3CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

SearchScopes: HKCU - {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\ipsbho.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://google.de/

CHR Plugin: (Shockwave Flash) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File

CHR Plugin: (Media Go Detector) - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)

CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\Janine\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File

CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (AdBlock) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Norton Identity Protection) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.5.2_0

CHR Extension: (Google Wallet) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0

CHR Extension: (Plus-HD-2.3) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec\1.26.135_0

CHR Extension: (Gmail) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
 

==================== Services (Whitelisted) =================
 

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20131225.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131226.024\ENG64.SYS [126040 2013-12-03] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131226.024\EX64.SYS [2099288 2013-12-03] (Symantec Corporation)

S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)

S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)

S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)

S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)

S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)

S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)

S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)

S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)

S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)

S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)

S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)

S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)

S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)

S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

S3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-03-19] (Sony Ericsson Mobile Communications)

S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

R0 SMR410; C:\Windows\System32\drivers\SMR410.SYS [96856 2013-12-27] (Symantec Corporation)

R1 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-27 19:28 - 2013-12-27 19:28 - 00014301 _____ C:\Users\Janine\Downloads\FRST.txt

2013-12-27 19:28 - 2013-12-27 19:28 - 00000000 ____D C:\FRST

2013-12-27 19:27 - 2013-12-27 19:27 - 01930746 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-12-27 19:19 - 2013-12-27 19:19 - 00000000 ____D C:\Users\Janine\AppData\Local\CrashDumps

2013-12-27 19:07 - 2013-12-27 19:07 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\ProgramData\Package Cache

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\Program Files\Adblock Plus for IE

2013-12-21 18:26 - 2013-12-21 19:20 - 165758898 _____ C:\Users\Janine\Downloads\schwabdre.rar

2013-12-15 12:24 - 2013-12-15 12:24 - 00277760 _____ C:\Windows\Minidump\121513-30498-01.dmp

2013-12-11 15:41 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-11 15:41 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-11 15:41 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-11 15:41 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 15:40 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-11 15:40 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-11 15:40 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-11 15:40 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-11 15:40 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-11 15:40 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-11 15:40 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-11 15:40 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-11 15:40 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-11 15:40 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-11 15:40 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-11 15:40 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-11 15:40 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-11 15:40 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-11 15:40 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-11 15:40 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-11 15:40 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-11 15:40 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-11 15:40 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-11 15:40 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-11 15:40 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-11 15:40 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-11 15:40 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-11 15:40 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-11 15:40 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-11 15:40 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-11 15:40 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-11 15:40 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-11 15:40 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-11 15:40 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-11 15:40 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-11 07:45 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:45 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:45 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:45 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:45 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:45 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:45 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:44 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:44 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:44 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:44 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:44 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:44 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:44 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:44 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:44 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:44 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:44 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:44 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-07 13:38 - 2013-12-07 13:38 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 13:38 - 2013-12-07 13:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-12-07 13:38 - 2013-12-07 13:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-12-07 13:38 - 2013-12-07 13:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-12-07 13:38 - 2013-12-07 13:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-12-07 13:37 - 2013-12-07 13:37 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 13:22 - 2013-12-07 13:22 - 03057128 ____N (Symantec Corporation) C:\Users\Janine\Downloads\NPE.exe

2013-12-07 04:37 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-12-07 04:26 - 2013-12-07 04:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-03 19:42 - 2013-12-07 04:37 - 00048633 _____ C:\Windows\IE11_main.log
 

==================== One Month Modified Files and Folders =======
 

2013-12-27 19:28 - 2013-12-27 19:28 - 00014301 _____ C:\Users\Janine\Downloads\FRST.txt

2013-12-27 19:28 - 2013-12-27 19:28 - 00000000 ____D C:\FRST

2013-12-27 19:27 - 2013-12-27 19:27 - 01930746 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-12-27 19:19 - 2013-12-27 19:19 - 00000000 ____D C:\Users\Janine\AppData\Local\CrashDumps

2013-12-27 19:18 - 2012-06-20 20:18 - 00000000 ____D C:\Users\Janine\AppData\Local\Sony

2013-12-27 19:18 - 2012-06-20 20:14 - 00000000 ____D C:\Program Files (x86)\Sony

2013-12-27 19:18 - 2011-02-23 19:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-27 19:18 - 2011-02-23 19:08 - 01667169 _____ C:\Windows\WindowsUpdate.log

2013-12-27 19:18 - 2009-07-14 05:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-27 19:18 - 2009-07-14 05:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-27 19:16 - 2013-07-10 06:07 - 00000000 ____D C:\Users\Janine\AppData\Local\NPE

2013-12-27 19:10 - 2012-08-17 08:21 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics

2013-12-27 19:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-27 19:09 - 2009-07-14 05:51 - 00279842 _____ C:\Windows\setupact.log

2013-12-27 19:07 - 2013-12-27 19:07 - 00096856 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR410.SYS

2013-12-27 18:46 - 2011-06-25 08:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job

2013-12-27 18:43 - 2012-03-30 05:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\ProgramData\Package Cache

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\Program Files\Adblock Plus for IE

2013-12-26 23:15 - 2011-06-25 08:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job

2013-12-21 19:20 - 2013-12-21 18:26 - 165758898 _____ C:\Users\Janine\Downloads\schwabdre.rar

2013-12-21 18:25 - 2009-07-14 18:58 - 00654400 _____ C:\Windows\system32\perfh007.dat

2013-12-21 18:25 - 2009-07-14 18:58 - 00130240 _____ C:\Windows\system32\perfc007.dat

2013-12-21 18:25 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-21 10:18 - 2011-09-01 18:21 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Winamp

2013-12-15 12:24 - 2013-12-15 12:24 - 00277760 _____ C:\Windows\Minidump\121513-30498-01.dmp

2013-12-15 12:24 - 2011-03-19 16:43 - 569642988 _____ C:\Windows\MEMORY.DMP

2013-12-15 12:24 - 2011-03-19 16:43 - 00000000 ____D C:\Windows\Minidump

2013-12-15 09:21 - 2013-07-27 02:10 - 00000000 ____D C:\Windows\system32\MRT

2013-12-15 09:15 - 2011-02-23 20:08 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-14 13:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-11 15:50 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-11 15:50 - 2009-07-14 05:45 - 00294344 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-11 15:47 - 2011-03-01 20:50 - 00089522 _____ C:\Windows\PFRO.log

2013-12-10 19:43 - 2012-03-30 05:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-10 19:43 - 2012-03-30 05:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-10 19:43 - 2011-06-03 22:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-07 20:41 - 2011-06-25 08:39 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA

2013-12-07 20:41 - 2011-06-25 08:39 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core

2013-12-07 13:38 - 2013-12-07 13:38 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 13:37 - 2013-12-07 13:38 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-12-07 13:37 - 2013-12-07 13:38 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-12-07 13:37 - 2013-12-07 13:38 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-12-07 13:37 - 2013-12-07 13:38 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-12-07 13:37 - 2013-12-07 13:37 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 13:22 - 2013-12-07 13:22 - 03057128 ____N (Symantec Corporation) C:\Users\Janine\Downloads\NPE.exe

2013-12-07 11:30 - 2012-01-31 13:14 - 00000000 ____D C:\Users\Janine\Documents\Konto Janine

2013-12-07 09:15 - 2011-02-23 19:13 - 00001421 _____ C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-07 09:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-07 04:37 - 2013-12-03 19:42 - 00048633 _____ C:\Windows\IE11_main.log

2013-12-07 04:26 - 2013-12-07 04:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
 

Some content of TEMP:

====================

C:\Users\Janine\AppData\Local\Temp\AskSLib.dll

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32axau_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32ax_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-20 09:02
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2013 01

Ran by Janine at 2013-12-27 19:29:20

Running from C:\Users\Janine\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

Adblock Plus for IE (32-bit and 64-bit) (Version: 1.1)

Adblock Plus for IE (x32 Version: 1.1)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)

Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)

Advertising Center (x32 Version: 0.0.0.1)

Avanquest update (x32 Version: 1.28)

AVS Screen Capture version 2.0.1 (x32)

AVS Update Manager 1.0 (x32)

AVS Video Converter 8 (x32)

AVS Video Recorder 2.4 (x32)

AVS Video ReMaker 4.0.2.126 (x32)

AVS4YOU Software Navigator 1.4 (x32)

Content Manager 2 (x32 Version: 3.4.1.11834)

D3DX10 (x32 Version: 15.4.2368.0902)

DVD Flick 1.3.0.7 (x32 Version: 1.3.0.7)

Free M4a to MP3 Converter 7.1 (x32)

Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0)

Free YouTube to MP3 Converter version 3.9.33 (x32)

GIMP 2.8.6 (Version: 2.8.6)

Google Chrome (HKCU Version: 31.0.1650.63)

ImagXpress (x32 Version: 7.0.74.0)

Java 7 Update 45 (x32 Version: 7.0.450)

Java Auto Updater (x32 Version: 2.1.9.8)

Media Go (x32 Version: 2.1.392)

Media Go Video Playback Engine 1.88.116.12060 (x32 Version: 1.88.116.12060)

MFC RunTime files (x32 Version: 1.0.0)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Corporation (Version: 9.1.0.0)

Microsoft Corporation (x32 Version: 9.1.0.0)

Microsoft LifeCam (Version: 3.22.270.0)

Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable - KB2467175 (x32 Version: 8.0.51011)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

MP4 To MP3 Converter V3.0 (x32)

MSVCRT (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)

Nero 9 Essentials (x32)

Nero BurnRights (x32 Version: 3.4.10.100)

Nero BurnRights Help (x32 Version: 3.4.4.100)

Nero ControlCenter (x32 Version: 9.0.0.1)

Nero CoverDesigner (x32 Version: 4.4.9.203)

Nero CoverDesigner Help (x32 Version: 4.4.6.100)

Nero DiscSpeed (x32 Version: 5.4.7.202)

Nero DiscSpeed Help (x32 Version: 5.4.4.100)

Nero DriveSpeed (x32 Version: 4.4.10.100)

Nero DriveSpeed Help (x32 Version: 4.4.4.100)

Nero InfoTool (x32 Version: 6.4.7.204)

Nero InfoTool Help (x32 Version: 6.4.4.100)

Nero Installer (x32 Version: 4.4.8.1)

Nero StartSmart (x32 Version: 9.4.11.207)

Nero StartSmart Help (x32 Version: 9.4.1.100)

Nero StartSmart OEM (x32 Version: 9.4.10.100)

neroxml (x32 Version: 1.0.0)

Norton Internet Security (x32 Version: 20.4.0.40)

OpenOffice.org 3.3 (x32 Version: 3.3.9567)

PlayStation(R)Network Downloader (x32 Version: 2.07.00849)

PlayStation(R)Store (x32 Version: 4.7.14.14146)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)

Skype Click to Call (x32 Version: 5.6.8442)

Skype™ 5.10 (x32 Version: 5.10.116)

Spotify (HKCU Version: 0.8.4.124.ga3559d86)

swMSM (x32 Version: 12.0.0.1)

Uninstall 1.0.0.1 (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

Ver 1.2.0 (x32)

Winamp (x32 Version: 5.64 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3508.1109)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3508.1109)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

WinRAR

WISO Steuer-Sparbuch 2011 (x32 Version: 18.00.6928)

WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7304)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)
 

==================== Restore Points  =========================
 

07-12-2013 02:00:17 Windows Update

07-12-2013 03:20:47 Windows Update

07-12-2013 12:33:05 Removed Java 7 Update 15

07-12-2013 12:36:53 Installed Java 7 Update 45

11-12-2013 14:38:51 Windows Update

15-12-2013 08:13:50 Windows Update

22-12-2013 14:27:06 Geplanter Prüfpunkt

27-12-2013 16:54:58 Adblock Plus for IE
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {4F74EC6C-39AE-4805-B88C-B5E1AB106398} - System32\Tasks\{46BFADCD-A8AB-474A-8B35-B4C9F64196C3} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)

Task: {554D27B3-117B-46BE-85EE-C240EA7E0B2D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)

Task: {69019E76-8D07-498E-A649-01FB6810A3C5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-25] (Google Inc.)

Task: {7BA9D501-A71D-49E1-99BE-45FFD2971C3A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)

Task: {9CA17B01-7F3B-46D9-9A9C-C9B0C09585C1} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\symerr.exe [2013-06-03] (Symantec Corporation)

Task: {B94597EA-A5DE-41E2-8DA1-89558228BD64} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)

Task: {CD122EE0-D50A-4645-8FDC-67EF5D2E3EDB} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\symerr.exe [2013-06-03] (Symantec Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job => C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-07-09 05:59 - 2012-05-30 07:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 08907856 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll

2013-02-27 17:33 - 2013-02-13 12:35 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll

2013-02-27 17:33 - 2013-02-13 12:34 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll

2013-02-27 17:33 - 2013-02-13 12:34 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll

2013-02-27 17:32 - 2013-02-13 12:36 - 02980944 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll

2013-02-27 17:33 - 2013-02-13 12:35 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 02152528 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll

2013-02-27 17:33 - 2013-02-13 12:34 - 01604176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll

2013-02-27 17:33 - 2013-02-13 12:34 - 01716304 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll

2013-02-27 17:32 - 2013-02-12 12:25 - 04128848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll

2013-01-17 14:30 - 2013-02-12 12:03 - 01041408 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll

2013-01-17 14:30 - 2013-02-12 12:03 - 00094208 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll

2013-01-17 14:30 - 2013-02-12 12:03 - 00251392 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll

2013-02-27 17:33 - 2013-02-13 12:35 - 01467984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 04923984 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01367632 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01747024 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01556048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01150032 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01202768 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll

2013-02-27 17:33 - 2013-02-13 12:35 - 01310800 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 06758480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01230848 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll

2013-02-27 17:32 - 2013-02-13 12:35 - 01313872 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll

2013-12-05 07:44 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll

2013-12-05 07:44 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll

2013-12-05 07:44 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll

2013-12-05 07:44 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll

2013-12-05 07:44 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll

2013-07-09 05:59 - 2012-05-30 07:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll

2013-12-05 07:44 - 2013-12-04 03:48 - 13586896 _____ () C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: seehcri

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Microsoft-Adapter für Miniports virtueller WiFis

Description: Microsoft-Adapter für Miniports virtueller WiFis

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: vwifimp

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/27/2013 07:19:20 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: setup.exe_Sony PC Companion, Version: 17.0.0.717, Zeitstempel: 0x4cab8cfa

Name des fehlerhaften Moduls: wer.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7ba29

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00022140

ID des fehlerhaften Prozesses: 0x8fc

Startzeit der fehlerhaften Anwendung: 0xsetup.exe_Sony PC Companion0

Pfad der fehlerhaften Anwendung: setup.exe_Sony PC Companion1

Pfad des fehlerhaften Moduls: setup.exe_Sony PC Companion2

Berichtskennung: setup.exe_Sony PC Companion3
 

Error: (12/27/2013 07:16:40 PM) (Source: Application Hang) (User: )

Description: Programm chrome.exe, Version 31.0.1650.63 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 13b8
 

Startzeit: 01cf032f626e7f2b
 

Endzeit: 18
 

Anwendungspfad: C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exe
 

Berichts-ID: f9f1f9ac-6f22-11e3-b730-e839df082830
 

Error: (12/27/2013 01:54:05 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (12/26/2013 11:20:44 PM) (Source: Application Hang) (User: )

Description: Programm IEXPLORE.EXE, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 709c
 

Startzeit: 01cf028670603dc4
 

Endzeit: 90
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Berichts-ID:
 

Error: (12/26/2013 05:45:56 PM) (Source: Application Hang) (User: )

Description: Programm IEXPLORE.EXE, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 6d7c
 

Startzeit: 01cf024bb824b7fc
 

Endzeit: 122
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Berichts-ID:
 

Error: (12/21/2013 00:51:58 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0c

ID des fehlerhaften Prozesses: 0x48cc

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (12/17/2013 00:30:06 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0c

ID des fehlerhaften Prozesses: 0x546c

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (12/16/2013 11:27:57 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0c

ID des fehlerhaften Prozesses: 0x73b0

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (12/16/2013 11:13:55 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0f

ID des fehlerhaften Prozesses: 0x751c

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 

Error: (12/16/2013 10:49:40 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: MMDevApi.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b892

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00023b0c

ID des fehlerhaften Prozesses: 0x2ab0

Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0

Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1

Pfad des fehlerhaften Moduls: IEXPLORE.EXE2

Berichtskennung: IEXPLORE.EXE3
 
 

System errors:

=============

Error: (12/27/2013 01:02:45 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (12/26/2013 11:02:13 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (12/26/2013 06:06:19 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (12/26/2013 06:06:19 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (12/26/2013 03:54:03 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (12/25/2013 03:04:20 AM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (12/23/2013 00:29:59 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (12/22/2013 10:39:42 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (12/22/2013 10:39:42 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (12/22/2013 10:34:30 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 
 

Microsoft Office Sessions:

=========================

Error: (12/27/2013 07:19:20 PM) (Source: Application Error)(User: )

Description: setup.exe_Sony PC Companion17.0.0.7174cab8cfawer.dll6.1.7601.175144ce7ba29c0000005000221408fc01cf032ff9643d9bC:\Users\Janine\AppData\Local\Temp\{C9BE4737-6E95-4237-AAD4-DEC6481527D4}\setup.exeC:\Windows\SysWOW64\wer.dll67008d54-6f23-11e3-b730-e839df082830
 

Error: (12/27/2013 07:16:40 PM) (Source: Application Hang)(User: )

Description: chrome.exe31.0.1650.6313b801cf032f626e7f2b18C:\Users\Janine\AppData\Local\Google\Chrome\Application\chrome.exef9f1f9ac-6f22-11e3-b730-e839df082830
 

Error: (12/27/2013 01:54:05 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (12/26/2013 11:20:44 PM) (Source: Application Hang)(User: )

Description: IEXPLORE.EXE11.0.9600.16428709c01cf028670603dc490C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Error: (12/26/2013 05:45:56 PM) (Source: Application Hang)(User: )

Description: IEXPLORE.EXE11.0.9600.164286d7c01cf024bb824b7fc122C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Error: (12/21/2013 00:51:58 PM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE11.0.9600.16428525b664cMMDevApi.dll6.1.7601.175144ce7b892c000000500023b0c48cc01cefe3593118e0eC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dll4b7f4159-6a36-11e3-98b8-e839df082830
 

Error: (12/17/2013 00:30:06 AM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE11.0.9600.16428525b664cMMDevApi.dll6.1.7601.175144ce7b892c000000500023b0c546c01cefaae13f893bdC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dllfe5d6289-66a9-11e3-98b8-e839df082830
 

Error: (12/16/2013 11:27:57 PM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE11.0.9600.16428525b664cMMDevApi.dll6.1.7601.175144ce7b892c000000500023b0c73b001cefaac26bd6d97C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dll4f9c368a-66a1-11e3-98b8-e839df082830
 

Error: (12/16/2013 11:13:55 PM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE11.0.9600.16428525b664cMMDevApi.dll6.1.7601.175144ce7b892c000000500023b0f751c01cefaa8c4cebd30C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dll59c4ca0a-669f-11e3-98b8-e839df082830
 

Error: (12/16/2013 10:49:40 PM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE11.0.9600.16428525b664cMMDevApi.dll6.1.7601.175144ce7b892c000000500023b0c2ab001cefaa30614e1b9C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\System32\MMDevApi.dllf659b6d3-669b-11e3-98b8-e839df082830
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 44%

Total physical RAM: 3892.55 MB

Available physical RAM: 2156.2 MB

Total Pagefile: 7783.29 MB

Available Pagefile: 5903.71 MB

Total Virtual: 8192 MB

Available Virtual: 8191.79 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:465.66 GB) (Free:399.75 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0DCE7163)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

aharonov

28.12.2013 14:09

Hallo,

schauen wir mal. :)

Schritt 1

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

321meins

28.12.2013 17:45

Danke :)

ADW

Code:

# AdwCleaner v3.016 - Bericht erstellt am 28/12/2013 um 17:37:22

# Aktualisiert 23/12/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Janine - FUJI

# Gestartet von : C:\Users\Janine\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\omfoidjpeklpjhlhabhcomekbkclkbec
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\710B2EE4C28D21B40B17C51F2BD3A124

Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\710B2EE4C28D21B40B17C51F2BD3A124
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Google Chrome v
 

[ Datei : C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [1492 octets] - [28/12/2013 17:35:33]

AdwCleaner[R2].txt - [1145 octets] - [20/09/2013 17:38:11]

AdwCleaner[S0].txt - [1353 octets] - [28/12/2013 17:37:22]

AdwCleaner[S2].txt - [1207 octets] - [20/09/2013 17:39:25]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1473 octets] ##########

FRST

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2013 01

Ran by Janine (administrator) on FUJI on 28-12-2013 17:41:42

Running from C:\Users\Janine\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Windows\vVX3000.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [VX3000] - C:\Windows\vVX3000.exe [762736 2010-05-20] (Microsoft Corporation)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)

HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [80480 2013-06-26] (Nullsoft, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Google Update] - C:\Users\Janine\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-25] (Google Inc.)

MountPoints2: E - E:\FRT_Install.exe

MountPoints2: {170b0609-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

MountPoints2: {170b061d-0c79-11e1-83ba-e839df082830} - E:\FRT_Install.exe

Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: :0

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9EC287D89D3CB01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {037625DB-2B90-4770-9E24-FB120449EF98} URL = hxxp://www.google.de/search?q={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\ipsbho.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll (Symantec Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://google.de/

CHR Plugin: (Shockwave Flash) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Janine\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File

CHR Plugin: (Media Go Detector) - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)

CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)

CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\Janine\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\SysWOW64\npdeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File

CHR Extension: (YouTube) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (AdBlock) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Norton Identity Protection) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.5.2_0

CHR Extension: (Google Wallet) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0

CHR Extension: (Gmail) - C:\Users\Janine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx
 

==================== Services (Whitelisted) =================
 

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)

S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20131227.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131227.009\ENG64.SYS [126040 2013-12-03] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20131227.009\EX64.SYS [2099288 2013-12-03] (Symantec Corporation)

S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)

S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)

S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)

S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)

S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)

S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)

S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)

S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)

S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)

S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)

S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)

S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)

S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)

S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

S3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2011-03-19] (Sony Ericsson Mobile Communications)

S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

R1 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-07-09] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-28 17:41 - 2013-12-28 17:41 - 00000000 ____D C:\Users\Janine\Downloads\FRST-OlderVersion

2013-12-28 17:34 - 2013-12-28 17:34 - 01233962 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-12-27 19:29 - 2013-12-27 19:29 - 00024532 _____ C:\Users\Janine\Downloads\Addition.txt

2013-12-27 19:28 - 2013-12-28 17:42 - 00013119 _____ C:\Users\Janine\Downloads\FRST.txt

2013-12-27 19:28 - 2013-12-28 17:41 - 00000000 ____D C:\FRST

2013-12-27 19:27 - 2013-12-28 17:41 - 01931176 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-12-27 19:19 - 2013-12-27 19:19 - 00000000 ____D C:\Users\Janine\AppData\Local\CrashDumps

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\ProgramData\Package Cache

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\Program Files\Adblock Plus for IE

2013-12-15 12:24 - 2013-12-15 12:24 - 00277760 _____ C:\Windows\Minidump\121513-30498-01.dmp

2013-12-11 15:41 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-11 15:41 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-11 15:41 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-11 15:41 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 15:40 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-11 15:40 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-11 15:40 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-11 15:40 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-11 15:40 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-11 15:40 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-11 15:40 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-11 15:40 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-11 15:40 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-11 15:40 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-11 15:40 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-11 15:40 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-11 15:40 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-11 15:40 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-11 15:40 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-11 15:40 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-11 15:40 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-11 15:40 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-11 15:40 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-11 15:40 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-11 15:40 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-11 15:40 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-11 15:40 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-11 15:40 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-11 15:40 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-11 15:40 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-11 15:40 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-11 15:40 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-11 15:40 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-11 15:40 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-11 15:40 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-11 07:45 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:45 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:45 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:45 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:45 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:45 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:45 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:44 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:44 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:44 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:44 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:44 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:44 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:44 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:44 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:44 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:44 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:44 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:44 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-07 13:38 - 2013-12-07 13:38 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 13:38 - 2013-12-07 13:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-12-07 13:38 - 2013-12-07 13:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-12-07 13:38 - 2013-12-07 13:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-12-07 13:38 - 2013-12-07 13:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-12-07 13:37 - 2013-12-07 13:37 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 13:22 - 2013-12-07 13:22 - 03057128 ____N (Symantec Corporation) C:\Users\Janine\Downloads\NPE.exe

2013-12-07 04:37 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-12-07 04:26 - 2013-12-07 04:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-03 19:42 - 2013-12-07 04:37 - 00048633 _____ C:\Windows\IE11_main.log
 

==================== One Month Modified Files and Folders =======
 

2013-12-28 17:42 - 2013-12-27 19:28 - 00013119 _____ C:\Users\Janine\Downloads\FRST.txt

2013-12-28 17:41 - 2013-12-28 17:41 - 00000000 ____D C:\Users\Janine\Downloads\FRST-OlderVersion

2013-12-28 17:41 - 2013-12-27 19:28 - 00000000 ____D C:\FRST

2013-12-28 17:41 - 2013-12-27 19:27 - 01931176 _____ (Farbar) C:\Users\Janine\Downloads\FRST64.exe

2013-12-28 17:40 - 2012-08-17 08:21 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics

2013-12-28 17:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-28 17:39 - 2009-07-14 05:51 - 00279898 _____ C:\Windows\setupact.log

2013-12-28 17:38 - 2011-02-23 19:08 - 01696379 _____ C:\Windows\WindowsUpdate.log

2013-12-28 17:37 - 2013-08-30 05:44 - 00000000 ____D C:\AdwCleaner

2013-12-28 17:34 - 2013-12-28 17:34 - 01233962 _____ C:\Users\Janine\Downloads\adwcleaner.exe

2013-12-28 17:31 - 2011-06-25 08:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA.job

2013-12-28 17:30 - 2012-03-30 05:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-28 09:35 - 2011-06-25 08:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core.job

2013-12-28 09:27 - 2011-03-19 09:39 - 00000000 ____D C:\Program Files\printxml

2013-12-28 09:27 - 2011-03-19 09:39 - 00000000 ____D C:\Program Files\plugins

2013-12-28 09:27 - 2011-02-23 19:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-28 09:26 - 2011-03-19 10:11 - 00000000 ____D C:\Users\Janine\Documents\Mein Steuer-Sparbuch Heute

2013-12-27 19:29 - 2013-12-27 19:29 - 00024532 _____ C:\Users\Janine\Downloads\Addition.txt

2013-12-27 19:19 - 2013-12-27 19:19 - 00000000 ____D C:\Users\Janine\AppData\Local\CrashDumps

2013-12-27 19:18 - 2012-06-20 20:18 - 00000000 ____D C:\Users\Janine\AppData\Local\Sony

2013-12-27 19:18 - 2012-06-20 20:14 - 00000000 ____D C:\Program Files (x86)\Sony

2013-12-27 19:18 - 2009-07-14 05:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-27 19:18 - 2009-07-14 05:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-27 19:16 - 2013-07-10 06:07 - 00000000 ____D C:\Users\Janine\AppData\Local\NPE

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\ProgramData\Package Cache

2013-12-27 17:56 - 2013-12-27 17:56 - 00000000 ____D C:\Program Files\Adblock Plus for IE

2013-12-21 18:25 - 2009-07-14 18:58 - 00654400 _____ C:\Windows\system32\perfh007.dat

2013-12-21 18:25 - 2009-07-14 18:58 - 00130240 _____ C:\Windows\system32\perfc007.dat

2013-12-21 18:25 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-21 10:18 - 2011-09-01 18:21 - 00000000 ____D C:\Users\Janine\AppData\Roaming\Winamp

2013-12-15 12:24 - 2013-12-15 12:24 - 00277760 _____ C:\Windows\Minidump\121513-30498-01.dmp

2013-12-15 12:24 - 2011-03-19 16:43 - 569642988 _____ C:\Windows\MEMORY.DMP

2013-12-15 12:24 - 2011-03-19 16:43 - 00000000 ____D C:\Windows\Minidump

2013-12-15 09:21 - 2013-07-27 02:10 - 00000000 ____D C:\Windows\system32\MRT

2013-12-15 09:15 - 2011-02-23 20:08 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-14 13:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-11 15:50 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-11 15:50 - 2009-07-14 05:45 - 00294344 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-11 15:47 - 2011-03-01 20:50 - 00089522 _____ C:\Windows\PFRO.log

2013-12-10 19:43 - 2012-03-30 05:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-10 19:43 - 2012-03-30 05:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-10 19:43 - 2011-06-03 22:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-07 20:41 - 2011-06-25 08:39 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001UA

2013-12-07 20:41 - 2011-06-25 08:39 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2731253187-140697436-2083052460-1001Core

2013-12-07 13:38 - 2013-12-07 13:38 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 13:37 - 2013-12-07 13:38 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-12-07 13:37 - 2013-12-07 13:38 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-12-07 13:37 - 2013-12-07 13:38 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-12-07 13:37 - 2013-12-07 13:38 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-12-07 13:37 - 2013-12-07 13:37 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 13:22 - 2013-12-07 13:22 - 03057128 ____N (Symantec Corporation) C:\Users\Janine\Downloads\NPE.exe

2013-12-07 11:30 - 2012-01-31 13:14 - 00000000 ____D C:\Users\Janine\Documents\Konto Janine

2013-12-07 09:15 - 2011-02-23 19:13 - 00001421 _____ C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-07 09:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-07 04:37 - 2013-12-03 19:42 - 00048633 _____ C:\Windows\IE11_main.log

2013-12-07 04:26 - 2013-12-07 04:26 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-07 04:26 - 2013-12-07 04:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-07 04:26 - 2013-12-07 04:26 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-07 04:26 - 2013-12-07 04:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-07 04:26 - 2013-12-07 04:26 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-07 04:26 - 2013-12-07 04:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
 

Some content of TEMP:

====================

C:\Users\Janine\AppData\Local\Temp\AskSLib.dll

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32axau_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\install_flashplayer11x32ax_gtbd_chrd_dn_aaa_aih.exe

C:\Users\Janine\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-20 09:02
 

==================== End Of Log ============================

--- --- ---

aharonov

28.12.2013 19:21

Besteht das Problem weiterhin?

Schritt 1

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

aharonov

07.01.2014 15:28

Fehlende Rückmeldung
Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten.
Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.

Alle Zeitangaben in WEZ +1. Es ist jetzt 14:32 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58