Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Kontosperre bei web.de (https://www.trojaner-board.de/146924-kontosperre-web-de.html)

Der Schalker 29.12.2013 14:34
Kontosperre bei web.de
 
Hallo,

in den letzten drei Wochen ist es dreimal so gewesen, dass web.de mir mitgeteilt hat, dass mein Konto vorsorglich gesperrt wurde, da über mein Postfach Spam-Mails verschickt worden sind. Das mit den Spam-Mails wurde mir auf telefonische Nachfrage mitgeteilt.
Ich habe MBAM laufen lassen: keine Befunde.
Microsoft Security Essentials hat auch keinen Befund, auch die WindowsFirewall hatte nichts zu bemängeln.
System: Windows 7 64 Bit
Fritz Box WLAN 7270
Ich hatte in einem Forum über PluginCheck gelesen, das Ergebnis lautet:

Firefox 26.0 ist aktuell
Flash (11,8,800,168) ist aktuell.
Java (1,7,0,45) ist aktuell.
Adobe Reader 11,0,5,3 ist aktuell.

Gibt es weitere Analysemöglichkeiten? Da ich bislang nicht weiß, welche Protokolle ich evtl. posten müsste, da ich keine Befunde habe, hänge ich erst einmal nichts an.

Ist das ein Problem von mir oder von web.de?

Vielen Dank für Eure Hilfe und viele Grüße

schrauber 29.12.2013 18:10
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Der Schalker 30.12.2013 15:12
... sorry, dass ich erst jetzt antworte - ich hatte gar nicht mit einer so schnellen Rückmeldung gerechnet.


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013 01
Ran by Krueger (administrator) on PC on 30-12-2013 15:08:31
Running from C:\Users\Krueger\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe
(SlySoft, Inc.) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [BrowserPlugInHelper] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [AnyDVD] - C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe [93096 2013-12-27] (SlySoft, Inc.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKCU\...\Run: [HP Officejet 6600 (NET)] - C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
Startup: C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2510 series.lnk -> C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 6510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 6510 series.lnk -> C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {163F7060-4723-4812-857C-7D98FEDAB19C} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {932068A1-CB31-46EE-A927-97604C76BF14} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default
FF user.js: detected! => C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default\user.js
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: https://www.web.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FRITZ!Box AddOn - C:\Users\Krueger\AppData\Roaming\Mozilla\Firefox\Profiles\an73y2y7.default\Extensions\fb_add_on@avm.de

Chrome:
=======
CHR DefaultSearchKeyword: aartemis
CHR DefaultSearchProvider: aartemis
CHR DefaultSearchURL: hxxp://www.aartemis.com/web/?type=ds&ts=1388256436&from=cor&uid=SamsungXSSDX840XSeries_S14CNSAD112783T&q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Google Wallet) - C:\Users\Krueger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [138152 2013-11-26] (SlySoft, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-07-23] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-07-23] (RapidSolution Software AG)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [768680 2013-06-26] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2013-06-26] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29352 2013-06-26] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2013-06-26] (Microsoft Corporation)
U3 DfSdkS;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-30 15:08 - 2013-12-30 15:08 - 00011051 _____ C:\Users\Krueger\Desktop\FRST.txt
2013-12-30 15:08 - 2013-12-30 15:08 - 00000000 ____D C:\FRST
2013-12-30 15:07 - 2013-12-30 15:07 - 01931302 _____ (Farbar) C:\Users\Krueger\Desktop\FRST64.exe
2013-12-29 13:40 - 2013-12-30 14:55 - 00000112 _____ C:\Windows\setupact.log
2013-12-29 13:40 - 2013-12-29 13:40 - 00000000 _____ C:\Windows\setuperr.log
2013-12-29 11:55 - 2013-12-29 11:55 - 00001317 _____ C:\DelFix.txt
2013-12-29 11:55 - 2013-12-29 11:55 - 00000000 ____D C:\Windows\ERUNT
2013-12-29 02:08 - 2013-12-29 02:08 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-29 02:08 - 2013-12-29 02:08 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-29 02:08 - 2013-12-29 02:08 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-29 02:08 - 2013-12-29 02:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Sun
2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Oracle
2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-29 02:06 - 2013-12-29 02:06 - 00915368 _____ (Oracle Corporation) C:\Users\Krueger\Downloads\jxpiinstall.exe
2013-12-28 20:47 - 2013-12-28 20:47 - 00000111 _____ C:\Users\Krueger\AppData\Roaming\WB.CFG
2013-12-28 20:47 - 2013-12-28 20:47 - 00000006 _____ C:\Users\Krueger\AppData\Roaming\WBPU-TTL.DAT
2013-12-28 20:14 - 2013-12-29 03:55 - 00000027 _____ C:\Users\Krueger\Desktop\Neues Textdokument.txt
2013-12-28 19:47 - 2013-12-30 02:47 - 00000300 _____ C:\Windows\Tasks\Digital Sites.job
2013-12-28 19:47 - 2013-12-28 21:26 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\DigitalSites
2013-12-28 19:47 - 2013-12-28 19:47 - 00003232 _____ C:\Windows\System32\Tasks\Digital Sites
2013-12-28 14:11 - 2013-12-28 14:12 - 10558760 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7390.exe
2013-12-26 04:10 - 2013-12-26 04:10 - 04645232 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup409.exe
2013-12-26 03:17 - 2013-12-26 03:17 - 00001318 _____ C:\Users\Public\Desktop\Moorhuhn Schatzjäger 3.lnk
2013-12-26 03:17 - 2013-12-26 03:17 - 00000000 ____D C:\Program Files (x86)\Moorhuhn Schatzjäger 3
2013-12-21 13:41 - 2013-12-21 13:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 04:34 - 2013-12-20 04:34 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Malwarebytes
2013-12-20 04:33 - 2013-12-20 04:33 - 00001147 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 04:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-20 04:32 - 2013-12-20 04:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Krueger\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-16 00:55 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-16 00:55 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-16 00:55 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-16 00:55 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 01:12 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 01:12 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 01:12 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 01:12 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 01:12 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 01:12 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 01:12 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 01:12 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 01:12 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 01:12 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 01:12 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 01:12 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 01:12 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 01:12 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 01:12 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 01:12 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 01:12 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 01:12 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 01:12 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 01:12 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 01:12 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 01:11 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 01:11 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 01:11 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 01:11 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 01:11 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 01:11 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 01:11 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 01:11 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 01:11 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 01:11 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 00:34 - 2013-12-13 00:34 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380(1).exe
2013-12-13 00:33 - 2013-12-13 00:33 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380.exe
2013-12-12 13:15 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 13:15 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 23:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 23:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 23:34 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 23:34 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 23:34 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 23:34 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 23:34 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 23:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 23:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 23:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 23:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 23:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 23:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 23:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 23:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 23:34 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 23:34 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-05 00:39 - 2013-12-05 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-05 00:39 - 2013-12-05 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-05 00:39 - 2013-12-05 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-05 00:39 - 2013-12-05 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-05 00:39 - 2013-12-05 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-03 16:05 - 2013-12-03 16:05 - 04618136 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup408.exe
2013-12-03 10:51 - 2013-12-30 15:05 - 01334787 _____ C:\Windows\WindowsUpdate.log
2013-12-01 17:13 - 2013-12-01 17:14 - 00002215 _____ C:\Users\Krueger\Desktop\SEPA Account Converter.lnk
2013-12-01 17:13 - 2013-12-01 17:14 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Finanz
2013-12-01 17:13 - 2013-12-01 17:14 - 00000000 ____D C:\Program Files (x86)\SEPA Account Converter
2013-12-01 17:13 - 2013-12-01 17:13 - 03846144 _____ C:\Users\Krueger\Downloads\SEPA Account Converter.msp
2013-12-01 17:13 - 2013-12-01 17:13 - 02224018 _____ C:\Users\Krueger\Downloads\sepa_account_converter_1.22.1.zip

==================== One Month Modified Files and Folders =======

2013-12-30 15:08 - 2013-12-30 15:08 - 00011051 _____ C:\Users\Krueger\Desktop\FRST.txt
2013-12-30 15:08 - 2013-12-30 15:08 - 00000000 ____D C:\FRST
2013-12-30 15:07 - 2013-12-30 15:07 - 01931302 _____ (Farbar) C:\Users\Krueger\Desktop\FRST64.exe
2013-12-30 15:05 - 2013-12-03 10:51 - 01334787 _____ C:\Windows\WindowsUpdate.log
2013-12-30 15:02 - 2009-07-14 05:45 - 00020272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-30 15:02 - 2009-07-14 05:45 - 00020272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-30 14:59 - 2011-04-12 08:43 - 00654594 _____ C:\Windows\system32\perfh007.dat
2013-12-30 14:59 - 2011-04-12 08:43 - 00130208 _____ C:\Windows\system32\perfc007.dat
2013-12-30 14:59 - 2009-07-14 06:13 - 01500254 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-30 14:57 - 2013-03-10 14:31 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 14:57 - 2013-03-10 14:31 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-30 14:56 - 2013-03-09 22:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 14:55 - 2013-12-29 13:40 - 00000112 _____ C:\Windows\setupact.log
2013-12-30 14:55 - 2013-03-04 23:45 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-30 14:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-30 02:56 - 2013-03-05 22:09 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\SoftGrid Client
2013-12-30 02:47 - 2013-12-28 19:47 - 00000300 _____ C:\Windows\Tasks\Digital Sites.job
2013-12-29 13:40 - 2013-12-29 13:40 - 00000000 _____ C:\Windows\setuperr.log
2013-12-29 11:55 - 2013-12-29 11:55 - 00001317 _____ C:\DelFix.txt
2013-12-29 11:55 - 2013-12-29 11:55 - 00000000 ____D C:\Windows\ERUNT
2013-12-29 03:55 - 2013-12-28 20:14 - 00000027 _____ C:\Users\Krueger\Desktop\Neues Textdokument.txt
2013-12-29 02:08 - 2013-12-29 02:08 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-29 02:08 - 2013-12-29 02:08 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-29 02:08 - 2013-12-29 02:08 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-29 02:08 - 2013-12-29 02:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Sun
2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\ProgramData\Oracle
2013-12-29 02:08 - 2013-12-29 02:08 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-29 02:06 - 2013-12-29 02:06 - 00915368 _____ (Oracle Corporation) C:\Users\Krueger\Downloads\jxpiinstall.exe
2013-12-28 21:26 - 2013-12-28 19:47 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\DigitalSites
2013-12-28 20:47 - 2013-12-28 20:47 - 00000111 _____ C:\Users\Krueger\AppData\Roaming\WB.CFG
2013-12-28 20:47 - 2013-12-28 20:47 - 00000006 _____ C:\Users\Krueger\AppData\Roaming\WBPU-TTL.DAT
2013-12-28 19:52 - 2013-03-04 18:44 - 00001037 _____ C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-28 19:47 - 2013-12-28 19:47 - 00003232 _____ C:\Windows\System32\Tasks\Digital Sites
2013-12-28 14:12 - 2013-12-28 14:11 - 10558760 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7390.exe
2013-12-26 04:10 - 2013-12-26 04:10 - 04645232 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup409.exe
2013-12-26 04:10 - 2013-03-10 08:55 - 00000000 ____D C:\Program Files\CCleaner
2013-12-26 03:17 - 2013-12-26 03:17 - 00001318 _____ C:\Users\Public\Desktop\Moorhuhn Schatzjäger 3.lnk
2013-12-26 03:17 - 2013-12-26 03:17 - 00000000 ____D C:\Program Files (x86)\Moorhuhn Schatzjäger 3
2013-12-23 05:40 - 2013-03-05 00:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 13:41 - 2013-12-21 13:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 04:34 - 2013-12-20 04:34 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Malwarebytes
2013-12-20 04:33 - 2013-12-20 04:33 - 00001147 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-20 04:33 - 2013-12-20 04:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 04:32 - 2013-12-20 04:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Krueger\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-19 11:17 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-16 01:54 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-15 01:11 - 2013-07-14 08:58 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 01:08 - 2013-03-05 22:58 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 15:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-13 00:34 - 2013-12-13 00:34 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380(1).exe
2013-12-13 00:33 - 2013-12-13 00:33 - 10518000 _____ C:\Users\Krueger\Downloads\SetupAnyDVD7380.exe
2013-12-12 12:48 - 2009-07-14 05:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 12:37 - 2013-11-24 19:45 - 00002243 _____ C:\Users\Public\Desktop\SteuerSparErklärung 2014.lnk
2013-12-09 04:20 - 2013-09-24 00:14 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Mp3tag
2013-12-05 11:32 - 2013-03-04 18:39 - 00000000 ____D C:\Windows\Panther
2013-12-05 11:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-05 00:39 - 2013-12-05 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-05 00:39 - 2013-12-05 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-05 00:39 - 2013-12-05 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-05 00:39 - 2013-12-05 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-05 00:39 - 2013-12-05 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-05 00:39 - 2013-12-05 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-05 00:39 - 2013-12-05 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-05 00:39 - 2013-12-05 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-05 00:39 - 2013-12-05 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-03 16:05 - 2013-12-03 16:05 - 04618136 _____ (Piriform Ltd) C:\Users\Krueger\Downloads\ccsetup408.exe
2013-12-01 17:14 - 2013-12-01 17:13 - 00002215 _____ C:\Users\Krueger\Desktop\SEPA Account Converter.lnk
2013-12-01 17:14 - 2013-12-01 17:13 - 00000000 ____D C:\Users\Krueger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Star Finanz
2013-12-01 17:14 - 2013-12-01 17:13 - 00000000 ____D C:\Program Files (x86)\SEPA Account Converter
2013-12-01 17:13 - 2013-12-01 17:13 - 03846144 _____ C:\Users\Krueger\Downloads\SEPA Account Converter.msp
2013-12-01 17:13 - 2013-12-01 17:13 - 02224018 _____ C:\Users\Krueger\Downloads\sepa_account_converter_1.22.1.zip

Some content of TEMP:
====================
C:\Users\Krueger\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Krueger\AppData\Local\Temp\pcspeedmaxsetup.exe
C:\Users\Krueger\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 00:17

==================== End Of Log ============================
--- --- ---



Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-12-2013 01
Ran by Krueger at 2013-12-30 15:08:58
Running from C:\Users\Krueger\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112 - Adobe Systems, Inc.)
AnyDVD (x32 Version: 7.3.9.0 - SlySoft)
Ashampoo Burning Studio 2012 v.10.0.15 (x32 Version: 10.0.15 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2013 v.11.0.6 (x32 Version: 11.0.6 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 9 v.9.4.3 (x32 Version: 9.4.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 5 v.5.4.0 (x32 Version: 5.4.0 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio 2012 v.1.0.2 (x32 Version: 1.0.2 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 2012 v.8.1.4 (x32 Version: 8.1.4 - Ashampoo GmbH & Co. KG)
Audials (x32 Version: 10.2.29500.0 - Audials AG)
Bing Bar (x32 Version: 7.3.124.0 - Microsoft Corporation)
CCleaner (Version: 4.09 - Piriform)
Cut Out 3.0 (x32 Version:  - Franzis.de)
Free Studio version 2013 (x32 Version: 6.0.0.128 - DVDVideoSoft Ltd.)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.)
HP Deskjet 2510 series - Grundlegende Software für das Gerät (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2510 series Hilfe (x32 Version: 27.0.0 - Hewlett Packard)
HP Deskjet 2510 series Setup Guide (x32 Version: 27.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (x32 Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet 6600 - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6600 Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (x32 Version: 1.0.0.7702 - HP)
HP Photosmart 6510 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 6510 series Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)
HP Update (x32 Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft)
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Home and Student 2010 - Deutsch (x32 Version: 14.0.6134.5003 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation)
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia)
Mipony Download Accelerator Packages (HKCU Version:  - )
Moorhuhn Schatzjäger 3 (x32 Version: 1.00 - phenomedia publishing gmbh)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mp3tag v2.57 (x32 Version: v2.57 - Florian Heidenreich)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia)
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia)
MSVC90_x64 (Version: 1.0.1.2 - Nokia)
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0 - Nokia)
Nokia Suite (x32 Version: 3.8.30.0 - Nokia)
NVIDIA 3D Vision Controller-Treiber 314.07 (Version: 314.07 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation)
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation)
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation)
PC Connectivity Solution (x32 Version: 12.0.109.0 - Nokia)
PC Speed Maximizer v3.2 (x32 Version: 3.2 - Smart PC Solutions)
Picasa 3 (x32 Version: 3.9 - Google, Inc.)
SEPA Account Converter (x32 Version: 1.23.1 - Star Finanz GmbH)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.09 - Wolters Kluwer Deutschland GmbH)
SteuerSparErklärung 2014 (x32 Version: 19.03.37 - Akademische Arbeitsgemeinschaft)
Studie zur Verbesserung von HP Deskjet 2510 series Produkten (Version: 28.0.1313.0 - Hewlett-Packard Co.)
Studie zur Verbesserung von HP Officejet 6600 Produkten (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Studie zur Verbesserung von HP Photosmart 6510 series Produkten (Version: 28.0.1315.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0 - Nokia)

==================== Restore Points  =========================

29-12-2013 10:55:34 Ende der Bereinigung

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2A93BC5F-B515-4F61-B729-F8E85A7BE131} - System32\Tasks\HPCustParticipation HP Deskjet 2510 series => C:\Program Files\HP\HP Deskjet 2510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {53DE6E01-6511-4396-93C6-85CFBD7BB85A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {57FBA519-E913-45A1-8F10-08C1774952F4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-10] (Google Inc.)
Task: {769F241C-6D8D-439C-97AF-8E59FF85E308} - System32\Tasks\Digital Sites => C:\Users\Krueger\AppData\Roaming\DIGITA~2\UPDATE~1\UPDATE~1.EXE
Task: {9587CA16-1DB3-4ACB-94F7-567440E3CA0F} - System32\Tasks\HPCustParticipation HP Photosmart 6510 series => C:\Program Files\HP\HP Photosmart 6510 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {A64FBFEB-6D57-46F8-9BAF-F518EC286B00} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-10] (Adobe Systems Incorporated)
Task: {A97F50EB-5AA4-4EAC-807A-BE68DF552541} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-10] (Google Inc.)
Task: {BCC86B7A-7BCE-4363-96EF-515C1796B08B} - System32\Tasks\HPCustParticipation HP Officejet 6600 => C:\Program Files\HP\HP Officejet 6600\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Krueger\AppData\Roaming\DIGITA~2\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-04-19 00:46 - 2013-04-19 00:46 - 08507232 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 02354016 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 01014624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00364384 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 02480992 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 01346912 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00206176 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 02653024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00033120 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00035680 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00207200 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 11166560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00276832 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll
2013-04-15 12:26 - 2013-04-15 12:26 - 00391600 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll
2013-04-15 12:26 - 2013-04-15 12:26 - 00059280 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00446304 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00520544 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00720736 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00438624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll
2013-04-19 00:44 - 2013-04-19 00:44 - 00606560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00093024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll
2013-12-21 13:41 - 2013-12-21 13:41 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-10 22:56 - 2013-09-10 22:56 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:1749E567

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/30/2013 02:57:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 01:42:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 10:00:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/29/2013 03:56:49 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/29/2013 03:56:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/29/2013 03:56:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/29/2013 03:56:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/28/2013 09:31:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/28/2013 09:30:59 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/28/2013 09:29:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (12/30/2013 03:05:47 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

        Neue Signaturversion:

        Vorherige Signaturversion: 1.165.770.0

        Aktualisierungsquelle: %NT-AUTORITÄT59

        Aktualisierungsphase: 4.4.0304.00

        Quellpfad: 4.4.0304.01

        Signaturtyp: %NT-AUTORITÄT602

        Aktualisierungstyp: %NT-AUTORITÄT604

        Benutzer: NT-AUTORITÄT\SYSTEM

        Aktuelle Modulversion: %NT-AUTORITÄT605

        Vorherige Modulversion: %NT-AUTORITÄT606

        Fehlercode: %NT-AUTORITÄT607

        Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (12/30/2013 03:05:47 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

        Neue Signaturversion:

        Vorherige Signaturversion: 1.165.770.0

        Aktualisierungsquelle: %NT-AUTORITÄT59

        Aktualisierungsphase: 4.4.0304.00

        Quellpfad: 4.4.0304.01

        Signaturtyp: %NT-AUTORITÄT602

        Aktualisierungstyp: %NT-AUTORITÄT604

        Benutzer: NT-AUTORITÄT\SYSTEM

        Aktuelle Modulversion: %NT-AUTORITÄT605

        Vorherige Modulversion: %NT-AUTORITÄT606

        Fehlercode: %NT-AUTORITÄT607

        Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (12/30/2013 02:56:24 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (12/29/2013 04:52:36 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

        Neue Signaturversion:

        Vorherige Signaturversion: 1.165.770.0

        Aktualisierungsquelle: %NT-AUTORITÄT59

        Aktualisierungsphase: 4.4.0304.00

        Quellpfad: 4.4.0304.01

        Signaturtyp: %NT-AUTORITÄT602

        Aktualisierungstyp: %NT-AUTORITÄT604

        Benutzer: NT-AUTORITÄT\SYSTEM

        Aktuelle Modulversion: %NT-AUTORITÄT605

        Vorherige Modulversion: %NT-AUTORITÄT606

        Fehlercode: %NT-AUTORITÄT607

        Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (12/29/2013 04:52:36 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

        Neue Signaturversion:

        Vorherige Signaturversion: 1.165.770.0

        Aktualisierungsquelle: %NT-AUTORITÄT59

        Aktualisierungsphase: 4.4.0304.00

        Quellpfad: 4.4.0304.01

        Signaturtyp: %NT-AUTORITÄT602

        Aktualisierungstyp: %NT-AUTORITÄT604

        Benutzer: NT-AUTORITÄT\SYSTEM

        Aktuelle Modulversion: %NT-AUTORITÄT605

        Vorherige Modulversion: %NT-AUTORITÄT606

        Fehlercode: %NT-AUTORITÄT607

        Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (12/29/2013 01:42:02 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (12/28/2013 09:28:21 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (12/28/2013 09:08:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update Jump Flip" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (12/28/2013 09:08:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update Jump Flip" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2013 07:54:03 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================
Error: (12/30/2013 02:57:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 01:42:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/29/2013 10:00:37 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (12/29/2013 03:56:49 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe

Error: (12/29/2013 03:56:41 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe

Error: (12/29/2013 03:56:41 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe

Error: (12/29/2013 03:56:37 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe

Error: (12/28/2013 09:31:08 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe

Error: (12/28/2013 09:30:59 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Krueger\Downloads\esetsmartinstaller_enu.exe

Error: (12/28/2013 09:29:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-12-28 16:36:28.611
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:28.610
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:28.608
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:28.288
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:28.281
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:28.275
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.20763_none_c2ef70ba41419eb9\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:27.965
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:27.963
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:27.962
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MsMpEng.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-12-28 16:36:27.763
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\WinSxS\x86_windows-defender-service_31bf3856ad364e35_6.2.9200.16656_none_c273a4b928192f03\MpCmdRun.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 36%
Total physical RAM: 4094.18 MB
Available physical RAM: 2604.97 MB
Total Pagefile: 8186.53 MB
Available Pagefile: 6521.36 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: (Windows7) (Fixed) (Total:111.69 GB) (Free:58.25 GB) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Windows8 und Daten) (Fixed) (Total:811.59 GB) (Free:561.08 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (Volume) (Fixed) (Total:99.92 GB) (Free:99.8 GB) NTFS
Drive g: (RECOVER) (Fixed) (Total:19.99 GB) (Free:8.54 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: E7E9A0BB)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: F98D6E74)
Partition 1: (Active) - (Size=812 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=120 GB) - (Type=OF Extended)

==================== End Of Log ============================
Viele Grüße

schrauber 31.12.2013 14:42
hi,

Passwort schon geändert? Solche Accounts werden immer online gehackt, wenn überhaupt. Rechner ist sauber.

Der Schalker 31.12.2013 14:54
Hallo,

ja, Passwort ist geändert.
Müssten wir die gleiche Aktion jetzt noch für unser Laptop machen? Auch das ruft web.de auf.Oder ist das überflüssig, weil sowieso nur online gehackt wird?

Gruß

schrauber 01.01.2014 13:09
Du kannst gerne mal FRST LOgs davon posten, ich schau schnell drüber :)

Der Schalker 01.01.2014 13:32
Hallo schrauber,

ich hoffe du hattest einen guten Start ins neue Jahr!!??
Hier der Laptop-Scan:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-12-2013
Ran by Linda (administrator) on LINDA-PC on 01-01-2014 13:26:49
Running from \\PC\Music
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Windows\RTKAUDIOSERVICE.EXE
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sony Corporation) C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
(Roxio) C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Sony Corporation) C:\Program Files\Sony\Network Utility\LANUtil.exe
() C:\Users\Linda\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Sony Corporation) C:\Program Files\Sony\Network Utility\NSUService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Sonic Solutions) C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sonic Solutions) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
(Sony Corporation) C:\Windows\VUAgent.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Farbar) \\PC\Music\FRST.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [835584 2007-03-10] (Synaptics, Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6295552 2008-07-03] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Windows\SkyTel.exe [1826816 2008-07-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [ArcSoft Connection Service] - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [ContentTransferWMDetector.exe] - C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe [423200 2008-07-11] (Sony Corporation)
HKLM\...\Run: [ISBMgr.exe] - C:\Program Files\Sony\ISB Utility\ISBMgr.exe [317280 2008-04-03] (Sony Corporation)
HKLM\...\Run: [MarketingTools] - C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [24576 2009-01-15] (Sony Corporation)
HKLM\...\Run: [RoxioDragToDisc] - C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe [1116920 2007-03-13] (Roxio)
HKLM\...\Run: [RoxWatchTray] - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [236016 2007-08-16] (Sonic Solutions)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [144384 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [451872 2007-07-18] (Hewlett-Packard Company)
HKCU\...\Run: [NSUFloatingUI] - C:\Program Files\Sony\Network Utility\LANUtil.exe [262144 2008-06-27] (Sony Corporation)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Linda\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.sonystyle-europe.com
hxxp://www.club-vaio.com/vbc/ebay/index.html
hxxp://www.club-vaio.com/vbc
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {6C46687A-47DF-4C56-9E42-77258AB738EB} URL = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta=
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\Program Files\ArcSoft\Media Converter for Philips\Internet Video Downloader\ArcURLRecord.dll (ArcSoft, Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Linda\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Metaswitcher - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\metaswitcher@com.extensions.mattiasschlenker.de
FF Extension: Distrust - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\trustme@gness.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: FoxyTunes - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
FF Extension: Media Converter - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{6e764c17-863a-450f-bdd0-6772bd5aaa18}
FF Extension: MidnightFoxy - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{dc961bb0-dfb2-11dc-95ff-0800200c9a66}
FF Extension: Update Scanner - C:\Users\Linda\AppData\Roaming\Mozilla\Firefox\Profiles\szmhghij.default\Extensions\{c07d1a49-9894-49ff-a594-38960ede8fb9}.xpi
FF Extension: COMPUTER BILD Fox Config Helper - C:\Program Files\Mozilla Firefox\extensions\cbsf-config@com.extensions.mattiasschlenker.de
FF Extension: Personal Menu - C:\Program Files\Mozilla Firefox\extensions\CompactMenuCE@Merci.chao
FF Extension: Metaswitcher - C:\Program Files\Mozilla Firefox\extensions\metaswitcher@com.extensions.mattiasschlenker.de
FF Extension: printpdf - C:\Program Files\Mozilla Firefox\extensions\printpdf@pavlov.net
FF Extension: ColorfulTabs - C:\Program Files\Mozilla Firefox\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
FF Extension: Session Manager - C:\Program Files\Mozilla Firefox\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}
FF Extension: Site Launcher - C:\Program Files\Mozilla Firefox\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67}
FF Extension: Split Browser - C:\Program Files\Mozilla Firefox\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d}
FF Extension: Minimap Addon - C:\Program Files\Mozilla Firefox\extensions\{398e77b8-2304-11dc-8314-0800200c9a66}
FF Extension: CoolPreviews - C:\Program Files\Mozilla Firefox\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}
FF Extension: DownThemAll! - C:\Program Files\Mozilla Firefox\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
FF Extension: FoxTab - C:\Program Files\Mozilla Firefox\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
FF Extension: GooglePreview - C:\Program Files\Mozilla Firefox\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}] - C:\Program Files\ArcSoft\Media Converter for Philips\Internet Video Downloader\Plugin_FireFox
FF Extension: Internet Video Downloader - C:\Program Files\ArcSoft\Media Converter for Philips\Internet Video Downloader\Plugin_FireFox

========================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1516584 2007-04-03] (Cisco Systems, Inc.)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010 CBE\Dfsdks.exe [406016 2009-08-24] (mst software GmbH, Germany)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [7591312 2013-07-09] (DisplayLink Corp.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 NSUService; C:\Program Files\Sony\Network Utility\NSUService.exe [299008 2008-06-27] (Sony Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [14848 2011-07-01] ()
S3 SOHCImp; C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe [103712 2008-05-20] (Sony Corporation)
S3 SOHDms; C:\Program Files\Sony\VAIO Media plus\SOHDms.exe [353568 2008-05-20] (Sony Corporation)
S3 SOHDs; C:\Program Files\Sony\VAIO Media plus\SOHDs.exe [62752 2008-05-20] (Sony Corporation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [73728 2008-05-22] (Sony Corporation)
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [182112 2008-07-07] (Sony Corporation)
R2 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [411488 2008-06-19] (Sony Corporation)
S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [337184 2008-06-11] (Sony Corporation)
R3 Vcsw; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [279848 2008-06-19] (Sony Corporation)
R3 VUAgent; C:\Windows\VUAgent.exe [1013808 2013-03-26] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [192512 2008-05-22] (Sony Corporation)
S3 WPFFontCache_v0400; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [x]

==================== Drivers (Whitelisted) ====================

S2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306295 2007-04-03] (Cisco Systems, Inc.)
S3 dlkmd; C:\Windows\system32\drivers\dlkmd.sys [287856 2008-08-18] (DisplayLink Corp.)
S0 dlkmdldr; C:\Windows\System32\drivers\dlkmdldr.sys [13424 2008-08-18] (DisplayLink Corp.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R1 MpKsl5d70b689; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{449F43A4-68F9-4093-A56F-9EFD7EC4B985}\MpKsl5d70b689.sys [40392 2014-01-01] (Microsoft Corporation)
S4 RxFilter; C:\Windows\System32\DRIVERS\RxFilter.sys [50688 2006-12-02] (Sonic Solutions)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)
S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [27936 2008-07-15] (RapidSolution Software AG)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-01 13:26 - 2014-01-01 13:26 - 00000000 ____D C:\FRST
2014-01-01 13:19 - 2014-01-01 13:19 - 00001352 _____ C:\Windows\setupact.log
2014-01-01 13:19 - 2014-01-01 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-12-21 14:32 - 2013-12-21 14:32 - 00001067 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Users\Linda\AppData\Roaming\Malwarebytes
2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-21 14:32 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-21 14:31 - 2013-12-21 14:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Linda\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-20 01:12 - 2013-12-20 01:13 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 01:13 - 2013-12-12 01:13 - 00002482 _____ C:\Users\Linda\Documents\cc_20131212_011334.reg
2013-12-11 01:44 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 01:44 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 01:44 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 01:44 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 01:44 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 01:44 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 01:44 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 01:44 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 01:44 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 01:44 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 01:44 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 01:44 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 01:44 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 01:44 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 01:44 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 01:44 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 01:44 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 01:44 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 01:44 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 01:40 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 01:40 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 01:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 01:38 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 01:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 01:38 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 01:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 01:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 01:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 01:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 01:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 01:38 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 01:38 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-01 13:27 - 2013-11-10 10:09 - 01617296 _____ C:\Windows\WindowsUpdate.log
2014-01-01 13:26 - 2014-01-01 13:26 - 00000000 ____D C:\FRST
2014-01-01 13:20 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-01 13:19 - 2014-01-01 13:19 - 00001352 _____ C:\Windows\setupact.log
2014-01-01 13:19 - 2014-01-01 13:19 - 00000000 _____ C:\Windows\setuperr.log
2013-12-31 19:58 - 2011-10-09 04:36 - 00010048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-31 19:58 - 2011-10-09 04:36 - 00010048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-21 21:05 - 2013-06-12 23:18 - 00000000 ____D C:\Windows\sk-sk
2013-12-21 14:32 - 2013-12-21 14:32 - 00001067 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Users\Linda\AppData\Roaming\Malwarebytes
2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-21 14:32 - 2013-12-21 14:32 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-21 14:32 - 2013-12-21 14:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Linda\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-20 21:18 - 2012-05-11 20:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-20 01:13 - 2013-12-20 01:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-13 13:06 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-12 01:13 - 2013-12-12 01:13 - 00002482 _____ C:\Users\Linda\Documents\cc_20131212_011334.reg
2013-12-12 00:06 - 2011-10-09 05:44 - 01696546 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-11 01:53 - 2009-07-14 05:33 - 00499072 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 01:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-11 01:43 - 2013-07-23 12:45 - 00000000 ____D C:\Windows\system32\MRT
2013-12-11 01:40 - 2011-10-14 23:33 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 01:40 - 2009-01-15 17:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-09 01:42 - 2013-06-30 12:51 - 00000000 ____D C:\Users\Linda\AppData\Local\CrashDumps
2013-12-06 09:53 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

Files to move or delete:
====================
C:\Users\Linda\AppData\Roaming\desktop.ini
C:\Users\Linda\COMPUTERBILD App-Center-Installation.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 00:00

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-12-2013
Ran by Linda at 2014-01-01 13:27:46
Running from \\PC\Music
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

2007 Microsoft Office system (Version: 12.0.4518.1014 - Microsoft Corporation)
32 Bit HP CIO Components Installer (Version: 1.0.0 - Hewlett-Packard)
32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard)
Activation Assistant for the 2007 Microsoft Office suites (Version:  - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation)
Adobe Flash Player 10 ActiveX (Version: 10.2.152.32 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.18 (Version: 1.0.18 - Amazon Services LLC)
AMD Accelerated Video Transcoding (Version: 12.5.100.21116 - Advanced Micro Devices, Inc.)
AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.)
AMD Catalyst Install Manager (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.)
AMD Media Foundation Decoders (Version: 1.0.71116.1554 - Advanced Micro Devices, Inc.)
ArcSoft WebCam Companion 2 (Version:  - ArcSoft)
Ashampoo Burning Studio 2009 (Version: 8.0.4 - ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 2010 CBE (Version: 6.5.0 - Ashampoo GmbH & Co. KG)
ATI Catalyst Install Manager (Version: 3.0.664.0 - ATI Technologies, Inc.)
Belkin Wireless Driver (Version: 1.0.0.20 - Belkin)
Big Fish Games Spiel-Suite (Version:  - )
BlackBerry Desktop Software 4.3 (Version: 4.3.0.17 - Research in Motion Ltd.)
Browser Address Error Redirector (Version:  - )
Business Contact Manager für Outlook 2007 (Version: 3.0.5828.0 - Microsoft Corporation)
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Catalyst Control Center (Version: 2012.1116.1515.27190 - Ihr Firmenname)
Catalyst Control Center Core Implementation (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Graphics Full Existing (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Graphics Full New (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Graphics Light (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Graphics Previews Common (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Graphics Previews Common (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.)
Catalyst Control Center Graphics Previews Vista (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center InstallProxy (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.)
Catalyst Control Center Localization All (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.)
Catalyst Control Center Localization Chinese Standard (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Chinese Traditional (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Czech (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Danish (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Dutch (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Finnish (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization French (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization German (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Greek (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Hungarian (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Italian (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Japanese (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Korean (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Norwegian (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Polish (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Portuguese (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Russian (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Spanish (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Swedish (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Thai (Version: 2008.0408.2141.36952 - ATI)
Catalyst Control Center Localization Turkish (Version: 2008.0408.2141.36952 - ATI)
CCC Help Chinese Standard (Version: 2008.0408.2140.36952 - ATI)
CCC Help Chinese Standard (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Chinese Traditional (Version: 2008.0408.2140.36952 - ATI)
CCC Help Chinese Traditional (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Czech (Version: 2008.0408.2140.36952 - ATI)
CCC Help Czech (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Danish (Version: 2008.0408.2140.36952 - ATI)
CCC Help Danish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Dutch (Version: 2008.0408.2140.36952 - ATI)
CCC Help Dutch (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help English (Version: 2008.0408.2140.36952 - ATI)
CCC Help English (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Finnish (Version: 2008.0408.2140.36952 - ATI)
CCC Help Finnish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help French (Version: 2008.0408.2140.36952 - ATI)
CCC Help French (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help German (Version: 2008.0408.2140.36952 - ATI)
CCC Help German (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Greek (Version: 2008.0408.2140.36952 - ATI)
CCC Help Greek (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Hungarian (Version: 2008.0408.2140.36952 - ATI)
CCC Help Hungarian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Italian (Version: 2008.0408.2140.36952 - ATI)
CCC Help Italian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Japanese (Version: 2008.0408.2140.36952 - ATI)
CCC Help Japanese (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Korean (Version: 2008.0408.2140.36952 - ATI)
CCC Help Korean (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Norwegian (Version: 2008.0408.2140.36952 - ATI)
CCC Help Norwegian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Polish (Version: 2008.0408.2140.36952 - ATI)
CCC Help Polish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Portuguese (Version: 2008.0408.2140.36952 - ATI)
CCC Help Portuguese (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Russian (Version: 2008.0408.2140.36952 - ATI)
CCC Help Russian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Spanish (Version: 2008.0408.2140.36952 - ATI)
CCC Help Spanish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Swedish (Version: 2008.0408.2140.36952 - ATI)
CCC Help Swedish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Thai (Version: 2008.0408.2140.36952 - ATI)
CCC Help Thai (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
CCC Help Turkish (Version: 2008.0408.2140.36952 - ATI)
CCC Help Turkish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.)
ccc-core-static (Version: 2008.0408.2141.36952 - Ihr Firmenname)
ccc-utility (Version: 2008.0408.2141.36952 - ATI)
ccc-utility (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.)
CCleaner (remove only) (Version:  - Piriform)
Cisco Systems VPN Client 5.0.00.0340 (Version: 5.0.0 - Cisco Systems, Inc.)
Click to Disc (Version: 1.2.00.06190 - Sony Corporation)
Click to Disc (Version: 1.2.73.04270 - Sony Corporation)
Click to Disc Editor (Version: 1.2.00 - Sony Corporation)
Click to Disc Editor 2.0 Upgrade (Version:  - )
COMPUTERBILD App-Center (Version: 1.1.11 - J3S)
Content Transfer (Version: 1.0.0.07110 - Sony Corporation)
CyberGhost VPN Patch 4.7.19 (Version:  - CyberGhost S.R.L.)
DisplayLink Core Software (Version: 7.3.49122.0 - DisplayLink Corp.)
DisplayLink Graphics (Version: 7.3.49122.0 - DisplayLink Corp.)
Feedback Tool (Version: 1.2.0 - Microsoft Corporation)
HDAUDIO SoftV92 Data Fax Modem with SmartCP (Version:  - )
ICQ6.5 (Version: 6.5 - ICQ)
Java 7 Update 25 (Version: 7.0.250 - Oracle)
Java Auto Updater (Version: 2.0.5.1 - Sun Microsystems, Inc.)
Java(TM) 6 Update 29 (Version: 6.0.290 - Sun Microsystems, Inc.)
Java(TM) 6 Update 6 (Version: 1.6.0.60 - Sun Microsystems, Inc.)
Java(TM) 6 Update 7 (Version: 1.6.0.70 - Sun Microsystems, Inc.)
JavaFX 2.1.1 (Version: 2.1.1 - Oracle Corporation)
LightScribe  1.8.15.1 (Version: 1.8.15.1 - hxxp://www.lightscribe.com)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
Media Converter for Philips (Version: 2.5.2.230 - ArcSoft)
Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2003 Web Components (Version: 11.0.8003.0 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Professional Hybrid 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation)
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.1.2047.00 - Microsoft Corporation)
Microsoft SQL Server Native Client (Version: 9.00.1399.06 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (Version: 9.00.4035.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
Music Transfer (Version: 1.2.00.17290 - Sony Corporation)
Nokia Connectivity Cable Driver (Version: 6.80.5.1 - )
OpenMG Secure Module 5.1.00 (Version: 5.1.00.05200 - Sony Corporation)
OpenMG Secure Module 5.4.00 (Version: 5.4.00.04020 - Sony Corporation)
OpenOffice.org 3.2 (Version: 3.2.9502 - OpenOffice.org)
OpenVPN 2.2.1 (Version: 2.2.1 - )
Picasa 3 (Version: 3.8 - Google, Inc.)
PixiePack Codec Pack (Version: 0.10.6.0 - None)
Primo (Version: 1.00.0000 - Your Company Name)
Realtek High Definition Audio Driver (Version:  - Realtek Semiconductor Corp.)
Roxio Central Audio (Version: 3.7.0 - Roxio)
Roxio Central Copy (Version: 3.7.0 - Roxio)
Roxio Central Core (Version: 3.7.0 - Roxio)
Roxio Central Data (Version: 3.7.0 - Roxio)
Roxio Central Tools (Version: 3.7.0 - Roxio)
Roxio Creator 9 XE (Version: 9.0.614 - Roxio)
Roxio Drag-to-Disc (Version: 9.05 - Roxio)
Roxio Easy Media Creator 10 LJ (Version: 10.1 - Roxio)
Roxio Easy Media Creator Home (Version: 10.1.177 - Roxio)
Roxio Media Manager (Version: 9.4.007 - Roxio)
Ruby-186-26 (Version: 1.8.6-26 - rubyinstaller.rubyforge.org)
Skins (Version: 2008.0408.2141.36952 - ATI)
Sony Picture Utility (Version: 3.2.02.06170 - Sony Corporation)
SONY VGP-UPR1 (Display Adapter) (Version: 4.5.13507.0 - Sony Corporation)
SONY VGP-UPR1 (Display Adapter) Utility (Version: 1.01.0001 - Sony Corporation)
Sony Video Shared Library (Version: 3.4.00 - Sony Corporation)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0 - Adobe Systems Incorporated)
SWI-Prolog (remove only) (Version:  - )
Synaptics Pointing Device Driver (Version: 9.1.13.0 - Synaptics)
Uninstall 1.0.0.1 (Version:  - )
Unterstützung für VAIO-Präsentation (Version: 1.0.00.04240 - Sony Corporation)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.4035.00 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version:  - Microsoft)
Update for Office 2007 (KB934528) (Version:  - Microsoft)
Update for Office System 2007 Setup (KB929722) (Version:  - Microsoft)
VAIO Content Folder Setting (Version: 2.0.00.17290 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.2.00.06115 - Sony Corporation)
VAIO Content Metadata Manager Setting (Version: 3.2.00.06062 - Sony Corporation)
VAIO Content Metadata Manager Settings (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata XML Interface Library (Version: 3.2.00.06112 - Sony Corporation)
VAIO Content Metadata XML Interface Library (Version: 3.6.0.09080 - Sony Corporation)
VAIO Control Center (Version: 3.1.00.07040 - Sony Corporation)
VAIO Data Restore Tool (Version: 1.0.04.01170 - Sony Corporation)
VAIO DVD Menu Data Basic (Version: 1.0.00.08130 - Sony Corporation)
VAIO Energie Verwaltung (Version: 3.1.00.06190 - Sony Corporation)
VAIO Entertainment Platform (Version: 3.2.00.06200 - Sony Corporation)
VAIO Event Service (Version: 4.1.00.07070 - Sony Corporation)
VAIO Guide (Version: 2.4.00.06190 - Sony Corporation)
VAIO Launcher (Version: 2.1.00.06130 - Sony Corporation)
VAIO Marketing Tools (Version:  - Sony Corporation)
VAIO Media plus (Version: 1.1.00.05240 - Sony Corporation)
VAIO Movie Story (Version: 1.3.00.06240 - Sony Corporation)
VAIO Movie Story (Version: 1.5.01.05120 - Sony Corporation)
VAIO Movie Story 1.5 Upgrade (Version: 1.5.01.05120 - Sony Corporation)
VAIO Movie Story Template Data (Version: 1.5.01.05120 - Sony Corporation)
VAIO MusicBox (Version: 2.1.00.06110 - Sony Corporation)
VAIO MusicBox Sample Music (Version: 1.1.00.14140 - Sony Corporation)
VAIO Original Function Setting (Version: 1.4.00.04230 - Sony Corporation)
VAIO Smart Network (Version: 2.1.00.06270 - Sony Corporation)
VAIO Update (Version: 6.1.1.10250 - Sony Corporation)
VAIO Wallpaper Contents (Version: 1.2.00.05200 - Sony Corporation)
VU5x86 (Version: 1.1.0 - Sony Corporation )
Wascana Desktop Developer, MinGW Edition 0.9.3 (Version:  - Thw Wascana Project)
Windows 7 Upgrade Advisor (Version: 2.0.5000.0 - Microsoft Corporation)
WinDVD for VAIO (Version: 8.0-B9.513 - InterVideo Inc.)
WinRAR (Version:  - )
XMedia Recode 2.1.0.3 (Version: 2.1.0.3 - Sebastian Dörfler)

==================== Restore Points  =========================

16-10-2013 23:19:07 Windows Update
18-10-2013 08:30:46 Windows Update
19-10-2013 22:46:08 Windows Update
20-10-2013 21:31:18 Windows Update
21-10-2013 09:20:57 Windows Update
21-10-2013 12:56:37 Windows Update
21-10-2013 18:47:24 Windows Update
22-10-2013 22:57:24 Windows Update
23-10-2013 15:15:19 Windows Update
24-10-2013 23:48:51 Windows Update
25-10-2013 07:44:12 Windows Update
25-10-2013 08:29:21 Windows Update
26-10-2013 19:38:19 Windows Update
27-10-2013 22:50:56 Windows Update
28-10-2013 18:59:34 Windows Update
29-10-2013 13:41:11 Windows Update
30-10-2013 00:02:39 Windows Update
31-10-2013 22:43:18 Windows Update
02-11-2013 13:49:41 Windows Update
04-11-2013 12:36:04 Windows Update
04-11-2013 12:42:56 Windows Update
04-11-2013 12:50:05 Windows Update
06-11-2013 12:30:17 Windows Update
07-11-2013 09:12:06 Windows Update
09-11-2013 23:18:49 Windows Update
10-11-2013 09:10:42 Windows Update
12-11-2013 23:45:08 Windows Update
14-11-2013 00:17:42 Windows Update
14-11-2013 16:45:32 Windows Update
14-11-2013 17:12:54 Windows Update
18-11-2013 21:49:45 Windows Update
21-11-2013 22:19:30 Windows Update
21-11-2013 23:35:43 Windows Update
25-11-2013 00:33:59 Windows Update
25-11-2013 09:28:33 Windows Update
26-11-2013 14:10:01 Windows Update
27-11-2013 23:20:54 Windows Update
30-11-2013 00:50:27 Windows Update
03-12-2013 22:11:14 Windows Update
06-12-2013 08:49:40 Windows Update
09-12-2013 18:15:30 Windows Update
11-12-2013 00:39:15 Windows Update
15-12-2013 12:02:13 Windows Update
19-12-2013 23:38:03 Windows Update
24-12-2013 11:21:24 Windows Update
27-12-2013 16:21:11 Windows Update
31-12-2013 01:01:31 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost
::1            localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {10C3A686-41F6-46F9-BDC6-9F51F2C149D2} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {252CB22A-6118-4532-AD2E-91B573A77A0F} - System32\Tasks\DSite => C:\Users\Linda\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {315F1C99-D3D4-4827-85D7-992B89A7BBE9} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-09-13] (Microsoft Corporation)
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {B1C09A4C-2045-42E0-9771-7EBD73E4C9F5} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F41B69DD-D96E-4BAC-B8AE-D82953723939} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\Sony\VAIO Update\ShellExeProxy.exe [2012-10-26] (Sony Corporation)
Task: {F9C22EEB-5300-4FF4-80FF-648FE22F844D} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)

==================== Loaded Modules (whitelisted) =============

2006-12-13 22:25 - 2006-12-13 22:25 - 00013312 _____ () C:\Program Files\Roxio\Virtual Drive 9\1031\DC_ShellExt.loc
2010-02-08 15:52 - 2009-12-21 09:50 - 00638768 _____ () C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010 CBE\ContextHandler.dll
2009-01-17 20:13 - 2008-09-16 20:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll
2009-01-17 00:29 - 2007-03-13 16:13 - 00056056 _____ () C:\Windows\system32\DLAAPI_W.DLL
2007-07-03 16:07 - 2007-07-03 16:07 - 00044016 _____ () C:\Program Files\Common Files\Roxio Shared\DLLShared\apm.dll
2007-02-16 17:40 - 2007-02-16 17:40 - 01466368 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll
2007-02-16 17:40 - 2007-02-16 17:40 - 05521408 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll
2011-10-09 04:52 - 2011-10-09 04:52 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-12-20 01:12 - 2013-12-20 01:13 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-06-30 12:52 - 2013-06-30 12:56 - 16033160 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Linda\COWON Q5 CF.avi:TOC.WMV
AlternateDataStreams: C:\Users\Linda\IAUDIO 6 CF.AVI:TOC.WMV
AlternateDataStreams: C:\Users\Linda\IAUDIO U3 CF.avi:TOC.WMV
AlternateDataStreams: C:\Users\Linda\Scannen001.tif:Roxio EMC Stream

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: dlkmdldr
Description: dlkmdldr
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: dlkmdldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/01/2014 01:22:43 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module.  The Windows Installer cannot continue.

Error: (01/01/2014 01:22:40 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module.  The Windows Installer cannot continue.

Error: (01/01/2014 01:22:37 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module.  The Windows Installer cannot continue.

Error: (01/01/2014 01:22:29 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module.  The Windows Installer cannot continue.

Error: (01/01/2014 01:22:23 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: OpenMG Secure Module -- Error 1706.No valid source could be found for product OpenMG Secure Module.  The Windows Installer cannot continue.

Error: (01/01/2014 01:22:00 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)

Error: (01/01/2014 01:20:01 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=23, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0

Error: (01/01/2014 01:20:01 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0

Error: (01/01/2014 01:20:01 PM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path name Fehler bei der Überprüfung. Fehler: Type-ID=18, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0

Error: (12/31/2013 09:09:19 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (01/01/2014 01:22:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "dlkmdldr" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (01/01/2014 01:21:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Cisco Systems Inc. IPSec Driver" ist von folgendem Dienst abhängig: DNE. Dieser Dienst ist eventuell nicht installiert.

Error: (01/01/2014 01:21:56 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
dlkmdldr

Error: (01/01/2014 01:21:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Content Folder Watcher" wurde nicht richtig gestartet.

Error: (01/01/2014 01:20:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Cisco Systems Inc. IPSec Driver" ist von folgendem Dienst abhängig: DNE. Dieser Dienst ist eventuell nicht installiert.

Error: (01/01/2014 01:19:19 PM) (Source: Application Popup) (User: )
Description: Treiber dlkmdldr.sys konnte nicht geladen werden.

Error: (12/31/2013 07:52:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "dlkmdldr" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (12/31/2013 07:51:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Cisco Systems Inc. IPSec Driver" ist von folgendem Dienst abhängig: DNE. Dieser Dienst ist eventuell nicht installiert.

Error: (12/31/2013 07:51:52 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
dlkmdldr

Error: (12/31/2013 07:51:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Content Folder Watcher" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 42%
Total physical RAM: 3039.04 MB
Available physical RAM: 1753 MB
Total Pagefile: 6076.36 MB
Available Pagefile: 4682.85 MB
Total Virtual: 2047.88 MB
Available Virtual: 1876.34 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:289.98 GB) (Free:191.25 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 4DB107D6)
Partition 1: (Not Active) - (Size=8 GB) - (Type=27)
Partition 2: (Active) - (Size=290 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 02.01.2014 08:56
Zitat:
ich hoffe du hattest einen guten Start ins neue Jahr!!??
ich hab ihn verschlafen :D

Nur ein wenig:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Linda\AppData\Roaming\desktop.ini

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Danach ist die Kiste auch sauber :)

Der Schalker 02.01.2014 13:48
Hallo schrauber,

hier der Inhalt vin Fixlog.txt:
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-01-2014 01
Ran by Linda at 2014-01-02 13:46:56 Run:1
Running from C:\Users\Linda\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
C:\Users\Linda\AppData\Roaming\desktop.ini
       
*****************

C:\Users\Linda\AppData\Roaming\desktop.ini => Moved successfully.

==== End of Fixlog ====
Worin besteht (bestand) denn das Problem?
Zusatzfrage: Sind Windows Firewall und Microsoft Essentials eigentlich ausreichend als Schutz (zukünftig zusätzlich MBAM) oder hast du einen anderen Tipp?
Viele Grüße

schrauber 03.01.2014 12:06
Ich empfehle immer Emsisoft. Da war Adware, aber ne Kontensperrung kommt meist weil das Konto online gehackt wurde.

Passwort auf jeden Fall ändern :)



Fertig :)

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun :)


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Der Schalker 03.01.2014 21:29
Hallo schrauber,

ich werde mir deine Tipps und Anregungen mal intensiv zu Gemüte führen. Falls es dann noch Fragen gibt, melde ich mich ggf. in einem neuen Thread.
Ansonsten sage ich noch einmal vielen, vielen Dank für deine tolle Hilfe!!

Viele Grüße :)

schrauber 04.01.2014 15:47
Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 08:43 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22