| bärtiger | 10.01.2014 16:01 |
Browser laden extrem langsam
Hallo,
seit einige Tagen laden meine Browser die Internetseiten extrem langsam. Den defogger habe ich laufen lassen, genau wie frst und gmer. Hier sind die logs: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-01-2014
Ran by *** (administrator) on ***-PC on 10-01-2014 10:50:52
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(SANDBOXIE L.T.D) C:\Users\***\Desktop\Tools\SbieSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Windows\System32\wpcumi.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(SANDBOXIE L.T.D) C:\Users\***\Desktop\Tools\SbieCtrl.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Spotify Ltd) C:\Users\***\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SANDBOXIE L.T.D) C:\Users\***\Desktop\Tools\SandboxieRpcSs.exe
(SANDBOXIE L.T.D) C:\Users\***\Desktop\Tools\SandboxieDcomLaunch.exe
(Opera Software) C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera.exe
() C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera_crashreporter.exe
(Opera Software) C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera.exe
() C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera_autoupdate.exe
(Opera Software) C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera.exe
(appsmaker) C:\Program Files\Common Files\OptimalSuite Common\AMDSrv.exe
(SANDBOXIE L.T.D) C:\Users\***\Desktop\Tools\SandboxieCrypto.exe
(Opera Software) C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera.exe
(Opera Software) C:\Users\***\AppData\Local\temp\D\18.0.1284.63\opera.exe
(SANDBOXIE L.T.D) C:\Users\***\Desktop\Tools\SbieSvc.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [WPCUMI] - C:\Windows\System32\wpcumi.exe [176128 2006-11-02] (Microsoft Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [iTunesHelper] - D:\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [SandboxieControl] - C:\Users\***\Desktop\Tools\SbieCtrl.exe [409320 2011-03-24] (SANDBOXIE L.T.D)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\***\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-14] (Spotify Ltd)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default\...\Policies\system: [LogonHoursAction] 2
HKU\Default\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default User\...\Policies\system: [LogonHoursAction] 2
HKU\Default User\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Gast\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=119357&babsrc=HP_ss_din2g&mntrId=F62900215D3698EE
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=119357&babsrc=HP_ss_din2g&mntrId=F62900215D3698EE
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
SearchScopes: HKCU - DefaultScope {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119357&babsrc=SP_ss&mntrId=F62900215D3698EE
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
BHO: Plus-HD-2.3 - {11111111-1111-1111-1111-110311341126} - C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-bho.dll (Plus HD)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No File
BHO: iFinger plugin / Browser helper object - {A114D52B-870C-4F15-8021-B6D7F91A054B} - D:\iFinger\plugins\IE.ifp (iFinger Ltd)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 02 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 03 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 04 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 05 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 06 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 07 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 08 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 09 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 10 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 11 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 12 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 13 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 14 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 15 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 16 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 17 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 28 C:\Windows\system32\wpclsp.dll [72192] (Microsoft Corporation)
Winsock: Catalog9 29 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default
FF user.js: detected! => C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\user.js
FF NewTab: user_pref("browser.newtab.url", "");
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - D:\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - D:\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - D:\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - D:\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=1.6.0_43 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @palmsource.com/installer,version=1.0 - D:\PACKAG~1\NPInstal.dll ()
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\searchplugins\searchplugins-backup
FF Extension: Plus-HD-2.3 - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\Extensions\nostmp
FF Extension: Microsoft .NET Framework Assistant - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\psm38bn6.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF HKCU\...\Firefox\Extensions: [{C3B2959E-301D-47E5-A440-2C797569D4F6}] - C:\Users\***\AppData\Local\{C3B2959E-301D-47E5-A440-2C797569D4F6}
========================== Services (Whitelisted) =================
S2 0151251305193992mcinstcleanup; C:\Program Files\Common Files\McAfee\Installer\cleanup.ini [1341 2011-05-12] ()
R2 AMOptimalDiskService; C:\Program Files\Common Files\OptimalSuite Common\AMDSrv.exe [5216624 2010-12-17] (appsmaker)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-28] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-08-23] (Cisco Systems, Inc.)
S4 ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [247096 2010-09-06] ()
S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] ()
R2 SbieSvc; C:\Users\***\Desktop\Tools\SbieSvc.exe [72936 2011-03-24] (SANDBOXIE L.T.D)
S4 Secunia PSI Agent; C:\Users\***\Desktop\Tools\PSI\PSIA.exe [993848 2011-04-19] (Secunia)
S4 Secunia Update Agent; C:\Users\***\Desktop\Tools\PSI\sua.exe [399416 2011-04-19] (Secunia)
S3 SpeedBoosterSvc; C:\Program Files\Common Files\OptimalSuite Common\BoostService.exe [2318192 2010-12-17] (appsmaker)
S4 StkSSrv; C:\Windows\System32\StkCSrv.exe [31248 2008-01-16] (Syntek America Inc.)
S2 F-Secure Gatekeeper Handler Starter; "C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe" [x]
S2 FSMA; "C:\Program Files\F-Secure\Common\FSMA32.EXE" [x]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-28] (Avira Operations GmbH & Co. KG)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2009-08-23] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [57112 2011-03-28] (Paragon Software Group)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2008-06-25] (SAMSUNG ELECTRONICS CO., LTD.)
S3 PalmUSBD; C:\Windows\System32\drivers\PalmUSBD.sys [16640 2007-12-04] (PalmSource, Inc.)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf.sys [15544 2010-09-01] (Secunia)
R3 SbieDrv; C:\Users\***\Desktop\Tools\SbieDrv.sys [126696 2011-03-24] (SANDBOXIE L.T.D)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2008-12-31] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1363088 2008-03-28] (Syntek)
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [40824 2011-03-28] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IM.sys [381032 2011-03-28] (Paragon)
S2 adfs; No ImagePath
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\***\AppData\Local\Temp\catchme.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U2 TMAgent;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-10 10:50 - 2014-01-10 10:51 - 00017006 _____ C:\Users\***\Downloads\FRST.txt
2014-01-10 10:50 - 2014-01-10 10:50 - 00000000 ____D C:\FRST
2014-01-10 10:48 - 2014-01-10 10:48 - 01066141 _____ (Farbar) C:\Users\***\Downloads\FRST.exe
2014-01-10 10:38 - 2014-01-10 10:39 - 00000628 _____ C:\Windows\system32\defogger_disable.log
2014-01-10 10:38 - 2014-01-10 10:39 - 00000020 _____ C:\Users\***\defogger_reenable
2014-01-10 10:37 - 2014-01-10 10:37 - 00050477 _____ C:\Users\***\Downloads\Defogger.exe
2013-12-22 17:42 - 2013-12-22 17:42 - 00000680 _____ C:\Users\***\AppData\Local\d3d9caps.dat
2013-12-20 10:41 - 2013-12-20 10:41 - 00860731 _____ C:\Users\***\Documents\Präsentation Störung des Sozialverhaltens.pptx
2013-12-14 13:10 - 2013-12-14 13:10 - 00000000 ____H C:\Users\***\Documents\Default.rdp
2013-12-13 16:18 - 2013-12-13 16:18 - 00000000 ____D C:\Users\***\restore
2013-12-13 16:05 - 2013-12-16 23:08 - 00000000 ____D C:\ProgramData\tmp
2013-12-13 16:05 - 2013-12-15 20:59 - 00000000 ____D C:\ProgramData\hps
2013-12-13 16:05 - 2013-12-13 16:05 - 00001102 _____ C:\Users\Public\Desktop\OnlineFotoservice.lnk
2013-12-13 16:05 - 2013-12-13 16:05 - 00001087 _____ C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2013-12-13 15:59 - 2013-12-13 15:59 - 00000000 ____D C:\Program Files\OnlineFotoservice
2013-12-13 15:56 - 2013-12-13 15:56 - 01627552 _____ C:\Users\***\Downloads\setup_OnlineFotoservice.exe
2013-12-13 11:22 - 2013-11-15 00:13 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 11:22 - 2013-11-14 23:50 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 11:22 - 2013-11-14 23:50 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 11:22 - 2013-11-14 23:43 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 11:22 - 2013-11-14 23:42 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 11:22 - 2013-11-14 23:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 11:22 - 2013-11-14 23:41 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-13 11:22 - 2013-11-14 23:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 11:22 - 2013-11-14 23:38 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 11:22 - 2013-11-14 23:38 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-13 11:22 - 2013-11-14 23:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 11:22 - 2013-11-14 23:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 11:22 - 2013-11-14 23:36 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 11:22 - 2013-11-14 23:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-13 11:22 - 2013-11-14 23:35 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 11:22 - 2013-11-14 23:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 21:03 - 2013-12-12 21:03 - 00915368 _____ (Oracle Corporation) C:\Users\***\Downloads\jxpiinstall.exe
2013-12-12 20:47 - 2013-10-30 03:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2013-12-12 20:47 - 2013-10-30 02:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 20:47 - 2013-10-30 01:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-12 20:47 - 2013-10-30 01:35 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 20:47 - 2013-10-22 08:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 20:47 - 2013-10-11 03:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 20:47 - 2013-10-11 03:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 20:47 - 2013-10-11 03:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll
2013-12-12 20:47 - 2013-10-11 01:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 20:47 - 2013-10-11 01:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
==================== One Month Modified Files and Folders =======
2014-01-10 10:51 - 2014-01-10 10:50 - 00017006 _____ C:\Users\***\Downloads\FRST.txt
2014-01-10 10:50 - 2014-01-10 10:50 - 00000000 ____D C:\FRST
2014-01-10 10:48 - 2014-01-10 10:48 - 01066141 _____ (Farbar) C:\Users\***\Downloads\FRST.exe
2014-01-10 10:47 - 2013-07-12 15:47 - 00001178 _____ C:\Windows\Tasks\Plus-HD-2.3-updater.job
2014-01-10 10:47 - 2013-07-12 15:47 - 00001082 _____ C:\Windows\Tasks\Plus-HD-2.3-enabler.job
2014-01-10 10:47 - 2013-07-12 15:46 - 00001182 _____ C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job
2014-01-10 10:47 - 2008-10-06 15:23 - 01239195 _____ C:\Windows\WindowsUpdate.log
2014-01-10 10:47 - 2006-11-02 13:47 - 00004784 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-10 10:47 - 2006-11-02 13:47 - 00004784 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-10 10:46 - 2013-07-12 15:46 - 00001878 _____ C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job
2014-01-10 10:46 - 2013-07-12 15:46 - 00001802 _____ C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job
2014-01-10 10:46 - 2013-06-07 09:57 - 00000278 _____ C:\Windows\Tasks\DSite.job
2014-01-10 10:42 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-10 10:39 - 2014-01-10 10:38 - 00000628 _____ C:\Windows\system32\defogger_disable.log
2014-01-10 10:39 - 2014-01-10 10:38 - 00000020 _____ C:\Users\***\defogger_reenable
2014-01-10 10:39 - 2008-06-25 22:08 - 00000012 _____ C:\Windows\bthservsdp.dat
2014-01-10 10:39 - 2006-11-02 14:01 - 00032558 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 10:38 - 2008-12-24 17:10 - 00000000 ____D C:\Users\***
2014-01-10 10:37 - 2014-01-10 10:37 - 00050477 _____ C:\Users\***\Downloads\Defogger.exe
2014-01-10 10:36 - 2009-06-07 19:30 - 00000000 ____D C:\Users\***\AppData\Roaming\Skype
2014-01-10 09:58 - 2012-04-04 05:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-05 22:50 - 2011-05-13 16:48 - 00004078 _____ C:\Windows\Sandboxie.ini
2014-01-05 22:50 - 2009-01-26 16:57 - 00000376 _____ C:\Windows\Tasks\DriverCure.job
2014-01-05 22:48 - 2010-06-22 00:47 - 00000440 _____ C:\Windows\Tasks\ParetoLogic Registration3.job
2014-01-05 22:48 - 2009-01-26 17:00 - 00000438 _____ C:\Windows\Tasks\ParetoLogic Registration.job
2014-01-03 11:26 - 2013-10-18 16:50 - 00000000 ____D C:\Users\***\AppData\Roaming\Spotify
2014-01-02 21:02 - 2009-01-26 16:56 - 00000000 ____D C:\ProgramData\DriverCure
2013-12-31 11:33 - 2009-01-26 16:57 - 00000412 _____ C:\Windows\Tasks\ParetoLogic Update Version2.job
2013-12-23 12:34 - 2008-06-25 06:36 - 00345282 _____ C:\ProgramData\nvModes.001
2013-12-22 17:42 - 2013-12-22 17:42 - 00000680 _____ C:\Users\***\AppData\Local\d3d9caps.dat
2013-12-22 12:46 - 2013-07-28 18:46 - 00000104 _____ C:\Users\***\AppData\Roaming\WB.CFG
2013-12-22 11:55 - 2013-10-18 16:51 - 00000000 ____D C:\Users\***\AppData\Local\Spotify
2013-12-20 12:38 - 2006-11-02 11:33 - 01485618 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-20 12:35 - 2013-08-02 15:08 - 00002470 _____ C:\Windows\setupact.log
2013-12-20 10:41 - 2013-12-20 10:41 - 00860731 _____ C:\Users\***\Documents\Präsentation Störung des Sozialverhaltens.pptx
2013-12-18 19:21 - 2013-08-24 13:42 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-18 19:21 - 2013-08-24 13:42 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-16 23:08 - 2013-12-13 16:05 - 00000000 ____D C:\ProgramData\tmp
2013-12-15 20:59 - 2013-12-13 16:05 - 00000000 ____D C:\ProgramData\hps
2013-12-14 21:37 - 2008-12-24 23:45 - 00114176 _____ C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-14 21:32 - 2009-01-05 22:07 - 00000000 ____D C:\Users\Public\Desktop\Bilder
2013-12-14 13:10 - 2013-12-14 13:10 - 00000000 ____H C:\Users\***\Documents\Default.rdp
2013-12-13 16:18 - 2013-12-13 16:18 - 00000000 ____D C:\Users\***\restore
2013-12-13 16:05 - 2013-12-13 16:05 - 00001102 _____ C:\Users\Public\Desktop\OnlineFotoservice.lnk
2013-12-13 16:05 - 2013-12-13 16:05 - 00001087 _____ C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2013-12-13 15:59 - 2013-12-13 15:59 - 00000000 ____D C:\Program Files\OnlineFotoservice
2013-12-13 15:56 - 2013-12-13 15:56 - 01627552 _____ C:\Users\***\Downloads\setup_OnlineFotoservice.exe
2013-12-13 13:29 - 2013-08-15 22:20 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 13:13 - 2006-11-02 13:47 - 02313400 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 11:28 - 2008-06-25 06:38 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-13 11:23 - 2006-11-02 11:24 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-12-12 21:03 - 2013-12-12 21:03 - 00915368 _____ (Oracle Corporation) C:\Users\***\Downloads\jxpiinstall.exe
Files to move or delete:
====================
C:\Users\***\FreeYouTubeToMP3Converter.exe
Some content of TEMP:
====================
C:\Users\***\AppData\Local\temp\avgnt.exe
C:\Users\***\AppData\Local\temp\SkypeSetup.exe
C:\Users\***\AppData\Local\temp\uninst1.exe
C:\Users\***\AppData\Local\temp\Update_Permissions_FantaUp.exe
C:\Users\***\AppData\Local\temp\wajam_install.exe
C:\Users\***\AppData\Local\temp\WZCPlugin_VISTA.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-10 10:48
==================== End Of Log ============================
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-01-2014
Ran by *** at 2014-01-10 10:51:45
Running from C:\Users\***\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (Version: - Microsoft)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
AAC Decoder (Version: 7.1.0 - DivX, Inc.)
Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (Version: 1.2.443 - Adobe Systems Incorporated)
Activation Assistant for the 2007 Microsoft Office suites (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe AIR (Version: 3.7.0.1860 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.7.0.1860 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Media Player (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (Version: 1.1 - Adobe Systems Incorporated)
Adobe Reader X (10.1.6) - Deutsch (Version: 10.1.6 - Adobe Systems Incorporated)
Agere Systems HDA Modem (Version: - Agere Systems)
Apple Application Support (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
appsmaker AppBooster 2.0 (Version: - appsmaker)
Atheros WLAN Client (Version: 1.00.000 - )
Audiograbber 1.83 SE (Version: 1.83 SE - Audiograbber Deutschland)
AutoUpdate (Version: 1.1 - )
Avira Free Antivirus (Version: 14.0.2.286 - Avira)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Business Contact Manager für Outlook 2007 SP2 (Version: 3.0.8619.1 - Microsoft Corporation)
Business Contact Manager für Outlook 2007 SP2 (Version: 3.0.8619.1 - Microsoft Corporation) Hidden
CDBurnerXP (Version: 4.3.8.2631 - CDBurnerXP)
Cisco Systems VPN Client 5.0.06.0110 (Version: 5.0.6 - Cisco Systems, Inc.)
CloneSpy 2.63 (Version: - CloneSpy)
DivX Codec (Version: 6.9.1 - DivX, Inc.)
DivX Converter (Version: 7.1.0 - DivX, Inc.)
DivX Player (Version: 7.2.0 - DivX, Inc.)
DivX Plus DirectShow Filters (Version: - DivX, Inc.)
DivX Plus Web Player (Version: 2.0.0 - DivX,Inc.)
DivX Version Checker (Version: 7.1.0.9 - DivX, Inc.)
DocProc (Version: 10.0.0.0 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname)
Easy Network Manager 3.0 (Version: 3.0.0.0 - Ihr Firmenname) Hidden
EasyBits GO (Version: - EasyBits Media)
EPSON Scan (Version: - )
EPSON-Drucker-Software (Version: - SEIKO EPSON Corporation)
FileHippo.com Update Checker (Version: - )
Free YouTube to MP3 Converter version 3.11.37.1212 (Version: 3.11.37.1212 - DVDVideoSoft Ltd.)
F-Secure PSC Prerequisites (Version: 1.0.5 - F-Secure Corporation) Hidden
Gehirnjogging 5 (Version: 1.1 - SBT)
H.264 Decoder (Version: 1.1.0 - DivX, Inc.)
HP Update (Version: 5.005.000.001 - Hewlett-Packard)
IBM SPSS Statistics 21 (Version: 21.0.0.0 - IBM Corp)
iCloud (Version: 2.1.2.8 - Apple Inc.)
ICQ7.5 (Version: 7.5 - ICQ)
iFinger (Version: 1.2 - iFinger Ltd.)
iFinger 2.1 (Version: 2.1.2.1 - iFinger Ltd.)
imagine digital freedom - Samsung (Version: 1.0.2.0 - Samsung Electronics Co., LTD)
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) PROSet/Wireless WiFi-Software (Version: 12.00.2000 - Intel(R) Corporation)
Intel® Matrix Storage Manager (Version: - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office XP Professional mit FrontPage (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft SOAP Toolkit 2.0 SP2 (Version: 623.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Mixxx 1.10.0 (Version: 1.10.0 - The Mixxx Team)
Mixxx 1.8.2 (Version: 1.8.2 - The Mixxx Team)
MKV Splitter (Version: 1.0.1 - DivX, Inc.)
Mozilla Firefox 24.0 (x86 en-US) (Version: 24.0 - Mozilla)
Mozilla Maintenance Service (Version: 24.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA Drivers (Version: - )
OCR Software by I.R.I.S. 10.0 (Version: 10.0 - HP)
OnlineFotoservice (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Opera Stable 18.0.1284.63 (Version: 18.0.1284.63 - Opera Software ASA)
Paragon Backup & Recovery™ 2011 Free (Version: 90.00.0003 - Paragon Software)
ParetoLogic DriverCure (Version: 1.6.1.0 - ParetoLogic, Inc.)
PASW Statistics 18 (Version: 18.0.0 - SPSS Inc.)
Picasa 3 (Version: 3.9 - Google, Inc.)
Plus-HD-2.3 (Version: 1.27.153.8 - Plus HD) <==== ATTENTION
PokerStars (Version: - PokerStars)
printeria (Version: 4.0 - infowerk)
Pro Evolution Soccer 2009 (Version: 1.20.0000 - KONAMI)
QuickTime (Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (Version: 6.0.1.5605 - Realtek Semiconductor Corp.)
Samsung Magic Doctor (Version: 5.00 - Samsung Electronics Co., LTD)
Samsung Recovery Solution III (Version: 3.0.0.5 - Samsung)
Samsung Update Plus (Version: 1.3.0.11 - Samsung Electronics Co., LTD)
Samsung Update Plus (Version: 1.3.0.11 - Samsung Electronics Co., LTD) Hidden
Sandboxie 3.54 (32-bit) (Version: - )
Secunia PSI (2.0.0.3003) (Version: - )
SecureW2 EAP Suite 1.1.3 for Windows (Version: - )
Skype™ 6.11 (Version: 6.11.102 - Skype Technologies S.A.)
Spotify (Version: 0.9.6.81.gd359a796 - Spotify AB)
Synaptics Pointing Device Driver (Version: 10.1.2.0 - Synaptics)
Uninstall 1.0.0.1 (Version: - )
Update for 2007 Microsoft Office System (KB967642) (Version: - Microsoft)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version: - Microsoft)
Update for Zip Opener (Version: - )
Update für Microsoft Office Excel 2007 Help (KB963678) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (Version: - Microsoft)
USB2.0 UVC 1.3M WebCam (Version: - )
USB2.0 UVC WebCam (Version: 6.11.706.012 - D-MAX)
User Guide (Version: 1.0 - )
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden
VLC media player 1.1.9 (Version: 1.1.9 - VideoLAN)
VoipDiscount (Version: 4.03 build 533 - Finarea S.A. Switzerland)
WIDCOMM Bluetooth Software 6.0.1.6300 (Version: 6.0.1.6300 - WIDCOMM, Inc.)
WinRAR 4.01 beta 1 (32-bit) (Version: 4.01.1 - win.rar GmbH)
==================== Restore Points =========================
03-01-2014 10:07:48 Geplanter Prüfpunkt
04-01-2014 14:23:45 Geplanter Prüfpunkt
10-01-2014 09:17:44 Removed Microsoft Silverlight
==================== Hosts content: ==========================
2006-11-02 11:23 - 2011-05-12 11:06 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {04759B06-882E-45ED-A7E9-0A8C8BEC20BB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {0AA60ADE-1999-4F56-A1B9-EF09CA2714C6} - System32\Tasks\SamsungMagicDoctor => C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe [2007-07-04] (Samsung Electronics Co., Ltd.)
Task: {14D83CBE-F5C5-4254-970F-9202D20ABC4D} - System32\Tasks\{B0B31178-75D3-45CC-BA46-2A92AC03E8F8} => C:\Program Files\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2EEA365E-8652-470B-AFAB-815AC72D6B36} - System32\Tasks\Plus-HD-2.3-firefoxinstaller => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe [2013-07-12] (Plus HD) <==== ATTENTION
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3AD12BF7-CB64-4BF8-B9FC-D08269B62EC1} - System32\Tasks\ParetoLogic Update Version2 => C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-21] ()
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3BF21754-5301-404B-A0D3-64A41E86CB43} - System32\Tasks\Plus-HD-2.3-updater => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-07-12] (Plus HD) <==== ATTENTION
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {458C16FF-D85C-4348-8169-0E76173E8069} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe
Task: {4A16F225-45A2-42C9-A9E5-56CE27B4ACB7} - System32\Tasks\DSite => C:\Users\***\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-07-12] () <==== ATTENTION
Task: {5AAB73A8-B2EA-4285-80F3-814F1AE6E429} - System32\Tasks\ParetoLogic Registration3 => Rundll32.exe "C:\Program Files\Common Files\ParetoLogic\UUS3\UUS3.dll" RunUns
Task: {5D884745-E4D1-49EB-9B1F-E794654B6082} - System32\Tasks\DriverCure => C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe [2010-06-28] (ParetoLogic)
Task: {6B43C8A5-E3B2-4491-BF56-3568EED0CE96} - System32\Tasks\Plus-HD-2.3-codedownloader => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-07-12] (Plus HD) <==== ATTENTION
Task: {707F82DD-80E9-4F03-85E0-73F807D6FC32} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-15] (Adobe Systems Incorporated)
Task: {7FB68F23-5908-4585-8329-451B44A313FC} - System32\Tasks\Plus-HD-2.3-enabler => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-07-12] (Plus HD) <==== ATTENTION
Task: {850E7690-B02C-4D6A-8167-332B1FA6604B} - System32\Tasks\DealPly => C:\Users\***\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {90F644F2-3066-455B-B634-566203BB0770} - System32\Tasks\EPUpdater => C:\Users\***\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-05-09] () <==== ATTENTION
Task: {91707E58-70DA-4113-A761-CA808850A8ED} - System32\Tasks\Plus-HD-2.3-chromeinstaller => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe [2013-07-12] (Plus HD) <==== ATTENTION
Task: {B8396BF5-A41E-43E6-B5B1-DC43E888DD14} - System32\Tasks\ParetoLogic Registration => Rundll32.exe "C:\Program Files\Common Files\ParetoLogic\UUS2\UUS.dll" RunUns
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverCure.job => C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\***\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\ParetoLogic Registration.job => C:\Program Files\Common Files\ParetoLogic\UUS2\UUS.dll
Task: C:\Windows\Tasks\ParetoLogic Registration3.job => C:\Program Files\Common Files\ParetoLogic\UUS3\UUS3.dll
Task: C:\Windows\Tasks\ParetoLogic Update Version2.job => C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe
Task: C:\Windows\Tasks\Plus-HD-2.3-chromeinstaller.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.3-codedownloader.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.3-enabler.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.3-firefoxinstaller.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-2.3-updater.job => C:\Program Files\Plus-HD-2.3\Plus-HD-2.3-updater.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2008-06-25 06:30 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll
2010-03-24 15:47 - 2010-03-24 15:47 - 00059904 _____ () D:\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-12 20:59 - 2013-12-06 13:40 - 00879968 _____ () C:\Users\***\AppData\Local\temp\D\18.0.1284.63\ffmpegsumo.dll
2013-12-12 20:59 - 2013-12-06 13:40 - 00886112 _____ () C:\Users\***\AppData\Local\temp\D\18.0.1284.63\libglesv2.dll
2013-12-12 20:59 - 2013-12-06 13:40 - 00108896 _____ () C:\Users\***\AppData\Local\temp\D\18.0.1284.63\libegl.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:A8ADE5D8
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Cisco Systems VPN Adapter
Description: Cisco Systems VPN Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/10/2014 10:42:41 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/10/2014 08:52:49 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/09/2014 09:09:39 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/09/2014 09:35:56 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/07/2014 08:50:31 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/06/2014 09:11:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/04/2014 01:44:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/03/2014 10:02:37 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/30/2013 10:23:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/30/2013 01:32:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (01/10/2014 10:45:32 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032
Error: (01/10/2014 10:43:34 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (01/10/2014 10:42:42 AM) (Source: Service Control Manager) (User: )
Description: adfs%%2
Error: (01/10/2014 10:42:42 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (01/10/2014 08:55:42 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032
Error: (01/10/2014 08:53:42 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (01/10/2014 08:52:50 AM) (Source: Service Control Manager) (User: )
Description: adfs%%2
Error: (01/10/2014 08:52:50 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (01/09/2014 09:10:35 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032
Error: (01/09/2014 09:09:39 PM) (Source: Service Control Manager) (User: )
Description: adfs%%2
Microsoft Office Sessions:
=========================
Error: (10/19/2012 10:52:59 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6662.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/07/2012 11:57:44 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1123 seconds with 120 seconds of active time. This session ended with a crash.
Error: (07/25/2011 09:39:51 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2131 seconds with 1140 seconds of active time. This session ended with a crash.
Error: (05/11/2011 03:05:32 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 561 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/11/2011 02:48:50 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 690 seconds with 60 seconds of active time. This session ended with a crash.
Error: (05/11/2011 01:54:15 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 22122 seconds with 1140 seconds of active time. This session ended with a crash.
Error: (04/12/2011 08:05:09 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 62 seconds with 60 seconds of active time. This session ended with a crash.
Error: (04/12/2011 08:03:14 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 22 seconds with 0 seconds of active time. This session ended with a crash.
Error: (04/12/2011 08:01:56 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 903 seconds with 240 seconds of active time. This session ended with a crash.
Error: (03/24/2011 06:06:39 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 20 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 49%
Total physical RAM: 3065.88 MB
Available physical RAM: 1544.59 MB
Total Pagefile: 6338.87 MB
Available Pagefile: 4460.14 MB
Total Virtual: 2047.88 MB
Available Virtual: 1894.14 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:144.09 GB) (Free:9.67 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:144 GB) (Free:101.26 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 3A21C8C8)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS)
==================== End Of Log ========================
|
