![]() |
Telekom Trojaner geöffnet--> Fehlermeldung beim download bekommen Hallo! Habe leider zip datei von Telekom geöffnet. Kam dann Fehlermeldung das ich sie nicht öffnen kann.:headbang: Habe gleich ein frst gemacht Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:22-06-2014 Ran by Cathy (administrator) on CATHY-PC on 23-06-2014 19:15:26 Running from C:\Users\Cathy\Downloads Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\stacsv.exe (Hewlett-Packard) C:\Windows\System32\hpservice.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\AEstSrv.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Primax Electronics Ltd.) C:\Windows\System32\ico.exe (Primax Electronics Ltd.) C:\Windows\System32\PELMICED.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [320056 2009-06-24] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-07-21] (IDT, Inc.) HKLM\...\Run: [WirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [513080 2009-05-11] (Hewlett-Packard) HKLM\...\Run: [DpAgent] => C:\Program Files\DigitalPersona\Bin\dpagent.exe [842816 2009-07-17] (DigitalPersona, Inc.) HKLM\...\Run: [Mouse Suite 98 Daemon] => C:\Windows\system32\ICO.EXE [53248 2008-04-02] (Primax Electronics Ltd.) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-06] (AVAST Software) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-15] (Apple Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM\...\Run: [] => [X] HKU\S-1-5-21-3403281338-4098060899-1121457916-1001\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe HKU\S-1-5-21-3403281338-4098060899-1121457916-1001\...\MountPoints2: F - F:\LaunchU3.exe -a HKU\S-1-5-21-3403281338-4098060899-1121457916-1001\...\MountPoints2: {ef1fe275-fed9-11de-8b96-002556546011} - F:\LaunchU3.exe -a Lsa: [Notification Packages] scecli DPPWDFLT ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8D3E83228890CA01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at SearchScopes: HKCU - DefaultScope {901A48C9-97D5-4572-8D00-A63FBC2F56F5} URL = hxxp://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=302398&p={searchTerms} SearchScopes: HKCU - {7179D195-DFFD-4180-8F57-16AB9C41F711} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYAT&apn_uid=E8008886-76EE-489A-BA5A-7718AD4B984F&apn_sauid=DB756F32-66FD-4B39-9BCC-21455F4C9CB9 SearchScopes: HKCU - {901A48C9-97D5-4572-8D00-A63FBC2F56F5} URL = hxxp://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=302398&p={searchTerms} BHO: DigitalPersona Personal Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 FireFox: ======== FF ProfilePath: C:\Users\Cathy\AppData\Roaming\Mozilla\Firefox\Profiles\evjfryd2.default FF DefaultSearchEngine: Ask.com FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.google.at/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Cathy\AppData\Roaming\Mozilla\Firefox\Profiles\evjfryd2.default\searchplugins\askcom.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Anti-Banner - C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2014-06-18] FF Extension: Modul zur Link-Untersuchung - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-06-18] FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\FirefoxExt FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\FirefoxExt [2010-01-08] FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru FF HKLM\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru FF HKLM\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-29] FF HKCU\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\firefoxext FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\firefoxext [2010-01-08] ========================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-24] (AVAST Software) R2 DpHost; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [322624 2009-07-17] (DigitalPersona, Inc.) [File not signed] R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe [221266 2009-07-21] (IDT, Inc.) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-24] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-05-24] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-24] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-24] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-05-24] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-24] () R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [7936 2010-02-07] (FNet Co., Ltd.) [File not signed] S3 pelmouse; C:\Windows\System32\DRIVERS\pelmouse.sys [17792 2008-04-22] (Primax Electronics Ltd.) S3 pelusblf; C:\Windows\System32\DRIVERS\pelusblf.sys [19072 2008-06-02] (Primax Electronics Ltd.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-23 19:15 - 2014-06-23 19:17 - 00013587 _____ () C:\Users\Cathy\Downloads\FRST.txt 2014-06-23 19:15 - 2014-06-23 19:15 - 00000000 ____D () C:\FRST 2014-06-23 19:14 - 2014-06-23 19:14 - 02082816 _____ (Farbar) C:\Users\Cathy\Downloads\FRST64.exe 2014-06-23 19:13 - 2014-06-23 19:13 - 01073152 _____ (Farbar) C:\Users\Cathy\Downloads\FRST.exe 2014-06-20 19:51 - 2014-06-20 19:51 - 00001953 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\Users\Cathy\AppData\Roaming\HpUpdate 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\ProgramData\Visan 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\Program Files\HP Photo Creations 2014-06-20 19:50 - 2014-06-20 19:50 - 00002212 _____ () C:\Users\Public\Desktop\HP Deskjet 2540 series.lnk 2014-06-20 19:50 - 2014-06-20 19:50 - 00001159 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 2540 series.lnk 2014-06-20 19:50 - 2014-06-20 19:50 - 00000000 ____D () C:\ProgramData\HP 2014-06-20 19:50 - 2013-08-13 12:45 - 00596000 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMC211.dll 2014-06-20 19:49 - 2014-06-20 19:54 - 00000000 ____D () C:\Users\Cathy\AppData\Local\HP 2014-06-20 19:49 - 2014-06-20 19:51 - 00000000 ____D () C:\Program Files\HP 2014-06-20 19:49 - 2014-06-20 19:49 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-06-18 17:44 - 2014-06-18 17:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-16 15:44 - 2014-06-16 15:44 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-06-16 15:43 - 2014-06-16 15:43 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-06-16 15:43 - 2014-06-16 15:43 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-06-16 15:43 - 2014-06-16 15:43 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-06-16 15:43 - 2014-06-16 15:43 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-06-16 15:43 - 2014-06-16 15:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-06-16 15:33 - 2014-06-16 15:33 - 00001815 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-06-16 15:33 - 2014-06-16 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-06-16 15:33 - 2014-06-16 15:33 - 00000000 ____D () C:\Program Files\QuickTime 2014-06-14 13:28 - 2014-06-19 23:20 - 00023103 _____ () C:\Users\Cathy\Desktop\Lebenslauf Bernd Kolesnik.odt 2014-06-14 12:26 - 2014-06-14 12:52 - 00000000 ____D () C:\Users\Cathy\Desktop\Diss End 2014-06-13 17:24 - 2014-06-20 13:40 - 00066979 _____ () C:\Users\Cathy\Desktop\Zertifikate.ods 2014-06-12 17:17 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-12 17:17 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-12 17:17 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-12 17:17 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-12 17:17 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-12 17:17 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-12 17:17 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-12 17:17 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-12 17:17 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-12 17:17 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-12 17:17 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-12 17:17 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-12 17:17 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-12 17:17 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-12 17:17 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-12 17:17 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-12 17:17 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-12 17:17 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-12 17:17 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-12 17:17 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-12 17:17 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-12 17:17 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-12 17:17 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-12 17:17 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-12 17:17 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-12 17:17 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-12 17:17 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-12 17:17 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-12 17:17 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-12 17:17 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-12 17:17 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-12 17:17 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 17:17 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-12 17:17 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-12 17:17 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-12 17:17 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-12 17:16 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-08 11:19 - 2014-06-08 11:21 - 00000000 ____D () C:\Users\Cathy\Desktop\diss versionen jun8 2014-06-05 15:15 - 2014-06-08 11:16 - 00012343 _____ () C:\Users\Cathy\Desktop\NO synthase.odg 2014-06-05 13:25 - 2014-06-14 12:52 - 00019648 _____ () C:\Users\Cathy\Desktop\Synthese.sk2 2014-06-03 18:23 - 2014-06-06 17:22 - 00004608 _____ () C:\Users\Cathy\Desktop\snap.sk2 2014-06-03 17:22 - 2014-06-06 17:15 - 00007124 _____ () C:\Users\Cathy\Desktop\DEA.sk2 2014-06-01 15:13 - 2014-06-14 12:25 - 00008880 _____ () C:\Users\Cathy\Desktop\Arginin.sk2 2014-05-25 13:42 - 2014-05-25 13:43 - 00004126 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log 2014-05-24 22:05 - 2014-05-24 22:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-05-24 22:05 - 2014-05-24 22:05 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys ==================== One Month Modified Files and Folders ======= 2014-06-23 19:17 - 2014-06-23 19:15 - 00013587 _____ () C:\Users\Cathy\Downloads\FRST.txt 2014-06-23 19:15 - 2014-06-23 19:15 - 00000000 ____D () C:\FRST 2014-06-23 19:14 - 2014-06-23 19:14 - 02082816 _____ (Farbar) C:\Users\Cathy\Downloads\FRST64.exe 2014-06-23 19:13 - 2014-06-23 19:13 - 01073152 _____ (Farbar) C:\Users\Cathy\Downloads\FRST.exe 2014-06-23 19:12 - 2010-01-08 14:23 - 01378950 _____ () C:\Windows\WindowsUpdate.log 2014-06-23 18:42 - 2013-03-10 14:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-23 18:37 - 2013-12-09 16:27 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-23 15:54 - 2012-12-23 20:56 - 00000000 ____D () C:\Steam 2014-06-23 15:15 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-23 15:15 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-23 14:18 - 2013-12-09 16:27 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-23 14:17 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-23 14:17 - 2009-07-14 06:39 - 00201142 _____ () C:\Windows\setupact.log 2014-06-22 13:09 - 2013-09-22 20:02 - 00017364 _____ () C:\Users\Cathy\Desktop\Phoebe Budget.ods 2014-06-22 12:49 - 2010-01-08 19:04 - 00176256 _____ () C:\Windows\PFRO.log 2014-06-20 19:59 - 2014-01-23 16:27 - 00000000 ____D () C:\Users\Cathy\Desktop\Phoebe (Schule. etc.) 2014-06-20 19:54 - 2014-06-20 19:49 - 00000000 ____D () C:\Users\Cathy\AppData\Local\HP 2014-06-20 19:51 - 2014-06-20 19:51 - 00001953 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\Users\Cathy\AppData\Roaming\HpUpdate 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\ProgramData\Visan 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-06-20 19:51 - 2014-06-20 19:51 - 00000000 ____D () C:\Program Files\HP Photo Creations 2014-06-20 19:51 - 2014-06-20 19:49 - 00000000 ____D () C:\Program Files\HP 2014-06-20 19:51 - 2010-01-08 18:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-06-20 19:51 - 2010-01-08 18:36 - 00000000 ____D () C:\Program Files\Hewlett-Packard 2014-06-20 19:50 - 2014-06-20 19:50 - 00002212 _____ () C:\Users\Public\Desktop\HP Deskjet 2540 series.lnk 2014-06-20 19:50 - 2014-06-20 19:50 - 00001159 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 2540 series.lnk 2014-06-20 19:50 - 2014-06-20 19:50 - 00000000 ____D () C:\ProgramData\HP 2014-06-20 19:50 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32 2014-06-20 19:49 - 2014-06-20 19:49 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-06-20 13:40 - 2014-06-13 17:24 - 00066979 _____ () C:\Users\Cathy\Desktop\Zertifikate.ods 2014-06-20 08:44 - 2012-10-13 10:49 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-19 23:23 - 2010-01-08 14:46 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-19 23:20 - 2014-06-14 13:28 - 00023103 _____ () C:\Users\Cathy\Desktop\Lebenslauf Bernd Kolesnik.odt 2014-06-18 17:44 - 2014-06-18 17:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-16 16:04 - 2013-03-10 14:57 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-06-16 16:04 - 2011-10-01 21:20 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-06-16 15:44 - 2014-06-16 15:44 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-06-16 15:43 - 2014-06-16 15:43 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-06-16 15:43 - 2014-06-16 15:43 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-06-16 15:43 - 2014-06-16 15:43 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-06-16 15:43 - 2014-06-16 15:43 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-06-16 15:43 - 2014-06-16 15:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-06-16 15:43 - 2010-12-12 12:31 - 00000000 ____D () C:\Program Files\Java 2014-06-16 15:33 - 2014-06-16 15:33 - 00001815 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-06-16 15:33 - 2014-06-16 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-06-16 15:33 - 2014-06-16 15:33 - 00000000 ____D () C:\Program Files\QuickTime 2014-06-16 15:23 - 2012-03-11 14:09 - 00002048 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2014-06-16 15:23 - 2010-09-25 22:09 - 00002036 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-06-16 15:22 - 2014-05-06 19:30 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-06-16 15:22 - 2010-09-25 22:09 - 00000000 ____D () C:\Users\Cathy\AppData\Local\Thunderbird 2014-06-15 11:22 - 2012-07-10 00:46 - 00038540 _____ () C:\Users\Cathy\Desktop\Zyklus.ods 2014-06-14 14:52 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-06-14 13:28 - 2010-05-30 19:02 - 00000000 ____D () C:\Users\Cathy\Documents\Bewerbung 2014-06-14 12:52 - 2014-06-14 12:26 - 00000000 ____D () C:\Users\Cathy\Desktop\Diss End 2014-06-14 12:52 - 2014-06-05 13:25 - 00019648 _____ () C:\Users\Cathy\Desktop\Synthese.sk2 2014-06-14 12:52 - 2014-01-03 19:42 - 00000611 _____ () C:\Users\Cathy\Documents\grstyles.stl 2014-06-14 12:49 - 2014-01-03 19:49 - 00000048 _____ () C:\Users\Cathy\Documents\LastLab.sk 2014-06-14 12:25 - 2014-06-01 15:13 - 00008880 _____ () C:\Users\Cathy\Desktop\Arginin.sk2 2014-06-13 08:47 - 2014-05-07 18:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-12 22:56 - 2013-08-14 22:19 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-12 22:54 - 2010-01-08 22:30 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-08 11:21 - 2014-06-08 11:19 - 00000000 ____D () C:\Users\Cathy\Desktop\diss versionen jun8 2014-06-08 11:16 - 2014-06-05 15:15 - 00012343 _____ () C:\Users\Cathy\Desktop\NO synthase.odg 2014-06-08 10:48 - 2014-06-12 17:17 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 10:43 - 2014-06-12 17:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-06 17:22 - 2014-06-03 18:23 - 00004608 _____ () C:\Users\Cathy\Desktop\snap.sk2 2014-06-06 17:15 - 2014-06-03 17:22 - 00007124 _____ () C:\Users\Cathy\Desktop\DEA.sk2 2014-06-05 14:34 - 2010-09-18 10:12 - 00000000 ____D () C:\Users\Cathy\Documents\Diplomarbeit 2014-05-30 11:18 - 2014-06-12 17:17 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-30 11:02 - 2014-06-12 17:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-30 11:02 - 2014-06-12 17:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 10:44 - 2014-06-12 17:17 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 10:43 - 2014-06-12 17:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 10:42 - 2014-06-12 17:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 10:38 - 2014-06-12 17:17 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 10:34 - 2014-06-12 17:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 10:33 - 2014-06-12 17:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 10:30 - 2014-06-12 17:17 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 10:28 - 2014-06-12 17:17 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 10:28 - 2014-06-12 17:17 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 10:27 - 2014-06-12 17:17 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 10:21 - 2014-06-12 17:17 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 10:16 - 2014-06-12 17:17 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 10:10 - 2014-06-12 17:17 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 10:06 - 2014-06-12 17:17 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 10:04 - 2014-06-12 17:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 17:17 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 09:57 - 2014-06-12 17:17 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 09:56 - 2014-06-12 17:17 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 09:54 - 2014-06-12 17:17 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 09:50 - 2014-06-12 17:17 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-30 09:49 - 2014-06-12 17:17 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 09:40 - 2014-06-12 17:17 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 09:21 - 2014-06-12 17:17 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 09:15 - 2014-06-12 17:17 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 09:13 - 2014-06-12 17:17 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-25 13:43 - 2014-05-25 13:42 - 00004126 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log 2014-05-25 13:43 - 2013-09-21 16:19 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-24 22:06 - 2013-12-29 20:40 - 00068312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-05-24 22:06 - 2013-12-29 20:40 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-05-24 22:06 - 2012-01-29 19:59 - 00411680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-05-24 22:06 - 2012-01-29 19:58 - 00777488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-05-24 22:05 - 2014-05-24 22:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-05-24 22:05 - 2014-05-24 22:05 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-05-24 22:05 - 2013-03-23 10:36 - 00180632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-05-24 22:05 - 2013-03-23 10:36 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-05-24 22:05 - 2012-02-26 19:23 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-05-24 22:05 - 2012-01-29 19:58 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-05-24 22:05 - 2012-01-29 19:56 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe Some content of TEMP: ==================== C:\Users\Cathy\AppData\Local\Temp\aoe3-113-german.exe C:\Users\Cathy\AppData\Local\Temp\APNSetup.exe C:\Users\Cathy\AppData\Local\Temp\APNStub.exe C:\Users\Cathy\AppData\Local\Temp\AutoRun.exe C:\Users\Cathy\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Cathy\AppData\Local\Temp\CmdLineExt.dll C:\Users\Cathy\AppData\Local\Temp\drm_dialogs.dll C:\Users\Cathy\AppData\Local\Temp\drm_dyndata_7300015.dll C:\Users\Cathy\AppData\Local\Temp\drm_dyndata_7370007.dll C:\Users\Cathy\AppData\Local\Temp\First15.exe C:\Users\Cathy\AppData\Local\Temp\GoogleToolbarInstaller.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u34-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\Cathy\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe C:\Users\Cathy\AppData\Local\Temp\SCS Uninstaller.exe C:\Users\Cathy\AppData\Local\Temp\SettingUpdate.exe C:\Users\Cathy\AppData\Local\Temp\setup.exe C:\Users\Cathy\AppData\Local\Temp\SetupA2.exe C:\Users\Cathy\AppData\Local\Temp\SetupAC.exe C:\Users\Cathy\AppData\Local\Temp\SkypeSetup.exe C:\Users\Cathy\AppData\Local\Temp\sp46005.exe C:\Users\Cathy\AppData\Local\Temp\sp47326.exe C:\Users\Cathy\AppData\Local\Temp\standalonepatcher.exe C:\Users\Cathy\AppData\Local\Temp\VP6Install.exe C:\Users\Cathy\AppData\Local\Temp\VP6VFW.dll C:\Users\Cathy\AppData\Local\Temp\_is57EF.exe C:\Users\Cathy\AppData\Local\Temp\_is8C8.exe C:\Users\Cathy\AppData\Local\Temp\_isE87C.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-23 15:06 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x86) Version:22-06-2014 Ran by Cathy at 2014-06-23 19:17:56 Running from C:\Users\Cathy\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) ACD/Labs Software in C:\Program Files\ACDFREE12\ (HKLM\...\ACDLabs in C__Program_Files_ACDFREE12_) (Version: v12.00, FREE - ACD/Labs) Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (HKLM\...\{9449FD09-6942-8BFA-05AD-D455500DA704}) (Version: 3.0.732.0 - ATI Technologies, Inc.) avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2018 - Avast Software) AVerMedia TV Tuner Card 1.0.0.3 (HKLM\...\AVerMedia TV Tuner Card) (Version: 1.0.0.3 - AVerMedia TECHNOLOGIES, Inc.) BioWare Premium Module: Neverwinter Nights(TM) Kingmaker (HKLM\...\Neverwinter Nights(TM) Kingmaker) (Version: - BioWare Corp.) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (Version: 2009.0702.1239.20840 - ATI) Hidden Catalyst Control Center Graphics Full Existing (Version: 2009.0702.1239.20840 - ATI) Hidden Catalyst Control Center Graphics Full New (Version: 2009.0702.1239.20840 - ATI) Hidden Catalyst Control Center Graphics Light (Version: 2009.0702.1239.20840 - ATI) Hidden Catalyst Control Center Graphics Previews Common (Version: 2009.0702.1239.20840 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (Version: 2009.0702.1239.20840 - ATI) Hidden Catalyst Control Center InstallProxy (Version: 2009.0702.1239.20840 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (Version: 2009.0702.1239.20840 - ATI) Hidden CCC Help Chinese Standard (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Chinese Traditional (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Czech (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Danish (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Dutch (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help English (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Finnish (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help French (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help German (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Greek (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Hungarian (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Italian (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Japanese (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Korean (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Norwegian (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Polish (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Portuguese (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Russian (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Spanish (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Swedish (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Thai (Version: 2009.0702.1238.20840 - ATI) Hidden CCC Help Turkish (Version: 2009.0702.1238.20840 - ATI) Hidden ccc-core-static (Version: 2009.0702.1239.20840 - Ihr Firmenname) Hidden ccc-utility (Version: 2009.0702.1239.20840 - ATI) Hidden Common Weapons of WWII (HKLM\...\Common Weapons of WWII_is1) (Version: - GamersGate) Die Siedler II - Die nächste Generation (HKLM\...\S2TNG) (Version: - ) Die Sims 2 (HKLM\...\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}) (Version: - ) Die Sims 2: Wilde Campus-Jahre (HKLM\...\{01521746-02A6-4A72-00BD-A285DF6B80C6}) (Version: - ) Die Sims™ 2 Haustiere (HKLM\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version: - ) Die Sims™ 2 Vier Jahreszeiten (HKLM\...\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}) (Version: - ) DigitalPersona Personal 4.10 (HKLM\...\{B002889A-F359-4F2A-9113-10B0A438AD70}) (Version: 4.10.3790 - DigitalPersona, Inc.) Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden HP 3D DriveGuard (HKLM\...\{7FD7F421-39B2-4CAC-BC41-7D83DDBAB329}) (Version: 4.0.3.1 - Hewlett-Packard) HP Customer Experience Enhancements (HKLM\...\{5B295588-59C1-4386-9F85-BB4BEDCB0D22}) (Version: 5.7.0.3036 - Hewlett-Packard) HP Deskjet 2540 series - Grundlegende Software für das Gerät (HKLM\...\{E5149ADD-6169-48E7-8C1C-BC4FFBDE8363}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.) HP Deskjet 2540 series Hilfe (HKLM\...\{B3E5B153-CC4B-40F2-9802-288B0AF2A966}) (Version: 30.0.0 - Hewlett Packard) HP Laser Mobile Mouse Driver (HKLM\...\MouseSuite98) (Version: 1.1.0.0 - HP) HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP) HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.3.1 - Hewlett-Packard) HP Support Assistant (Version: 4.3.1.2 - Hewlett-Packard) Hidden HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HP Wireless Assistant (HKLM\...\{484B100E-6FBE-4631-BC55-5F872FD8E020}) (Version: 3.50.7.2 - Hewlett-Packard) IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT) In Nomine 3.2 (HKLM\...\In Nomine_is1) (Version: - GamersGate) iTunes (HKLM\...\{A9B3F8D5-DF4F-462B-81B7-4B69EBEDBC5B}) (Version: 11.2.0.115 - Apple Inc.) Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden LUMIX Simple Viewer (HKLM\...\{2CDCCE7E-55D5-40CC-AEA0-ABA54713501F}) (Version: 0.99.0000 - Panasonic) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.6.0 - Mozilla) Mozilla Thunderbird 24.6.0 (x86 en-US) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 en-US)) (Version: 24.6.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) muvee Reveal (HKLM\...\{293F900D-3743-A8CC-46AD-5AFBFF8E29CF}) (Version: 7.0.40.10061 - muvee Technologies Pte Ltd) Neverwinter Nights (HKLM\...\{C1583439-B034-4881-819C-D52A0587662B}) (Version: - ) OnlineFotoservice (HKLM\...\OnlineFotoservice) (Version: 5.0.4 - CEWE COLOR AG u Co. OHG) OpenOffice.org 3.2 (HKLM\...\{8D1E61D1-1395-4E97-997F-D002DB3A5074}) (Version: 3.2.9502 - OpenOffice.org) PcCloneEX (HKLM\...\PcCloneEX) (Version: - ) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.9 - Frank Heindörfer, Philip Chinery) QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Recettear - An Item Shop's Tale version 1.106 (HKLM\...\{45D3A329-EDE1-4FBF-8A0B-1750A2623C22}_is1) (Version: 1.106 - GamersGate) Semper Fi 2.04 (HKLM\...\Semper Fi_is1) (Version: - Paradox Interactive) Sid Meier's Civilization 4 - Beyond the Sword (HKLM\...\{32E4F0D2-C135-475E-A841-1D59A0D22989}) (Version: 3.19 - Firaxis Games) Sid Meier's Civilization 4 (HKLM\...\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}) (Version: 1.74 - Firaxis Games) Sid Meier's Civilization 4 (Version: 1.00.0000 - Firaxis Games) Hidden SimCity 4 Deluxe (HKLM\...\{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}) (Version: - ) Skype Toolbars (HKLM\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.) Skype™ 4.2 (HKLM\...\{D103C4BA-F905-437A-8049-DB24763BBE36}) (Version: 4.2.169 - Skype Technologies S.A.) Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Studie zur Verbesserung von HP Deskjet 2540 series (HKLM\...\{7A686A46-C618-4A93-B301-2432F3B9B061}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.) The Sims(TM) 3 (HKLM\...\Steam App 47890) (Version: - Electronic Arts) Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) ==================== Restore Points ========================= 07-05-2014 18:16:10 Windows Update 11-05-2014 06:25:05 Windows Update 19-05-2014 12:15:28 Windows Update 19-05-2014 14:38:02 Windows Update 22-05-2014 17:17:30 Windows Update 24-05-2014 20:03:44 avast! antivirus system restore point 25-05-2014 11:41:53 Installed Java 7 Update 55 01-06-2014 12:24:28 Windows Update 06-06-2014 14:47:05 Windows Update 10-06-2014 06:58:51 Windows Update 12-06-2014 20:53:30 Windows Update 17-06-2014 06:52:08 Windows Update 20-06-2014 18:00:02 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {13072F6B-F3DC-4047-B63A-002562CF5901} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft) Task: {2943C1C5-FB64-476C-866B-9EBB9DE56F51} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {346F2567-FAA9-419D-B234-2EF7FD87305C} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {68F6E907-2972-4792-9827-FCEBD4E754D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-09] (Google Inc.) Task: {70450A84-8D45-41CE-9130-2622F20A18A8} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {7E04F9E2-4420-42D7-9623-4CB4D47E12C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-09] (Google Inc.) Task: {7EE8AC1C-AB46-4BC5-9890-992F70F9ACFD} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {807DA704-8990-4C2F-BF5B-145BB26DE04B} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.) Task: {92AB3407-B837-4B76-9429-6C3E1D3F17D9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-24] (AVAST Software) Task: {BA1AAA9C-A1EA-49AD-9EFF-0A8AED521C3F} - System32\Tasks\{9A4F8AFC-5B76-4BB5-92BB-A363DBC010D0} => C:\Program Files\Skype\Phone\Skype.exe [2010-05-13] (Skype Technologies S.A.) Task: {D00F69D3-E283-4D72-9128-9173AB0D8227} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {F74DBC16-5951-40C5-9543-8E89D6C4919E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-16] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-06-22 23:42 - 2014-06-22 23:42 - 02783744 _____ () C:\Program Files\AVAST Software\Avast\defs\14062201\algo.dll 2014-06-23 14:26 - 2014-06-23 14:26 - 02783744 _____ () C:\Program Files\AVAST Software\Avast\defs\14062300\algo.dll 2010-08-29 23:46 - 2001-10-28 16:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll 2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-12-08 18:03 - 2013-12-08 18:03 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2009-07-07 12:56 - 2009-07-07 12:56 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-01-08 18:42 - 2010-01-08 18:42 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2009-07-01 16:44 - 2009-07-01 16:44 - 00632888 _____ () C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe 2014-06-18 17:44 - 2014-06-18 17:44 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Basissystemgerät Description: Basissystemgerät Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (06/23/2014 03:08:54 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (06/14/2014 00:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: 448: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.) Error: (06/14/2014 00:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: ERROR: mDNSPlatformReadTCP - recv: 10053 Error: (06/14/2014 00:06:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: 448: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.) Error: (06/14/2014 00:06:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: ERROR: mDNSPlatformReadTCP - recv: 10053 Error: (06/08/2014 10:41:10 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1529 Error: (06/08/2014 10:41:10 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1529 Error: (06/08/2014 10:41:10 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/08/2014 10:28:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2163625 Error: (06/08/2014 10:28:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2163625 System errors: ============= Error: (06/17/2014 01:04:36 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (06/14/2014 03:00:19 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (06/13/2014 08:47:46 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1000) (User: NT-AUTORITÄT) Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b Error: (06/08/2014 10:38:45 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "USE-PC", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{6CC6B2F0-398D-446D-8760-3ED779529B1-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (06/07/2014 11:53:23 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (05/24/2014 10:01:51 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (04/28/2014 11:04:40 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden. Error: (04/27/2014 02:37:24 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 27.04.2014 um 11:49:12 unerwartet heruntergefahren. Error: (04/24/2014 10:44:50 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} Error: (04/15/2014 09:31:16 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Microsoft Office Sessions: ========================= Error: (06/23/2014 03:08:54 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Deskjet 2540 series\DriverStore\Yeti\V3\amd64\hpinkinsC211.exe Error: (06/14/2014 00:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: 448: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.) Error: (06/14/2014 00:11:43 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: ERROR: mDNSPlatformReadTCP - recv: 10053 Error: (06/14/2014 00:06:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: 448: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.) Error: (06/14/2014 00:06:31 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: ERROR: mDNSPlatformReadTCP - recv: 10053 Error: (06/08/2014 10:41:10 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1529 Error: (06/08/2014 10:41:10 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1529 Error: (06/08/2014 10:41:10 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/08/2014 10:28:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2163625 Error: (06/08/2014 10:28:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2163625 ==================== Memory info =========================== Percentage of memory in use: 41% Total physical RAM: 3039.19 MB Available physical RAM: 1788.12 MB Total Pagefile: 6076.66 MB Available Pagefile: 4658.75 MB Total Virtual: 2047.88 MB Available Virtual: 1908.57 MB ==================== Drives ================================ Vielen Dank im Voraus für eure Hilfe |
sieht gut aus :) |
Bedeutet was genau??? :wtf: |
nicht verseucht :) |
Vielen, vielen Dank für die schnelle Hilfe! Würde Sie mir trotzdem empfehlen den Computer neu aufzusetzen und würde Avast den Trojaner erkennen??? |
wenn ich sage nicht verseucht, warum denkst du dann drüber nach zu formatieren? :wtf: |
Alle Zeitangaben in WEZ +1. Es ist jetzt 14:22 Uhr. |
Copyright ©2000-2025, Trojaner-Board