| Baldoius | 05.09.2013 17:40 |
Hallo Schrauber
Hier das FRST-Log:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-09-2013
Ran by ****** (administrator) on ASUS-X73S on 05-09-2013 18:29:36
Running from C:\Users\******\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Logitech, Inc.) C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(hMailServer) C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\xampp\mysql\bin\mysqld.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\tcpsvcs.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files (x86)\Sublime Text 2\sublime_text.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2013-05-22] (Realtek Semiconductor)
HKLM-x32\...\RunOnce: [aswAhAScr.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll" [140544 2013-05-09] (AVAST Software)
HKLM-x32\...\RunOnce: [aswasOutExt.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\asOutExt.dll" [289888 2013-07-17] (AVAST Software)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKCU\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKCU\...\Policies\Explorer: [NoDriveAutorun] 0
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\PROGRAM FILES (X86)\KEEPASS PASSWORD SAFE 2\KeePass.exe [1937920 2013-02-03] (Dominik Reichl)
HKU\Gast\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Gast\...\Policies\system: [LogonHoursAction] 2
HKU\Gast\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lea\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6581488 2013-09-02] (SUPERAntiSpyware)
HKU\Lea\...\Policies\system: [LogonHoursAction] 2
HKU\Lea\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VCDDaemon.lnk
ShortcutTarget: VCDDaemon.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
BootExecute: autocheck autochk * aswBoot.exe /A:"* " /L:"1031" /heur:80 /RA:ask /pup /archives /IA:0 /KBD:4 /wow /dir:"C:\Program Files\AVAST Software\Avast"
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {5F519B46-96EF-499F-BF24-C9E1548FA56B} hxxp://sonycam/program/SonySncDf70View.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.210 88.84.16.108
Tcpip\..\Interfaces\{52ACCD0C-CD6E-4B80-B520-286DEEC015E3}: [NameServer]192.168.0.220,192.168.0.210
Tcpip\..\Interfaces\{CC6F69AF-BEC2-436E-AA09-0D9DE562E21B}: [NameServer]127.0.0.1
Tcpip\..\Interfaces\{E3B07140-174D-4590-A16C-E4C23E71385D}: [NameServer]192.168.0.220,192.168.0.210
FireFox:
========
FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default
FF DefaultSearchEngine: DuckDuckGo
FF SelectedSearchEngine: DuckDuckGo
FF Homepage: google.ch
FF NetworkProxy: "backup.ftp", "5.9.203.92"
FF NetworkProxy: "backup.ftp_port", 3128
FF NetworkProxy: "backup.socks", "5.9.203.92"
FF NetworkProxy: "backup.socks_port", 3128
FF NetworkProxy: "backup.ssl", "5.9.203.92"
FF NetworkProxy: "backup.ssl_port", 3128
FF NetworkProxy: "ftp", "91.228.53.28"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.228.53.28"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.228.53.28"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.228.53.28"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0-git-20121231-0404 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @greentube.com/GreenWebPlayer - C:\Games\GreenWebPlayer\npgreenwebplayer.dll (Greentube Internet Entertainment Solutions GmbH)
FF Plugin HKCU: @stonetrip.com/ShiVaWebPlayer,version=1.8.0.0 - C:\Users\******\AppData\Roaming\..\LocalLow\StoneTrip\Web Player\npShiVa3D.dll (StoneTrip)
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\searchplugins\anderes-wortde.xml
FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DoNotTrackMe - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\donottrackplus@abine.com
FF Extension: HTTPS-Everywhere - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\https-everywhere@eff.org
FF Extension: MaskMe - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\idme@abine.com
FF Extension: iMacros for Firefox - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
FF Extension: WOT - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: Flash and Video Download - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
FF Extension: adblockpopups - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: admin - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\admin@proxy-listen.de.xpi
FF Extension: elemhidehelper - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: extension - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\extension@preispilot.com.xpi
FF Extension: fox - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\fox@replace.fx.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
FF Extension: No Name - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] C:\Program Files (x86)\Steganos Password Manager 2012\spmplugin3
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKCU\...\Firefox\Extensions: [extension@preispilot.com] C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\koq680jp.default\extensions\extension@preispilot.com
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2012-08-18] (Apache Software Foundation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S3 DCMessages; C:\Windows\SysWOW64\DCMessages.exe [99720 2009-11-24] (Global Graphics Software Ltd)
S2 FileZilla Server; c:\xampp\filezillaftp\filezillaserver.exe [632320 2012-05-11] (FileZilla Project)
R2 hMailServer; C:\Program Files (x86)\hMailServer\Bin\hMailServer.exe [5395968 2010-06-07] (hMailServer)
R2 L4301_Solar; C:\Program Files\Logitech\SolarApp\L4301_Solar.exe [403536 2010-10-26] (Logitech, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22072 2012-09-12] (Microsoft Corporation)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [8186368 2012-07-20] ()
S3 PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
S3 PortReporter; C:\Program Files (x86)\PortReporter\portreporter.exe [90183 2004-03-30] ()
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S3 SPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
S1 acedrv05; C:\Windows\system32\drivers\acedrv05.sys [136192 2011-09-27] ()
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [228768 2012-08-30] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U3 DfSdkS;
S3 getbus; \??\C:\Users\******\AppData\Local\Temp\getbus.sys [x]
S3 meddmrr; system32\DRIVERS\meddmrr.sys [x]
S3 MEMSWEEP2; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-05 18:28 - 2013-09-05 18:29 - 01947160 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2013-09-05 16:37 - 2013-09-05 16:37 - 00202784 _____ (Amònetíze ltd.) C:\Users\******\Downloads\FlashPlayer__1003_i66628665_il430345.exe
2013-09-04 13:40 - 2013-09-04 13:40 - 00118300 _____ (MATCODE Software, www.matcode.com) C:\Users\******\Downloads\remshutdn.exe
2013-09-02 18:13 - 2013-09-02 18:15 - 05828350 _____ C:\Users\******\Downloads\Elektronik_204109610718.pptx
2013-09-02 17:58 - 2013-09-02 17:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sublime Text 2
2013-09-02 17:38 - 2013-09-02 17:42 - 23003252 _____ C:\Users\Administrator\Downloads\vlc-2.0.8-win32.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Administrator\Downloads\Shockwave_Installer_Slim.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 01069032 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer11x32_mssd_aaa_aih.exe
2013-09-02 17:18 - 2013-09-02 17:18 - 00002097 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 3.1.lnk
2013-09-02 17:18 - 2013-09-02 17:18 - 00000000 ____D C:\Program Files (x86)\Canon
2013-09-02 17:06 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\SET6640.tmp
2013-09-02 17:06 - 2012-03-14 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\SET4909.tmp
2013-09-02 15:41 - 2013-09-02 17:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-02 12:27 - 2013-09-02 12:27 - 00000000 ____D C:\Users\Administrator\Desktop\Freigabeordner - Büro-PC
2013-09-02 12:25 - 2013-09-04 16:28 - 00000392 _____ C:\Windows\setupact.log
2013-09-02 12:25 - 2013-09-02 12:26 - 00556480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-02 12:25 - 2013-09-02 12:25 - 00000762 _____ C:\Windows\PFRO.log
2013-09-02 12:25 - 2013-09-02 12:25 - 00000000 _____ C:\Windows\setuperr.log
2013-09-01 20:02 - 2013-09-05 18:26 - 00913015 _____ C:\Windows\WindowsUpdate.log
2013-09-01 18:36 - 2010-05-16 05:00 - 00344064 ____N (CANON INC.) C:\Windows\system32\CNMLMA7.DLL
2013-09-01 18:36 - 2009-09-10 09:00 - 00245760 _____ (CANON INC.) C:\Windows\system32\CNMIUA7.DLL
2013-09-01 18:35 - 2013-09-01 18:35 - 00000000 ___HD C:\Program Files\CanonBJ
2013-09-01 17:58 - 2013-09-01 17:58 - 00000000 ____D C:\Users\******\Downloads\CANON_MX870
2013-09-01 17:19 - 2013-09-01 17:19 - 00000779 _____ C:\Users\******\Desktop\meinemap - Verknüpfung.lnk
2013-08-16 19:09 - 2013-08-16 19:16 - 820998144 _____ C:\Users\******\Desktop\OfficeProfessionalPlus_x64_de-de.img
2013-08-16 19:08 - 2013-08-16 19:16 - 00000000 ____D C:\Users\******\AppData\Roaming\Download Manager
2013-08-15 19:21 - 2013-08-16 06:35 - 00000000 ____D C:\Users\******\Downloads\die_drei_fragezeichen
2013-08-15 16:10 - 2013-08-15 16:10 - 08435712 _____ C:\Users\******\Downloads\archpr454_setup_en.msi
2013-08-15 12:08 - 2013-09-01 19:51 - 00176776 _____ C:\Users\******\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-15 06:44 - 2013-08-15 06:44 - 00000941 _____ C:\Users\******\Desktop\FMS.lnk
2013-08-15 06:44 - 2013-08-15 06:44 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flug-Model-Simulator
2013-08-15 06:37 - 2013-08-15 06:44 - 00000000 ____D C:\Program Files (x86)\FMS
2013-08-15 06:35 - 2013-08-15 06:35 - 00000000 ____D C:\Users\******\Downloads\sim_easyglider_e
2013-08-14 12:29 - 2013-08-14 12:29 - 00000000 ____D C:\Program Files (x86)\logisch6
2013-08-12 16:00 - 2013-08-12 16:00 - 00000000 ____D C:\Users\******\Downloads\sendmail
2013-08-12 15:57 - 2013-08-12 15:57 - 00011940 _____ C:\Users\******\Downloads\phpmailscript_v4.zip
2013-08-09 17:31 - 2013-08-14 15:42 - 00013257 _____ C:\Users\******\Downloads\diewelt.sublime-workspace
2013-08-09 12:22 - 2013-08-09 12:22 - 00000000 ____D C:\Users\******\Downloads\gebaeude
2013-08-09 12:18 - 2013-08-09 12:22 - 10698799 _____ C:\Users\******\Downloads\gebaeude.7z
2013-08-09 08:19 - 2013-08-09 08:19 - 00000000 ____D C:\Users\******\Downloads\MapAmpeln
2013-08-09 08:13 - 2013-08-09 08:13 - 00670909 _____ C:\Users\******\Downloads\Ampel_Kit_Mapper.zip
2013-08-09 08:12 - 2013-08-09 08:12 - 00080835 _____ C:\Users\******\Downloads\MapAmpeln.zip
2013-08-08 11:52 - 2013-08-08 11:54 - 00000000 ____D C:\Users\******\Downloads\Baldos_Map
2013-08-08 11:11 - 2013-08-08 11:11 - 00000000 ____D C:\Users\******\Downloads\STRASSEN_BAUKASTEN_1
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\******\Downloads\Schilderset
2013-08-07 18:48 - 2013-08-07 18:48 - 00000000 ____D C:\Users\******\Desktop\.mayaSwatches
2013-08-06 20:01 - 2013-08-06 20:01 - 00003875 _____ C:\Users\******\AppData\Local\recently-used.xbel
2013-08-06 18:09 - 2013-08-09 17:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-06 17:24 - 2013-08-06 17:24 - 00000000 ____D C:\Users\******\Downloads\grleConverter_4.1.8_win32
2013-08-06 09:24 - 2013-08-06 09:24 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 5.0.3
2013-08-06 07:59 - 2013-08-06 08:00 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 64bit 5.0.3
==================== One Month Modified Files and Folders =======
2013-09-05 18:29 - 2013-09-05 18:29 - 00000000 ____D C:\FRST
2013-09-05 18:29 - 2013-09-05 18:28 - 01947160 _____ (Farbar) C:\Users\******\Downloads\FRST64.exe
2013-09-05 18:28 - 2012-03-29 12:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-05 18:26 - 2013-09-01 20:02 - 00913015 _____ C:\Windows\WindowsUpdate.log
2013-09-05 18:08 - 2012-09-14 18:23 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-05 17:10 - 2013-06-08 09:10 - 00000000 ____D C:\Users\******\Downloads\badragaz
2013-09-05 16:59 - 2011-06-22 12:39 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-05 16:37 - 2013-09-05 16:37 - 00202784 _____ (Amònetíze ltd.) C:\Users\******\Downloads\FlashPlayer__1003_i66628665_il430345.exe
2013-09-05 06:12 - 2013-06-12 06:37 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-09-04 17:32 - 2013-06-12 06:37 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-09-04 16:28 - 2013-09-02 12:25 - 00000392 _____ C:\Windows\setupact.log
2013-09-04 13:46 - 2011-08-07 11:00 - 00000000 ____D C:\Users\******
2013-09-04 06:30 - 2011-08-08 17:05 - 00000000 ____D C:\Users\******\AppData\Local\Paint.NET
2013-09-02 18:28 - 2012-03-29 12:17 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-02 18:28 - 2012-03-29 12:17 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-02 18:28 - 2011-08-08 15:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-02 18:15 - 2013-09-02 18:13 - 05828350 _____ C:\Users\******\Downloads\Elektronik_204109610718.pptx
2013-09-02 18:03 - 2012-12-09 17:27 - 00000422 _____ C:\Windows\Tasks\Wise Care 365.job
2013-09-02 17:58 - 2013-09-02 17:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sublime Text 2
2013-09-02 17:58 - 2013-06-24 12:40 - 00000000 ____D C:\Program Files (x86)\Sublime Text 2
2013-09-02 17:42 - 2013-09-02 17:38 - 23003252 _____ C:\Users\Administrator\Downloads\vlc-2.0.8-win32.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 07876512 _____ (Adobe Systems Inc.) C:\Users\Administrator\Downloads\Shockwave_Installer_Slim.exe
2013-09-02 17:35 - 2013-09-02 17:35 - 01069032 _____ (Solid State Networks) C:\Users\Administrator\Downloads\install_flashplayer11x32_mssd_aaa_aih.exe
2013-09-02 17:18 - 2013-09-02 17:18 - 00002097 _____ C:\Users\Public\Desktop\Canon MP Navigator EX 3.1.lnk
2013-09-02 17:18 - 2013-09-02 17:18 - 00000000 ____D C:\Program Files (x86)\Canon
2013-09-02 17:11 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-02 17:11 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-02 17:05 - 2013-09-02 15:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-02 17:05 - 2012-05-06 09:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-02 17:04 - 2013-04-25 18:56 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-09-02 17:01 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-02 16:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-02 12:45 - 2011-02-19 06:24 - 00723122 _____ C:\Windows\system32\perfh007.dat
2013-09-02 12:45 - 2011-02-19 06:24 - 00156670 _____ C:\Windows\system32\perfc007.dat
2013-09-02 12:45 - 2009-07-14 07:13 - 01672432 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-02 12:27 - 2013-09-02 12:27 - 00000000 ____D C:\Users\Administrator\Desktop\Freigabeordner - Büro-PC
2013-09-02 12:26 - 2013-09-02 12:25 - 00556480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-02 12:26 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-02 12:25 - 2013-09-02 12:25 - 00000762 _____ C:\Windows\PFRO.log
2013-09-02 12:25 - 2013-09-02 12:25 - 00000000 _____ C:\Windows\setuperr.log
2013-09-02 12:25 - 2013-05-16 06:38 - 00000000 ____D C:\Program Files (x86)\OXXOGames
2013-09-01 20:05 - 2011-09-25 08:45 - 00000000 ____D C:\Users\******\AppData\Roaming\Notepad++
2013-09-01 20:02 - 2013-04-28 08:28 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-09-01 20:01 - 2011-08-07 11:35 - 00000000 ____D C:\Users\******\AppData\Local\Google
2013-09-01 20:01 - 2011-04-13 04:33 - 00000000 ___HD C:\Program Files (x86)\Google
2013-09-01 19:59 - 2011-08-07 13:03 - 00000000 ____D C:\Users\******\AppData\Roaming\Mozilla
2013-09-01 19:56 - 2013-05-05 18:52 - 00000000 ____D C:\Program Files (x86)\DVDStyler
2013-09-01 19:56 - 2011-08-07 11:00 - 00000000 ___HD C:\ASUS.DAT
2013-09-01 19:53 - 2012-01-05 23:07 - 00000000 ___HD C:\Program Files (x86)\Abloadtool
2013-09-01 19:52 - 2013-04-26 07:11 - 00000000 ____D C:\Program Files (x86)\AF Signal Generator
2013-09-01 19:51 - 2013-08-15 12:08 - 00176776 _____ C:\Users\******\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-01 19:39 - 2013-06-27 19:42 - 00176776 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-01 18:56 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-01 18:35 - 2013-09-01 18:35 - 00000000 ___HD C:\Program Files\CanonBJ
2013-09-01 18:21 - 2011-06-22 12:42 - 00003456 _____ C:\Windows\system32\AutoRunFilter.ini
2013-09-01 17:58 - 2013-09-01 17:58 - 00000000 ____D C:\Users\******\Downloads\CANON_MX870
2013-09-01 17:23 - 2011-08-18 16:57 - 00007663 _____ C:\Users\******\AppData\Local\Resmon.ResmonCfg
2013-09-01 17:19 - 2013-09-01 17:19 - 00000779 _____ C:\Users\******\Desktop\meinemap - Verknüpfung.lnk
2013-08-30 09:48 - 2013-06-12 06:37 - 01030952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00204880 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00080816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00072016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00065336 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00064288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-06-12 06:37 - 00033400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-06-12 06:37 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2013-06-12 06:37 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-08-17 07:08 - 2012-06-02 18:50 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-17 07:08 - 2011-04-13 04:25 - 00000000 ___HD C:\Program Files (x86)\Microsoft Office
2013-08-17 07:08 - 2009-07-14 09:45 - 00000000 ____D C:\Windows\ShellNew
2013-08-17 07:08 - 2009-07-14 05:20 - 00000000 ___HD C:\Program Files\Common Files\Microsoft Shared
2013-08-17 06:50 - 2013-02-25 20:41 - 00000000 ____D C:\Users\******\Desktop\Thunderbird
2013-08-16 19:16 - 2013-08-16 19:09 - 820998144 _____ C:\Users\******\Desktop\OfficeProfessionalPlus_x64_de-de.img
2013-08-16 19:16 - 2013-08-16 19:08 - 00000000 ____D C:\Users\******\AppData\Roaming\Download Manager
2013-08-16 17:57 - 2012-10-01 07:40 - 00000000 ____D C:\Users\******\AppData\Roaming\Skype
2013-08-16 17:34 - 2013-05-19 18:09 - 00022528 _____ C:\Users\******\AppData\Local\WebpageIcons.db
2013-08-16 06:35 - 2013-08-15 19:21 - 00000000 ____D C:\Users\******\Downloads\die_drei_fragezeichen
2013-08-15 19:30 - 2011-10-09 14:44 - 00000000 ____D C:\Users\******\AppData\Local\Windows Live
2013-08-15 19:08 - 2013-08-15 19:08 - 00066391 _____ C:\Users\******\Downloads\pech.rpc
2013-08-15 16:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2013-08-15 16:10 - 2013-08-15 16:10 - 08435712 _____ C:\Users\******\Downloads\archpr454_setup_en.msi
2013-08-15 06:48 - 2013-05-04 08:06 - 00000000 ____D C:\Users\******\AppData\Roaming\Media Player Classic
2013-08-15 06:48 - 2009-07-29 08:03 - 00000000 ____D C:\Windows\Panther
2013-08-15 06:44 - 2013-08-15 06:44 - 00000941 _____ C:\Users\******\Desktop\FMS.lnk
2013-08-15 06:44 - 2013-08-15 06:44 - 00000000 ____D C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flug-Model-Simulator
2013-08-15 06:44 - 2013-08-15 06:37 - 00000000 ____D C:\Program Files (x86)\FMS
2013-08-15 06:35 - 2013-08-15 06:35 - 00000000 ____D C:\Users\******\Downloads\sim_easyglider_e
2013-08-14 15:42 - 2013-08-09 17:31 - 00013257 _____ C:\Users\******\Downloads\diewelt.sublime-workspace
2013-08-14 12:29 - 2013-08-14 12:29 - 00000000 ____D C:\Program Files (x86)\logisch6
2013-08-12 16:00 - 2013-08-12 16:00 - 00000000 ____D C:\Users\******\Downloads\sendmail
2013-08-12 15:57 - 2013-08-12 15:57 - 00011940 _____ C:\Users\******\Downloads\phpmailscript_v4.zip
2013-08-09 17:58 - 2012-08-21 12:31 - 00000000 ____D C:\Users\******\.gimp-2.8
2013-08-09 17:57 - 2013-08-06 18:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-09 12:22 - 2013-08-09 12:22 - 00000000 ____D C:\Users\******\Downloads\gebaeude
2013-08-09 12:22 - 2013-08-09 12:18 - 10698799 _____ C:\Users\******\Downloads\gebaeude.7z
2013-08-09 08:19 - 2013-08-09 08:19 - 00000000 ____D C:\Users\******\Downloads\MapAmpeln
2013-08-09 08:13 - 2013-08-09 08:13 - 00670909 _____ C:\Users\******\Downloads\Ampel_Kit_Mapper.zip
2013-08-09 08:12 - 2013-08-09 08:12 - 00080835 _____ C:\Users\******\Downloads\MapAmpeln.zip
2013-08-08 11:54 - 2013-08-08 11:52 - 00000000 ____D C:\Users\******\Downloads\Baldos_Map
2013-08-08 11:11 - 2013-08-08 11:11 - 00000000 ____D C:\Users\******\Downloads\STRASSEN_BAUKASTEN_1
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\******\Downloads\Schilderset
2013-08-08 09:42 - 2013-08-05 18:08 - 00000000 ____D C:\Users\******\Downloads\map
2013-08-07 18:48 - 2013-08-07 18:48 - 00000000 ____D C:\Users\******\Desktop\.mayaSwatches
2013-08-07 04:22 - 2011-09-18 09:01 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-06 20:01 - 2013-08-06 20:01 - 00003875 _____ C:\Users\******\AppData\Local\recently-used.xbel
2013-08-06 17:24 - 2013-08-06 17:24 - 00000000 ____D C:\Users\******\Downloads\grleConverter_4.1.8_win32
2013-08-06 09:32 - 2011-08-07 13:05 - 00000000 ____D C:\Program Files (x86)\GIANTS Software
2013-08-06 09:24 - 2013-08-06 09:24 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 5.0.3
2013-08-06 08:00 - 2013-08-06 07:59 - 00000000 ____D C:\Users\******\AppData\Local\GIANTS Editor 64bit 5.0.3
Files to move or delete:
====================
C:\Users\******\AppData\Local\Temp\gert0.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 18:10
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
Und das Addition.txt: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-09-2013
Ran by ******* at 2013-09-05 18:30:15
Running from C:\Users\*******\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)
Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026)
Altium Designer - Board Level Libraries (x32 Version: 9.4.0.20172)
Altium Designer Summer 09 (x32 Version: 9.4.0.20159)
Ashampoo Burning Studio 2012 v.10.0.15 (x32 Version: 10.0.15)
ASUS AI Recovery (x32 Version: 1.0.13)
ASUS FancyStart (x32 Version: 1.1.0)
ASUS LifeFrame3 (x32 Version: 3.0.21)
ASUS Live Update (x32 Version: 2.5.9)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0031)
ASUS Virtual Camera (x32 Version: 1.0.21)
ASUS WebStorage (x32 Version: 3.0.84.161)
AsusScr_K3 Series_ENG_Basic (x32 Version: 1.0.0001)
AsusVibe2.0 (x32 Version: 2.0.7.146)
ATK Package (x32 Version: 1.0.0014)
Audacity 2.0.3 (x32 Version: 2.0.3)
Autodesk FBX Plug-in 2013.1 - Maya 2013 (x32)
Autodesk Maya 2013 32-bit (x32 Version: 15.0.0.0)
avast! Free Antivirus (x32 Version: 8.0.1497.0)
Bagger-Simulator 2011 (x32)
Canon MP Navigator EX 3.1 (x32)
Canon MX870 series MP Drivers
CDRWIN 9 Basic (x32 Version: 9.0.11.0800)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
CloneCD (x32)
COMPUTERBILD-Abzockschutz (x32 Version: 1.0.48)
CrystalDiskInfo 5.3.1 (x32 Version: 5.3.1)
D3DX10 (x32 Version: 15.4.2368.0902)
Debugging Tools for Windows (x64) (Version: 6.12.2.633)
Debugging Tools for Windows (x86) (x32 Version: 6.12.2.633)
Der Planer 1 (x32)
Dev-C++ 5 beta 9 release (4.9.9.2) (x32)
eaner (Version: 4.01)
Earth Screensaver HD (x32 Version: Earth Screensaver HD)
eReg (x32 Version: 1.20.138.34)
ETDWare PS/2-X64 8.0.5.0_WHQL (Version: 8.0.5.0)
Extreme Tux Racer (HKCU)
Fast Boot (Version: 1.0.8)
FFmpeg v0.6.2 for Audacity (x32)
File-Upload.net (x32 Version: 1.0)
FireJump (x32 Version: 1.0.2.5)
FMS (x32)
Fotogalerie (x32 Version: 16.4.3505.0912)
Free Hide Folder (x32)
Free Screen To Video V 2.0 (x32 Version: 2.0.0.0)
Fünf Freunde auf Schatzsuche (x32)
Game Cam 2.6.1.0 (x32 Version: 2.6.1.0)
Game Park Console (x32 Version: 6.2.1.1)
GDC 0.24.svn.r229 (x32 Version: 0.24.svn.r229)
gDoc (x32 Version: 2.1.0)
gDoc Installer (x32 Version: 2.1.0)
GIANTS Editor 5.0.1 (x32 Version: 5.0.1)
GIANTS Editor 5.0.3 32-bit (x32 Version: 5.0.3)
GIMP 2.8.0 (Version: 2.8.0)
Google Earth (x32 Version: 7.1.1.1888)
Google SketchUp 8 (x32 Version: 3.0.14358)
Google Update Helper (x32 Version: 1.3.21.153)
GreenWebPlayer (HKCU)
GXTranscoder v2 (x32 Version: 2.24.2980)
Heroes of Might & Magic V: Hammers of Fate (x32)
Heroes of Might and Magic V - Tribes of the East (x32)
Heroes of Might and Magic V (x32)
Hex-Editor MX (x32 Version: 6.0)
hMailServer 5.3.3-B1879 (x32)
HMIWorks Standard v2.05 Update 10 (for TouchPAD series)
Home Sweet Home - Christmas Edition (x32 Version: 1.0)
ICQ 8.0 (build 5989, für aktuellen Benutzer) (HKCU Version: 8.0.5989.0)
ImageConverter Plus 8.0 (x32)
Inno Setup Version 5.5.2 (x32 Version: 5.5.2)
Install Creator (x32)
InstallForge (x32 Version: 1.2.4)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2291)
Intel(R) Turbo Boost Technology Monitor 2.0 (Version: 2.1.23.0)
IrfanView (remove only) (x32 Version: 4.35)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Juice 2.2 (x32 Version: 2.2)
jZip (x32)
KeePass Password Safe 2.21 (x32)
Kommissar Kugelblitz 3 (x32 Version: 1.00.0000)
Landwirtschafts Simulator 2011 (x32 Version: 1.0)
Landwirtschafts Simulator 2013 (x32 Version: 1.0)
Landwirtschafts-Simulator 2009 Gold (x32)
Logitech SetPoint 6.32 (Version: 6.32.20)
Logitech Solar App 1.0 (Version: 1.00.46)
Loksim3D (Version: 2.8)
LTspice IV (x32)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MAGIX Web Designer 6 (x32 Version: 6.0.1.17005)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Max und die Geheimformel (x32)
MediaInfo 0.7.61 (Version: 0.7.61)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Compatibility Toolkit 5.6 (x32 Version: 5.6.7324.0)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000)
Microsoft Flight (x32 Version: 1.0.0005.129)
Microsoft Flight Simulator X Demo (x32 Version: 10.0.60905)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft IntelliPoint 8.1 (Version: 8.15.406.0)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 ENU (x32 Version: 3.5.5386.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
mirabyte Feed Writer 2.8.1 (x32 Version: 2.8.1)
mirabyte Web Architect 10.0.1 (x32 Version: 10.0.1)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MPC-HC 1.6.6.6957 (3975d54) (x32 Version: 1.6.6.6957)
MPC-HC 1.6.7.7114 (9eb64ec) (64-bit) (Version: 1.6.7.7114)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MyKeyFinder (x32 Version: 2013)
MySQL Server 5.5 (x32 Version: 5.5.25)
MySQL Server 5.5 (x32 Version: 5.5.28)
Need For Speed™ World (x32 Version: 1.0.0.1398)
Node.js (Version: 0.10.12)
Notepad++ (x32 Version: 5.9.3)
NVIDIA Grafiktreiber 311.44 (Version: 311.44)
NVIDIA Install Application (Version: 2.1002.109.706)
NVIDIA Optimus 1.11.3 (Version: 1.11.3)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Systemsteuerung 311.44 (Version: 311.44)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenMG Limited Patch 4.7-07-14-05-01 (x32)
OpenMG Secure Module 4.7.00 (x32 Version: 4.7.00.12140)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
OpenTTD 1.3.0 (x32 Version: 1.3.0)
Oracle VM VirtualBox 4.2.6 (Version: 4.2.6)
Origin (x32 Version: 9.1.10.2728)
Paint.NET v3.5.10 (Version: 3.60.0)
Paragon Backup & Recovery™ 2013 Free (x32 Version: 90.00.0003)
PDF Split And Merge Basic (Version: 2.2.2)
PDFCreator (x32 Version: 1.5.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
PHPEdit (x32 Version: 0.6)
Picasa 3 (x32 Version: 3.9)
PicGrab 2.8.0 (x32 Version: 2.8.0)
Pic-Upload.de (x32 Version: 1.0)
QuickTime (x32 Version: 7.74.80.86)
Razer Game Booster (x32 Version: 3.5.6.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6438)
RippMe (x32 Version: 3.04)
Santa Claus 3D Screensaver 1.1 (x32 Version: 1.1)
Schriftenbibliothek (x32)
Secunia PSI (3.0.0.6001) (x32 Version: 3.0.0.6001)
Shockwave (x32)
SimCity™ (x32 Version: 1.0.0.0)
Ski Challenge 13 (CH) (HKCU)
Skiregion Simulator 2012 (x32 Version: 1.0)
Skype™ 6.3 (x32 Version: 6.3.107)
SmartFTP Client (Version: 4.1.1261.0)
SmartFTP Client German (Germany) MUI (Version: 4.1.1261.0)
SmartFTP Client Setup Files 4.1 (x64) (remove only) (x32 Version: 4.1)
Smarty Uninstaller Pro (x32 Version: 3.0.1)
Sparfuchs (x32 Version: 2013)
SpeedFan (remove only) (x32)
SpywareBlaster 5.0 (x32 Version: 5.0.0)
Steinbruch-Simulator 2012 (x32)
Steinbruch-Simulator 2012 Patch 1.10 (x32)
Stronghold Legends (x32 Version: 1.20.0000)
StrongVPN Client version 1.2 (x32 Version: 1.2)
Sublime Text 2 Build 2220 (x32)
Sublime Text Build 3047
SUPERAntiSpyware (Version: 5.6.1014)
SuperTux 0.1.3 (x32)
swMSM (x32 Version: 12.0.0.1)
TeamSpeak 3 Client (HKCU Version: 3.0.10)
TKKG10 (x32)
TmNationsForever (x32)
Two Worlds Pinball (x32 Version: 1.00)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
VirtualCloneDrive (x32)
Vision Runtime Dependencies (x32 Version: 8.0.0.0000)
VLC media player 2.0.5 (x32 Version: 2.0.5)
VLC media player 2.1.0-git-20121231-0404 (Version: 2.1.0-git-20121231-0404)
White Christmas 3D Screensaver and Animated Wallpaper 1.0 (x32 Version: 1.0)
Wildlife Park 2 Horses (x32 Version: 2.00)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Speech Recognition Macros (x32 Version: 1.0.6862.19)
WinFlash (x32 Version: 2.31.1)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WinRAR Password Cracker (x32 Version: 3.1.0.0)
Wireless Console 3 (x32 Version: 3.0.19)
World of Tanks (x32)
XAMPP 1.8.1-0 (x32 Version: 1.8.1-0)
XnConvert 1.55 (Version: 1.55)
Zattoo4 4.0.5 (x32 Version: 4.0.5)
==================== Restore Points =========================
15-08-2013 04:45:33 Removed Bonjour
17-08-2013 04:47:01 Compatibility Pack für 2007 Office System wird entfernt
17-08-2013 04:47:54 Microsoft Office Excel Viewer wird entfernt
17-08-2013 04:49:22 Microsoft Office Word Viewer 2003 wird entfernt
17-08-2013 04:51:46 Installed Microsoft Office Professional Plus 2013
17-08-2013 04:52:06 PROPLUSR
17-08-2013 05:01:44 Installed Microsoft Office Professional Plus 2013
17-08-2013 05:01:56 PROPLUSR
17-08-2013 05:06:20 Installed Microsoft Office Professional Plus 2013
17-08-2013 05:06:29 PROPLUSR
01-09-2013 17:53:58 Removed Bonjour
01-09-2013 17:59:15 Removed Google Talk Plugin
01-09-2013 18:00:14 Removed Google Drive
01-09-2013 18:02:46 Entfernt Paragon Backup & Recovery™ 2013 Free.
02-09-2013 15:20:05 Windows Update
03-09-2013 04:22:53 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-08-14 06:40 - 00000231 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
190.93.251.97 www.modhoster.de
190.93.251.97 ets.modhoster.de
190.93.251.97 minecraft.modhoster.de
190.93.251.97 srs-2012.modhoster.de
62.113.217.100 images.modhoster.de
5.9.157.205 chat.modhoster.de
==================== Scheduled Tasks (whitelisted) =============
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {0C325E65-BA4C-45BD-B5A7-164244F46074} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {1C00D190-2D1E-4B21-B70D-A0CB3DBA956E} - System32\Tasks\{12A85B76-ECAB-40B0-94D1-75E070154840} => C:\Users\*******\Downloads\EnemyNations2\_setup.EXE
Task: {266C582F-A968-470A-AF72-F187D71AB823} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {2BC24EB0-F145-4A6C-8B37-C5E62D76BF01} - System32\Tasks\Your File Updater => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe
Task: {35B8EF23-3F23-4CCB-810D-43708FD09704} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {39C77CB0-CFD6-4828-B60B-28E33F9F8BFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3972431589-2566625243-1631541889-1001UA => C:\Users\*******\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {3ACD0A9E-1B8F-4671-AC7E-463D16F76E26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {3C1C5C0E-C2FE-483F-B293-69A7B9A95471} - System32\Tasks\{4414B346-F6BB-4E6A-8B2E-B36755A5A792} => C:\Users\*******\Downloads\TmNationsForever_Setup.exe
Task: {3DE71F9C-2BA9-4A82-966D-0D6686D88B74} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3972431589-2566625243-1631541889-1001Core => C:\Users\*******\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {480A7884-CE6E-4360-A80D-B201DFE33F0D} - System32\Tasks\{A82B25BD-3E9F-40D2-9CA6-7DC16DCE4100} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE
Task: {597A2E5B-C56E-4335-9CCA-21968A515239} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {5B8EF29F-6142-4CB3-9895-2141FB21E888} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)
Task: {5F734090-475F-4DCD-8A93-A22CA762C06A} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
Task: {60F398C6-F009-4FEB-B4EF-955537F134F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.)
Task: {647F1615-62F3-4452-9832-398A511DDFA1} - System32\Tasks\{1332E433-5B7A-48E8-AF55-433A34D31E4C} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE
Task: {65035588-6343-4692-B48F-D2755D66BBEA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-02] (Adobe Systems Incorporated)
Task: {68FC3817-5124-40C7-B237-F77DC23CCA0C} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21] (ASUS)
Task: {6C54C1A0-A0E1-471B-803B-3F9975F06A90} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {7181F87D-FD20-4E3F-A6D0-D413C8F87A30} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {77BCFF62-B2E3-4C9A-949C-1FF5E8B3F361} - System32\Tasks\User_Feed_Synchronization-{AA05AC82-BEC2-4802-BCD8-0117CDF6A9E2} => C:\Windows\system32\msfeedssync.exe [2013-02-27] (Microsoft Corporation)
Task: {821B7424-53EA-423F-B7B0-5B21BB3A495C} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe
Task: {84A77F86-B445-48DE-B57F-B89B693CD5C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.)
Task: {882A8AEE-6222-4E3C-A601-01C4CE6097C1} - System32\Tasks\{09451438-AAD7-4DF4-ACF8-A470A9702C5E} => C:\Users\*******\Downloads\EnemyNations2\_setup.EXE
Task: {8F419C90-D714-4F55-A02A-39F92CC5DE9E} - System32\Tasks\{431AD521-9BB2-413B-9E37-F8767A8A2D1C} => E:\Installation.EXE
Task: {9B7402EC-A4B7-4989-A50F-B09E11DBFD0D} - System32\Tasks\{D06899CE-6A5A-4C04-BECE-A5946662C5BA} => C:\Program Files (x86)\PHPEdit\PHPEdit.exe [2001-09-26] (PHPEdit project)
Task: {B1692FD0-9E43-4A4C-99AD-FB2923F07303} - System32\Tasks\{6D6A87AD-0415-4C5E-B1A3-458DA343AEAB} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE
Task: {D472D272-91AD-446D-9182-CC0356339E25} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {D765114F-1CCD-48E6-BC61-C810362C3F90} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {DBED2C32-E27A-45F4-858A-8814D0855153} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {E4F5A865-4B8D-498A-8168-CDF4E3B12EEE} - System32\Tasks\{7B69C7DA-4C5D-40C3-AF4E-B4A6AFC3AF4B} => C:\Users\*******\Downloads\gmouse20\SETUP.EXE
Task: {EEF0C6F2-2E34-41A9-8A4A-AF4EA797BDFA} - System32\Tasks\{350EB947-0948-4B8D-8F47-493ECF8D60C4} => C:\Users\*******\Downloads\TmNationsForever_Setup.exe
Task: {FCCA7AEF-40B6-4282-B526-CA2360265672} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {FDA853CC-5A65-401B-9B8D-2E7D71BA9526} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe [2012-11-13] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ASUS P4G.job => C:\Program Files (x86)\P4G\BatteryLife.exe
Task: C:\Windows\Tasks\ATKOSD2.job => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
Task: C:\Windows\Tasks\ATKOSD2_876975.job => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
Task: C:\Windows\Tasks\DMedia_877022.job => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1ce8313387cd85a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HControlUser_876959.job => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
Task: C:\Windows\Tasks\P4GIntlCtrl.job => C:\Program Files\P4G\IntlDPST.exe
Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
==================== Loaded Modules (whitelisted) =============
2010-09-02 10:41 - 2010-09-02 10:41 - 00220160 ____H (eCareme Technologies, Inc.) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll
2012-08-24 01:36 - 2012-08-24 01:36 - 00460168 _____ (SmartSoft Ltd.) C:\Program Files\SmartFTP Client\sfShellTools.dll
2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2011-02-21 06:06 - 2011-02-21 06:06 - 04493312 ____H (eCareme) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\XPClient.dll
2010-04-01 04:55 - 2010-04-01 04:55 - 00221184 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\LogicNP.EZNamespaceExtensions.dll
2011-02-21 06:05 - 2011-02-21 06:05 - 00266240 ____H (.) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\eCaremeDLL.dll
2009-10-29 03:41 - 2009-10-29 03:41 - 00270336 ____H (The Apache Software Foundation) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\log4net.dll
2013-09-01 18:36 - 2009-10-22 11:33 - 00111616 _____ (Canon Inc.) C:\Windows\system32\spool\DRIVERS\x64\3\CNCF2Gm.dll
2013-09-01 18:36 - 2009-10-22 11:33 - 00253440 _____ (Canon Inc.) C:\Windows\system32\spool\DRIVERS\x64\3\CNCF2Um.dll
2009-03-02 04:07 - 2009-03-02 04:07 - 00200704 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\LogicNP.EZShellExtensions.dll
2011-06-22 12:38 - 2013-04-08 13:32 - 02833232 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2011-01-29 02:34 - 2013-03-14 08:28 - 00076064 _____ (NVIDIA Corporation) C:\Windows\system32\Nv3DAppShExtR.dll
2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 ____H () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2013-05-15 12:11 - 2013-04-13 07:49 - 00308736 _____ (Microsoft Corporation) C:\Windows\AppPatch\AppPatch64\AcGenral.DLL
2012-11-13 22:53 - 2012-11-13 22:53 - 00139024 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\GBV3ContextMenu.dll
2011-07-19 02:08 - 2011-07-19 02:08 - 00210816 _____ (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL
2013-06-12 06:43 - 2012-06-09 19:20 - 00196608 _____ (Alexander Roshal) C:\Program Files\WinRAR\rarext.dll
2011-08-07 12:26 - 2009-12-14 19:16 - 00107688 ____H (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll
2011-07-18 23:04 - 2011-07-18 23:04 - 00301568 ____H () C:\Program Files (x86)\Notepad++\NppShell_04.dll
2011-01-29 02:34 - 2013-03-14 08:28 - 01002272 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2011-01-29 02:33 - 2013-03-14 08:29 - 04155680 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvUI.dll
2012-04-28 09:26 - 2013-04-08 13:32 - 00778528 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\easyDaemonAPIU64.DLL
2012-04-28 09:26 - 2013-04-08 13:32 - 03587360 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll
2012-04-28 09:26 - 2013-04-08 13:32 - 00981280 _____ (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Common\NVUPDTR.DLL
2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
2011-04-20 10:18 - 2011-01-27 02:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-05-22 16:29 - 2013-05-22 16:23 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-05-22 16:29 - 2013-05-22 16:23 - 03200104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2013-05-22 16:29 - 2013-05-22 16:23 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2009-07-14 02:29 - 2009-07-14 03:38 - 00701952 _____ (Microsoft Corporation) C:\Windows\System32\hhctrl.ocx
2013-09-01 18:36 - 2012-03-14 05:00 - 00780288 _____ (CANON INC.) C:\Windows\system32\spool\DRIVERS\x64\3\CNMDRA7.DLL
2013-09-01 18:36 - 2012-03-14 05:00 - 03769344 _____ (CANON INC.) C:\Windows\system32\spool\DRIVERS\x64\3\CNMUIA7.DLL
2009-07-14 02:34 - 2009-07-14 03:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\System32\Speech\SpeechUX\SpTip.dll
2009-07-14 02:34 - 2009-07-14 03:41 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\Speech\SpeechUX\SpeechUXPS.DLL
2009-11-06 20:18 - 2009-11-06 20:18 - 00004096 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\Interop.SimpleAES64Lib.dll
2009-10-29 05:00 - 2009-10-29 05:00 - 00004096 ____H ( ) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\Interop.SIMPLEAESLib.dll
2009-03-02 04:08 - 2009-03-02 04:08 - 00003584 ____H () C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\LogicNP.PropSheetExtensionHelper_x64.dll
2009-07-14 01:58 - 2009-07-14 03:38 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-04-08 13:32 - 2013-04-08 13:32 - 00201576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-04-08 13:32 - 2013-04-08 13:32 - 00286536 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvd3d9wrap.dll
2013-04-08 13:32 - 2013-04-08 13:32 - 00193336 _____ (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\nvdxgiwrap.dll
2012-03-18 08:22 - 2009-10-07 22:28 - 00200704 _____ () C:\Program Files (x86)\ImageConverter Plus\gpgate.dll
2012-03-18 08:22 - 2009-10-07 22:22 - 01183744 _____ () C:\Program Files (x86)\ImageConverter Plus\FCRTL.dll
2012-03-18 08:22 - 2009-10-07 22:24 - 01339392 _____ () C:\Program Files (x86)\ImageConverter Plus\fcnv.dll
2012-03-18 08:22 - 2009-10-07 22:22 - 06803456 _____ () C:\Program Files (x86)\ImageConverter Plus\fpdf.dll
2012-03-18 08:22 - 2009-10-07 22:18 - 00020992 _____ () C:\Program Files (x86)\ImageConverter Plus\MemHandler.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 01740800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\sal3.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00086016 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll
2010-12-13 17:23 - 2013-02-15 20:38 - 00379904 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 01033728 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\comphelp4MSC.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00432128 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00013312 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00142848 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00597504 _____ (STLport Consulting, Inc.) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00358912 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00094208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 00135680 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmiscmi.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 00832000 _____ (Oracle) C:\Program Files (x86)\OpenOffice.org 3\program\libdb47.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00529408 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\tlmi.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 00700928 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\basegfxmi.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00026112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00958464 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\utlmi.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00531456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xcrmi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 03234816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sfxmi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00869888 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwemi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00311296 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwimi.dll
2010-12-13 17:23 - 2013-02-15 20:38 - 02863616 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svtmi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 02186752 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\tkmi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 03266560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\vclmi.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00256000 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sotmi.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00029184 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18npapermi.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00066560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00951296 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 13914112 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icudt40.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00777216 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svlmi.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00092160 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 01577984 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sbmi.dll
2010-11-19 13:42 - 2010-11-19 13:42 - 00083456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\saxmi.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00051712 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00452608 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00092672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00053248 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00396800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\configmgr.uno.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00024064 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00092672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00212992 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 01649152 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwkmi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00257024 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 01317376 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18npool.uno.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 01071616 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuin40.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00083968 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\oooimprovementmi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00287232 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00148480 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\emsermi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00226304 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\uuimi.dll
2011-01-06 18:50 - 2013-02-15 20:37 - 00186880 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\filterconfig1.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00115200 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\dnd.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 07884800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\swmi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00991744 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\lngmi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 02967552 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xomi.dll
2010-12-13 17:23 - 2013-02-15 20:38 - 05470208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svxcoremi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 01457152 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\editengmi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00211456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\avmediami.dll
2011-01-17 17:18 - 2013-02-15 20:37 - 01026560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\drawinglayermi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00503296 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\canvastoolsmi.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00129024 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\aggmi.dll
2011-01-17 17:18 - 2013-02-15 20:37 - 00285184 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\cppcanvasmi.dll
2010-12-13 17:23 - 2013-02-15 20:38 - 02524672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svxmi.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 00697344 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_euro.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00103936 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_en.dll
2011-01-06 18:51 - 2013-02-15 20:37 - 00282112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\package2.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00106496 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sysdtrans.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00346112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xstor.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00098816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reflection.uno.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00051712 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fileacc.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00156672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sax.uno.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00093696 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fsstorage.uno.dll
2011-01-17 17:19 - 2013-02-15 20:37 - 00542208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmi.uno.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00154624 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\helplinkermi.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00024064 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpexpand1.uno.dll
2010-11-19 19:46 - 2013-02-15 20:38 - 00294400 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\unoxmlmi.dll
2010-11-19 19:45 - 2013-02-15 20:38 - 00098816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\introspection.uno.dll
2010-12-13 17:23 - 2013-02-15 20:38 - 00174080 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.uno.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00050688 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ftransl.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00033280 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\mcnttype.dll
2010-12-13 17:23 - 2013-02-15 20:38 - 00053760 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updatefeed.uno.dll
2010-11-19 19:45 - 2013-02-15 20:37 - 00008192 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\onlinecheck.DLL
2010-12-13 17:23 - 2013-02-15 20:38 - 00048128 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updchkmi.dll
2010-12-13 17:22 - 2013-02-15 20:37 - 00063488 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\resmi.dll
2011-01-17 17:19 - 2013-02-15 20:38 - 00260096 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpchelp1.dll
2009-07-14 02:14 - 2009-07-14 03:16 - 00126976 _____ (Microsoft Corporation) C:\Windows\IME\SpTip.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm
2013-08-06 18:09 - 2013-08-06 18:09 - 02244504 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-08-06 18:09 - 2013-08-06 18:09 - 00158104 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-08-06 18:09 - 2013-08-06 18:09 - 00022424 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-08-06 18:09 - 2013-08-06 18:09 - 00579480 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Thunderbird\mozsqlite3.dll
2013-03-14 07:32 - 2013-02-11 09:55 - 00209408 _____ (Mozilla Foundation) C:\Users\*******\AppData\Roaming\Thunderbird\Profiles\7t9h8wy2.default\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}\components\calbasecomps.dll
2013-06-24 12:40 - 2010-09-15 22:06 - 02145280 _____ (Python Software Foundation) C:\Program Files (x86)\Sublime Text 2\python26.dll
2013-06-24 12:40 - 2010-09-15 22:06 - 00073728 _____ () C:\Program Files (x86)\Sublime Text 2\_ctypes.pyd
2013-06-24 12:40 - 2010-09-15 22:06 - 00040448 _____ () C:\Program Files (x86)\Sublime Text 2\_socket.pyd
2013-06-24 12:40 - 2010-09-15 22:06 - 00665600 _____ () C:\Program Files (x86)\Sublime Text 2\_ssl.pyd
2013-06-24 12:40 - 2010-09-15 22:06 - 00286208 _____ () C:\Program Files (x86)\Sublime Text 2\_hashlib.pyd
2013-06-24 12:40 - 2010-09-15 22:06 - 00585728 _____ () C:\Program Files (x86)\Sublime Text 2\unicodedata.pyd
2013-09-02 15:41 - 2013-09-02 15:41 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-07-18 23:07 - 2011-07-18 23:07 - 00106496 ____H (Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\plugins\NppConverter.dll
2011-07-18 23:07 - 2011-07-18 23:07 - 00014336 ____H () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll
2011-07-18 23:07 - 2012-05-16 19:34 - 01673728 _____ () C:\Program Files (x86)\Notepad++\plugins\NppFTP.dll
2011-07-18 23:07 - 2012-01-04 16:51 - 00545792 ____H (Dave Brotherstone. davegb@pobox.com) C:\Program Files (x86)\Notepad++\plugins\PluginManager.dll
2011-07-18 23:07 - 2011-07-18 23:07 - 00081920 ____H (jens.plugin.npp@gmx.de) C:\Program Files (x86)\Notepad++\plugins\SpellChecker.dll
2012-04-27 19:51 - 2012-06-20 17:57 - 00311296 _____ () C:\Program Files (x86)\Notepad++\plugins\XMLTools.dll
2012-04-27 19:51 - 2012-06-20 17:57 - 00987136 _____ () C:\Program Files (x86)\Notepad++\libxml2.dll
2012-04-27 19:51 - 2012-06-20 17:57 - 00888832 _____ (Free Software Foundation) C:\Program Files (x86)\Notepad++\iconv.dll
2012-04-27 19:51 - 2012-06-20 17:57 - 00077824 _____ () C:\Program Files (x86)\Notepad++\zlib1.dll
2012-04-27 19:51 - 2012-06-20 17:57 - 00166912 _____ () C:\Program Files (x86)\Notepad++\libxslt.dll
==================== Alternate Data Streams (whitelisted) ==========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\ProgramData\Temp:DED17083
AlternateDataStreams: C:\Users\*******\Thumbs.db:encryptable
==================== Faulty Device Manager Devices =============
Name: ASInsHelp
Description: ASInsHelp
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ASInsHelp
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/05/2013 05:01:09 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: KHALMNPR.EXE, Version: 5.33.14.0, Zeitstempel: 0x4e8218bd
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000c40f2
ID des fehlerhaften Prozesses: 0xe6c
Startzeit der fehlerhaften Anwendung: 0xKHALMNPR.EXE0
Pfad der fehlerhaften Anwendung: KHALMNPR.EXE1
Pfad des fehlerhaften Moduls: KHALMNPR.EXE2
Berichtskennung: KHALMNPR.EXE3
Error: (09/03/2013 05:39:28 PM) (Source: Application Hang) (User: )
Description: Programm sublime_text.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1808
Startzeit: 01cea85d844f8cb9
Endzeit: 23
Anwendungspfad: C:\Program Files (x86)\Sublime Text 2\sublime_text.exe
Berichts-ID: 004a6732-14af-11e3-bcc5-14dae90d9b4d
Error: (09/03/2013 06:29:12 AM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 23.0.1.4974 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: a5c
Startzeit: 01cea85d6a4f59f5
Endzeit: 30
Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Berichts-ID: 5dc7f187-1451-11e3-bcc5-14dae90d9b4d
Error: (09/03/2013 06:21:59 AM) (Source: MsiInstaller) (User: ASUS-X73S)
Description: Produkt: COMPUTERBILD-Abzockschutz -- Fehler 1704. Eine Installation von Paragon Backup & Recovery™ 2013 Free wurde unterbrochen. Sie müssen die von dieser Installation vorgenommenen Änderungen rückgängig machen, bevor Sie den Vorgang fortsetzen können. Möchten Sie diese Änderungen rückgängig machen?
Error: (09/02/2013 06:14:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LiveUpdt.exe, Version: 2.0.0.0, Zeitstempel: 0x4a6d7c8e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x156c
Startzeit der fehlerhaften Anwendung: 0xLiveUpdt.exe0
Pfad der fehlerhaften Anwendung: LiveUpdt.exe1
Pfad des fehlerhaften Moduls: LiveUpdt.exe2
Berichtskennung: LiveUpdt.exe3
Error: (09/02/2013 06:03:19 PM) (Source: ESENT) (User: )
Description: taskhost (5548) Versuch, Datei "C:\Users\*******\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error: (09/02/2013 05:14:08 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: LiveUpdt.exe, Version: 2.0.0.0, Zeitstempel: 0x4a6d7c8e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x1794
Startzeit der fehlerhaften Anwendung: 0xLiveUpdt.exe0
Pfad der fehlerhaften Anwendung: LiveUpdt.exe1
Pfad des fehlerhaften Moduls: LiveUpdt.exe2
Berichtskennung: LiveUpdt.exe3
Error: (09/02/2013 00:26:08 PM) (Source: Schedule) (User: )
Description: Schedule error: 10106Initialize call failed, bailing out
Error: (09/01/2013 07:58:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: gert0.exe, Version: 0.0.0.0, Zeitstempel: 0x3da6a14d
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x77a21221
ID des fehlerhaften Prozesses: 0x2604
Startzeit der fehlerhaften Anwendung: 0xgert0.exe0
Pfad der fehlerhaften Anwendung: gert0.exe1
Pfad des fehlerhaften Moduls: gert0.exe2
Berichtskennung: gert0.exe3
Error: (09/01/2013 07:58:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: uninstall.exe_unknown, Version: 0.0.0.0, Zeitstempel: 0x3da6a14d
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x77a21221
ID des fehlerhaften Prozesses: 0x16dc
Startzeit der fehlerhaften Anwendung: 0xuninstall.exe_unknown0
Pfad der fehlerhaften Anwendung: uninstall.exe_unknown1
Pfad des fehlerhaften Moduls: uninstall.exe_unknown2
Berichtskennung: uninstall.exe_unknown3
System errors:
=============
Error: (09/03/2013 05:18:18 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004
Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004
Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004
Error: (09/03/2013 06:32:04 AM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004
Error: (09/02/2013 05:05:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (09/02/2013 05:05:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1326
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (09/02/2013 05:03:58 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/02/2013 05:03:36 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
acedrv05
UimBus
Uim_IM
Uim_VIM
Error: (09/02/2013 05:02:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "FileZilla Server FTP server" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (09/05/2013 05:01:09 PM) (Source: Application Error)(User: )
Description: KHALMNPR.EXE5.33.14.04e8218bdntdll.dll6.1.7601.177254ec4aa8ec000037400000000000c40f2e6c01cea7ed78c85810C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXEC:\Windows\SYSTEM32\ntdll.dllfed7aba0-163b-11e3-bcc5-14dae90d9b4d
Error: (09/03/2013 05:39:28 PM) (Source: Application Hang)(User: )
Description: sublime_text.exe1.0.0.1180801cea85d844f8cb923C:\Program Files (x86)\Sublime Text 2\sublime_text.exe004a6732-14af-11e3-bcc5-14dae90d9b4d
Error: (09/03/2013 06:29:12 AM) (Source: Application Hang)(User: )
Description: firefox.exe23.0.1.4974a5c01cea85d6a4f59f530C:\Program Files (x86)\Mozilla Firefox\firefox.exe5dc7f187-1451-11e3-bcc5-14dae90d9b4d
Error: (09/03/2013 06:21:59 AM) (Source: MsiInstaller)(User: ASUS-X73S)
Description: Produkt: COMPUTERBILD-Abzockschutz -- Fehler 1704. Eine Installation von Paragon Backup & Recovery™ 2013 Free wurde unterbrochen. Sie müssen die von dieser Installation vorgenommenen Änderungen rückgängig machen, bevor Sie den Vorgang fortsetzen können. Möchten Sie diese Änderungen rückgängig machen?(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/02/2013 06:14:23 PM) (Source: Application Error)(User: )
Description: LiveUpdt.exe2.0.0.04a6d7c8entdll.dll6.1.7601.177254ec49b8fc00000050002e3be156c01cea7f77abef14fC:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exeC:\Windows\SysWOW64\ntdll.dllba960d22-13ea-11e3-bcc5-14dae90d9b4d
Error: (09/02/2013 06:03:19 PM) (Source: ESENT)(User: )
Description: taskhost5548C:\Users\*******\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
Error: (09/02/2013 05:14:08 PM) (Source: Application Error)(User: )
Description: LiveUpdt.exe2.0.0.04a6d7c8entdll.dll6.1.7601.177254ec49b8fc00000050002e3be179401cea7ef0713ab71C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdt.exeC:\Windows\SysWOW64\ntdll.dll4fcc1916-13e2-11e3-bcc5-14dae90d9b4d
Error: (09/02/2013 00:26:08 PM) (Source: Schedule)(User: )
Description: Schedule error: 10106Initialize call failed, bailing out
Error: (09/01/2013 07:58:45 PM) (Source: Application Error)(User: )
Description: gert0.exe0.0.0.03da6a14dunknown0.0.0.000000000c000041d77a21221260401cea73ce6b3756aC:\Users\*******\AppData\Local\Temp\gert0.exeunknown2479b27d-1330-11e3-b8f1-14dae90d9b4d
Error: (09/01/2013 07:58:36 PM) (Source: Application Error)(User: )
Description: uninstall.exe_unknown0.0.0.03da6a14dunknown0.0.0.000000000c000041d77a2122116dc01cea73ce06b9d58C:\Programme\ftp-uploader\uninstall.exeunknown1f0961a7-1330-11e3-b8f1-14dae90d9b4d
CodeIntegrity Errors:
===================================
Date: 2013-09-02 17:01:08.704
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-02 17:01:08.610
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-02 12:24:58.373
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-02 12:24:58.248
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-01 19:29:01.124
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-01 19:29:01.046
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-01 18:27:57.500
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-01 18:27:57.422
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-01 18:21:04.781
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-01 18:21:04.703
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv05.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 39%
Total physical RAM: 6056.26 MB
Available physical RAM: 3640.82 MB
Total Pagefile: 12110.7 MB
Available Pagefile: 7767 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:238.47 GB) (Free:124.59 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:332.7 GB) (Free:329.92 GB) NTFS
Drive g: (LS2013) (CDROM) (Total:1.36 GB) (Free:0 GB) CDFS
Drive n: (15.0.4420.1017) (CDROM) (Total:0.76 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 343771F7)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=238 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=333 GB) - (Type=OF Extended)
==================== End Of Log ============================
Müsste alles sein :-)
Baldoius
Einige Dateien gehören zum Landwirtschafts-Simulator 2013 (zumbeispiel meinemap).
Also nicht erschrecken...! :Boogie::Boogie::Boogie::Boogie: |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
