KIS2012,TrojanRemover und ADWCleaner konnten nichts finden.
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Power Machine (ATTENTION: The logged in user is not administrator) on POWERMACHINE-PC on 29-01-2014 14:55:25
Running from C:\Users\Power Machine\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Winstep Software Technologies) C:\Program Files (x86)\Winstep\Nexus.exe
() C:\Program Files (x86)\VoxOx\VoxOx.exe
(Innovative Solutions) C:\Program Files (x86)\Innovative Solutions\System Tray Cleaner\stc.exe
(Siber Systems) C:\Program Files\Roboform\robotaskbaricon.exe
() C:\Program Files (x86)\ActiveTracker\rn5.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
(Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe
() C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(SlySoft, Inc.) C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe
() C:\Program Files (x86)\Innovative Solutions\System Tray Cleaner\stc64helper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
(Ritlabs S.R.L.) C:\Program Files (x86)\The Bat!\thebat.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() G:\Platte F\BACKUP2012\SKYPE LAUNCHER\CalimSkypeLauncher_2_1\CalimSkypeQuickAccess.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [AutoKMS] - C:\Windows\AutoKMS.exe
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [WIRELESS-KB-LED-STATUS] - C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe [846336 2010-04-30] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [39136 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [825560 2012-12-18] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Nuance PDF Create 7-reminder] - "C:\Program Files (x86)\Nuance\PDF Create 7\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Create 7\Ereg\Ereg.ini"
HKLM-x32\...\Run: [CloneCDTray] - C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1704720 2014-01-27] (Simply Super Software)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKCU\...\Run: [Google Update] - C:\Users\Power Machine\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-29] (Google Inc.)
HKCU\...\Run: [Nexus] - C:\Program Files (x86)\Winstep\Nexus.exe [16957056 2012-03-28] (Winstep Software Technologies)
HKCU\...\Run: [VoxOxNG] - C:\Program Files (x86)\Voxox\Voxox.exe [8953856 2013-06-11] ()
HKCU\...\Run: [STC] - C:\Program Files (x86)\Innovative Solutions\System Tray Cleaner\stc.exe [3616176 2012-04-13] (Innovative Solutions)
HKCU\...\Run: [RoboForm] - C:\Program Files\Roboform\RoboTaskBarIcon.exe [109336 2012-08-03] (Siber Systems)
HKCU\...\Run: [OpAgent] - "OpAgent.exe" /agent
HKCU\...\Run: [VoxOx] - C:\Program Files (x86)\VoxOx\VoxOx.exe [8953856 2013-06-11] ()
HKCU\...\Run: [rn5.exe] - C:\Program Files (x86)\ActiveTracker\rn5.exe [2643416 2011-10-31] ()
HKCU\...\Run: [InstallIQUpdater] - "C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe" /silent /autorun
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Power Machine\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk
ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock)
Startup: C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Power Machine\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk
ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/webhp?hl=en
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x623318AE8B3DCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Roboform\RoboForm-x64.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll (TechSmith Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Roboform\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Roboform\RoboForm-x64.dll ()
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Roboform\roboform.dll (Siber Systems Inc.)
Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Roboform\RoboForm-x64.dll ()
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default
FF Homepage: hxxp://www.google.com/webhp?hl=en
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Power Machine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Power Machine\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Power Machine\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Power Machine\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Power Machine\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Power Machine\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Power Machine\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Power Machine\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: FlashFirebug - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\flashfirebug@o-minds.com [2013-06-22]
FF Extension: Follow.net - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\support@follow.net [2013-12-21]
FF Extension: LastPass - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\support@lastpass.com [2013-04-24]
FF Extension: SeoQuake - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} [2013-10-12]
FF Extension: DownloadHelper - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-09-03]
FF Extension: Firebug - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\firebug@software.joehewitt.com.xpi [2012-06-02]
FF Extension: Multifox - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\multifox@hultmann.xpi [2012-06-02]
FF Extension: RoboForm Lite - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\xpirftoolbar@roboform.com.xpi [2012-10-08]
FF Extension: NoDoFollow - C:\Users\Power Machine\AppData\Roaming\Mozilla\Firefox\Profiles\kjdjw7vl.default\Extensions\{c2b1f3ae-5cd5-49b7-8a0c-2c3bcbbbb294}.xpi [2012-10-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-08-01]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-05-29]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-05-29]
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-05-29]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-06-01]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Roboform\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files\Roboform\Firefox [2012-08-03]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Power Machine\AppData\Local\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Power Machine\AppData\Local\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Power Machine\AppData\Local\Google\Chrome\Application\32.0.1700.76\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Google Update) - C:\Users\Power Machine\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-05-29]
CHR Extension: (Google Search) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-05-29]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2012-05-30]
CHR Extension: (Website Blocker (Beta)) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2013-02-15]
CHR Extension: (Virtual Keyboard) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2012-05-30]
CHR Extension: (Amazon-Icon) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2013-07-22]
CHR Extension: (Google Wallet) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-05]
CHR Extension: (Gmail) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-05-29]
CHR Extension: (Anti-Banner) - C:\Users\Power Machine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2012-05-30]
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2012-05-30]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-04-25]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Administrator\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-07-21]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-04-25]
CHR StartMenuInternet: Google Chrome - C:\Users\Power Machine\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2012-10-31] (Kaspersky Lab ZAO)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [220504 2013-08-22] (Garmin Ltd or its subsidiaries)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 Winstep Xtreme Service; C:\Program Files (x86)\Winstep\WsxService [x]
==================== Drivers (Whitelisted) ====================
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2012-10-31] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-29 14:55 - 2014-01-29 14:55 - 00023989 _____ C:\Users\Power Machine\Downloads\FRST.txt
2014-01-29 14:55 - 2014-01-29 14:55 - 00000000 ____D C:\FRST
2014-01-29 14:52 - 2014-01-29 14:52 - 02079744 _____ (Farbar) C:\Users\Power Machine\Downloads\FRST64.exe
2014-01-29 11:35 - 2014-01-29 11:35 - 00000056 _____ C:\Windows\setupact.log
2014-01-29 11:35 - 2014-01-29 11:35 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 23:01 - 2014-01-28 23:01 - 00001728 _____ C:\Users\Power Machine\Desktop\TreeSizeFree - Speicher Frei.lnk
2014-01-28 21:23 - 2014-01-28 21:23 - 00000000 ____D C:\Users\Power Machine\Documents\Simply Super Software
2014-01-28 07:51 - 2014-01-28 07:51 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-28 07:51 - 2014-01-28 07:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 07:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-27 23:47 - 2014-01-27 23:47 - 00000000 ____D C:\ProgramData\Licenses
2014-01-27 23:46 - 2014-01-27 23:46 - 00000000 ____D C:\Users\Administrator\Documents\Simply Super Software
2014-01-27 23:46 - 2014-01-27 23:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Simply Super Software
2014-01-27 23:45 - 2014-01-27 23:46 - 00000000 ____D C:\Program Files (x86)\Trojan Remover
2014-01-27 23:45 - 2014-01-27 23:45 - 00001139 _____ C:\Users\Public\Desktop\Trojan Remover.lnk
2014-01-27 23:45 - 2014-01-27 23:45 - 00000000 ____D C:\ProgramData\Simply Super Software
2014-01-27 22:58 - 2014-01-27 22:58 - 01071000 _____ (Solid State Networks) C:\Users\Power Machine\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe
2014-01-27 22:47 - 2014-01-28 21:21 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-27 22:47 - 2014-01-27 22:47 - 00000131 _____ C:\Windows\wininit.ini
2014-01-27 22:47 - 2014-01-27 22:47 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-18 02:47 - 2014-01-18 02:48 - 01703971 _____ C:\Users\Power Machine\Downloads\EmergencyXmasCash1125.zip
2014-01-16 19:44 - 2014-01-17 00:40 - 11782057 _____ C:\Users\Power Machine\Downloads\3DQRGENERATORPRO.zip.part
2014-01-16 19:25 - 2014-01-17 00:41 - 26467506 _____ C:\Users\Power Machine\Downloads\MobileOK_Analyzer.zip.part
2014-01-16 12:27 - 2014-01-16 12:28 - 00735433 _____ C:\Users\Power Machine\Downloads\fbpostbot.zip
2014-01-15 22:38 - 2014-01-15 22:40 - 03887157 _____ C:\Users\Power Machine\Downloads\SENuke Inferno.zip
2014-01-15 22:36 - 2014-01-15 22:39 - 03887157 _____ C:\Users\Power Machine\Downloads\SENuke_Inferno.zip
2014-01-13 13:55 - 2014-01-13 13:55 - 00000912 _____ C:\Users\Power Machine\Desktop\alert.io.lnk
2014-01-13 13:55 - 2014-01-13 13:55 - 00000892 _____ C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\alert.io.lnk
2014-01-13 13:55 - 2014-01-13 13:55 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\alert.io
2014-01-13 13:55 - 2014-01-13 13:55 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\alert.io
2014-01-13 13:55 - 2014-01-13 13:55 - 00000000 ____D C:\Users\Power Machine\AppData\Local\alertio
2014-01-13 13:38 - 2014-01-13 13:46 - 20335104 _____ C:\Users\Power Machine\Downloads\alertio.msi
2014-01-13 13:01 - 2014-01-13 13:14 - 07568841 _____ C:\Users\Power Machine\Downloads\mention.pkg
==================== One Month Modified Files and Folders =======
2014-01-29 14:55 - 2014-01-29 14:55 - 00023989 _____ C:\Users\Power Machine\Downloads\FRST.txt
2014-01-29 14:55 - 2014-01-29 14:55 - 00000000 ____D C:\FRST
2014-01-29 14:55 - 2012-12-20 18:34 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\NetSpeedMonitor
2014-01-29 14:52 - 2014-01-29 14:52 - 02079744 _____ (Farbar) C:\Users\Power Machine\Downloads\FRST64.exe
2014-01-29 14:37 - 2012-05-29 16:47 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Skype
2014-01-29 14:29 - 2012-12-13 10:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 14:07 - 2012-09-05 20:25 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-29 14:02 - 2012-05-29 18:30 - 00001152 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1444252975-2336746439-1831066985-1000UA.job
2014-01-29 13:26 - 2012-05-29 21:31 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2014-01-29 12:07 - 2012-09-05 20:25 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-29 12:02 - 2012-05-29 18:30 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1444252975-2336746439-1831066985-1000Core.job
2014-01-29 11:43 - 2012-03-09 18:51 - 00737634 _____ C:\Windows\system32\perfh00C.dat
2014-01-29 11:43 - 2012-03-09 18:51 - 00149562 _____ C:\Windows\system32\perfc00C.dat
2014-01-29 11:43 - 2011-04-12 08:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2014-01-29 11:43 - 2011-04-12 08:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2014-01-29 11:43 - 2009-07-14 06:13 - 02507726 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-29 11:42 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-29 11:42 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-29 11:38 - 2012-08-03 23:36 - 00000418 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2014-01-29 11:38 - 2012-05-29 11:55 - 01803666 _____ C:\Windows\WindowsUpdate.log
2014-01-29 11:38 - 2012-05-29 11:55 - 00000000 ____D C:\Users\Power Machine
2014-01-29 11:36 - 2012-05-29 22:33 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\The Bat!
2014-01-29 11:35 - 2014-01-29 11:35 - 00000056 _____ C:\Windows\setupact.log
2014-01-29 11:35 - 2014-01-29 11:35 - 00000000 _____ C:\Windows\setuperr.log
2014-01-29 11:35 - 2013-05-26 21:59 - 00000216 _____ C:\Windows\Tasks\AutoKMS.job
2014-01-29 11:35 - 2012-06-23 16:42 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Dropbox
2014-01-29 11:35 - 2012-05-29 12:15 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-29 11:35 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-28 23:01 - 2014-01-28 23:01 - 00001728 _____ C:\Users\Power Machine\Desktop\TreeSizeFree - Speicher Frei.lnk
2014-01-28 22:52 - 2013-11-04 13:59 - 00001221 _____ C:\Users\Administrator\Desktop\TreeSize Free.lnk
2014-01-28 22:46 - 2013-03-01 12:52 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\HandBrake
2014-01-28 21:35 - 2012-06-01 09:15 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-28 21:23 - 2014-01-28 21:23 - 00000000 ____D C:\Users\Power Machine\Documents\Simply Super Software
2014-01-28 21:22 - 2010-11-21 04:47 - 00523624 _____ C:\Windows\PFRO.log
2014-01-28 21:21 - 2014-01-27 22:47 - 00000000 ____D C:\Program Files (x86)\AmiExt
2014-01-28 07:51 - 2014-01-28 07:51 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-28 07:51 - 2014-01-28 07:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-27 23:48 - 2012-05-29 11:55 - 00000000 ___RD C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-27 23:47 - 2014-01-27 23:47 - 00000000 ____D C:\ProgramData\Licenses
2014-01-27 23:46 - 2014-01-27 23:46 - 00000000 ____D C:\Users\Administrator\Documents\Simply Super Software
2014-01-27 23:46 - 2014-01-27 23:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Simply Super Software
2014-01-27 23:46 - 2014-01-27 23:45 - 00000000 ____D C:\Program Files (x86)\Trojan Remover
2014-01-27 23:45 - 2014-01-27 23:45 - 00001139 _____ C:\Users\Public\Desktop\Trojan Remover.lnk
2014-01-27 23:45 - 2014-01-27 23:45 - 00000000 ____D C:\ProgramData\Simply Super Software
2014-01-27 22:58 - 2014-01-27 22:58 - 01071000 _____ (Solid State Networks) C:\Users\Power Machine\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe
2014-01-27 22:47 - 2014-01-27 22:47 - 00000131 _____ C:\Windows\wininit.ini
2014-01-27 22:47 - 2014-01-27 22:47 - 00000000 ____D C:\Program Files (x86)\Lightspark 0.5.3-git
2014-01-27 18:35 - 2013-11-15 02:34 - 00000000 ____D C:\Users\Power Machine\AppData\Local\CrashDumps
2014-01-27 11:29 - 2013-05-27 09:42 - 00112738 _____ C:\Windows\AutoKMS.log
2014-01-25 23:31 - 2012-05-30 13:41 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\vlc
2014-01-25 19:44 - 2013-08-08 14:04 - 00000000 ____D C:\Program Files (x86)\Garmin
2014-01-25 19:44 - 2013-08-08 13:56 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-25 17:15 - 2013-08-08 19:52 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Garmin
2014-01-25 17:15 - 2013-08-08 14:04 - 00000000 ____D C:\ProgramData\Garmin
2014-01-25 16:45 - 2012-06-09 19:05 - 00000125 ___SH C:\ProgramData\.zreglib
2014-01-25 12:04 - 2012-06-27 07:41 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2014-01-25 11:55 - 2012-06-02 18:48 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Mozilla
2014-01-18 02:48 - 2014-01-18 02:47 - 01703971 _____ C:\Users\Power Machine\Downloads\EmergencyXmasCash1125.zip
2014-01-17 16:13 - 2012-06-02 17:54 - 00000000 ____D C:\Users\Power Machine\dwhelper
2014-01-17 00:41 - 2014-01-16 19:25 - 26467506 _____ C:\Users\Power Machine\Downloads\MobileOK_Analyzer.zip.part
2014-01-17 00:40 - 2014-01-16 19:44 - 11782057 _____ C:\Users\Power Machine\Downloads\3DQRGENERATORPRO.zip.part
2014-01-16 12:28 - 2014-01-16 12:27 - 00735433 _____ C:\Users\Power Machine\Downloads\fbpostbot.zip
2014-01-15 22:40 - 2014-01-15 22:38 - 03887157 _____ C:\Users\Power Machine\Downloads\SENuke Inferno.zip
2014-01-15 22:39 - 2014-01-15 22:36 - 03887157 _____ C:\Users\Power Machine\Downloads\SENuke_Inferno.zip
2014-01-14 17:46 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-13 13:55 - 2014-01-13 13:55 - 00000912 _____ C:\Users\Power Machine\Desktop\alert.io.lnk
2014-01-13 13:55 - 2014-01-13 13:55 - 00000892 _____ C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\alert.io.lnk
2014-01-13 13:55 - 2014-01-13 13:55 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\alert.io
2014-01-13 13:55 - 2014-01-13 13:55 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\alert.io
2014-01-13 13:55 - 2014-01-13 13:55 - 00000000 ____D C:\Users\Power Machine\AppData\Local\alertio
2014-01-13 13:52 - 2012-09-11 22:51 - 00001097 _____ C:\Users\UpdatusUser\Desktop\Keyword Elite 2.0.lnk
2014-01-13 13:52 - 2012-09-11 22:51 - 00001097 _____ C:\Users\Power Machine\Desktop\Keyword Elite 2.0.lnk
2014-01-13 13:52 - 2012-09-11 22:51 - 00001097 _____ C:\Users\Administrator\Desktop\Keyword Elite 2.0.lnk
2014-01-13 13:52 - 2012-09-11 22:50 - 00000000 ____D C:\Program Files (x86)\Keyword Elite 2.0
2014-01-13 13:51 - 2012-11-03 21:49 - 00000000 ____D C:\Users\Power Machine\AppData\Roaming\Keyword Elite 2.0
2014-01-13 13:46 - 2014-01-13 13:38 - 20335104 _____ C:\Users\Power Machine\Downloads\alertio.msi
2014-01-13 13:14 - 2014-01-13 13:01 - 07568841 _____ C:\Users\Power Machine\Downloads\mention.pkg
2014-01-11 00:59 - 2014-01-11 00:58 - 01077516 _____ C:\Users\Power Machine\Downloads\fbpb.rar
2014-01-10 17:11 - 2014-01-10 17:10 - 00587481 _____ C:\Users\Power Machine\Downloads\videohive-5355969-whiteboard-pack-make-your-own-story.zip
2014-01-09 11:39 - 2014-01-09 11:38 - 01159128 _____ C:\Users\Power Machine\Downloads\Offline_Emperor.zip
2014-01-07 12:51 - 2014-01-07 12:50 - 02354642 _____ C:\Users\Power Machine\Downloads\mobiPro_updatev2.zip
2014-01-06 14:03 - 2014-01-06 14:01 - 05124456 _____ C:\Users\Power Machine\Downloads\$100 PER DAY METHOD.zip
2014-01-01 16:42 - 2014-01-01 16:42 - 00001662 _____ C:\Users\Power Machine\Desktop\Arbitrage Underdog.lnk
2014-01-01 16:41 - 2014-01-01 16:39 - 00000000 ____D C:\Program Files (x86)\Arbitrage Underdog
2013-12-30 16:09 - 2013-12-30 16:09 - 00343895 _____ C:\Users\Power Machine\Downloads\trustjacker_nulled.rar
Some content of TEMP:
====================
C:\Users\Power Machine\AppData\Local\Temp\ose00000.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014 01
Ran by Power Machine at 2014-01-29 14:56:03
Running from C:\Users\Power Machine\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Kaspersky Internet Security (Enabled - Up to date) {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
AS: Kaspersky Internet Security (Enabled - Up to date) {95CBD341-38DB-14AC-AF6A-08054B41A339}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
==================== Installed Programs ======================
Leawo Video Converter Version 5.3.0.0 (x32 Version: 5.3.0.0 - Leawo Software Co.,Ltd.)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
AAA Logo 2008 2.10 (x32 Version: - SWGSoft.com)
ActiveTracker (x32 Version: 111031 - Name of your company)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.6 - Adobe Systems)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.2.202.235 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (x32 Version: 7.0 - Adobe Systems, Inc.)
Ahnenblatt 2.74 (x32 Version: 2.74.0.1 - Dirk Boettcher)
alert.io (x32 Version: 1.0.34 - alert.io)
Artweaver Free 3.1 (x32 Version: 3.1 - Boris Eyrich Software)
Biet-O-Matic v2.14.8 (x32 Version: 2.14.8 - BOM Development Team)
Camtasia Studio 6 (x32 Version: 6.0.3 - TechSmith Corporation)
Camtasia Studio 8 (x32 Version: 8.1.2.1344 - TechSmith Corporation)
CCleaner (Version: 4.04 - Piriform)
CloneCD (x32 Version: - SlySoft)
Crimson Editor (remove only) (x32 Version: - )
CrystalDiskInfo 5.5.0 (x32 Version: 5.5.0 - Crystal Dew World)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version: - Microsoft)
DesignPro 5 (x32 Version: 5.5.708 - Avery Dennison)
DesignPro 5 (x32 Version: 5.5.708 - Avery Dennison) Hidden
Dropbox (HKCU Version: 2.0.22 - Dropbox, Inc.)
DruckStudio 1.12.1204.398 (x32 Version: - )
DVD-Cover v.1.5.1.6 (x32 Version: - )
eLecta Live Virtual Room 8.0 (x32 Version: 8.0 - ELECTA COMMUNICATIONS LTD)
Elevated Installer (x32 Version: 2.2.21 - Garmin Ltd or its subsidiaries) Hidden
File Type Assistant (x32 Version: - Trusted Software) <==== ATTENTION
FileZilla Client 3.5.3 (HKCU Version: 3.5.3 - FileZilla Project)
Free File Viewer 2011 (x32 Version: - Bitberry Software)
Garmin BaseCamp (x32 Version: 4.2.5 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.2.21 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (x32 Version: 2.2.21 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.2.21 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (x32 Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
GIMP 2.8.6 (Version: 2.8.6 - The GIMP Team)
GIMP Bundle by Fileparade.com (x32 Version: 1.0.0.0 - SweetPacks LTD) <==== ATTENTION
Google Chrome (HKCU Version: 32.0.1700.102 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Talk Plugin (x32 Version: 4.9.1.16010 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GoToMeeting 5.2.0.952 (HKCU Version: 5.2.0.952 - CitrixOnline)
HandBrake 0.9.8 (x32 Version: 0.9.8 - )
InstallIQ Updater (x32 Version: 1.4.3.0 - W3i, LLC)
Instant Content Curator Pro (x32 Version: 0.60 - Web Dimensions, Inc.)
Instant Content Curator Pro (x32 Version: 0.60 - Web Dimensions, Inc.) Hidden
InstaTrader (x32 Version: 4.00 - MetaQuotes Software Corp.)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab)
Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Hidden
K-Lite Codec Pack 9.4.0 (Basic) (x32 Version: 9.4.0 - )
KompoZer 0.8b3 (x32 Version: - KompoZer)
Lightspark 0.5.3-git (x32 Version: 0.5.3-git - Lightspark Team)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Market Samurai (x32 Version: 0.92.52 - Alliance Software Pty Ltd)
Market Samurai (x32 Version: 0.92.52 - Alliance Software Pty Ltd) Hidden
Media converter (x32 Version: - )
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Deployment Toolkit 2010 Update 1 (5.1.1642.01) (Version: 5.1.1642.1 - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MobileSiteBuilder (x32 Version: 2.0.3 - UNKNOWN)
MobileSiteBuilder (x32 Version: 2.0.3 - UNKNOWN) Hidden
Mozilla Firefox 15.0.1 (x86 de) (x32 Version: 15.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 16.0.1 - Mozilla)
Mozilla Thunderbird 16.0.1 (x86 de) (x32 Version: 16.0.1 - Mozilla)
MyDefrag v4.3.1 (Version: 4.0.0.0 - J.C. Kessels)
NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0 - Florian Gilles)
Nexus 12.2 (x32 Version: - )
Notepad++ (x32 Version: 6.1.5 - )
NVIDIA 3D Vision Controller Driver (x32 Version: 280.19 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 280.19 (Version: 280.19 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 306.97 (Version: 306.97 - NVIDIA Corporation)
NVIDIA Grafiktreiber 306.97 (Version: 306.97 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0697 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
ObjectDock Free (x32 Version: 2.0 - Stardock Corporation)
ObjectDock Free (x32 Version: 2.0 - Stardock Corporation) Hidden
OpenSSL 1.0.1c Light (32-bit) (x32 Version: - OpenSSL Win32 Installer Team)
Opera 12.16 (x32 Version: 12.16.1860 - Opera Software ASA)
PingPlotter Standard 3.40.2s (x32 Version: 3.40.2.5 - Nessoft, LLC)
placemat (x32 Version: 1.0.20 - Infomastery, LLC)
placemat (x32 Version: 1.0.20 - Infomastery, LLC) Hidden
Revo Uninstaller Pro 2.5.9 (Version: 2.5.9 - VS Revo Group, Ltd.)
Skype Click to Call (x32 Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Snagit 10 (x32 Version: 10.0.0 - TechSmith Corporation)
StreamTransport version: 1.0.2.2171 (x32 Version: - )
System Tray Cleaner 3 (x32 Version: - Innovative Solutions)
The Bat! Professional v5.0.30 (x32 Version: 5.0.30 - Ritlabs)
TreeSize Free V2.7 (x32 Version: 2.7 - JAM Software)
Trojan Remover 6.9.0 (x32 Version: 6.9.0 - Simply Super Software)
Universal Extractor 1.6.1 (x32 Version: 1.6.1 - Jared Breland)
Unlocker 1.9.1-x64 (Version: 1.9.1 - Cedrick Collomb)
Update for Microsoft Office 2010 (KB2553065) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2687277) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition (Version: - Microsoft)
VLC media player 2.0.1 (Version: 2.0.1 - VideoLAN)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
VoxOx 2.9.2 (x32 Version: 2.9.2 - VoxOx)
Vuze (x32 Version: 5.1.0.0 - Azureus Software, Inc.)
Web Data Shark! version 1.0 (x32 Version: 1.0 - )
Windows Automated Installation Kit (Version: 2.0.0.0 - Microsoft Corporation)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows Utils (x32 Version: - )
WinRAR 5.00 (64-Bit) (Version: 5.00.0 - win.rar GmbH)
Wireless Keyboard Driver (x32 Version: 1.00.0000 - Author)
XHeader (x32 Version: 1.215 - Intellimon)
==================== Restore Points =========================
Could not list Restore Points. Check WMI.
==================== Scheduled Tasks (whitelisted) =============
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\AutoKMS.job => ?
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1444252975-2336746439-1831066985-1000Core.job => C:\Users\Power Machine\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1444252975-2336746439-1831066985-1000UA.job => C:\Users\Power Machine\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2010-10-04 18:54 - 2010-10-04 18:54 - 00776704 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.dll
2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:A303874F
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/29/2014 02:54:10 PM) (Source: Application Hang) (User: )
Description: Programm FRST64.exe, Version 3.3.10.2 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 19d4
Startzeit: 01cf1cf97c5bfe18
Endzeit: 3
Anwendungspfad: C:\Users\Power Machine\Downloads\FRST64.exe
Berichts-ID: d271e2b3-88ec-11e3-ad72-c86000be79b3
Error: (01/29/2014 00:50:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (01/29/2014 11:37:05 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/28/2014 09:37:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/28/2014 09:24:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/28/2014 02:38:47 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (01/27/2014 04:25:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: thebat.exe, Version: 5.0.30.0, Zeitstempel: 0x4ef9b0b3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce6c3
ID des fehlerhaften Prozesses: 0x1710
Startzeit der fehlerhaften Anwendung: 0xthebat.exe0
Pfad der fehlerhaften Anwendung: thebat.exe1
Pfad des fehlerhaften Moduls: thebat.exe2
Berichtskennung: thebat.exe3
Error: (01/27/2014 02:35:29 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (01/27/2014 11:31:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/26/2014 07:10:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
System errors:
=============
Error: (01/29/2014 11:37:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (01/29/2014 11:37:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (01/28/2014 09:38:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (01/28/2014 09:38:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (01/28/2014 09:24:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (01/28/2014 09:24:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (01/27/2014 11:48:23 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.
Error: (01/27/2014 11:31:25 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (01/27/2014 11:31:25 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (01/26/2014 06:16:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Microsoft Office Sessions:
=========================
Error: (01/29/2014 02:54:10 PM) (Source: Application Hang)(User: )
Description: FRST64.exe3.3.10.219d401cf1cf97c5bfe183C:\Users\Power Machine\Downloads\FRST64.exed271e2b3-88ec-11e3-ad72-c86000be79b3
Error: (01/29/2014 00:50:49 PM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifestc:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifest2
Error: (01/29/2014 11:37:05 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/28/2014 09:37:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/28/2014 09:24:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/28/2014 02:38:47 AM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifestc:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifest2
Error: (01/27/2014 04:25:22 PM) (Source: Application Error)(User: )
Description: thebat.exe5.0.30.04ef9b0b3ntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c3171001cf1b4ad9e7a3b2C:\Program Files (x86)\The Bat!\thebat.exeC:\Windows\SysWOW64\ntdll.dll3c337db7-8767-11e3-a4e7-c86000be79b3
Error: (01/27/2014 02:35:29 PM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifestc:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifest2
Error: (01/27/2014 11:31:12 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/26/2014 07:10:11 PM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifestc:\program files (x86)\activetracker\plugins\outlook\pmoo\adxloader.dll.Manifest2
CodeIntegrity Errors:
===================================
Date: 2013-03-31 16:23:28.035
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\ElbyCDIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-31 16:23:28.015
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\ElbyCDIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-31 16:23:18.771
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\AnyDVD.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-31 16:23:18.755
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\AnyDVD.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-31 16:19:53.558
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\ElbyCDIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-31 16:19:53.541
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\ElbyCDIO.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-29 20:21:52.350
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\ElbyCDFL.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-03-29 20:21:52.334
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\ElbyCDFL.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-06-09 20:04:28.835
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\AnyDVD.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-06-09 20:04:28.835
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\AnyDVD.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 23%
Total physical RAM: 16323.43 MB
Available physical RAM: 12421.16 MB
Total Pagefile: 17321.62 MB
Available Pagefile: 12902.25 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.79 GB) (Free:53.63 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: () (Fixed) (Total:931.51 GB) (Free:104.04 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
|
FRST 32-Bit | FRST 64-Bit
Lesestoff: