Trojaner-Board - TR\BProtector.Gen auf Netbook (Win7) gefunden

Hey cosinus,

danke schon einmal für die schnelle Antwort. Weitere Logfiles habe ich leider nicht - dieser Avira-Scan war alles. Aber hier kommen die FRST-Scans.

FRST:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01 (ATTENTION: ====> FRST version is 28 days old and could be outdated)

Ran by sid (administrator) on SID-PC on 10-04-2014 14:35:40

Running from C:\Users\sid\Desktop

Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe

(Teruten) C:\windows\system32\FsUsbExService.Exe

(Nitro PDF Software) C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

() C:\Program Files\Rainlendar2\Rainlendar2.exe

(Samsung) C:\Program Files\Samsung\Kies\Kies.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe

(Intel Corporation) C:\windows\system32\igfxext.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe

(Intel Corporation) C:\windows\system32\hkcmd.exe

(Intel Corporation) C:\windows\system32\igfxtray.exe

(Intel Corporation) C:\windows\system32\igfxpers.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe

(Adobe Systems, Inc.) C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2010-08-04] (Realtek Semiconductor)

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [1806728 2010-08-30] (ELAN Microelectronics Corp.)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [2433024 2011-08-12] ()

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung)

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564992 2014-02-14] (Samsung)

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [BackgroundContainer] - "C:\windows\system32\Rundll32.exe" "C:\Users\sid\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [Facebook Update] - C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-06] (Facebook Inc.)

AppInit_DLLs: c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll => c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll File Not Found
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN40153320683206132&UM=2&ctid=CT3317892

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com

URLSearchHook: HKLM - RadioTotal1 Toolbar - {422f7661-9403-4da4-b4ef-cc3e268817b5} - C:\Program Files\RadioTotal1\prxtbRadi.dll (Conduit Ltd.)

URLSearchHook: HKCU - RadioTotal1 Toolbar - {422f7661-9403-4da4-b4ef-cc3e268817b5} - C:\Program Files\RadioTotal1\prxtbRadi.dll (Conduit Ltd.)

SearchScopes: HKLM - DefaultScope {1788E2AC-6E3E-4FE9-B2BA-A9D5045FFA89} URL = 

SearchScopes: HKCU - DefaultScope {1788E2AC-6E3E-4FE9-B2BA-A9D5045FFA89} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKCU - {1788E2AC-6E3E-4FE9-B2BA-A9D5045FFA89} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus

SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 

BHO: Claro LTD Helper Object - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - C:\Program Files\Claro LTD\claro\1.8.8.5\bh\claro.dll (Montera Technologeis LTD)

BHO: RadioTotal1 Toolbar - {422f7661-9403-4da4-b4ef-cc3e268817b5} - C:\Program Files\RadioTotal1\prxtbRadi.dll (Conduit Ltd.)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM - Claro LTD Toolbar - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files\Claro LTD\claro\1.8.8.5\claroTlbr.dll (Montera Technologeis LTD)

Toolbar: HKLM - RadioTotal1 Toolbar - {422f7661-9403-4da4-b4ef-cc3e268817b5} - C:\Program Files\RadioTotal1\prxtbRadi.dll (Conduit Ltd.)

Toolbar: HKCU - RadioTotal1 Toolbar - {422F7661-9403-4DA4-B4EF-CC3E268817B5} - C:\Program Files\RadioTotal1\prxtbRadi.dll (Conduit Ltd.)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default

FF Homepage: web.de

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\sid\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF SearchPlugin: C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\searchplugins\claro.xml

FF SearchPlugin: C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\searchplugins\conduit.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-03-29]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-03-29]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-03-29]

FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\

FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ []

FF HKLM\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files\GamesCenter\GamesCenter.xpi

FF Extension: Games Center - C:\Program Files\GamesCenter\GamesCenter.xpi [2013-02-08]

FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\

FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ []
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1520824 2014-03-30] (Microsoft Corporation)

R2 NitroReaderDriverReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [196624 2013-03-26] (Nitro PDF Software)

S4 NOBU; C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2057560 2010-06-01] (Symantec Corporation)

S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

S3 btwampfl; C:\windows\System32\drivers\btwampfl.sys [297000 2010-07-14] (Broadcom Corporation.)

R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-30] (ELAN Microelectronics Corp.)

R3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()

S3 pwdrvio; C:\windows\system32\pwdrvio.sys [15688 2013-09-30] ()

S3 pwdspio; C:\windows\system32\pwdspio.sys [10320 2013-09-30] ()

S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-11-25] (Windows (R) 2003 DDK 3790 provider)

R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-04-10 14:35 - 2014-04-10 14:36 - 00014315 _____ () C:\Users\sid\Desktop\FRST.txt

2014-04-10 14:08 - 2014-04-10 14:35 - 00000000 ____D () C:\FRST

2014-04-10 14:04 - 2014-04-10 14:04 - 01145856 _____ (Farbar) C:\Users\sid\Desktop\FRST.exe

2014-04-10 09:55 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2014-04-10 09:55 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2014-04-10 09:55 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll

2014-04-10 09:55 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys

2014-04-10 09:55 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys

2014-04-10 09:55 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys

2014-04-10 09:55 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll

2014-04-10 09:55 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys

2014-04-09 23:10 - 2014-04-09 23:10 - 00000000 ____D () C:\Users\sid\AppData\Roaming\DropboxMaster

2014-04-06 17:02 - 2014-04-06 17:02 - 00002154 _____ () C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00000000 ___RD () C:\Users\sid\OneDrive

2014-04-06 17:02 - 2014-04-06 17:02 - 00000000 ____D () C:\Program Files\Microsoft OneDrive

2014-04-06 17:01 - 2014-04-06 17:01 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive

2014-04-06 16:46 - 2014-04-10 12:33 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-04-06 16:45 - 2014-04-06 16:45 - 00962240 _____ (Microsoft Corporation) C:\Users\sid\Downloads\Setup.X86.de-DE_O365HomePremRetail_f6b22c05-0cda-4ac6-8aba-3714cb8ce488_TX_DB_.exe

2014-03-29 16:43 - 2014-03-29 16:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-03-28 01:31 - 2014-03-28 23:09 - 00011819 _____ () C:\Users\sid\Desktop\schuhe.odt

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\rezepte

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\pvz

2014-03-26 13:51 - 2014-03-26 13:51 - 04991880 _____ (Canneverbe Limited ) C:\Users\sid\Downloads\cdbxp_setup_4.5.3.4643_minimal.exe

2014-03-26 13:33 - 2014-03-26 13:33 - 00003894 _____ () C:\Users\sid\AppData\Local\recently-used.xbel

2014-03-26 13:21 - 2014-03-26 13:31 - 734937088 _____ () C:\Users\sid\Downloads\KNOPPIX_V7.2.0CD-2013-06-16-DE.iso

2014-03-20 21:47 - 2014-03-20 22:26 - 00022767 _____ () C:\Users\sid\Desktop\Rezept Spinattorte.odt

2014-03-12 12:04 - 2014-03-01 06:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2014-03-12 12:04 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2014-03-12 12:04 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2014-03-12 12:04 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2014-03-12 12:04 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2014-03-12 12:04 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2014-03-12 12:04 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2014-03-12 12:04 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2014-03-12 12:04 - 2014-03-01 05:38 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2014-03-12 12:04 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2014-03-12 12:04 - 2014-03-01 05:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2014-03-12 12:04 - 2014-03-01 05:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2014-03-12 12:04 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2014-03-12 12:04 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2014-03-12 12:04 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2014-03-12 12:04 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2014-03-12 12:04 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2014-03-12 12:04 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2014-03-12 12:04 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2014-03-12 12:04 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2014-03-12 12:04 - 2014-02-07 03:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2014-03-12 12:04 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll

2014-03-12 12:04 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll

2014-03-12 12:04 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll

2014-03-12 12:02 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
 

==================== One Month Modified Files and Folders =======
 

2014-04-10 14:36 - 2014-04-10 14:35 - 00014315 _____ () C:\Users\sid\Desktop\FRST.txt

2014-04-10 14:35 - 2014-04-10 14:08 - 00000000 ____D () C:\FRST

2014-04-10 14:28 - 2010-09-01 03:41 - 02006480 _____ () C:\windows\WindowsUpdate.log

2014-04-10 14:09 - 2009-07-14 06:34 - 00010272 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-04-10 14:09 - 2009-07-14 06:34 - 00010272 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-04-10 14:04 - 2014-04-10 14:04 - 01145856 _____ (Farbar) C:\Users\sid\Desktop\FRST.exe

2014-04-10 14:02 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\rescache

2014-04-10 13:51 - 2012-05-01 10:15 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job

2014-04-10 13:23 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Microsoft.NET

2014-04-10 12:43 - 2012-04-23 19:28 - 00000000 ____D () C:\Users\sid\.rainlendar2

2014-04-10 12:37 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT

2014-04-10 12:35 - 2009-07-14 06:39 - 00148823 _____ () C:\windows\setupact.log

2014-04-10 12:34 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\de-DE

2014-04-10 12:33 - 2014-04-06 16:46 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-04-10 12:32 - 2009-07-14 06:53 - 00032632 _____ () C:\windows\Tasks\SCHEDLGU.TXT

2014-04-10 12:13 - 2013-07-14 11:17 - 00000000 ____D () C:\windows\system32\MRT

2014-04-10 12:04 - 2012-04-27 10:04 - 88028728 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2014-04-10 11:55 - 2013-12-06 15:50 - 00000920 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000UA.job

2014-04-10 01:28 - 2013-02-08 11:06 - 00000000 ___RD () C:\Users\sid\Dropbox

2014-04-09 23:46 - 2013-09-10 04:02 - 00000000 ____D () C:\Users\sid\Desktop\martynczuk

2014-04-09 23:14 - 2013-02-08 11:01 - 00000000 ____D () C:\Users\sid\AppData\Roaming\Dropbox

2014-04-09 23:10 - 2014-04-09 23:10 - 00000000 ____D () C:\Users\sid\AppData\Roaming\DropboxMaster

2014-04-09 23:10 - 2013-02-08 11:02 - 00000000 ____D () C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-04-09 16:11 - 2013-12-06 15:50 - 00000898 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000Core.job

2014-04-09 09:57 - 2011-06-09 19:04 - 00322590 _____ () C:\windows\PFRO.log

2014-04-08 22:01 - 2009-07-26 22:06 - 01622236 _____ () C:\windows\system32\PerfStringBackup.INI

2014-04-07 11:29 - 2013-05-30 09:46 - 00000000 ____D () C:\Users\sid\Desktop\Erasmus

2014-04-07 09:09 - 2011-06-09 17:51 - 00119216 _____ () C:\Users\sid\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-07 09:09 - 2009-07-14 06:33 - 00455792 _____ () C:\windows\system32\FNTCACHE.DAT

2014-04-07 01:11 - 2011-06-10 07:56 - 00000000 ____D () C:\Users\sid\AppData\Roaming\SoftGrid Client

2014-04-06 17:02 - 2014-04-06 17:02 - 00002154 _____ () C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00000000 ___RD () C:\Users\sid\OneDrive

2014-04-06 17:02 - 2014-04-06 17:02 - 00000000 ____D () C:\Program Files\Microsoft OneDrive

2014-04-06 17:02 - 2011-06-09 17:40 - 00000000 ____D () C:\Users\sid

2014-04-06 17:01 - 2014-04-06 17:01 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive

2014-04-06 17:01 - 2010-08-31 12:18 - 00000000 ____D () C:\Program Files\Microsoft Office

2014-04-06 17:00 - 2012-04-24 00:24 - 00000000 ____D () C:\Program Files\Microsoft.NET

2014-04-06 17:00 - 2011-06-10 07:54 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-04-06 17:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-04-06 16:45 - 2014-04-06 16:45 - 00962240 _____ (Microsoft Corporation) C:\Users\sid\Downloads\Setup.X86.de-DE_O365HomePremRetail_f6b22c05-0cda-4ac6-8aba-3714cb8ce488_TX_DB_.exe

2014-03-31 02:13 - 2014-04-10 09:55 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2014-03-31 01:57 - 2014-04-10 09:55 - 17073152 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2014-03-30 16:58 - 2013-10-29 23:25 - 00000000 ____D () C:\Users\sid\Documents\SelfMV

2014-03-30 16:08 - 2012-04-25 11:14 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2014-03-29 16:44 - 2014-03-29 16:43 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-03-28 23:09 - 2014-03-28 01:31 - 00011819 _____ () C:\Users\sid\Desktop\schuhe.odt

2014-03-27 02:22 - 2014-01-15 23:05 - 00000000 ____D () C:\Users\sid\.gimp-2.8

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\rezepte

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\pvz

2014-03-26 19:54 - 2012-12-21 13:48 - 00000000 ____D () C:\Users\sid\Documents\Korrektur

2014-03-26 16:14 - 2012-11-12 23:59 - 00000000 ____D () C:\Users\sid\Documents\bücher

2014-03-26 13:51 - 2014-03-26 13:51 - 04991880 _____ (Canneverbe Limited ) C:\Users\sid\Downloads\cdbxp_setup_4.5.3.4643_minimal.exe

2014-03-26 13:33 - 2014-03-26 13:33 - 00003894 _____ () C:\Users\sid\AppData\Local\recently-used.xbel

2014-03-26 13:33 - 2014-01-16 01:02 - 00000000 ____D () C:\Users\sid\AppData\Local\gtk-2.0

2014-03-26 13:31 - 2014-03-26 13:21 - 734937088 _____ () C:\Users\sid\Downloads\KNOPPIX_V7.2.0CD-2013-06-16-DE.iso

2014-03-26 01:34 - 2012-11-22 08:35 - 00000000 ____D () C:\Users\sid\Documents\Artikel

2014-03-20 22:26 - 2014-03-20 21:47 - 00022767 _____ () C:\Users\sid\Desktop\Rezept Spinattorte.odt

2014-03-19 02:42 - 2011-06-10 08:34 - 00000000 ____D () C:\Users\sid\Documents\Youcam

2014-03-18 17:31 - 2013-09-01 13:11 - 00000000 ____D () C:\Users\sid\Documents\Calibre-Bibliothek

2014-03-16 12:51 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF

2014-03-14 18:14 - 2013-10-06 22:53 - 00000000 ____D () C:\Users\sid\AppData\Roaming\Audacity

2014-03-12 21:53 - 2010-08-31 13:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-03-12 11:51 - 2012-05-01 10:15 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe

2014-03-12 11:51 - 2011-06-09 20:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
 

Some content of TEMP:

====================

C:\Users\admin\AppData\Local\Temp\avgnt.exe

C:\Users\sid\AppData\Local\Temp\avgnt.exe

C:\Users\sid\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp9k33xj.dll
 
 

==================== Bamital & volsnap Check =================
 

C:\windows\explorer.exe => MD5 is legit

C:\windows\system32\winlogon.exe => MD5 is legit

C:\windows\system32\wininit.exe => MD5 is legit

C:\windows\system32\svchost.exe => MD5 is legit

C:\windows\system32\services.exe => MD5 is legit

C:\windows\system32\User32.dll => MD5 is legit

C:\windows\system32\userinit.exe => MD5 is legit

C:\windows\system32\rpcss.dll => MD5 is legit

C:\windows\system32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-04-10 13:46
 

==================== End Of Log ============================

--- --- ---

und Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01

Ran by sid at 2014-04-10 14:37:41

Running from C:\Users\sid\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

2XL Games Launcher (HKLM\...\{7A070AF5-7B32-4BE3-B2EF-06CACAE0188B}) (Version: 1.00.0000 - 2XL Games)

2XL Supercross (HKLM\...\{CED516F1-8EEA-44D1-8BE2-C0B799BE6CDA}) (Version: 1.00.0000 - 2XL Games)

2XL Trophylite Rally (HKLM\...\{CDF27D24-0D51-4F99-A959-8C3E79073401}) (Version: 1.00.0000 - 2XL Games)

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )

Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)

Adobe AIR (Version: 1.5.2.8870 - Adobe Systems Inc.) Hidden

Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)

Allway Sync version 12.15.1 (HKLM\...\Allway Sync_is1) (Version:  - Botkind Inc)

Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.5.0621 - Atheros)

Audacity 2.0.4 (HKLM\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)

BandzPro (HKCU\...\BandzPro) (Version: 1.2.1.0 - WebVentures)

BatteryLifeExtender (HKLM\...\{E308B555-8434-4AF8-B66F-729897C75F93}) (Version: 1.0.6 - Samsung)

Bing Bar (HKLM\...\{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}) (Version: 7.1.361.0 - Microsoft Corporation)

Bing Rewards Client Installer (Version: 16.0.345.0 - Microsoft Corporation) Hidden

Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.44 - Broadcom Corporation)

Cake Mania (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}) (Version:  - Oberon Media)

calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)

Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.1.0.0 - Swiss Academic Software)

Claro toolbar   (HKLM\...\claro) (Version: 1.8.8.5 - Claro LTD) <==== ATTENTION

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3911 - CyberLink Corp.)

CyberLink YouCam (Version: 2.0.3911 - CyberLink Corp.) Hidden

Digitale Bibliothek 3 (HKLM\...\Digitale Bibliothek 3) (Version:  - )

Digitale Bibliothek 5 (HKLM\...\Digitale Bibliothek 5) (Version:  - )

Dropbox (HKCU\...\Dropbox) (Version: 2.6.25 - Dropbox, Inc.)

Easy Content Share (HKLM\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0 - Samsung Electronics Co., LTD)

Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.2 - Samsung Electronics Co., Ltd.)

Easy Network Manager (HKLM\...\{559D1FDB-6D5C-4EF3-8F63-5E1E93A0A244}) (Version: 4.4.1 - Samsung)

Easy Resolution Manager (HKLM\...\{18AA278D-E0B9-4F99-ACCC-070978A38453}) (Version: 1.0.9 - Samsung)

Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.0.15 - Samsung Electronics Co.,Ltd.)

EasyBatteryManager (HKLM\...\{607DA1C8-34EC-4D7A-AD83-F8E5C70736DF}) (Version: 4.0.0.4 - Samsung)

EasyFileShare (HKLM\...\{C4582EED-A3FB-4358-8F3F-8C994460DF28}) (Version: 1.0.3 - Samsung)

ETDWare PS/2-X86 8.0.7.1_WHQL (HKLM\...\Elantech) (Version: 8.0.7.1 - ELAN Microelectronic Corp.)

Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)

Fast Start (HKLM\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 2.2.0.0 - SAMSUNG)

Flip Words (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}) (Version:  - Oberon Media)

Free YouTube to MP3 Converter version 3.12.13.925 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.13.925 - DVDVideoSoft Ltd.)

Freeciv 2.4.1 (GTK+2 client) (HKCU\...\Freeciv-2.4.1-gtk2) (Version:  - )

FreeOCR v4.2 (HKLM\...\freeocr_is1) (Version:  - )

Galapago (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version:  - Oberon Media)

Game Pack (HKLM\...\{D1F6FBBB-B204-459A-9BF8-D06FFAB96CCC}_is1) (Version: 6.3.1.1 - Oberon Media, Inc.)

GamesCenter (HKLM\...\GamesCenter) (Version:  - GamesCenter)

GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)

Grewe Scanner-Interface 7 (HKLM\...\{B1C3F49A-DE7D-1AC1-0913-039C1A8B9B82}) (Version: 7 - Grewe Computertechnik GmbH)

Hedgewars (HKLM\...\hedgewars) (Version: 0.9.19 - Hedgewars Project)

Insaniquarium Deluxe (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110245793}) (Version:  - Oberon Media)

Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Kreuzworträtsel Freeware (HKLM\...\Kreuzworträtsel Freeware) (Version:  - )

Kudos Rock Legend Demo (HKLM\...\Kudos Rock Legend Demo_is1) (Version:  - Positech Games)

lexiCan 3 (HKLM\...\{80E7CB77-E445-4BB4-A836-67A447ABEAE6}) (Version: 3.2.0 - vetafab Software GmbH)

Mahjong Escape Ancient China (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}) (Version:  - Oberon Media)

Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.24.27.3 - Marvell)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden

Microsoft Default Manager (Version: 2.2.114.0 - Microsoft Corporation) Hidden

Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4605.1003 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4023.1211 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

MiniTool Partition Wizard Home Edition 8.1.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)

Movie Color Enhancer (HKLM\...\{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D}) (Version: 1.0 - Samsung Electronics Co., Ltd.)

Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MultimediaPOP (HKLM\...\{331ECF61-69AF-4F57-AC35-AFED610231C3}) (Version: 1.1 - )

MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )

Nitro Reader 3 (HKLM\...\{171478A8-80AD-4295-A2D1-C3D8AE70C9F1}) (Version: 3.5.2.10 - Nitro)

Norton Online Backup (HKLM\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)

Office 15 Click-to-Run Extensibility Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden

OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)

PDF OCR 4.3.1 (HKLM\...\{3D122AF9-1E02-4035-8003-334D378C1B62}_is1) (Version:  - PDF OCR)

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.3.2 - Frank Heindörfer, Philip Chinery)

RadioTotal1 Toolbar for IE (HKLM\...\IECT3317892) (Version: 6.17.2.8 - RadioTotal1)

Rainlendar2 (remove only) (HKLM\...\Rainlendar2) (Version:  - )

Readiris Pro 10 (HKLM\...\{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}) (Version:  - )

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6171 - Realtek Semiconductor Corp.)

Samsung AnyWeb Print (HKLM\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 1.1.19.0 - Samsung Electronics Co., Ltd.)

Samsung AnyWeb Print (Version: 1.0 - Samsung Electronics Co., Ltd.) Hidden

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden

Samsung Recovery Solution 5 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 5.0.0.7 - Samsung)

Samsung Story Album Viewer (HKLM\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)

Samsung Story Album Viewer (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden

Samsung Support Center (HKLM\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.1.18 - Samsung)

Samsung Theme Designer (HKLM\...\{3B27E8C6-2971-41FD-89B7-6C5F46CE2CA1}) (Version: 2.0.4.3918 - Samsung)

Samsung Universal Print Driver (HKLM\...\Samsung Universal Print Driver) (Version: 2.01.06.00:16 - Samsung Electronics Co., Ltd.)

Samsung Universal Scan Driver (HKLM\...\Samsung Universal Scan Driver) (Version: 1.2.6.0 - Samsung Electronics Co., Ltd.)

Samsung Update Plus (HKLM\...\{142D8CA7-2C6F-45A7-83E3-099AAFD99133}) (Version: 3.0.0.17 - Samsung Electronics Co., Ltd.)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.34.0 - SAMSUNG Electronics Co., Ltd.)

Scan2PDF 1.6 (HKLM\...\Scan2PDF_is1) (Version:  - Koma-Code)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Slingo (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110160733}) (Version:  - Oberon Media)

SmarThru 4 (HKLM\...\{90F1943D-EA4A-4460-B59F-30023F3BA69A}) (Version:  - Samsung Electronics Co., Ltd.)

SRS Premium Sound Control Panel (HKLM\...\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}) (Version: 1.8.7900 - SRS Labs, Inc.)

User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )

VIS (HKLM\...\VIS) (Version:  - ) <==== ATTENTION

VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)

WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.6200 - Broadcom Corporation)

Windows Live Call (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live Family Safety (Version: 14.0.8118.427 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows Live Mail (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Movie Maker (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

Windows Live Writer (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

XMind 2013 (v3.4.0) (HKLM\...\XMind_is1) (Version: 3.4.0.201311050558 - XMind Ltd.)
 

==================== Restore Points  =========================
 

08-04-2014 07:25:13 Windows Update

10-04-2014 10:02:33 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0A9EEABE-2593-4EE2-9801-F0C84F6E4FBC} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2010-08-20] (Samsung Electronics Co., Ltd.)

Task: {0F339180-DC9E-4722-9FDF-C74E2B5F61A8} - System32\Tasks\MovieColorEnhancer => C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-08-19] (Samsung Electronics Co., Ltd.)

Task: {3B88E9FF-4A8B-4B6F-AAFC-3923858D6EA7} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000Core => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-12-06] (Facebook Inc.)

Task: {4038073E-F872-4690-92BA-C5B08A8DF04D} - System32\Tasks\advSRS5 => C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-08-11] (SEC)

Task: {41B4741F-9502-441C-8073-181DD6C2C194} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2010-07-30] (SAMSUNG Electronics)

Task: {47C900E8-CEB1-4459-99FF-FDF4F26699C3} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)

Task: {4DF56C9D-44F1-4BB5-BB48-F6E7B710A6F7} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-08-27] (Samsung Electronics)

Task: {56EAA00A-C0A1-488D-B025-BCFAC5D1BC46} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)

Task: {5B2F11F9-05F3-484A-AB92-23E576FEEB52} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000UA => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-12-06] (Facebook Inc.)

Task: {740DB2B7-C611-4DB5-A7AF-AD2A51EFC06B} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-08-05] (Samsung Electronics)

Task: {972051A9-3EF7-4076-9499-67EF8C5664BF} - System32\Tasks\IdlePowerSave => C:\windows\Idle\DetectIdleTask.exe [2010-07-31] (TODO: <회사 이름>)

Task: {9D85297D-4C2A-485F-9AEA-C7781BC904CC} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-09] (Microsoft Corporation)

Task: {9EBEDE78-8449-406B-9BA3-3CC4DA59171C} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)

Task: {A1C6582C-9CCE-40A1-A608-7CA953A66089} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-08-12] (Samsung Electronics. Co. Ltd.)

Task: {BF30A781-73D9-4F80-A04F-25078E4DC32D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {D0EDF262-11DA-4C73-BE98-C2F35D7F582D} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\sid\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000Core.job => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000UA.job => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-06-09 17:42 - 2008-06-05 01:53 - 00026624 _____ () C:\windows\System32\spd__l.dll

2012-11-15 09:08 - 2012-09-19 20:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll

2014-04-06 16:46 - 2013-10-31 18:14 - 00077992 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll

2014-04-06 16:46 - 2014-03-25 07:08 - 00420008 _____ () C:\Program Files\Microsoft Office 15\ClientX86\StreamServer.dll

2010-08-31 12:21 - 2010-07-05 12:42 - 00203776 _____ () C:\Program Files\Samsung\Movie Color Enhancer\WinCRT.dll

2011-08-12 07:45 - 2011-08-12 07:45 - 02433024 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe

2010-05-23 20:20 - 2010-05-23 20:20 - 00126976 _____ () C:\Program Files\Rainlendar2\lua51.dll

2011-08-12 07:45 - 2011-08-12 07:45 - 00198144 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll

2010-05-23 20:20 - 2010-05-23 20:20 - 00012288 _____ () C:\Program Files\Rainlendar2\lfs.dll

2014-03-01 10:57 - 2014-03-01 10:57 - 00186368 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\54ec07eda8e35b5b1087518e32150b0a\Kies.Common.DeviceServiceLib.Interface.ni.dll

2014-03-01 14:23 - 2014-03-01 14:23 - 15015936 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\f5dde8d25236f0ef7f4f9d2b6247d680\Kies.Theme.ni.dll

2014-03-01 10:56 - 2014-03-01 10:56 - 01865216 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\02ef03b670b936601b774672ddef586b\Kies.UI.ni.dll

2014-03-01 10:56 - 2014-03-01 10:56 - 00081920 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\829f06cbfd6e0be30a83b99448a1688f\Kies.MVVM.ni.dll

2014-03-01 14:22 - 2014-03-01 14:22 - 00236032 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll

2010-08-31 12:05 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll

2014-03-29 16:44 - 2014-03-29 16:44 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

2010-08-31 11:58 - 2010-05-07 16:22 - 01636864 _____ () C:\Program Files\Samsung\Samsung Recovery Solution 5\Resdll.dll

2014-03-12 11:51 - 2014-03-12 11:51 - 16276872 _____ () C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: NOBU => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\windows\pss\Bluetooth.lnk.CommonStartup

MSCONFIG\startupreg: KiesAirMessage => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup

MSCONFIG\startupreg: KiesPreload => C:\Program Files\Samsung\Kies\Kies.exe /preload

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device

Description: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Broadcom

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/10/2014 02:00:04 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (04/10/2014 01:55:21 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"2" in Zeile  Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"3.

Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.

Verweis: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition: Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 

Error: (04/10/2014 01:51:50 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 

Error: (04/10/2014 01:51:39 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (04/10/2014 01:49:01 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (04/10/2014 01:48:55 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (04/10/2014 01:47:04 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (04/10/2014 00:32:34 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: svchost.exe_LanmanServer, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000

ID des fehlerhaften Prozesses: 0x40c

Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_LanmanServer0

Pfad der fehlerhaften Anwendung: svchost.exe_LanmanServer1

Pfad des fehlerhaften Moduls: svchost.exe_LanmanServer2

Berichtskennung: svchost.exe_LanmanServer3
 

Error: (04/06/2014 07:00:04 PM) (Source: Windows Backup) (User: )

Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "F:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
 

Error: (04/06/2014 06:16:49 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 
 

System errors:

=============

Error: (04/10/2014 00:38:59 PM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (04/10/2014 00:37:17 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%20
 

Error: (04/10/2014 00:37:03 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Audio" wurde nicht richtig gestartet.
 

Error: (04/10/2014 00:34:50 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)

Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b
 

Error: (04/10/2014 00:34:14 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/10/2014 00:34:14 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Designs" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/10/2014 00:34:14 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Shellhardwareerkennung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/10/2014 00:34:14 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Benachrichtigungsdienst für Systemereignisse" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/10/2014 00:34:14 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Aufgabenplanung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/10/2014 00:34:14 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Benutzerprofildienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

Microsoft Office Sessions:

=========================

Error: (04/10/2014 02:00:04 PM) (Source: SideBySide)(User: )

Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Samsung\easy display manager\RunGfxUI64.exe
 

Error: (04/10/2014 01:55:21 PM) (Source: SideBySide)(User: )

Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"c:\program files\Samsung\Kies\External\firmwareupdate\GT-S5363\DeviceController64.exec:\program files\Samsung\Kies\External\firmwareupdate\GT-S5363\Microsoft.VC90.CRT.MANIFEST11
 

Error: (04/10/2014 01:51:50 PM) (Source: SideBySide)(User: )

Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
 

Error: (04/10/2014 01:51:39 PM) (Source: SideBySide)(User: )

Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Samsung\BatteryLifeExtender\Drv\SABI2x64\KStartMem.exe.Manifest
 

Error: (04/10/2014 01:49:01 PM) (Source: SideBySide)(User: )

Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Samsung\EasyFileShare\Drv\SABI2x64\KStartMem.exe.Manifest
 

Error: (04/10/2014 01:48:55 PM) (Source: SideBySide)(User: )

Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Samsung\Samsung Support Center\Drv\drv2x64\KStartMem.exe.Manifest
 

Error: (04/10/2014 01:47:04 PM) (Source: SideBySide)(User: )

Description: Microsoft.VC90.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\2XL Games\2XL Trophylite Rally\data\geo\UIElementID.exe
 

Error: (04/10/2014 00:32:34 PM) (Source: Application Error)(User: )

Description: svchost.exe_LanmanServer6.1.7600.163854a5bc100unknown0.0.0.000000000c00000050000000040c01cf54a81c506928C:\windows\system32\svchost.exeunknown6d4731ba-c09b-11e3-bc85-002454fef13e
 

Error: (04/06/2014 07:00:04 PM) (Source: Windows Backup)(User: )

Description: F:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
 

Error: (04/06/2014 06:16:49 PM) (Source: SideBySide)(User: )

Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Samsung\easy display manager\RunGfxUI64.exe
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 52%

Total physical RAM: 2037.3 MB

Available physical RAM: 976.22 MB

Total Pagefile: 4074.59 MB

Available Pagefile: 2602.53 MB

Total Virtual: 2047.88 MB

Available Virtual: 1898.17 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:87 GB) (Free:15.59 GB) NTFS

Drive d: () (Fixed) (Total:130.1 GB) (Free:92.47 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 233 GB) (Disk ID: 10B02F7F)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=87 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=130 GB) - (Type=OF Extended)

Partition 4: (Not Active) - (Size=16 GB) - (Type=27)
 

==================== End Of Log ============================

Alles klar. hier kommen die Lgfiles.

Adware:

Code:

# AdwCleaner v3.023 - Bericht erstellt am 10/04/2014 um 14:59:56

# Aktualisiert 01/04/2014 von Xplode

# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)

# Benutzername : sid - SID-PC

# Gestartet von : C:\Users\sid\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\Conduit

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

Ordner Gelöscht : C:\Program Files\Claro LTD

Ordner Gelöscht : C:\Program Files\Conduit

Ordner Gelöscht : C:\Program Files\GreenTree Applications

Ordner Gelöscht : C:\Program Files\myfree codec

Ordner Gelöscht : C:\Program Files\RadioTotal1

Ordner Gelöscht : C:\Program Files\Common Files\DVDVideoSoft\TB

Ordner Gelöscht : C:\windows\system32\BrowserProtect

Ordner Gelöscht : C:\Users\sid\AppData\Local\Conduit

Ordner Gelöscht : C:\Users\sid\AppData\Local\DownloadGuide

Ordner Gelöscht : C:\Users\sid\AppData\Local\Ilivid Player

Ordner Gelöscht : C:\Users\sid\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\sid\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\sid\AppData\LocalLow\RadioTotal1

Ordner Gelöscht : C:\Users\sid\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\sid\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\sid\AppData\Roaming\pdfforge

Ordner Gelöscht : C:\Users\sid\AppData\Roaming\Windows Net Data

Ordner Gelöscht : C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect

Ordner Gelöscht : C:\Users\sid\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\bprotector_extensions.sqlite

Datei Gelöscht : C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\searchplugins\claro.xml

Datei Gelöscht : C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\searchplugins\Conduit.xml

Datei Gelöscht : C:\windows\System32\Tasks\BackgroundContainer Startup Task
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D0EDF262-11DA-4C73-BE98-C2F35D7F582D}

[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0EDF262-11DA-4C73-BE98-C2F35D7F582D}

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\claro.claroappCore

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\claro.claroappCore.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\claro.clarodskBnd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\claro.clarodskBnd.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\claro.claroHlpr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\claro.claroHlpr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.claroESrvc

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.claroESrvc.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Schlüssel Gelöscht : HKCU\Software\5eedfd1b434be41

Schlüssel Gelöscht : HKLM\SOFTWARE\5eedfd1b434be41

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3317892

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bandzpro_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bandzpro_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05340575-7D2A-4266-9A84-7EEBDC476884}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97C47A30-3CFB-474B-94E3-6019A7EE0610}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE4FC43F-84CE-4E20-88C2-2188525B47FB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F398D871-ED00-42A8-BEAA-0209E9E59FCC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{422F7661-9403-4DA4-B4EF-CC3E268817B5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ED8F1591-D34F-4B4A-B8BE-7FC3B55536D0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{16466D47-74A8-4928-B8B2-07CD79ABFC9F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{26D5CC0A-7A46-4D86-AF45-2EFA320B0C54}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2D13AC8F-037E-40C5-ADA6-231BA74EA2F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{322EDCF5-9E7D-4021-8C67-F3FFE4961A38}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3E254398-828F-4D51-A39E-3F6B6D96A12C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{442DAF0C-7EAD-48D9-ABEA-E0036470D6D5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{58EB187D-24F8-4423-BD6C-655CE4C416BD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6BEB066C-A791-4A21-B934-7783533FE888}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A07612DF-B1DD-484F-A1C3-36CA4CE919D2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A76F97B2-2C56-456A-A29E-72741595C2E8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B19D9D96-E59C-4936-B283-8A831CDB3A53}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC8AAABA-3F8B-4866-8B3A-D9368133A478}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E15519AE-99BE-42DD-BE60-FFC3C183F443}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A903AC15-686E-4D67-A355-86FCBE9F60DA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{CCC3E766-7BA9-4629-AC1A-7F4B7F362E65}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{422F7661-9403-4DA4-B4EF-CC3E268817B5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{422F7661-9403-4DA4-B4EF-CC3E268817B5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{422F7661-9403-4DA4-B4EF-CC3E268817B5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED8F1591-D34F-4B4A-B8BE-7FC3B55536D0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{60295942-9E5F-4EE8-B785-3A655904D24F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48693EAD-D916-4A22-82A5-653415B69AFD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D48F6A66-A8FE-4952-8277-3F208DADBE4D}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9E131A93-EED7-4BEB-B015-A0ADB30B5646}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{422F7661-9403-4DA4-B4EF-CC3E268817B5}]

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\Claro LTD

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\DataMngr

[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar

Schlüssel Gelöscht : HKCU\Software\Myfree Codec

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainer

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\RadioTotal1

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\Software\Claro LTD

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Myfree Codec

Schlüssel Gelöscht : HKLM\Software\RadioTotal1

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\claro

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16521
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v28.0 (de)
 

[ Datei : C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.claro.admin", false);

Zeile gelöscht : user_pref("extensions.claro.aflt", "babsst");

Zeile gelöscht : user_pref("extensions.claro.appId", "{C3110516-8EFC-49D6-8B72-69354F332062}");

Zeile gelöscht : user_pref("extensions.claro.autoRvrt", "false");

Zeile gelöscht : user_pref("extensions.claro.dfltLng", "en");

Zeile gelöscht : user_pref("extensions.claro.excTlbr", false);

Zeile gelöscht : user_pref("extensions.claro.id", "581808b0000000000000001bb1a72118");

Zeile gelöscht : user_pref("extensions.claro.instlDay", "15744");

Zeile gelöscht : user_pref("extensions.claro.instlRef", "sst");

Zeile gelöscht : user_pref("extensions.claro.prdct", "claro");

Zeile gelöscht : user_pref("extensions.claro.prtnrId", "claro");

Zeile gelöscht : user_pref("extensions.claro.rvrt", "false");

Zeile gelöscht : user_pref("extensions.claro.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.claro.tlbrSrchUrl", "");

Zeile gelöscht : user_pref("extensions.claro.vrsn", "1.8.8.5");

Zeile gelöscht : user_pref("extensions.claro.vrsni", "1.8.8.5");

Zeile gelöscht : user_pref("extensions.claro_i.excTlbr", false);

Zeile gelöscht : user_pref("extensions.claro_i.newTab", false);

Zeile gelöscht : user_pref("extensions.claro_i.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.claro_i.vrsnTs", "1.8.8.514:41:38");
 

*************************
 

AdwCleaner[R0].txt - [15025 octets] - [10/04/2014 14:56:54]

AdwCleaner[S0].txt - [14790 octets] - [10/04/2014 14:59:56]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14851 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 7 Starter x86

Ran by sid on 10.04.2014 at 15:11:13,75

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2825776248-3651122352-3316412646-1000\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1788E2AC-6E3E-4FE9-B2BA-A9D5045FFA89}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\sid\AppData\Roaming\mozilla\firefox\profiles\1wddgyat.default\minidumps [296 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 10.04.2014 at 15:20:30,94

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01 (ATTENTION: ====> FRST version is 28 days old and could be outdated)

Ran by sid (administrator) on SID-PC on 10-04-2014 15:23:58

Running from C:\Users\sid\Desktop

Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe

(Teruten) C:\windows\system32\FsUsbExService.Exe

(Nitro PDF Software) C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

() C:\Program Files\Rainlendar2\Rainlendar2.exe

(Samsung) C:\Program Files\Samsung\Kies\Kies.exe

(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe

(Intel Corporation) C:\windows\system32\igfxext.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Intel Corporation) C:\windows\system32\hkcmd.exe

(Intel Corporation) C:\windows\system32\igfxtray.exe

(Intel Corporation) C:\windows\system32\igfxpers.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2010-08-04] (Realtek Semiconductor)

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [1806728 2010-08-30] (ELAN Microelectronics Corp.)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [2433024 2011-08-12] ()

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung)

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564992 2014-02-14] (Samsung)

HKU\S-1-5-21-2825776248-3651122352-3316412646-1000\...\Run: [Facebook Update] - C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-06] (Facebook Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com

SearchScopes: HKLM - DefaultScope value is missing.

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default

FF Homepage: web.de

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\sid\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\sid\AppData\Roaming\Mozilla\Firefox\Profiles\1wddgyat.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-03-29]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-03-29]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-03-29]

FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\

FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ []

FF HKLM\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files\GamesCenter\GamesCenter.xpi

FF Extension: Games Center - C:\Program Files\GamesCenter\GamesCenter.xpi [2013-02-08]
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1520824 2014-03-30] (Microsoft Corporation)

R2 NitroReaderDriverReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [196624 2013-03-26] (Nitro PDF Software)

S4 NOBU; C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2057560 2010-06-01] (Symantec Corporation)

S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

S3 btwampfl; C:\windows\System32\drivers\btwampfl.sys [297000 2010-07-14] (Broadcom Corporation.)

R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [100744 2010-08-30] (ELAN Microelectronics Corp.)

R3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()

S3 pwdrvio; C:\windows\system32\pwdrvio.sys [15688 2013-09-30] ()

S3 pwdspio; C:\windows\system32\pwdspio.sys [10320 2013-09-30] ()

S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-11-25] (Windows (R) 2003 DDK 3790 provider)

R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-04-10 15:23 - 2014-04-10 15:23 - 00011316 _____ () C:\Users\sid\Desktop\FRST.txt

2014-04-10 15:20 - 2014-04-10 15:20 - 00001213 _____ () C:\Users\sid\Desktop\JRT.txt

2014-04-10 15:11 - 2014-04-10 15:11 - 00000000 ____D () C:\windows\ERUNT

2014-04-10 15:09 - 2014-04-10 15:09 - 01016261 _____ (Thisisu) C:\Users\sid\Desktop\JRT.exe

2014-04-10 15:06 - 2014-04-10 15:07 - 00000000 ____D () C:\Users\sid\Desktop\TB

2014-04-10 14:56 - 2014-04-10 15:00 - 00000000 ____D () C:\AdwCleaner

2014-04-10 14:08 - 2014-04-10 15:23 - 00000000 ____D () C:\FRST

2014-04-10 14:04 - 2014-04-10 14:04 - 01145856 _____ (Farbar) C:\Users\sid\Desktop\FRST.exe

2014-04-10 09:55 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2014-04-10 09:55 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2014-04-10 09:55 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll

2014-04-10 09:55 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys

2014-04-10 09:55 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys

2014-04-10 09:55 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys

2014-04-10 09:55 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll

2014-04-10 09:55 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys

2014-04-09 23:10 - 2014-04-09 23:10 - 00000000 ____D () C:\Users\sid\AppData\Roaming\DropboxMaster

2014-04-06 17:02 - 2014-04-10 14:54 - 00002154 _____ () C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-10 14:54 - 00000000 ___RD () C:\Users\sid\OneDrive

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00000000 ____D () C:\Program Files\Microsoft OneDrive

2014-04-06 17:01 - 2014-04-06 17:01 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive

2014-04-06 16:46 - 2014-04-10 12:33 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-04-06 16:45 - 2014-04-06 16:45 - 00962240 _____ (Microsoft Corporation) C:\Users\sid\Downloads\Setup.X86.de-DE_O365HomePremRetail_f6b22c05-0cda-4ac6-8aba-3714cb8ce488_TX_DB_.exe

2014-03-29 16:43 - 2014-03-29 16:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-03-28 01:31 - 2014-03-28 23:09 - 00011819 _____ () C:\Users\sid\Desktop\schuhe.odt

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\rezepte

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\pvz

2014-03-26 13:51 - 2014-03-26 13:51 - 04991880 _____ (Canneverbe Limited ) C:\Users\sid\Downloads\cdbxp_setup_4.5.3.4643_minimal.exe

2014-03-26 13:33 - 2014-03-26 13:33 - 00003894 _____ () C:\Users\sid\AppData\Local\recently-used.xbel

2014-03-26 13:21 - 2014-03-26 13:31 - 734937088 _____ () C:\Users\sid\Downloads\KNOPPIX_V7.2.0CD-2013-06-16-DE.iso

2014-03-20 21:47 - 2014-03-20 22:26 - 00022767 _____ () C:\Users\sid\Desktop\Rezept Spinattorte.odt

2014-03-12 12:04 - 2014-03-01 06:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2014-03-12 12:04 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2014-03-12 12:04 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2014-03-12 12:04 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2014-03-12 12:04 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2014-03-12 12:04 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2014-03-12 12:04 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2014-03-12 12:04 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2014-03-12 12:04 - 2014-03-01 05:38 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2014-03-12 12:04 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2014-03-12 12:04 - 2014-03-01 05:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2014-03-12 12:04 - 2014-03-01 05:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2014-03-12 12:04 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2014-03-12 12:04 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2014-03-12 12:04 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2014-03-12 12:04 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2014-03-12 12:04 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2014-03-12 12:04 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2014-03-12 12:04 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2014-03-12 12:04 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2014-03-12 12:04 - 2014-02-07 03:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2014-03-12 12:04 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll

2014-03-12 12:04 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll

2014-03-12 12:04 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll

2014-03-12 12:02 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
 

==================== One Month Modified Files and Folders =======
 

2014-04-10 15:24 - 2014-04-10 15:23 - 00011316 _____ () C:\Users\sid\Desktop\FRST.txt

2014-04-10 15:23 - 2014-04-10 14:08 - 00000000 ____D () C:\FRST

2014-04-10 15:20 - 2014-04-10 15:20 - 00001213 _____ () C:\Users\sid\Desktop\JRT.txt

2014-04-10 15:11 - 2014-04-10 15:11 - 00000000 ____D () C:\windows\ERUNT

2014-04-10 15:11 - 2009-07-14 06:34 - 00010272 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-04-10 15:11 - 2009-07-14 06:34 - 00010272 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-04-10 15:09 - 2014-04-10 15:09 - 01016261 _____ (Thisisu) C:\Users\sid\Desktop\JRT.exe

2014-04-10 15:07 - 2014-04-10 15:06 - 00000000 ____D () C:\Users\sid\Desktop\TB

2014-04-10 15:05 - 2012-04-23 19:28 - 00000000 ____D () C:\Users\sid\.rainlendar2

2014-04-10 15:02 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT

2014-04-10 15:02 - 2009-07-14 06:39 - 00148879 _____ () C:\windows\setupact.log

2014-04-10 15:01 - 2011-06-09 19:04 - 00328306 _____ () C:\windows\PFRO.log

2014-04-10 15:01 - 2010-09-01 03:41 - 02015931 _____ () C:\windows\WindowsUpdate.log

2014-04-10 15:00 - 2014-04-10 14:56 - 00000000 ____D () C:\AdwCleaner

2014-04-10 14:55 - 2013-12-06 15:50 - 00000920 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000UA.job

2014-04-10 14:55 - 2013-12-06 15:50 - 00000898 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000Core.job

2014-04-10 14:54 - 2014-04-06 17:02 - 00002154 _____ () C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-10 14:54 - 2014-04-06 17:02 - 00000000 ___RD () C:\Users\sid\OneDrive

2014-04-10 14:54 - 2011-06-09 17:40 - 00000000 ____D () C:\Users\sid

2014-04-10 14:51 - 2012-05-01 10:15 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job

2014-04-10 14:04 - 2014-04-10 14:04 - 01145856 _____ (Farbar) C:\Users\sid\Desktop\FRST.exe

2014-04-10 14:02 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\rescache

2014-04-10 13:23 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Microsoft.NET

2014-04-10 12:34 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\de-DE

2014-04-10 12:33 - 2014-04-06 16:46 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-04-10 12:32 - 2009-07-14 06:53 - 00032632 _____ () C:\windows\Tasks\SCHEDLGU.TXT

2014-04-10 12:13 - 2013-07-14 11:17 - 00000000 ____D () C:\windows\system32\MRT

2014-04-10 12:04 - 2012-04-27 10:04 - 88028728 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2014-04-10 01:28 - 2013-02-08 11:06 - 00000000 ___RD () C:\Users\sid\Dropbox

2014-04-09 23:46 - 2013-09-10 04:02 - 00000000 ____D () C:\Users\sid\Desktop\martynczuk

2014-04-09 23:14 - 2013-02-08 11:01 - 00000000 ____D () C:\Users\sid\AppData\Roaming\Dropbox

2014-04-09 23:10 - 2014-04-09 23:10 - 00000000 ____D () C:\Users\sid\AppData\Roaming\DropboxMaster

2014-04-09 23:10 - 2013-02-08 11:02 - 00000000 ____D () C:\Users\sid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-04-08 22:01 - 2009-07-26 22:06 - 01622236 _____ () C:\windows\system32\PerfStringBackup.INI

2014-04-07 11:29 - 2013-05-30 09:46 - 00000000 ____D () C:\Users\sid\Desktop\Erasmus

2014-04-07 09:09 - 2011-06-09 17:51 - 00119216 _____ () C:\Users\sid\AppData\Local\GDIPFONTCACHEV1.DAT

2014-04-07 09:09 - 2009-07-14 06:33 - 00455792 _____ () C:\windows\system32\FNTCACHE.DAT

2014-04-07 01:11 - 2011-06-10 07:56 - 00000000 ____D () C:\Users\sid\AppData\Roaming\SoftGrid Client

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

2014-04-06 17:02 - 2014-04-06 17:02 - 00000000 ____D () C:\Program Files\Microsoft OneDrive

2014-04-06 17:01 - 2014-04-06 17:01 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive

2014-04-06 17:01 - 2010-08-31 12:18 - 00000000 ____D () C:\Program Files\Microsoft Office

2014-04-06 17:00 - 2012-04-24 00:24 - 00000000 ____D () C:\Program Files\Microsoft.NET

2014-04-06 17:00 - 2011-06-10 07:54 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER

2014-04-06 17:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-04-06 16:45 - 2014-04-06 16:45 - 00962240 _____ (Microsoft Corporation) C:\Users\sid\Downloads\Setup.X86.de-DE_O365HomePremRetail_f6b22c05-0cda-4ac6-8aba-3714cb8ce488_TX_DB_.exe

2014-03-31 02:13 - 2014-04-10 09:55 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2014-03-31 01:57 - 2014-04-10 09:55 - 17073152 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2014-03-30 16:58 - 2013-10-29 23:25 - 00000000 ____D () C:\Users\sid\Documents\SelfMV

2014-03-30 16:08 - 2012-04-25 11:14 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2014-03-29 16:44 - 2014-03-29 16:43 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-03-28 23:09 - 2014-03-28 01:31 - 00011819 _____ () C:\Users\sid\Desktop\schuhe.odt

2014-03-27 02:22 - 2014-01-15 23:05 - 00000000 ____D () C:\Users\sid\.gimp-2.8

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\rezepte

2014-03-26 19:55 - 2014-03-26 19:55 - 00000000 ____D () C:\Users\sid\Documents\pvz

2014-03-26 19:54 - 2012-12-21 13:48 - 00000000 ____D () C:\Users\sid\Documents\Korrektur

2014-03-26 16:14 - 2012-11-12 23:59 - 00000000 ____D () C:\Users\sid\Documents\bücher

2014-03-26 13:51 - 2014-03-26 13:51 - 04991880 _____ (Canneverbe Limited ) C:\Users\sid\Downloads\cdbxp_setup_4.5.3.4643_minimal.exe

2014-03-26 13:33 - 2014-03-26 13:33 - 00003894 _____ () C:\Users\sid\AppData\Local\recently-used.xbel

2014-03-26 13:33 - 2014-01-16 01:02 - 00000000 ____D () C:\Users\sid\AppData\Local\gtk-2.0

2014-03-26 13:31 - 2014-03-26 13:21 - 734937088 _____ () C:\Users\sid\Downloads\KNOPPIX_V7.2.0CD-2013-06-16-DE.iso

2014-03-26 01:34 - 2012-11-22 08:35 - 00000000 ____D () C:\Users\sid\Documents\Artikel

2014-03-20 22:26 - 2014-03-20 21:47 - 00022767 _____ () C:\Users\sid\Desktop\Rezept Spinattorte.odt

2014-03-19 02:42 - 2011-06-10 08:34 - 00000000 ____D () C:\Users\sid\Documents\Youcam

2014-03-18 17:31 - 2013-09-01 13:11 - 00000000 ____D () C:\Users\sid\Documents\Calibre-Bibliothek

2014-03-16 12:51 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF

2014-03-14 18:14 - 2013-10-06 22:53 - 00000000 ____D () C:\Users\sid\AppData\Roaming\Audacity

2014-03-12 21:53 - 2010-08-31 13:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-03-12 11:51 - 2012-05-01 10:15 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe

2014-03-12 11:51 - 2011-06-09 20:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
 

Some content of TEMP:

====================

C:\Users\admin\AppData\Local\Temp\avgnt.exe

C:\Users\sid\AppData\Local\Temp\avgnt.exe

C:\Users\sid\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp9k33xj.dll

C:\Users\sid\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\windows\explorer.exe => MD5 is legit

C:\windows\system32\winlogon.exe => MD5 is legit

C:\windows\system32\wininit.exe => MD5 is legit

C:\windows\system32\svchost.exe => MD5 is legit

C:\windows\system32\services.exe => MD5 is legit

C:\windows\system32\User32.dll => MD5 is legit

C:\windows\system32\userinit.exe => MD5 is legit

C:\windows\system32\rpcss.dll => MD5 is legit

C:\windows\system32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-04-10 13:46
 

==================== End Of Log ============================

--- --- ---

--- --- ---

und hier noch FRST-Additions:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01

Ran by sid at 2014-04-10 15:38:47

Running from C:\Users\sid\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

2XL Games Launcher (HKLM\...\{7A070AF5-7B32-4BE3-B2EF-06CACAE0188B}) (Version: 1.00.0000 - 2XL Games)

2XL Supercross (HKLM\...\{CED516F1-8EEA-44D1-8BE2-C0B799BE6CDA}) (Version: 1.00.0000 - 2XL Games)

2XL Trophylite Rally (HKLM\...\{CDF27D24-0D51-4F99-A959-8C3E79073401}) (Version: 1.00.0000 - 2XL Games)

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )

Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)

Adobe AIR (Version: 1.5.2.8870 - Adobe Systems Inc.) Hidden

Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)

Allway Sync version 12.15.1 (HKLM\...\Allway Sync_is1) (Version:  - Botkind Inc)

Atheros Client Installation Program (HKLM\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.5.0621 - Atheros)

Audacity 2.0.4 (HKLM\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)

BandzPro (HKCU\...\BandzPro) (Version: 1.2.1.0 - WebVentures)

BatteryLifeExtender (HKLM\...\{E308B555-8434-4AF8-B66F-729897C75F93}) (Version: 1.0.6 - Samsung)

Bing Bar (HKLM\...\{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}) (Version: 7.1.361.0 - Microsoft Corporation)

Bing Rewards Client Installer (Version: 16.0.345.0 - Microsoft Corporation) Hidden

Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.44 - Broadcom Corporation)

Cake Mania (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}) (Version:  - Oberon Media)

calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)

Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.1.0.0 - Swiss Academic Software)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3911 - CyberLink Corp.)

CyberLink YouCam (Version: 2.0.3911 - CyberLink Corp.) Hidden

Digitale Bibliothek 3 (HKLM\...\Digitale Bibliothek 3) (Version:  - )

Digitale Bibliothek 5 (HKLM\...\Digitale Bibliothek 5) (Version:  - )

Dropbox (HKCU\...\Dropbox) (Version: 2.6.25 - Dropbox, Inc.)

Easy Content Share (HKLM\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0 - Samsung Electronics Co., LTD)

Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.2 - Samsung Electronics Co., Ltd.)

Easy Network Manager (HKLM\...\{559D1FDB-6D5C-4EF3-8F63-5E1E93A0A244}) (Version: 4.4.1 - Samsung)

Easy Resolution Manager (HKLM\...\{18AA278D-E0B9-4F99-ACCC-070978A38453}) (Version: 1.0.9 - Samsung)

Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.0.15 - Samsung Electronics Co.,Ltd.)

EasyBatteryManager (HKLM\...\{607DA1C8-34EC-4D7A-AD83-F8E5C70736DF}) (Version: 4.0.0.4 - Samsung)

EasyFileShare (HKLM\...\{C4582EED-A3FB-4358-8F3F-8C994460DF28}) (Version: 1.0.3 - Samsung)

ETDWare PS/2-X86 8.0.7.1_WHQL (HKLM\...\Elantech) (Version: 8.0.7.1 - ELAN Microelectronic Corp.)

Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)

Fast Start (HKLM\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 2.2.0.0 - SAMSUNG)

Flip Words (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}) (Version:  - Oberon Media)

Free YouTube to MP3 Converter version 3.12.13.925 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.13.925 - DVDVideoSoft Ltd.)

Freeciv 2.4.1 (GTK+2 client) (HKCU\...\Freeciv-2.4.1-gtk2) (Version:  - )

FreeOCR v4.2 (HKLM\...\freeocr_is1) (Version:  - )

Galapago (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version:  - Oberon Media)

Game Pack (HKLM\...\{D1F6FBBB-B204-459A-9BF8-D06FFAB96CCC}_is1) (Version: 6.3.1.1 - Oberon Media, Inc.)

GamesCenter (HKLM\...\GamesCenter) (Version:  - GamesCenter)

GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)

Grewe Scanner-Interface 7 (HKLM\...\{B1C3F49A-DE7D-1AC1-0913-039C1A8B9B82}) (Version: 7 - Grewe Computertechnik GmbH)

Hedgewars (HKLM\...\hedgewars) (Version: 0.9.19 - Hedgewars Project)

Insaniquarium Deluxe (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110245793}) (Version:  - Oberon Media)

Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Kreuzworträtsel Freeware (HKLM\...\Kreuzworträtsel Freeware) (Version:  - )

Kudos Rock Legend Demo (HKLM\...\Kudos Rock Legend Demo_is1) (Version:  - Positech Games)

lexiCan 3 (HKLM\...\{80E7CB77-E445-4BB4-A836-67A447ABEAE6}) (Version: 3.2.0 - vetafab Software GmbH)

Mahjong Escape Ancient China (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}) (Version:  - Oberon Media)

Marvell Miniport Driver (HKLM\...\Marvell Miniport Driver) (Version: 11.24.27.3 - Marvell)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden

Microsoft Default Manager (Version: 2.2.114.0 - Microsoft Corporation) Hidden

Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4605.1003 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4023.1211 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

MiniTool Partition Wizard Home Edition 8.1.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)

Movie Color Enhancer (HKLM\...\{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D}) (Version: 1.0 - Samsung Electronics Co., Ltd.)

Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MultimediaPOP (HKLM\...\{331ECF61-69AF-4F57-AC35-AFED610231C3}) (Version: 1.1 - )

Nitro Reader 3 (HKLM\...\{171478A8-80AD-4295-A2D1-C3D8AE70C9F1}) (Version: 3.5.2.10 - Nitro)

Norton Online Backup (HKLM\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)

Office 15 Click-to-Run Extensibility Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (Version: 15.0.4605.1003 - Microsoft Corporation) Hidden

OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)

PDF OCR 4.3.1 (HKLM\...\{3D122AF9-1E02-4035-8003-334D378C1B62}_is1) (Version:  - PDF OCR)

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.3.2 - Frank Heindörfer, Philip Chinery)

RadioTotal1 Toolbar for IE (HKLM\...\IECT3317892) (Version: 6.17.2.8 - RadioTotal1)

Rainlendar2 (remove only) (HKLM\...\Rainlendar2) (Version:  - )

Readiris Pro 10 (HKLM\...\{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}) (Version:  - )

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6171 - Realtek Semiconductor Corp.)

Samsung AnyWeb Print (HKLM\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 1.1.19.0 - Samsung Electronics Co., Ltd.)

Samsung AnyWeb Print (Version: 1.0 - Samsung Electronics Co., Ltd.) Hidden

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden

Samsung Recovery Solution 5 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 5.0.0.7 - Samsung)

Samsung Story Album Viewer (HKLM\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)

Samsung Story Album Viewer (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden

Samsung Support Center (HKLM\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.1.18 - Samsung)

Samsung Theme Designer (HKLM\...\{3B27E8C6-2971-41FD-89B7-6C5F46CE2CA1}) (Version: 2.0.4.3918 - Samsung)

Samsung Universal Print Driver (HKLM\...\Samsung Universal Print Driver) (Version: 2.01.06.00:16 - Samsung Electronics Co., Ltd.)

Samsung Universal Scan Driver (HKLM\...\Samsung Universal Scan Driver) (Version: 1.2.6.0 - Samsung Electronics Co., Ltd.)

Samsung Update Plus (HKLM\...\{142D8CA7-2C6F-45A7-83E3-099AAFD99133}) (Version: 3.0.0.17 - Samsung Electronics Co., Ltd.)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.34.0 - SAMSUNG Electronics Co., Ltd.)

Scan2PDF 1.6 (HKLM\...\Scan2PDF_is1) (Version:  - Koma-Code)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Slingo (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110160733}) (Version:  - Oberon Media)

SmarThru 4 (HKLM\...\{90F1943D-EA4A-4460-B59F-30023F3BA69A}) (Version:  - Samsung Electronics Co., Ltd.)

SRS Premium Sound Control Panel (HKLM\...\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}) (Version: 1.8.7900 - SRS Labs, Inc.)

User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )

VIS (HKLM\...\VIS) (Version:  - ) <==== ATTENTION

VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)

WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.6200 - Broadcom Corporation)

Windows Live Call (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live Family Safety (Version: 14.0.8118.427 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows Live Mail (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Movie Maker (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)

Windows Live Writer (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden

Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

XMind 2013 (v3.4.0) (HKLM\...\XMind_is1) (Version: 3.4.0.201311050558 - XMind Ltd.)
 

==================== Restore Points  =========================
 

08-04-2014 07:25:13 Windows Update

10-04-2014 10:02:33 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0A9EEABE-2593-4EE2-9801-F0C84F6E4FBC} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2010-08-20] (Samsung Electronics Co., Ltd.)

Task: {0F339180-DC9E-4722-9FDF-C74E2B5F61A8} - System32\Tasks\MovieColorEnhancer => C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-08-19] (Samsung Electronics Co., Ltd.)

Task: {3B88E9FF-4A8B-4B6F-AAFC-3923858D6EA7} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000Core => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-12-06] (Facebook Inc.)

Task: {4038073E-F872-4690-92BA-C5B08A8DF04D} - System32\Tasks\advSRS5 => C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-08-11] (SEC)

Task: {41B4741F-9502-441C-8073-181DD6C2C194} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2010-07-30] (SAMSUNG Electronics)

Task: {47C900E8-CEB1-4459-99FF-FDF4F26699C3} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)

Task: {4DF56C9D-44F1-4BB5-BB48-F6E7B710A6F7} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-08-27] (Samsung Electronics)

Task: {56EAA00A-C0A1-488D-B025-BCFAC5D1BC46} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)

Task: {5B2F11F9-05F3-484A-AB92-23E576FEEB52} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000UA => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-12-06] (Facebook Inc.)

Task: {740DB2B7-C611-4DB5-A7AF-AD2A51EFC06B} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-08-05] (Samsung Electronics)

Task: {972051A9-3EF7-4076-9499-67EF8C5664BF} - System32\Tasks\IdlePowerSave => C:\windows\Idle\DetectIdleTask.exe [2010-07-31] (TODO: <회사 이름>)

Task: {9D85297D-4C2A-485F-9AEA-C7781BC904CC} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-09] (Microsoft Corporation)

Task: {9EBEDE78-8449-406B-9BA3-3CC4DA59171C} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)

Task: {A1C6582C-9CCE-40A1-A608-7CA953A66089} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-08-12] (Samsung Electronics. Co. Ltd.)

Task: {BF30A781-73D9-4F80-A04F-25078E4DC32D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000Core.job => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2825776248-3651122352-3316412646-1000UA.job => C:\Users\sid\AppData\Local\Facebook\Update\FacebookUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-06-09 17:42 - 2008-06-05 01:53 - 00026624 _____ () C:\windows\System32\spd__l.dll

2012-11-15 09:08 - 2012-09-19 20:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll

2014-04-06 16:46 - 2013-10-31 18:14 - 00077992 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll

2014-04-06 16:46 - 2014-03-25 07:08 - 00420008 _____ () C:\Program Files\Microsoft Office 15\ClientX86\StreamServer.dll

2010-08-31 12:21 - 2010-07-05 12:42 - 00203776 _____ () C:\Program Files\Samsung\Movie Color Enhancer\WinCRT.dll

2011-08-12 07:45 - 2011-08-12 07:45 - 02433024 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe

2010-05-23 20:20 - 2010-05-23 20:20 - 00126976 _____ () C:\Program Files\Rainlendar2\lua51.dll

2011-08-12 07:45 - 2011-08-12 07:45 - 00198144 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll

2010-05-23 20:20 - 2010-05-23 20:20 - 00012288 _____ () C:\Program Files\Rainlendar2\lfs.dll

2014-03-01 10:57 - 2014-03-01 10:57 - 00186368 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\54ec07eda8e35b5b1087518e32150b0a\Kies.Common.DeviceServiceLib.Interface.ni.dll

2014-03-01 14:23 - 2014-03-01 14:23 - 15015936 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\f5dde8d25236f0ef7f4f9d2b6247d680\Kies.Theme.ni.dll

2014-03-01 10:56 - 2014-03-01 10:56 - 01865216 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\02ef03b670b936601b774672ddef586b\Kies.UI.ni.dll

2014-03-01 10:56 - 2014-03-01 10:56 - 00081920 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\829f06cbfd6e0be30a83b99448a1688f\Kies.MVVM.ni.dll

2014-03-01 14:22 - 2014-03-01 14:22 - 00236032 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll

2010-08-31 12:05 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll

2011-01-27 15:27 - 2011-01-27 15:27 - 00552960 _____ () C:\windows\system32\SnMinDrv.dll

2010-08-31 11:58 - 2010-05-07 16:22 - 01636864 _____ () C:\Program Files\Samsung\Samsung Recovery Solution 5\Resdll.dll

2014-03-29 16:44 - 2014-03-29 16:44 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: NOBU => 2

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\windows\pss\Bluetooth.lnk.CommonStartup

MSCONFIG\startupreg: KiesAirMessage => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup

MSCONFIG\startupreg: KiesPreload => C:\Program Files\Samsung\Kies\Kies.exe /preload

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device

Description: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Broadcom

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Percentage of memory in use: 52%

Total physical RAM: 2037.3 MB

Available physical RAM: 963.27 MB

Total Pagefile: 4074.59 MB

Available Pagefile: 2784.79 MB

Total Virtual: 2047.88 MB

Available Virtual: 1914.05 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:87 GB) (Free:15.51 GB) NTFS

Drive d: () (Fixed) (Total:130.1 GB) (Free:92.47 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 233 GB) (Disk ID: 10B02F7F)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=87 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=130 GB) - (Type=OF Extended)

Partition 4: (Not Active) - (Size=16 GB) - (Type=27)
 

==================== End Of Log ============================