So, hier dann noch die Avast Logs: Code:
avast! Antirootkit, version 1.0
Scan started: Montag, 28. Juli 2014 03:35:32
Process [0]
Process [4]
Process C:\Windows\System32\smss.exe [316]
Process C:\Windows\System32\csrss.exe [452]
Process C:\Windows\System32\wininit.exe [504]
Process C:\Windows\System32\csrss.exe [524]
Process C:\Windows\System32\services.exe [564]
Process C:\Windows\System32\winlogon.exe [604]
Process C:\Windows\System32\lsass.exe [632]
Process C:\Windows\System32\lsm.exe [644]
Process C:\Windows\System32\svchost.exe [740]
Process C:\Windows\System32\nvvsvc.exe [816]
Process C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [840]
Process C:\Windows\System32\svchost.exe [884]
Process C:\Windows\System32\svchost.exe [976]
Process C:\Windows\System32\svchost.exe [1020]
Process C:\Windows\System32\svchost.exe [256]
Process C:\Windows\System32\svchost.exe [364]
Process C:\Windows\System32\audiodg.exe [380]
Process C:\Program Files\Sandboxie\SbieSvc.exe [1096]
Process C:\Windows\System32\svchost.exe [1272]
Process C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1464]
Process C:\Windows\System32\nvvsvc.exe [1480]
Process C:\Program Files\AVAST Software\Avast\AvastSvc.exe [1500]
Process C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [1728]
Process C:\Windows\System32\spoolsv.exe [1796]
Process C:\Windows\System32\svchost.exe [1824]
Process C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [1716]
Process C:\Program Files (x86)\avmwlanstick\WLanNetService.exe [1868]
Process C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2084]
Process C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [2124]
Process C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2200]
Process C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2260]
Process C:\Windows\System32\PnkBstrA.exe [2408]
Process C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2556]
Process C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2744]
Process C:\Windows\System32\conhost.exe [2780]
Process C:\Windows\System32\WUDFHost.exe [2220]
Process C:\Windows\System32\SearchIndexer.exe [2520]
Process C:\Windows\System32\svchost.exe [2680]
Process C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [3420]
Process C:\Windows\System32\taskhost.exe [3628]
Process C:\Windows\System32\taskeng.exe [3636]
Process C:\Windows\System32\dwm.exe [3788]
Process C:\Windows\explorer.exe [3880]
Process C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [436]
Process C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [3944]
Process C:\Users\Adrian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [3380]
Process C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1428]
Process C:\Windows\System32\wbem\WmiPrvSE.exe [2544]
Process C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe [2996]
Process C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [968]
Process C:\Windows\System32\conhost.exe [2892]
Process C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [4188]
Process C:\Program Files\AVAST Software\Avast\AvastUI.exe [4256]
Process C:\Program Files (x86)\Mozilla Firefox\firefox.exe [4552]
Process C:\Program Files\Windows Media Player\wmpnetwk.exe [4912]
Process C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe [4352]
Process C:\Program Files\TeamSpeak 3 Client\plugins\ts3overlay\InstallHook.exe [4864]
Process C:\Windows\System32\wbem\unsecapp.exe [2908]
Process C:\Windows\System32\sppsvc.exe [5940]
Process C:\Windows\System32\svchost.exe [5396]
Process C:\Windows\System32\taskmgr.exe [3548]
Process C:\Windows\System32\wbem\WmiPrvSE.exe [4436]
Process C:\Program Files\Internet Explorer\iexplore.exe [5444]
Process C:\Program Files\AVAST Software\Avast\setup\instup.exe [4808]
Process C:\Windows\System32\svchost.exe [5632]
Process C:\Program Files\Internet Explorer\iexplore.exe [2792]
Process C:\Windows\System32\taskhost.exe [5208]
Process C:\Program Files (x86)\Internet Explorer\ielowutil.exe [2212]
Disk 0 MBR
Disk 0 Partition 1 **INFECTED** MBR:Cidox-E [Rtk]
Disk 0 MBR [Partition1] **ROOTKIT**
Service .NET CLR Data [???]
Service .NET CLR Networking [???]
Service .NET CLR Networking 4.0.0.0 [???]
Service .NET Data Provider for Oracle [???]
Service .NET Data Provider for SqlServer [???]
Service .NET Memory Cache 4.0 [???]
Service .NETFramework [???]
Service 1394ohci [C:\Windows\system32\drivers\1394ohci.sys]
Service ACPI [C:\Windows\system32\drivers\ACPI.sys]
Service AcpiPmi [C:\Windows\system32\drivers\acpipmi.sys]
Service AdobeARMservice [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe]
Service adp94xx [C:\Windows\system32\drivers\adp94xx.sys]
Service adpahci [C:\Windows\system32\drivers\adpahci.sys]
Service adpu320 [C:\Windows\system32\drivers\adpu320.sys]
Service adsi [???]
Service AeLookupSvc [C:\Windows\System32\aelupsvc.dll]
Service AFD [C:\Windows\system32\drivers\afd.sys]
Service agp440 [C:\Windows\system32\drivers\agp440.sys]
Service ALG [C:\Windows\System32\alg.exe]
Service aliide [C:\Windows\system32\drivers\aliide.sys]
Service amdide [C:\Windows\system32\drivers\amdide.sys]
Service AmdK8 [C:\Windows\system32\drivers\amdk8.sys]
Service AmdPPM [C:\Windows\system32\DRIVERS\amdppm.sys]
Service amdsata [C:\Windows\system32\drivers\amdsata.sys]
Service amdsbs [C:\Windows\system32\drivers\amdsbs.sys]
Service amdxata [C:\Windows\system32\drivers\amdxata.sys]
Service AppID [C:\Windows\system32\drivers\appid.sys]
Service AppIDSvc [C:\Windows\System32\appidsvc.dll]
Service Appinfo [C:\Windows\System32\appinfo.dll]
Service arc [C:\Windows\system32\drivers\arc.sys]
Service arcsas [C:\Windows\system32\drivers\arcsas.sys]
Service ASP.NET [???]
Service ASP.NET_4.0.30319 [???]
Service aspnet_state [C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe]
Service aswHwid [C:\Windows\system32\drivers\aswHwid.sys]
Service aswMonFlt [C:\Windows\system32\drivers\aswMonFlt.sys]
Service aswRdr [C:\Windows\system32\drivers\aswRdr2.sys]
Service aswRvrt [C:\Windows\System32\Drivers\aswRvrt.sys]
Service aswSnx [C:\Windows\system32\drivers\aswSnx.sys]
Service aswSP [C:\Windows\system32\drivers\aswSP.sys]
Service aswStm [C:\Windows\system32\drivers\aswStm.sys]
Service aswVmm [C:\Windows\System32\Drivers\aswVmm.sys]
Service AsyncMac [C:\Windows\system32\DRIVERS\asyncmac.sys]
Service atapi [C:\Windows\system32\drivers\atapi.sys]
Service AudioEndpointBuilder [C:\Windows\System32\Audiosrv.dll]
Service AudioSrv [C:\Windows\System32\Audiosrv.dll]
Service avast! Antivirus [C:\Program Files\AVAST Software\Avast\AvastSvc.exe]
Service AVM WLAN Connection Service [C:\Program Files (x86)\avmwlanstick\WlanNetService.exe]
Service avmeject [C:\Windows\system32\drivers\avmeject.sys]
Service AxInstSV [C:\Windows\System32\AxInstSV.dll]
Service b06bdrv [C:\Windows\system32\drivers\bxvbda.sys]
Service b57nd60a [C:\Windows\system32\DRIVERS\b57nd60a.sys]
Service BattC [???]
Service BDESVC [C:\Windows\System32\bdesvc.dll]
Service Beep [C:\Windows\System32\Drivers\Beep.sys]
Service BFE [C:\Windows\System32\bfe.dll]
Service BITS [C:\Windows\System32\qmgr.dll]
Service blbdrive [C:\Windows\system32\DRIVERS\blbdrive.sys]
Service bowser [C:\Windows\system32\DRIVERS\bowser.sys]
Service BrFiltLo [C:\Windows\system32\drivers\BrFiltLo.sys]
Service BrFiltUp [C:\Windows\system32\drivers\BrFiltUp.sys]
Service Browser [C:\Windows\System32\browser.dll]
Service Brserid [C:\Windows\System32\Drivers\Brserid.sys]
Service BrSerWdm [C:\Windows\System32\Drivers\BrSerWdm.sys]
Service BrUsbMdm [C:\Windows\System32\Drivers\BrUsbMdm.sys]
Service BrUsbSer [C:\Windows\System32\Drivers\BrUsbSer.sys]
Service BTHMODEM [C:\Windows\system32\drivers\bthmodem.sys]
Service BTHPORT [???]
Service bthserv [C:\Windows\system32\bthserv.dll]
Service cdfs [C:\Windows\system32\DRIVERS\cdfs.sys]
Service cdrom [C:\Windows\system32\DRIVERS\cdrom.sys]
Service CertPropSvc [C:\Windows\System32\certprop.dll]
Service circlass [C:\Windows\system32\drivers\circlass.sys]
Service CLFS [C:\Windows\System32\CLFS.sys]
Service clr_optimization_v2.0.50727_32 [C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe]
Service clr_optimization_v2.0.50727_64 [C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe]
Service clr_optimization_v4.0.30319_32 [C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe]
Service clr_optimization_v4.0.30319_64 [C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe]
Service CmBatt [C:\Windows\system32\drivers\CmBatt.sys]
Service cmdide [C:\Windows\system32\drivers\cmdide.sys]
Service CNG [C:\Windows\System32\Drivers\cng.sys]
Service Compbatt [C:\Windows\system32\drivers\compbatt.sys]
Service CompositeBus [C:\Windows\system32\DRIVERS\CompositeBus.sys]
Service COMSysApp [C:\Windows\system32\dllhost.exe]
Service crcdisk [C:\Windows\system32\drivers\crcdisk.sys]
Service crypt32 [???]
Service CryptSvc [C:\Windows\system32\cryptsvc.dll]
Service DCLocator [???]
Service DcomLaunch [C:\Windows\system32\rpcss.dll]
Service defragsvc [C:\Windows\System32\defragsvc.dll]
Service DfsC [C:\Windows\System32\Drivers\dfsc.sys]
Service Dhcp [C:\Windows\system32\dhcpcore.dll]
Service discache [C:\Windows\System32\drivers\discache.sys]
Service Disk [C:\Windows\system32\drivers\disk.sys]
Service Dnscache [C:\Windows\System32\dnsrslvr.dll]
Service dot3svc [C:\Windows\System32\dot3svc.dll]
Service DPS [C:\Windows\system32\dps.dll]
Service drmkaud [C:\Windows\system32\drivers\drmkaud.sys]
Service DXGKrnl [C:\Windows\System32\drivers\dxgkrnl.sys]
Service EapHost [C:\Windows\System32\eapsvc.dll]
Service ebdrv [C:\Windows\system32\drivers\evbda.sys]
Service EFS [C:\Windows\System32\lsass.exe]
Service ehRecvr [C:\Windows\ehome\ehRecvr.exe]
Service ehSched [C:\Windows\ehome\ehsched.exe]
Service elxstor [C:\Windows\system32\drivers\elxstor.sys]
Service ErrDev [C:\Windows\system32\drivers\errdev.sys]
Service ESENT [???]
Service EuMusDesignVirtualAudioCableWdm [C:\Windows\system32\DRIVERS\vrtaucbl.sys]
Service eventlog [C:\Windows\System32\wevtsvc.dll]
Service EventSystem [C:\Windows\system32\es.dll]
Service exfat [C:\Windows\System32\Drivers\exfat.sys]
Service FairplayKD [C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys]
Service fastfat [C:\Windows\System32\Drivers\fastfat.sys]
Service Fax [C:\Windows\system32\fxssvc.exe]
Service fdc [C:\Windows\system32\DRIVERS\fdc.sys]
Service fdPHost [C:\Windows\system32\fdPHost.dll]
Service FDResPub [C:\Windows\system32\fdrespub.dll]
Service FileInfo [C:\Windows\system32\drivers\fileinfo.sys]
Service Filetrace [C:\Windows\system32\drivers\filetrace.sys]
Service flpydisk [C:\Windows\system32\drivers\flpydisk.sys]
Service FltMgr [C:\Windows\system32\drivers\fltmgr.sys]
Service FontCache [C:\Windows\system32\FntCache.dll]
Service FontCache3.0.0.0 [C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe]
Service FsDepends [C:\Windows\System32\drivers\FsDepends.sys]
Service Fs_Rec [C:\Windows\System32\Drivers\Fs_Rec.sys]
Service fvevol [C:\Windows\System32\DRIVERS\fvevol.sys]
Service fwlanusbn [C:\Windows\system32\DRIVERS\fwlanusbn.sys]
Service gagp30kx [C:\Windows\system32\drivers\gagp30kx.sys]
Service gdrv [C:\Windows\gdrv.sys]
Service gpsvc [C:\Windows\System32\gpsvc.dll]
Service gupdate [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
Service gupdatem [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
Service hcw85cir [C:\Windows\system32\drivers\hcw85cir.sys]
Service HdAudAddService [C:\Windows\system32\drivers\HdAudio.sys]
Service HDAudBus [C:\Windows\system32\DRIVERS\HDAudBus.sys]
Service HidBatt [C:\Windows\system32\drivers\HidBatt.sys]
Service HidBth [C:\Windows\system32\drivers\hidbth.sys]
Service HidIr [C:\Windows\system32\drivers\hidir.sys]
Service hidserv [C:\Windows\system32\hidserv.dll]
Service HidUsb [C:\Windows\system32\DRIVERS\hidusb.sys]
Service hkmsvc [C:\Windows\system32\kmsvc.dll]
Service HomeGroupListener [C:\Windows\system32\ListSvc.dll]
Service HomeGroupProvider [C:\Windows\system32\provsvc.dll]
Service HpSAMD [C:\Windows\system32\drivers\HpSAMD.sys]
Service hshld [C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe]
Service HssDRV6 [C:\Windows\system32\DRIVERS\hssdrv6.sys]
Service HssTrayService [C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE]
Service HssWd [C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe]
Service HTTP [C:\Windows\system32\drivers\HTTP.sys]
Service hwpolicy [C:\Windows\System32\drivers\hwpolicy.sys]
Service i8042prt [C:\Windows\system32\drivers\i8042prt.sys]
Service iaStorV [C:\Windows\system32\drivers\iaStorV.sys]
Service idsvc [C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe]
Service iirsp [C:\Windows\system32\drivers\iirsp.sys]
Service IKEEXT [C:\Windows\System32\ikeext.dll]
Service inetaccs [???]
Service intelide [C:\Windows\system32\drivers\intelide.sys]
Service intelppm [C:\Windows\system32\drivers\intelppm.sys]
Service IPBusEnum [C:\Windows\system32\ipbusenum.dll]
Service IpFilterDriver [C:\Windows\system32\DRIVERS\ipfltdrv.sys]
Service iphlpsvc [C:\Windows\System32\iphlpsvc.dll]
Service IPMIDRV [C:\Windows\system32\drivers\IPMIDrv.sys]
Service IPNAT [C:\Windows\System32\drivers\ipnat.sys]
Service IRENUM [C:\Windows\system32\drivers\irenum.sys]
Service isapnp [C:\Windows\system32\drivers\isapnp.sys]
Service iScsiPrt [C:\Windows\system32\drivers\msiscsi.sys]
Service kbdclass [C:\Windows\system32\DRIVERS\kbdclass.sys]
Service kbdhid [C:\Windows\system32\DRIVERS\kbdhid.sys]
Service KeyIso [C:\Windows\system32\lsass.exe]
Service KSecDD [C:\Windows\System32\Drivers\ksecdd.sys]
Service KSecPkg [C:\Windows\System32\Drivers\ksecpkg.sys]
Service ksthunk [C:\Windows\system32\drivers\ksthunk.sys]
Service KtmRm [C:\Windows\system32\msdtckrm.dll]
Service LanmanServer [C:\Windows\system32\srvsvc.dll]
Service LanmanWorkstation [C:\Windows\System32\wkssvc.dll]
Service ldap [???]
Service lltdio [C:\Windows\system32\DRIVERS\lltdio.sys]
Service lltdsvc [C:\Windows\System32\lltdsvc.dll]
Service lmhosts [C:\Windows\System32\lmhsvc.dll]
Service Lsa [???]
Service LSI_FC [C:\Windows\system32\drivers\lsi_fc.sys]
Service LSI_SAS [C:\Windows\system32\drivers\lsi_sas.sys]
Service LSI_SAS2 [C:\Windows\system32\drivers\lsi_sas2.sys]
Service LSI_SCSI [C:\Windows\system32\drivers\lsi_scsi.sys]
Service luafv [C:\Windows\system32\drivers\luafv.sys]
Service Mcx2Svc [C:\Windows\system32\Mcx2Svc.dll]
Service megasas [C:\Windows\system32\drivers\megasas.sys]
Service MegaSR [C:\Windows\system32\drivers\MegaSR.sys]
Service MMCSS [C:\Windows\system32\mmcss.dll]
Service Modem [C:\Windows\system32\drivers\modem.sys]
Service monitor [C:\Windows\system32\DRIVERS\monitor.sys]
Service MotioninJoyXFilter [C:\Windows\system32\DRIVERS\MijXfilt.sys]
Service mouclass [C:\Windows\system32\DRIVERS\mouclass.sys]
Service mouhid [C:\Windows\system32\DRIVERS\mouhid.sys]
Service mountmgr [C:\Windows\System32\drivers\mountmgr.sys]
Service MozillaMaintenance [C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe]
Service mpio [C:\Windows\system32\drivers\mpio.sys]
Service mpsdrv [C:\Windows\System32\drivers\mpsdrv.sys]
Service MpsSvc [C:\Windows\system32\mpssvc.dll]
Service MRxDAV [C:\Windows\system32\drivers\mrxdav.sys]
Service mrxsmb [C:\Windows\system32\DRIVERS\mrxsmb.sys]
Service mrxsmb10 [C:\Windows\system32\DRIVERS\mrxsmb10.sys]
Service mrxsmb20 [C:\Windows\system32\DRIVERS\mrxsmb20.sys]
Service msahci [C:\Windows\system32\drivers\msahci.sys]
Service msdsm [C:\Windows\system32\drivers\msdsm.sys]
Service MSDTC [C:\Windows\System32\msdtc.exe]
Service MSDTC Bridge 3.0.0.0 [???]
Service MSDTC Bridge 4.0.0.0 [???]
Service Msfs [C:\Windows\System32\Drivers\Msfs.sys]
Service mshidkmdf [C:\Windows\System32\drivers\mshidkmdf.sys]
Service msisadrv [C:\Windows\system32\drivers\msisadrv.sys]
Service MSiSCSI [C:\Windows\system32\iscsiexe.dll]
Service msiserver [C:\Windows\system32\msiexec.exe]
Service MSKSSRV [C:\Windows\system32\drivers\MSKSSRV.sys]
Service MSPCLOCK [C:\Windows\system32\drivers\MSPCLOCK.sys]
Service MSPQM [C:\Windows\system32\drivers\MSPQM.sys]
Service MsRPC [C:\Windows\System32\Drivers\MsRPC.sys]
Service MSSCNTRS [???]
Service mssmbios [C:\Windows\system32\DRIVERS\mssmbios.sys]
Service MSTEE [C:\Windows\system32\drivers\MSTEE.sys]
Service MTConfig [C:\Windows\system32\drivers\MTConfig.sys]
Service Mup [C:\Windows\System32\Drivers\mup.sys]
Service napagent [C:\Windows\system32\qagentRT.dll]
Service NativeWifiP [C:\Windows\system32\DRIVERS\nwifi.sys]
Service NDIS [C:\Windows\system32\drivers\ndis.sys]
Service NdisCap [C:\Windows\system32\DRIVERS\ndiscap.sys]
Service NdisTapi [C:\Windows\system32\DRIVERS\ndistapi.sys]
Service Ndisuio [C:\Windows\system32\DRIVERS\ndisuio.sys]
Service NdisWan [C:\Windows\system32\DRIVERS\ndiswan.sys]
Service NDProxy [C:\Windows\System32\Drivers\NDProxy.sys]
Service NetBIOS [C:\Windows\system32\DRIVERS\netbios.sys]
Service NetBT [C:\Windows\System32\DRIVERS\netbt.sys]
Service Netlogon [C:\Windows\system32\lsass.exe]
Service Netman [C:\Windows\System32\netman.dll]
Service NetMsmqActivator [C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe]
Service NetPipeActivator [C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe]
Service netprofm [C:\Windows\System32\netprofm.dll]
Service NetTcpActivator [C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe]
Service NetTcpPortSharing [C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe]
Service nfrd960 [C:\Windows\system32\drivers\nfrd960.sys]
Service NlaSvc [C:\Windows\System32\nlasvc.dll]
Service Npfs [C:\Windows\System32\Drivers\Npfs.sys]
Service nsi [C:\Windows\system32\nsisvc.dll]
Service nsiproxy [C:\Windows\system32\drivers\nsiproxy.sys]
Service NTDS [???]
Service Ntfs [C:\Windows\System32\Drivers\Ntfs.sys]
Service Null [C:\Windows\System32\Drivers\Null.sys]
Service NVHDA [C:\Windows\system32\drivers\nvhda64v.sys]
Service nvlddmkm [C:\Windows\system32\DRIVERS\nvlddmkm.sys]
Service NvNetworkService [C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe]
Service nvraid [C:\Windows\system32\drivers\nvraid.sys]
Service nvstor [C:\Windows\system32\drivers\nvstor.sys]
Service NvStreamKms [C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys]
Service NvStreamSvc [C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe]
Service nvsvc [C:\Windows\system32\nvvsvc.exe]
Service nvvad_WaveExtensible [C:\Windows\system32\drivers\nvvad64v.sys]
Service nv_agp [C:\Windows\system32\drivers\nv_agp.sys]
Service ohci1394 [C:\Windows\system32\drivers\ohci1394.sys]
Service OverwolfUpdater [C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe]
Service p2pimsvc [C:\Windows\system32\pnrpsvc.dll]
Service p2psvc [C:\Windows\system32\p2psvc.dll]
Service Parport [C:\Windows\system32\DRIVERS\parport.sys]
Service partmgr [C:\Windows\System32\drivers\partmgr.sys]
Service PcaSvc [C:\Windows\System32\pcasvc.dll]
Service pci [C:\Windows\system32\drivers\pci.sys]
Service pciide [C:\Windows\system32\drivers\pciide.sys]
Service pcmcia [C:\Windows\system32\drivers\pcmcia.sys]
Service pcw [C:\Windows\System32\drivers\pcw.sys]
Service PEAUTH [C:\Windows\system32\drivers\peauth.sys]
Service PerfDisk [???]
Service PerfHost [C:\Windows\SysWow64\perfhost.exe]
Service PerfNet [???]
Service PerfOS [???]
Service PerfProc [???]
Service pla [C:\Windows\system32\pla.dll]
Service PlugPlay [C:\Windows\system32\umpnpmgr.dll]
Service PnkBstrA [C:\Windows\system32\PnkBstrA.exe]
Service PNRPAutoReg [C:\Windows\system32\pnrpauto.dll]
Service PNRPsvc [C:\Windows\system32\pnrpsvc.dll]
Service PolicyAgent [C:\Windows\System32\ipsecsvc.dll]
Service PortProxy [???]
Service Power [C:\Windows\system32\umpo.dll]
Service PptpMiniport [C:\Windows\system32\DRIVERS\raspptp.sys]
Service Processor [C:\Windows\system32\drivers\processr.sys]
Service ProfSvc [C:\Windows\system32\profsvc.dll]
Service ProtectedStorage [C:\Windows\system32\lsass.exe]
Service Psched [C:\Windows\system32\DRIVERS\pacer.sys]
Service ql2300 [C:\Windows\system32\drivers\ql2300.sys]
Service ql40xx [C:\Windows\system32\drivers\ql40xx.sys]
Service QWAVE [C:\Windows\system32\qwave.dll]
Service QWAVEdrv [C:\Windows\system32\drivers\qwavedrv.sys]
Service RasAcd [C:\Windows\System32\DRIVERS\rasacd.sys]
Service RasAgileVpn [C:\Windows\system32\DRIVERS\AgileVpn.sys]
Service RasAuto [C:\Windows\System32\rasauto.dll]
Service Rasl2tp [C:\Windows\system32\DRIVERS\rasl2tp.sys]
Service RasMan [C:\Windows\System32\rasmans.dll]
Service RasPppoe [C:\Windows\system32\DRIVERS\raspppoe.sys]
Service RasSstp [C:\Windows\system32\DRIVERS\rassstp.sys]
Service rdbss [C:\Windows\system32\DRIVERS\rdbss.sys]
Service rdpbus [C:\Windows\system32\drivers\rdpbus.sys]
Service RDPCDD [C:\Windows\System32\DRIVERS\RDPCDD.sys]
Service RDPDD [???]
Service RDPENCDD [C:\Windows\system32\drivers\rdpencdd.sys]
Service RDPNP [???]
Service RDPREFMP [C:\Windows\system32\drivers\rdprefmp.sys]
Service RDPWD [C:\Windows\System32\Drivers\RDPWD.sys]
Service rdyboost [C:\Windows\System32\drivers\rdyboost.sys]
Service RemoteAccess [C:\Windows\System32\mprdim.dll]
Service RemoteRegistry [C:\Windows\system32\regsvc.dll]
Service RpcEptMapper [C:\Windows\System32\RpcEpMap.dll]
Service RpcLocator [C:\Windows\system32\locator.exe]
Service RpcSs [C:\Windows\system32\rpcss.dll]
Service rspndr [C:\Windows\system32\DRIVERS\rspndr.sys]
Service RTL8167 [C:\Windows\system32\DRIVERS\Rt64win7.sys]
Service SamSs [C:\Windows\system32\lsass.exe]
Service SbieDrv [C:\Program Files\Sandboxie\SbieDrv.sys]
Service SbieSvc [C:\Program Files\Sandboxie\SbieSvc.exe]
Service sbp2port [C:\Windows\system32\drivers\sbp2port.sys]
Service SCardSvr [C:\Windows\System32\SCardSvr.dll]
Service scfilter [C:\Windows\System32\DRIVERS\scfilter.sys]
Service Schedule [C:\Windows\system32\schedsvc.dll]
Service SCPolicySvc [C:\Windows\System32\certprop.dll]
Service SDRSVC [C:\Windows\System32\SDRSVC.dll]
Service secdrv [C:\Windows\System32\Drivers\secdrv.sys]
Service seclogon [C:\Windows\system32\seclogon.dll]
Service SENS [C:\Windows\System32\sens.dll]
Service SensrSvc [C:\Windows\system32\sensrsvc.dll]
Service Serenum [C:\Windows\system32\DRIVERS\serenum.sys]
Service Serial [C:\Windows\system32\DRIVERS\serial.sys]
Service sermouse [C:\Windows\system32\drivers\sermouse.sys]
Service ServiceModelEndpoint 3.0.0.0 [???]
Service ServiceModelOperation 3.0.0.0 [???]
Service ServiceModelService 3.0.0.0 [???]
Service SessionEnv [C:\Windows\system32\sessenv.dll]
Service sffdisk [C:\Windows\system32\drivers\sffdisk.sys]
Service sffp_mmc [C:\Windows\system32\drivers\sffp_mmc.sys]
Service sffp_sd [C:\Windows\system32\drivers\sffp_sd.sys]
Service sfloppy [C:\Windows\system32\drivers\sfloppy.sys]
Service SharedAccess [C:\Windows\System32\ipnathlp.dll]
Service ShellHWDetection [C:\Windows\System32\shsvcs.dll]
Service SiSRaid2 [C:\Windows\system32\drivers\SiSRaid2.sys]
Service SiSRaid4 [C:\Windows\system32\drivers\sisraid4.sys]
Service SkypeUpdate [C:\Program Files (x86)\Skype\Updater\Updater.exe]
Service Smb [C:\Windows\system32\DRIVERS\smb.sys]
Service SMSvcHost 3.0.0.0 [???]
Service SMSvcHost 4.0.0.0 [???]
Service SNMPTRAP [C:\Windows\System32\snmptrap.exe]
Service spldr [C:\Windows\System32\Drivers\spldr.sys]
Service Spooler [C:\Windows\System32\spoolsv.exe]
Service sppsvc [C:\Windows\system32\sppsvc.exe]
Service sppuinotify [C:\Windows\system32\sppuinotify.dll]
Service srv [C:\Windows\System32\DRIVERS\srv.sys]
Service srv2 [C:\Windows\System32\DRIVERS\srv2.sys]
Service srvnet [C:\Windows\System32\DRIVERS\srvnet.sys]
Service SSDPSRV [C:\Windows\System32\ssdpsrv.dll]
Service SstpSvc [C:\Windows\system32\sstpsvc.dll]
Service Steam Client Service [C:\Program Files (x86)\Common Files\Steam\SteamService.exe]
Service Stereo Service [C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe]
Service stexstor [C:\Windows\system32\drivers\stexstor.sys]
Service stisvc [C:\Windows\System32\wiaservc.dll]
Service swenum [C:\Windows\system32\DRIVERS\swenum.sys]
Service swprv [C:\Windows\System32\swprv.dll]
Service SysMain [C:\Windows\system32\sysmain.dll]
Service TabletInputService [C:\Windows\System32\TabSvc.dll]
Service tap0901 [C:\Windows\system32\DRIVERS\tap0901.sys]
Service taphss6 [C:\Windows\system32\DRIVERS\taphss6.sys]
Service TapiSrv [C:\Windows\System32\tapisrv.dll]
Service TBS [C:\Windows\System32\tbssvc.dll]
Service Tcpip [C:\Windows\System32\drivers\tcpip.sys]
Service TCPIP6 [C:\Windows\system32\DRIVERS\tcpip.sys]
Service TCPIP6TUNNEL [???]
Service tcpipreg [C:\Windows\System32\drivers\tcpipreg.sys]
Service TCPIPTUNNEL [???]
Service TDPIPE [C:\Windows\system32\drivers\tdpipe.sys]
Service TDTCP [C:\Windows\system32\drivers\tdtcp.sys]
Service tdx [C:\Windows\system32\DRIVERS\tdx.sys]
Service TermDD [C:\Windows\system32\DRIVERS\termdd.sys]
Service TermService [C:\Windows\System32\termsrv.dll]
Service Themes [C:\Windows\system32\themeservice.dll]
Service THREADORDER [C:\Windows\system32\mmcss.dll]
Service TrkWks [C:\Windows\System32\trkwks.dll]
Service TrustedInstaller [C:\Windows\servicing\TrustedInstaller.exe]
Service TSDDD [???]
Service tssecsrv [C:\Windows\System32\DRIVERS\tssecsrv.sys]
Service TsUsbFlt [C:\Windows\system32\drivers\tsusbflt.sys]
Service TsUsbGD [C:\Windows\system32\drivers\TsUsbGD.sys]
Service tunnel [C:\Windows\system32\DRIVERS\tunnel.sys]
Service uagp35 [C:\Windows\system32\drivers\uagp35.sys]
Service udfs [C:\Windows\system32\DRIVERS\udfs.sys]
Service UGatherer [???]
Service UGTHRSVC [???]
Service UI0Detect [C:\Windows\system32\UI0Detect.exe]
Service uliagpkx [C:\Windows\system32\drivers\uliagpkx.sys]
Service umbus [C:\Windows\system32\DRIVERS\umbus.sys]
Service UmPass [C:\Windows\system32\drivers\umpass.sys]
Service upnphost [C:\Windows\System32\upnphost.dll]
Service usbaudio [C:\Windows\system32\drivers\usbaudio.sys]
Service usbccgp [C:\Windows\system32\DRIVERS\usbccgp.sys]
Service usbcir [C:\Windows\system32\drivers\usbcir.sys]
Service usbehci [C:\Windows\system32\DRIVERS\usbehci.sys]
Service usbhub [C:\Windows\system32\DRIVERS\usbhub.sys]
Service usbohci [C:\Windows\system32\DRIVERS\usbohci.sys]
Service usbprint [C:\Windows\system32\drivers\usbprint.sys]
Service USBSTOR [C:\Windows\system32\drivers\USBSTOR.SYS]
Service usbuhci [C:\Windows\system32\drivers\usbuhci.sys]
Service UxSms [C:\Windows\System32\uxsms.dll]
Service VaultSvc [C:\Windows\system32\lsass.exe]
Service vdrvroot [C:\Windows\system32\drivers\vdrvroot.sys]
Service vds [C:\Windows\System32\vds.exe]
Service vga [C:\Windows\system32\DRIVERS\vgapnp.sys]
Service VgaSave [C:\Windows\System32\drivers\vga.sys]
Service vhdmp [C:\Windows\system32\drivers\vhdmp.sys]
Service viaide [C:\Windows\system32\drivers\viaide.sys]
Service volmgr [C:\Windows\system32\drivers\volmgr.sys]
Service volmgrx [C:\Windows\System32\drivers\volmgrx.sys]
Service volsnap [C:\Windows\system32\drivers\volsnap.sys]
Service vsmraid [C:\Windows\system32\drivers\vsmraid.sys]
Service VSS [C:\Windows\system32\vssvc.exe]
Service VUSB3HUB [C:\Windows\system32\DRIVERS\ViaHub3.sys]
Service vwifibus [C:\Windows\System32\drivers\vwifibus.sys]
Service W32Time [C:\Windows\system32\w32time.dll]
Service W3SVC [???]
Service WacomPen [C:\Windows\system32\drivers\wacompen.sys]
Service WANARP [C:\Windows\system32\DRIVERS\wanarp.sys]
Service Wanarpv6 [C:\Windows\system32\DRIVERS\wanarp.sys]
Service WatAdminSvc [C:\Windows\system32\Wat\WatAdminSvc.exe]
Service wbengine [C:\Windows\system32\wbengine.exe]
Service WbioSrvc [C:\Windows\System32\wbiosrvc.dll]
Service wcncsvc [C:\Windows\System32\wcncsvc.dll]
Service WcsPlugInService [C:\Windows\System32\WcsPlugInService.dll]
Service Wd [C:\Windows\system32\drivers\wd.sys]
Service Wdf01000 [C:\Windows\system32\drivers\Wdf01000.sys]
Service WdiServiceHost [C:\Windows\system32\wdi.dll]
Service WdiSystemHost [C:\Windows\system32\wdi.dll]
Service WebClient [C:\Windows\System32\webclnt.dll]
Service Wecsvc [C:\Windows\system32\wecsvc.dll]
Service wercplsupport [C:\Windows\System32\wercplsupport.dll]
Service WerSvc [C:\Windows\System32\WerSvc.dll]
Service WfpLwf [C:\Windows\system32\DRIVERS\wfplwf.sys]
Service WIMMount [C:\Windows\system32\drivers\wimmount.sys]
Service WinDefend [C:\Program Files\Windows Defender\mpsvc.dll]
Service Windows Workflow Foundation 3.0.0.0 [???]
Service Windows Workflow Foundation 4.0.0.0 [???]
Service WindowsMangerProtect [C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe]
Service WinHttpAutoProxySvc [C:\Windows\system32\winhttp.dll]
Service Winmgmt [C:\Windows\system32\wbem\WMIsvc.dll]
Service WinRM [C:\Windows\system32\WsmSvc.dll]
Service Winsock [C:\Windows\System32\Drivers\Winsock.sys]
Service WinSock2 [???]
Service Wlansvc [C:\Windows\System32\wlansvc.dll]
Service wlidsvc [C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE]
Service WmiAcpi [C:\Windows\system32\DRIVERS\wmiacpi.sys]
Service WmiApRpl [???]
Service wmiApSrv [C:\Windows\system32\wbem\WmiApSrv.exe]
Service WMPNetworkSvc [C:\Program Files\Windows Media Player\wmpnetwk.exe]
Service WPCSvc [C:\Windows\System32\wpcsvc.dll]
Service WPDBusEnum [C:\Windows\system32\wpdbusenum.dll]
Service ws2ifsl [C:\Windows\system32\drivers\ws2ifsl.sys]
Service wscsvc [C:\Windows\System32\wscsvc.dll]
Service WSearch [C:\Windows\system32\SearchIndexer.exe]
Service WSearchIdxPi [???]
Service wuauserv [C:\Windows\system32\wuaueng.dll]
Service WudfPf [C:\Windows\system32\drivers\WudfPf.sys]
Service WUDFRd [C:\Windows\system32\DRIVERS\WUDFRd.sys]
Service wudfsvc [C:\Windows\System32\WUDFSvc.dll]
Service WwanSvc [C:\Windows\System32\wwansvc.dll]
Service xhcdrv [C:\Windows\system32\DRIVERS\xhcdrv.sys]
Service xmlprov [???]
Service xusb21 [C:\Windows\system32\DRIVERS\xusb21.sys]
Service {0478CB92-06D0-44CB-8064-97E33FE96C8F} [???]
Service {26C8A8F8-AD3D-408D-8950-2691A45E3B45} [???]
Service {2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64 [C:\Windows\system32\drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64.sys]
Service {3A32517B-AAB9-448D-AC95-D105173D7B35} [???]
Service {8DE252A8-9C0F-43FC-AA90-86E902B73116} [???]
Service {D68ACFE1-94FA-492E-AE94-5023418C9CBC} [???]
Scan finished: Montag, 28. Juli 2014 03:35:54
Hidden files found: 0
Hidden registry items found: 0
Hidden processes found: 0
Hidden services found: 0
Hidden boot sectors found: 1
----------
Hier ist noch ein extrem langer Log den ich leider nicht posten kann da der Browser abschmiert sobald ich ihn einfüge...
Der Log heißt "aswAr1" also falls dies doch ziemlich wichtig ist versuche ich ihn zu teilen.. Code:
CmdLine - quick
aswBoot.exe /A:"*" /L:"1031" /KBD:5 /wow /dir:"C:\Program Files\AVAST Software\Avast"
CmdLine end
SafeBoot: 0
CreateKbThread
new CKbBuffer
CKbBuffer::Init
CKbBuffer::Init end
NtCreateEvent(g_hStopEvent)
dep_osBeginThread - KbThread
CreateKbThread end
NtInitializeRegistry
KbThread start
ReadRegistry
DATA=C:\ProgramData\AVAST Software\Avast
PROG=C:\Program Files\AVAST Software\Avast
BUILD=2021
Windows 7 Home Premium Service Pack 1
SystemRoot=C:\Windows
TEMP=C:\Windows\TEMP
TMP=C:\Windows\TEMP
ReadRegistry end
CreateTemp
CreateTemp end
aswcmnbDllMain
cmnbInit
aswEnginDllMain(DLL_PROCESS_ATTACH)
InitLog
InitLog end
CmdLine - full
aswBoot.exe /A:"*" /L:"1031" /KBD:5 /wow /dir:"C:\Program Files\AVAST Software\Avast"
CmdLine end
Program folder: C:\Program Files\AVAST Software\Avast
Engine folder: C:\Program Files\AVAST Software\Avast\defs\14072602
Base addr: 77910000
TimeStamp: 53cd25c5
Unschedule
61,00,75,00,74,00,6F,00,63,00,68,00,65,00,63,00,
6B,00,20,00,61,00,75,00,74,00,6F,00,63,00,68,00,
6B,00,20,00,2A,00,00,00,61,00,73,00,77,00,42,00,
6F,00,6F,00,74,00,2E,00,65,00,78,00,65,00,20,00,
2F,00,41,00,3A,00,22,00,2A,00,22,00,20,00,2F,00,
4C,00,3A,00,22,00,31,00,30,00,33,00,31,00,22,00,
20,00,2F,00,4B,00,42,00,44,00,3A,00,35,00,20,00,
2F,00,77,00,6F,00,77,00,20,00,2F,00,64,00,69,00,
72,00,3A,00,22,00,43,00,3A,00,5C,00,50,00,72,00,
6F,00,67,00,72,00,61,00,6D,00,20,00,46,00,69,00,
6C,00,65,00,73,00,5C,00,41,00,56,00,41,00,53,00,
54,00,20,00,53,00,6F,00,66,00,74,00,77,00,61,00,
72,00,65,00,5C,00,41,00,76,00,61,00,73,00,74,00,
22,00,00,00,00,00,
Unschedule end
LoadResources
LoadResources end
InitReport
InitReport end
New global exclusions:
NtSetEvent(g_hInitEvent) - 1
CPU: Phys(2), Log(4), Aff(4), Feat(00000fff)
FreeMemory: 16120942592
InitKeyboard
avworkInitialize
g_dwKbdNum: 5
\Device\KeyboardClass2 failed: 0xC0000043
\Device\KeyboardClass3 failed: 0xC0000043
FreeMemory: 16106684416
\Device\KeyboardClass4 failed: 0xC000000E
s_dwKbdClassCnt: 5
InitKeyboard end
NtSetEvent(g_hInitEvent) - 2
GetKey
CKbBuffer::Wait
CKbBuffer::Get
CKbBuffer::Get end
CKbBuffer::Wait end
ProcessArea
avfilesScanAdd *MBR0
avfilesScanAdd *BOOTC:
Loading raw access support
avfilesScanAdd *RAW:C:\ [Fs: 03e700ff, NTFS; Dev: 07, 00000020]
avfilesScanAdd *BOOTVolume{5f4514c4-6786-11e3-9106-806e6f6e6963}
avfilesScanAdd *RAW:Volume{5f4514c4-6786-11e3-9106-806e6f6e6963}\ [Fs: 03e700ff, NTFS; Dev: 07, 00000020]
avfilesScanRealMulti begin
Key: 2, 1, 0, 0, 0
GetKey end (?/1b)
CKbBuffer::Put
CKbBuffer::Put end
Aborted
avfilesScanRealMulti finished
Runtime: 902212ms
avworkClose
TerminateKbThread
CloseKeyboard
CloseKeyboard end
KbThread stop
CKbBuffer::~CKbBuffer
CKbBuffer::~CKbBuffer end
aswEnginDllMain(DLL_PROCESS_DETACH)
cmnbFree
FreeResources
CloseReport
CloseLog
Code:
27.07.2014 01:41:09 Autosandbox candidate: C:\Program Files (x86)\WinRAR\WinRAR.exe
[Source: ]
[Opened by: C:\Windows\explorer.exe]
[Reason: 0x00020000]
--> Result: Not sandboxing (because the file is trusted).
27.07.2014 01:41:10 Autosandbox candidate: C:\Program Files (x86)\WinRAR\WinRAR.exe
[Source: ]
[Opened by: C:\Windows\explorer.exe]
[Reason: 0x00020000]
--> Result: Not sandboxing (because the file is trusted).
27.07.2014 01:41:56 Autosandbox candidate: C:\Program Files (x86)\WinRAR\WinRAR.exe
[Source: ]
[Opened by: C:\Windows\explorer.exe]
[Reason: 0x00020000]
--> Result: Not sandboxing (because the file is trusted).
27.07.2014 01:48:45 Autosandbox candidate: C:\Program Files (x86)\WinRAR\WinRAR.exe
[Source: ]
[Opened by: C:\Windows\explorer.exe]
[Reason: 0x00020000]
--> Result: Not sandboxing (because the file is trusted).
27.07.2014 03:02:48 Autosandbox candidate: C:\Program Files (x86)\WinRAR\WinRAR.exe
[Source: ]
[Opened by: C:\Program Files (x86)\Mozilla Firefox\firefox.exe]
[Reason: 0x00020000]
--> Result: Not sandboxing (because the file is trusted).
Code:
26.07.2014 19:37:42 (TID: 5124)
ProductVersion: 9.0.2020.243
Mozilla Firefox Browser
Install Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Version: 30.0
Profile Path: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\
Mozilla Firefox Profiles
Name: default Path: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\3g2wwkdp.default
Google Chrome Browser
Version: 36.0.1985.125
Install Path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Profile Path: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\
Google Chrome Profiles
Name: Default Path: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default
Opera Browser
Opera Warning: Failed to find install path
Apple Safari Browser
Apple Safari Warning: Failed to access Safari
Google Chrome
Extensions
ID: aakchaleigkohafkfjfjbblobjifikek Name: ProxFlow
ID: bkeidgmehkdjmpjodpjkepolokanalkm Name: James White
ID: gighmmpiobklfepjocnamgkkbiglidom Name: AdBlock
ID: nmmhkkegccagdldgiimedpiccmgmieda Name: Google Wallet
Google Chrome
Homepages
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
Mozilla Firefox
Extensions
ID: afproxy@anchorfree.com Name: Hotspot Shield Extension
ID: {81bf1d23-5f17-408d-ac6b-bd6df7caf670} Name: iMacros for Firefox
ID: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} Name: Greasemonkey
ID: firefox@mega.co.nz Name: MEGA
ID: ich@maltegoetz.de Name: ProxTube - Unblock YouTube
ID: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} Name: Adblock Plus
ID: wrc@avast.com Name: avast! Online Security
FireFox
Homepages
Profile:
URL:
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Microsoft IE
Extensions
ID: {233c1507-6a77-46a4-9443-f871f945d258} Name: Shockwave ActiveX Control
ID: {6bf52a52-394a-11d3-b153-00c04f79faa6} Name: Windows Media Player
ID: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} Name: Java(tm) Plug-In SSV Helper
ID: {7aefe841-dca1-4a95-80cb-be935d020302} Name: ESNLaunchAx Control
ID: {7aefe841-dca1-4a95-80cb-be935d020400} Name: ESNLaunchAx Control
ID: {8856f961-340a-11d0-a96b-00c04fd705a2} Name: Microsoft Web Browser
ID: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} Name: avast! Online Security
ID: {9030d464-4c02-4abf-8ecc-5164760863c6} Name: Windows Live ID Sign-in Helper
ID: {c442ac41-9200-4770-8cc0-7cdb4f245c55} Name: Google Update Plugin
ID: {ca8a9780-280d-11cf-a24d-444553540000} Name: Adobe PDF Reader
ID: {d27cdb6e-ae6d-11cf-96b8-444553540000} Name: Shockwave Flash Object
ID: {dbc80044-a445-435b-bc74-9c25c1c588a9} Name: Java(tm) Plug-In 2 SSV Helper
ID: {eba7a1e6-e69d-4ba5-b291-95782a004604} Name: SonarAx Control
ID: {f6d90f16-9c73-11d3-b32e-00c04f990bb4} Name: XML HTTP
Homepages
HKCU: hxxp://www.google.com
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
Google Chrome
Homepages
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
FireFox
Homepages
Profile:
URL:
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Homepages
HKCU: hxxp://www.google.com
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
BCURequest:
os_language : de-de
location: de-de
osType: 6.1
browser: chrome is_default: 0
id: aakchaleigkohafkfjfjbblobjifikek name: ProxFlow
id: bkeidgmehkdjmpjodpjkepolokanalkm name: James White
id: gighmmpiobklfepjocnamgkkbiglidom name: AdBlock
id: nmmhkkegccagdldgiimedpiccmgmieda name: Google Wallet
browser: firefox is_default: 1
id: afproxy@anchorfree.com name: Hotspot Shield Extension
id: {81bf1d23-5f17-408d-ac6b-bd6df7caf670} name: iMacros for Firefox
id: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} name: Greasemonkey
id: firefox@mega.co.nz name: MEGA
id: ich@maltegoetz.de name: ProxTube - Unblock YouTube
id: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} name: Adblock Plus
id: wrc@avast.com name: avast! Online Security
browser: iexplorer is_default: 0
id: {233c1507-6a77-46a4-9443-f871f945d258} name: Shockwave ActiveX Control
id: {6bf52a52-394a-11d3-b153-00c04f79faa6} name: Windows Media Player
id: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} name: Java(tm) Plug-In SSV Helper
id: {7aefe841-dca1-4a95-80cb-be935d020302} name: ESNLaunchAx Control
id: {7aefe841-dca1-4a95-80cb-be935d020400} name: ESNLaunchAx Control
id: {8856f961-340a-11d0-a96b-00c04fd705a2} name: Microsoft Web Browser
id: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} name: avast! Online Security
id: {9030d464-4c02-4abf-8ecc-5164760863c6} name: Windows Live ID Sign-in Helper
id: {c442ac41-9200-4770-8cc0-7cdb4f245c55} name: Google Update Plugin
id: {ca8a9780-280d-11cf-a24d-444553540000} name: Adobe PDF Reader
id: {d27cdb6e-ae6d-11cf-96b8-444553540000} name: Shockwave Flash Object
id: {dbc80044-a445-435b-bc74-9c25c1c588a9} name: Java(tm) Plug-In 2 SSV Helper
id: {eba7a1e6-e69d-4ba5-b291-95782a004604} name: SonarAx Control
id: {f6d90f16-9c73-11d3-b32e-00c04f990bb4} name: XML HTTP
BCUResponse:
Browser: chrome provider_modified: 0
id: aakchaleigkohafkfjfjbblobjifikek intarnal_id: 8000 rating: 5
id: bkeidgmehkdjmpjodpjkepolokanalkm intarnal_id: 8000 rating: 5
id: gighmmpiobklfepjocnamgkkbiglidom intarnal_id: 8000 rating: 5
id: nmmhkkegccagdldgiimedpiccmgmieda intarnal_id: 5200 rating: 5
Browser: firefox provider_modified: 0
id: afproxy@anchorfree.com intarnal_id: 8000 rating: 5
id: {81bf1d23-5f17-408d-ac6b-bd6df7caf670} intarnal_id: 8000 rating: 5
id: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} intarnal_id: 8000 rating: 5
id: firefox@mega.co.nz intarnal_id: 8000 rating: 5
id: ich@maltegoetz.de intarnal_id: 8000 rating: 5
id: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} intarnal_id: 8000 rating: 5
id: wrc@avast.com intarnal_id: 1 rating: 5
Browser: iexplorer provider_modified: 0
id: {233c1507-6a77-46a4-9443-f871f945d258} intarnal_id: 8000 rating: 5
id: {6bf52a52-394a-11d3-b153-00c04f79faa6} intarnal_id: 8000 rating: 5
id: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} intarnal_id: 1 rating: 5
id: {7aefe841-dca1-4a95-80cb-be935d020302} intarnal_id: 8000 rating: 5
id: {7aefe841-dca1-4a95-80cb-be935d020400} intarnal_id: 8000 rating: 5
id: {8856f961-340a-11d0-a96b-00c04fd705a2} intarnal_id: 5200 rating: 5
id: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} intarnal_id: 1 rating: 5
id: {9030d464-4c02-4abf-8ecc-5164760863c6} intarnal_id: 5200 rating: 5
id: {c442ac41-9200-4770-8cc0-7cdb4f245c55} intarnal_id: 5200 rating: 5
id: {ca8a9780-280d-11cf-a24d-444553540000} intarnal_id: 8000 rating: 5
id: {d27cdb6e-ae6d-11cf-96b8-444553540000} intarnal_id: 8000 rating: 5
id: {dbc80044-a445-435b-bc74-9c25c1c588a9} intarnal_id: 1 rating: 5
id: {eba7a1e6-e69d-4ba5-b291-95782a004604} intarnal_id: 8000 rating: 5
id: {f6d90f16-9c73-11d3-b32e-00c04f990bb4} intarnal_id: 8000 rating: 5
Detected a potential browser protector: {
"Services" : {
"WindowsMangerProtect" : {
"Description" : "windowsmangerprotect service",
"DisplayName" : "windowsmangerprotect service",
"FileInfo" : {
"Path" : "c:\\programdata\\windowsmangerprotect\\protectwindowsmanager.exe -service",
"md5" : ""
}
}
}
}
GetInfos() data.size(): 1
Google Chrome
Homepages
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
FireFox
Homepages
Profile:
URL:
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Homepages
HKCU: hxxp://www.google.com
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
Google Chrome
Homepages
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
FireFox
Homepages
Profile:
URL:
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Homepages
HKCU: hxxp://www.google.com
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
BCUChangedRequest:
browser: chrome
provider: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
browser: firefox
homepage:
provider: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
browser: iexplorer
homepage: hxxp://www.google.com
provider: https://www.google.com/search?q={searchTerms}
Send data successful
Code:
28.07.2014 03:29:52 (TID: 5736)
ProductVersion: 9.0.2020.243
Mozilla Firefox Browser
Install Path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Version: 30.0
Profile Path: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\
Mozilla Firefox Profiles
Name: default Path: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\3g2wwkdp.default
Google Chrome Browser
Version: 36.0.1985.125
Install Path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Profile Path: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\
Google Chrome Profiles
Name: Default Path: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default
Opera Browser
Opera Warning: Failed to find install path
Apple Safari Browser
Apple Safari Warning: Failed to access Safari
Google Chrome
Extensions
ID: aakchaleigkohafkfjfjbblobjifikek Name: ProxFlow
ID: bkeidgmehkdjmpjodpjkepolokanalkm Name: James White
ID: gighmmpiobklfepjocnamgkkbiglidom Name: AdBlock
ID: nmmhkkegccagdldgiimedpiccmgmieda Name: Google Wallet
Google Chrome
Homepages
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
Mozilla Firefox
Extensions
ID: afproxy@anchorfree.com Name: Hotspot Shield Extension
ID: {81bf1d23-5f17-408d-ac6b-bd6df7caf670} Name: iMacros for Firefox
ID: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} Name: Greasemonkey
ID: firefox@mega.co.nz Name: MEGA
ID: ich@maltegoetz.de Name: ProxTube - Unblock YouTube
ID: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} Name: Adblock Plus
ID: wrc@avast.com Name: avast! Online Security
FireFox
Homepages
Profile:
URL:
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Microsoft IE
Extensions
ID: {233c1507-6a77-46a4-9443-f871f945d258} Name: Shockwave ActiveX Control
ID: {2933bf90-7b36-11d2-b20e-00c04f983e60} Name: XML DOM Document
ID: {6bf52a52-394a-11d3-b153-00c04f79faa6} Name: Windows Media Player
ID: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} Name: Java(tm) Plug-In SSV Helper
ID: {7aefe841-dca1-4a95-80cb-be935d020302} Name: ESNLaunchAx Control
ID: {7aefe841-dca1-4a95-80cb-be935d020400} Name: ESNLaunchAx Control
ID: {8856f961-340a-11d0-a96b-00c04fd705a2} Name: Microsoft Web Browser
ID: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} Name: avast! Online Security
ID: {9030d464-4c02-4abf-8ecc-5164760863c6} Name: Windows Live ID Sign-in Helper
ID: {c442ac41-9200-4770-8cc0-7cdb4f245c55} Name: Google Update Plugin
ID: {ca8a9780-280d-11cf-a24d-444553540000} Name: Adobe PDF Reader
ID: {cafeefac-dec7-0000-0001-abcdeffedcba} Name: Deployment Toolkit
ID: {d27cdb6e-ae6d-11cf-96b8-444553540000} Name: Shockwave Flash Object
ID: {dbc80044-a445-435b-bc74-9c25c1c588a9} Name: Java(tm) Plug-In 2 SSV Helper
ID: {eba7a1e6-e69d-4ba5-b291-95782a004604} Name: SonarAx Control
ID: {ed8c108e-4349-11d2-91a4-00c04f7969e8} Name: XML HTTP Request
ID: {f6d90f16-9c73-11d3-b32e-00c04f990bb4} Name: XML HTTP
Homepages
HKCU: hxxp://www.google.com
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
Search Engines
Name: Google
Url: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
Search Engines
Name: Google
Url: https://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz:official}&client=&channel=rcs&channel=fflb&channel=sb&channel=np&source=hp
Search Engines
hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
https://www.google.com/search?q={searchTerms}
Code:
26.07.2014 19:21:49 chest start
26.07.2014 19:31:42 chest stop
26.07.2014 19:31:42 Error 1717 in chestFreeHandle
26.07.2014 19:35:14 chest start
26.07.2014 22:48:24 chest stop
26.07.2014 22:48:24 Error 1717 in chestFreeHandle
26.07.2014 22:49:12 chest start
26.07.2014 22:59:47 chest stop
26.07.2014 22:59:47 Error 1717 in chestFreeHandle
26.07.2014 23:16:06 chest start
27.07.2014 00:12:12 chest stop
27.07.2014 00:13:07 chest start
27.07.2014 03:12:31 chest stop
27.07.2014 03:12:31 Error 1717 in chestFreeHandle
27.07.2014 12:08:48 chest start
27.07.2014 17:54:18 chest stop
28.07.2014 03:27:31 chest start
Code:
26.07.2014 19:21:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:21:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:21:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:21:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:21:49 Maj 6 Min 1 GetVersionEx 6.1 Stored 5.0
26.07.2014 19:21:49 [00001650] RegisterAVASFirewall preVista 0 pszProductName avast! Antivirus pszProductExe C:\Program Files\AVAST Software\Avast\VisthAux.exe firewall 0
26.07.2014 19:21:49 [00001650] WaitForWscService( 600 ) -> true
26.07.2014 19:21:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:21:49 [00001650] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
26.07.2014 19:21:49 [00001650] WaitForWscService( 600 ) -> true
26.07.2014 19:21:49 [00001650] Antivirus state 0 updatedSign 1
26.07.2014 19:21:49 [00001650] Antispyware state 0 updatedSign 1
26.07.2014 19:21:50 Aavm AUID event 4, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:23:48 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
26.07.2014 19:23:48 [00000E14] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
26.07.2014 19:23:48 [00000E14] WaitForWscService( 600 ) -> true
26.07.2014 19:23:48 [00000E14] Antivirus state 0 updatedSign 1
26.07.2014 19:23:48 [00000E14] Antispyware state 0 updatedSign 1
26.07.2014 19:23:48 The virus definitions have been automatically updated to version 140726-1.
26.07.2014 19:23:48 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:31:32 Internal error has occurred in module basSubmitFile failed! , function 0000007B.
26.07.2014 19:35:10 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:35:12 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:35:13 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:35:13 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
26.07.2014 19:35:13 [00000B78] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
26.07.2014 19:35:14 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:35:14 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 19:37:12 [00000B78] WaitForWscService( 364 ) -> true
26.07.2014 19:37:12 [00000B78] Antivirus state 0 updatedSign 1
26.07.2014 19:37:12 [00000B78] Antispyware state 0 updatedSign 1
26.07.2014 19:56:11 Internal error has occurred in module basSubmitFile failed! , function 0000007B.
26.07.2014 21:20:25 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
26.07.2014 21:20:25 [000012F0] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
26.07.2014 21:20:25 [000012F0] WaitForWscService( 600 ) -> true
26.07.2014 21:20:25 [000012F0] Antivirus state 0 updatedSign 1
26.07.2014 21:20:25 [000012F0] Antispyware state 0 updatedSign 1
26.07.2014 21:21:22 The virus definitions have been automatically updated to version 140726-2.
26.07.2014 21:21:22 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 22:49:10 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 22:49:12 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 22:49:12 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 22:49:12 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
26.07.2014 22:49:12 [00000718] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
26.07.2014 22:49:12 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 22:49:12 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 22:51:21 [00000718] WaitForWscService( 345 ) -> true
26.07.2014 22:51:21 [00000718] Antivirus state 0 updatedSign 1
26.07.2014 22:51:21 [00000718] Antispyware state 0 updatedSign 1
26.07.2014 22:59:31 Internal error has occurred in module basSubmitFile failed! , function 0000007B.
26.07.2014 23:16:02 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 23:16:03 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 23:16:05 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 23:16:05 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
26.07.2014 23:16:05 [00000504] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
26.07.2014 23:16:06 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 23:16:06 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
26.07.2014 23:18:24 [00000504] WaitForWscService( 328 ) -> true
26.07.2014 23:18:24 [00000504] Antivirus state 0 updatedSign 1
26.07.2014 23:18:24 [00000504] Antispyware state 0 updatedSign 1
27.07.2014 00:13:03 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 00:13:04 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 00:13:05 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 00:13:07 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
27.07.2014 00:13:07 [00000994] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
27.07.2014 00:13:08 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 00:13:08 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 00:15:21 [00000994] WaitForWscService( 339 ) -> true
27.07.2014 00:15:21 [00000994] Antivirus state 0 updatedSign 1
27.07.2014 00:15:23 [00000994] Antispyware state 0 updatedSign 1
27.07.2014 12:08:10 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 12:08:43 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 12:08:45 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 12:08:45 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
27.07.2014 12:08:48 [00000E68] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
27.07.2014 12:08:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 12:08:49 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
27.07.2014 12:10:44 [00000E68] WaitForWscService( 372 ) -> true
27.07.2014 12:10:44 [00000E68] Antivirus state 0 updatedSign 1
27.07.2014 12:10:44 [00000E68] Antispyware state 0 updatedSign 1
27.07.2014 12:10:51 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
27.07.2014 12:10:51 [000014E8] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
27.07.2014 12:10:51 [000014E8] WaitForWscService( 600 ) -> true
27.07.2014 12:10:51 [000014E8] Antivirus state 0 updatedSign 1
27.07.2014 12:10:51 [000014E8] Antispyware state 0 updatedSign 1
27.07.2014 12:11:04 The virus definitions have been automatically updated to version 140727-0.
27.07.2014 12:11:04 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:27:29 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:27:31 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 0, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:27:31 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:27:31 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
28.07.2014 03:27:31 [000007CC] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
28.07.2014 03:27:31 Aavm AUID event 8, product 1, ARCEn 0, rn , status 1, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:27:32 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:28:04 Aavm AUID event 8, product 1, ARCEn 0, rn , status 0, progver 150996965, Guid ed644035-be26-46bc-aba5-430c59b9e928, Auid
28.07.2014 03:28:04 Maj 6 Min 1 GetVersionEx 6.1 Stored 6.1
28.07.2014 03:28:04 [00000D80] WriteAVASFirewallStatus preVista 0 IsWin8 0 Expired 0 Firewall 0
28.07.2014 03:28:05 The virus definitions have been automatically updated to version 140727-1.
28.07.2014 03:31:27 [000007CC] WaitForWscService( 131 ) -> true
28.07.2014 03:31:28 [00000D80] WaitForWscService( 195 ) -> true
28.07.2014 03:31:28 [000007CC] Antivirus state 0 updatedSign 1
28.07.2014 03:31:28 [00000D80] Antivirus state 0 updatedSign 1
28.07.2014 03:31:28 [000007CC] Antispyware state 0 updatedSign 1
28.07.2014 03:31:28 [00000D80] Antispyware state 0 updatedSign 1
|
FRST 32-Bit | FRST 64-Bit
TDSSKiller.exe und speichere diese Datei auf dem Desktop