![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows-Update funktioniert nicht mehrWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Windows-Update funktioniert nicht mehr Liebes Trojaner-Board, da ich mir nicht sicher bin, ob die Quelle des Problems tatsächlich ein Viren/Malwarebefall ist erstmal das Posting hier: An Weihnachten habe ich mir den Rechner meines Vaters (Win7, 64Bit) angesehen und festgestellt, dass seit Oktober 2012 kein Update mehr erfolgt ist. Das gleiche war bei den Windows Security Essentials der Fall. Beides hängt sich bei der Suche nach Updates regelmäßig auf. Ebenso war im Internet Explorer die Seite Nationzoom als Startseite eingestellt. Mithilfe von Malwarebytes konnte ich Nationzoom zwar entfernen können, doch besteht das Update-Problem weiterhin (die Problem-Fix von Microsoft habe ich auch versucht, ohne Erfolg). Um dennoch mal einen Suchlauf nach Viren zu ermöglichen habe ich dann die Security Essentials deinstalliert und durch Avira ersetzt. Allerdings ohne Befund im Suchlauf. Ich hoffe ihr habt eine Idee, was das Problem sein könnte. Vielen Dank schon einmal für die Hilfe. beste Grüße Daniel Schritt 1: defogger: erledigt! Schritt 2: Farbar Recovery Scan Tool FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014 Ran by Wolfgang (administrator) on WOLFGANG-PC on 03-01-2014 12:18:31 Running from C:\Users\Wolfgang\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files (x86)\Tor\tor.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\opwareSE2.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN LLC.) C:\Users\Wolfgang\AppData\Local\VNT\vntldr.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [OpwareSE2] - C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\opwareSE2.exe [49152 2003-05-08] (ScanSoft, Inc.) HKLM-x32\...\Run: [OPSE reminder] - C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\EregGer\Ereg.ini [240 2012-08-22] () HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN) HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.) MountPoints2: {5c852899-056b-11e2-b7d6-001d7da69f5a} - E:\iStudio.exe AppInit_DLLs: C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1317152 2013-12-16] (Conduit) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1009440 2013-12-16] (Conduit) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV= HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x91C5A807377ECD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.zvab.com/ hxxp://www.google.de/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&q={searchTerms}&SSPV= BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SelectedSearchEngine: Conduit Search FF Homepage: hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV= FF NewTab: hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @java.com/DTPlugin,version=10.6.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.6.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default\searchplugins\conduit-search.xml FF Extension: No Name - C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi Chrome: ======= CHR HomePage: hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV= CHR RestoreOnStartup: "hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV=" CHR DefaultSearchKeyword: conduit.search CHR DefaultSearchProvider: Conduit Search CHR DefaultSearchURL: hxxp://search.conduit.com/Results.aspx?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&q=%s&SSPV= CHR DefaultNewTabURL: CHR Extension: (Google Docs) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Google Wallet) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1_0 CHR Extension: (Bitdefender QuickScan) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0 CHR Extension: (Gmail) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2 CHR HKLM-x32\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2251552 2013-12-16] (Conduit) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-26] () S3 WinHttpAutoProxySvc; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S1 pcbkjrjs; \??\C:\Windows\system32\drivers\pcbkjrjs.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-03 12:18 - 2014-01-03 12:19 - 00014479 _____ C:\Users\Wolfgang\Desktop\FRST.txt 2014-01-03 12:18 - 2014-01-03 12:18 - 00000000 ____D C:\FRST 2014-01-03 12:14 - 2014-01-03 12:14 - 00000478 _____ C:\Users\Wolfgang\Desktop\defogger_disable.log 2014-01-03 12:14 - 2014-01-03 12:14 - 00000000 _____ C:\Users\Wolfgang\defogger_reenable 2014-01-03 12:13 - 2014-01-03 12:13 - 00050477 _____ C:\Users\Wolfgang\Desktop\Defogger.exe 2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\SearchProtect 2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2013-12-28 19:44 - 2013-12-28 19:44 - 00696041 _____ C:\Users\Wolfgang\Documents\PaperArtistOriginal_2013-12-25_14-32-41.jpeg 2013-12-26 13:38 - 2013-12-26 13:38 - 07123640 _____ (FreeDownloadManager.ORG ) C:\fdminst.exe 2013-12-25 15:57 - 2013-12-25 15:57 - 01230364 _____ () C:\Users\Wolfgang\Desktop\Rezept Omaa.EXE 2013-12-24 18:57 - 2013-12-24 18:57 - 00347816 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe 2013-12-24 18:55 - 2013-12-24 18:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (2).exe 2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (1).exe 2013-12-24 10:51 - 2013-12-24 10:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Malwarebytes 2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-24 10:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-24 10:37 - 2013-12-24 10:42 - 00000000 ____D C:\AdwCleaner 2013-12-24 10:37 - 2013-12-24 10:37 - 01233962 _____ C:\Users\Wolfgang\Downloads\adwcleaner_3.016.exe 2013-12-24 10:31 - 2014-01-03 11:50 - 00002291 _____ C:\Windows\setupact.log 2013-12-24 10:31 - 2013-12-24 18:52 - 00107174 _____ C:\Windows\PFRO.log 2013-12-24 10:31 - 2013-12-24 10:31 - 00000000 _____ C:\Windows\setuperr.log 2013-12-24 03:10 - 2013-12-24 03:10 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\AskPartnerNetwork 2013-12-24 03:06 - 2014-01-03 12:17 - 01931750 _____ (Farbar) C:\Users\Wolfgang\Desktop\FRST64.exe 2013-12-24 03:06 - 2013-12-24 03:06 - 00377856 _____ C:\Users\Wolfgang\Downloads\gmer_2.1.19163.exe 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Avira 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\VNT 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\APN 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\VNT 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-12-24 02:46 - 2013-12-24 02:46 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\ProgramData\Avira 2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\Program Files (x86)\Avira 2013-12-24 02:45 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-24 02:45 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-24 02:45 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-24 02:45 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-12-24 02:40 - 2014-01-01 10:33 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\QuickScan 2013-12-24 02:33 - 2013-12-24 02:33 - 00179984 _____ (Kaspersky Lab) C:\Users\Wolfgang\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe 2013-12-24 02:32 - 2013-12-24 02:32 - 00185800 _____ (Лаборатория Касперского) C:\Users\Wolfgang\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5203.exe 2013-12-23 22:28 - 2013-12-23 22:28 - 00000000 ____D C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket 2013-12-23 22:27 - 2013-12-23 22:27 - 15549025 _____ C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket.zip 2013-12-23 22:18 - 2013-12-23 22:19 - 85502736 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\mpam-fe.exe 2013-12-23 22:15 - 2013-12-23 22:15 - 94700312 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\msert.exe 2013-12-23 22:09 - 2013-12-23 22:09 - 00000000 ____D C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4 2013-12-23 22:08 - 2013-12-23 22:08 - 00053422 _____ C:\Users\Wolfgang\Documents\cc_20131223_220832.reg 2013-12-23 22:05 - 2013-12-23 22:06 - 24361353 _____ C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4.zip 2013-12-23 22:02 - 2013-12-23 22:02 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-23 22:01 - 2013-12-23 22:02 - 00000000 ____D C:\Program Files\CCleaner 2013-12-23 22:01 - 2013-12-23 22:01 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-12-23 22:00 - 2013-12-23 22:02 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim (1).exe 2013-12-23 22:00 - 2013-12-23 22:01 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim.exe 2013-12-23 21:51 - 2013-12-23 21:52 - 129598176 _____ C:\Users\Wolfgang\Downloads\avira_free_antivirus_de.exe 2013-12-10 13:01 - 2013-12-10 13:01 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-09 13:05 - 2013-12-09 13:05 - 00002992 _____ C:\Windows\System32\Tasks\{5E070436-74A7-4350-9A69-C8355E6E3609} 2013-12-06 15:33 - 2013-12-06 15:33 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-06 14:59 - 2013-12-06 14:59 - 00001037 _____ C:\Users\Public\Desktop\VideoPlayer.lnk 2013-12-06 14:24 - 2013-12-06 14:24 - 00000000 ____D C:\0f242c2b0e96c5d7b648085c9a9c351e 2013-12-06 14:23 - 2013-12-06 14:59 - 00000000 ____D C:\Program Files (x86)\VideoPlayer 2013-12-06 14:23 - 2013-12-06 14:24 - 00000000 ____D C:\c672906bcf378af6e9fbf8b8d9d6e0 ==================== One Month Modified Files and Folders ======= 2014-01-03 12:19 - 2014-01-03 12:18 - 00014479 _____ C:\Users\Wolfgang\Desktop\FRST.txt 2014-01-03 12:18 - 2014-01-03 12:18 - 00000000 ____D C:\FRST 2014-01-03 12:17 - 2013-12-24 03:06 - 01931750 _____ (Farbar) C:\Users\Wolfgang\Desktop\FRST64.exe 2014-01-03 12:14 - 2014-01-03 12:14 - 00000478 _____ C:\Users\Wolfgang\Desktop\defogger_disable.log 2014-01-03 12:14 - 2014-01-03 12:14 - 00000000 _____ C:\Users\Wolfgang\defogger_reenable 2014-01-03 12:14 - 2012-08-19 13:47 - 00000000 ____D C:\Users\Wolfgang 2014-01-03 12:13 - 2014-01-03 12:13 - 00050477 _____ C:\Users\Wolfgang\Desktop\Defogger.exe 2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\SearchProtect 2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Program Files (x86)\SearchProtect 2014-01-03 12:00 - 2012-08-24 16:14 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-03 11:58 - 2009-07-14 05:45 - 00014640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-03 11:58 - 2009-07-14 05:45 - 00014640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-03 11:54 - 2012-08-19 13:41 - 01379633 _____ C:\Windows\WindowsUpdate.log 2014-01-03 11:50 - 2013-12-24 10:31 - 00002291 _____ C:\Windows\setupact.log 2014-01-03 11:50 - 2012-08-24 16:14 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-03 11:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-03 11:01 - 2012-08-19 19:39 - 00000000 ____D C:\Users\Wolfgang\Documents\Outlook-Dateien 2014-01-01 10:33 - 2013-12-24 02:40 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\QuickScan 2013-12-30 19:12 - 2013-05-09 12:27 - 00010506 _____ C:\Users\Wolfgang\Documents\Mappe2gold.xlsx 2013-12-30 19:06 - 2013-08-16 17:50 - 00011635 _____ C:\Users\Wolfgang\Desktop\Mappe wertpap.xlsx 2013-12-29 22:14 - 2012-11-21 14:02 - 00470528 _____ C:\Users\Wolfgang\Desktop\Mappe1 bücher.xls 2013-12-29 18:20 - 2012-09-04 19:50 - 00001634 _____ C:\cap.ini 2013-12-29 18:20 - 2012-09-04 19:50 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Canon 2013-12-29 18:20 - 2012-08-22 09:43 - 00010835 _____ C:\NsScanforTest.ini 2013-12-29 18:08 - 2012-08-22 09:43 - 00000000 ___SD C:\Users\Wolfgang\Documents\My PageManager 2013-12-28 19:44 - 2013-12-28 19:44 - 00696041 _____ C:\Users\Wolfgang\Documents\PaperArtistOriginal_2013-12-25_14-32-41.jpeg 2013-12-26 13:38 - 2013-12-26 13:38 - 07123640 _____ (FreeDownloadManager.ORG ) C:\fdminst.exe 2013-12-25 15:57 - 2013-12-25 15:57 - 01230364 _____ () C:\Users\Wolfgang\Desktop\Rezept Omaa.EXE 2013-12-25 15:50 - 2012-08-27 08:52 - 00017111 _____ C:\Users\Wolfgang\Sti_Trace.log 2013-12-24 18:57 - 2013-12-24 18:57 - 00347816 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe 2013-12-24 18:55 - 2013-12-24 18:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (2).exe 2013-12-24 18:52 - 2013-12-24 10:31 - 00107174 _____ C:\Windows\PFRO.log 2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (1).exe 2013-12-24 10:51 - 2013-12-24 10:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Malwarebytes 2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-24 10:42 - 2013-12-24 10:37 - 00000000 ____D C:\AdwCleaner 2013-12-24 10:41 - 2013-11-20 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-24 10:41 - 2012-08-19 13:50 - 00001001 _____ C:\Users\Wolfgang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-24 10:37 - 2013-12-24 10:37 - 01233962 _____ C:\Users\Wolfgang\Downloads\adwcleaner_3.016.exe 2013-12-24 10:31 - 2013-12-24 10:31 - 00000000 _____ C:\Windows\setuperr.log 2013-12-24 03:10 - 2013-12-24 03:10 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\AskPartnerNetwork 2013-12-24 03:06 - 2013-12-24 03:06 - 00377856 _____ C:\Users\Wolfgang\Downloads\gmer_2.1.19163.exe 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Avira 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\VNT 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\APN 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\VNT 2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-12-24 02:46 - 2013-12-24 02:46 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\ProgramData\Avira 2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\Program Files (x86)\Avira 2013-12-24 02:42 - 2012-08-19 19:22 - 00001912 _____ C:\Windows\epplauncher.mif 2013-12-24 02:33 - 2013-12-24 02:33 - 00179984 _____ (Kaspersky Lab) C:\Users\Wolfgang\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe 2013-12-24 02:32 - 2013-12-24 02:32 - 00185800 _____ (Лаборатория Касперского) C:\Users\Wolfgang\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5203.exe 2013-12-23 22:43 - 2012-08-19 13:48 - 00000000 ___RD C:\Users\Wolfgang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-23 22:28 - 2013-12-23 22:28 - 00000000 ____D C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket 2013-12-23 22:27 - 2013-12-23 22:27 - 15549025 _____ C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket.zip 2013-12-23 22:19 - 2013-12-23 22:18 - 85502736 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\mpam-fe.exe 2013-12-23 22:15 - 2013-12-23 22:15 - 94700312 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\msert.exe 2013-12-23 22:09 - 2013-12-23 22:09 - 00000000 ____D C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4 2013-12-23 22:08 - 2013-12-23 22:08 - 00053422 _____ C:\Users\Wolfgang\Documents\cc_20131223_220832.reg 2013-12-23 22:07 - 2013-06-21 13:49 - 00000000 ___DC C:\Users\Wolfgang\AppData\Local\MigWiz 2013-12-23 22:07 - 2012-08-22 13:20 - 00000000 ____D C:\Windows\Minidump 2013-12-23 22:07 - 2012-08-19 14:37 - 00000000 ____D C:\Windows\Panther 2013-12-23 22:06 - 2013-12-23 22:05 - 24361353 _____ C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4.zip 2013-12-23 22:02 - 2013-12-23 22:02 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-12-23 22:02 - 2013-12-23 22:01 - 00000000 ____D C:\Program Files\CCleaner 2013-12-23 22:02 - 2013-12-23 22:00 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim (1).exe 2013-12-23 22:01 - 2013-12-23 22:01 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-12-23 22:01 - 2013-12-23 22:00 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim.exe 2013-12-23 21:52 - 2013-12-23 21:51 - 129598176 _____ C:\Users\Wolfgang\Downloads\avira_free_antivirus_de.exe 2013-12-20 22:34 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-18 17:28 - 2012-11-27 13:15 - 00000000 ____D C:\Users\Wolfgang\Downloads\neue-fuehrerscheinregeln-ab-januar-2013-a-865665_files 2013-12-18 17:28 - 2012-08-19 14:05 - 00000000 __RHD C:\MSOCache 2013-12-18 17:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-18 17:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-12-10 13:01 - 2013-12-10 13:01 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-10 13:01 - 2012-08-24 16:14 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-09 13:05 - 2013-12-09 13:05 - 00002992 _____ C:\Windows\System32\Tasks\{5E070436-74A7-4350-9A69-C8355E6E3609} 2013-12-09 11:37 - 2013-12-24 02:45 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-09 11:37 - 2013-12-24 02:45 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-09 11:37 - 2013-12-24 02:45 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-09 11:37 - 2013-12-24 02:45 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-12-06 19:31 - 2012-08-24 16:14 - 00000000 ____D C:\Program Files\Google 2013-12-06 18:55 - 2012-08-24 16:14 - 00004110 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-06 18:55 - 2012-08-24 16:14 - 00003858 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-06 15:33 - 2013-12-06 15:33 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-06 15:08 - 2012-08-24 16:14 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\Google 2013-12-06 14:59 - 2013-12-06 14:59 - 00001037 _____ C:\Users\Public\Desktop\VideoPlayer.lnk 2013-12-06 14:59 - 2013-12-06 14:23 - 00000000 ____D C:\Program Files (x86)\VideoPlayer 2013-12-06 14:24 - 2013-12-06 14:24 - 00000000 ____D C:\0f242c2b0e96c5d7b648085c9a9c351e 2013-12-06 14:24 - 2013-12-06 14:23 - 00000000 ____D C:\c672906bcf378af6e9fbf8b8d9d6e0 2013-12-06 14:10 - 2012-11-03 16:25 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Mozilla 2013-12-06 13:25 - 2013-04-22 12:52 - 00000000 ____D C:\Users\Wolfgang\LexsoftNV 2013-12-06 13:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-12-06 13:24 - 2012-11-03 16:25 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\Mozilla Some content of TEMP: ==================== C:\Users\Wolfgang\AppData\Local\Temp\avgnt.exe C:\Users\Wolfgang\AppData\Local\Temp\dlLogic.exe C:\Users\Wolfgang\AppData\Local\Temp\GCVerifier.dll C:\Users\Wolfgang\AppData\Local\Temp\mpam-c639a2a3.exe C:\Users\Wolfgang\AppData\Local\Temp\nsb7E8C.exe C:\Users\Wolfgang\AppData\Local\Temp\nsd5141.exe C:\Users\Wolfgang\AppData\Local\Temp\nsj84C8.exe C:\Users\Wolfgang\AppData\Local\Temp\nsm4D87.exe C:\Users\Wolfgang\AppData\Local\Temp\nsq49FC.exe C:\Users\Wolfgang\AppData\Local\Temp\nsx817B.exe C:\Users\Wolfgang\AppData\Local\Temp\Offercast_AVIRAV7_.exe C:\Users\Wolfgang\AppData\Local\Temp\Quarantine.exe C:\Users\Wolfgang\AppData\Local\Temp\verifier.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-31 13:13 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2014 Ran by Wolfgang at 2014-01-03 12:19:59 Running from C:\Users\Wolfgang\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224 - Adobe Systems Incorporated) Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated) AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Fuel (Version: 2012.0806.1213.19931 - Ihr Firmenname) Hidden AMD Media Foundation Decoders (Version: 1.0.70727.2220 - Advanced Micro Devices, Inc.) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0806.1213.19931 - Ihr Firmenname) Hidden ArcSoft PhotoStudio 5.5 (x32 Version: - ArcSoft) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Avira SearchFree Toolbar (x32 Version: 12.10.0.2951 - APN, LLC) Canon CanoScan Toolbox 4.8 (x32 Version: - ) CanoScan Toolbox Ver4.9 (x32 Version: - ) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden CCleaner (Version: 4.09 - Piriform) Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version: - Microsoft) Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Earth (x32 Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Java 7 Update 6 (64-bit) (Version: 7.0.60 - Oracle) LEXsoft Professional 3.1 (x32 Version: 3.1 - Wolters Kluwer Deutschland Information Services GmbH) Luchterhand - BGB-Kommentar (x32 Version: - ) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Manual CanoScan 8400F (x32 Version: - ) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 25.0.1 (x86 en-US) (x32 Version: 25.0.1 - Mozilla) OmniPage SE (x32 Version: 2.00.0004 - ScanSoft, Inc.) PDF Creator (Version: - ) Presto! PageManager 6.11 (x32 Version: - ) Search Protect (x32 Version: 2.9.8.2 - Conduit) <==== ATTENTION Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553065) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553270) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2566458) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition (Version: - Microsoft) Update for Microsoft Word 2010 (KB2827323) 64-Bit Edition (Version: - Microsoft) WPM17.8.0.3159 (x32 Version: 17.8.0.3159 - Cherished Technololgy LIMITED) <==== ATTENTION ==================== Restore Points ========================= 23-12-2013 22:25:07 Geplanter Prüfpunkt 31-12-2013 12:21:01 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {040749C4-6B5F-4DC0-B6C3-0C31D3A9CDF0} - System32\Tasks\{0C46A6D5-BD7D-4E04-89CF-6607E86F56F0} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation) Task: {208B3054-AC2C-49C4-91A6-4B3899F17809} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {248D21D8-8AAA-447B-97BB-52743A613F66} - System32\Tasks\{B0145DE3-9B09-42CB-9F39-7800B3B27D3C} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation) Task: {51AE6573-2F9E-4675-84F0-F5A4DAB44736} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {5369F6B3-33D3-4FE8-9B8C-D65257B99A3D} - \AdobeFlashPlayerUpdate 2 No Task File Task: {6B5D6E97-4415-4F4F-A65B-2A1A7C40ACC0} - System32\Tasks\{446FF916-31EE-4219-BBE6-DFEC888AB461} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation) Task: {6F8BD911-FDDB-491E-A2C6-E80CEB746210} - System32\Tasks\{C3FDBB07-247A-4543-9420-E4B82F2BCF25} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation) Task: {7A270E09-72D3-495F-BEB1-4746BECB496F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-24] (Google Inc.) Task: {8FD7BF64-D64D-40A5-8ED2-6F0C0B4B3DB2} - System32\Tasks\{4E1D2BD7-77BE-4299-8F8A-393A7CBDBB32} => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe [2013-09-03] (Adobe Systems Incorporated) Task: {999A20E9-C350-4756-A449-BEF2A2A1EE1C} - System32\Tasks\{09118475-EABC-4902-BD7B-0059C7837A15} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation) Task: {C3D44332-BD26-4138-B615-87282A57C84C} - \AdobeFlashPlayerUpdate No Task File Task: {C40088C5-2529-4BAC-A3D7-0AD7C508296D} - System32\Tasks\{628B8465-4DB0-43D2-B8C6-599E7A803493} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation) Task: {E015CFAA-50E3-4103-9EED-7BB84760169C} - System32\Tasks\{1746E9A8-C501-45A8-A7B8-14AEDA36A027} => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe [2013-09-03] (Adobe Systems Incorporated) Task: {FB7F824B-FB37-4245-BFE9-CAB2E5A608A0} - System32\Tasks\{5E070436-74A7-4350-9A69-C8355E6E3609} => C:\Users\Wolfgang\Documents\My PageManager\AutumnView.EXE Task: {FCBDFB40-539D-4107-85A7-7C502AA0FBF1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-24] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2012-08-06 11:24 - 2012-08-06 11:24 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2012-08-06 11:07 - 2012-08-06 11:07 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2013-12-24 02:45 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2011-03-16 23:11 - 2011-03-16 23:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2013-12-06 15:33 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-06 15:33 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-06 15:33 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-06 15:33 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-06 15:33 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-12-06 15:33 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/03/2014 11:09:39 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x668 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (01/02/2014 06:50:12 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x64c Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (01/02/2014 00:10:02 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x668 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (01/02/2014 11:10:08 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x668 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (01/01/2014 06:45:58 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x670 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (01/01/2014 10:37:10 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x67c Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (12/31/2013 06:03:42 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x668 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (12/31/2013 10:36:07 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x670 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (12/30/2013 07:16:05 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x664 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 Error: (12/30/2013 07:08:45 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5 Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000033c1 ID des fehlerhaften Prozesses: 0x670 Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0 Pfad der fehlerhaften Anwendung: Fuel.Service.exe1 Pfad des fehlerhaften Moduls: Fuel.Service.exe2 Berichtskennung: Fuel.Service.exe3 System errors: ============= Error: (01/03/2014 00:03:28 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:53:58 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:51:38 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:51:28 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:51:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:09:39 AM) (Source: Service Control Manager) (User: ) Description: Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (01/03/2014 11:09:38 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (01/03/2014 11:08:28 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:08:08 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Error: (01/03/2014 11:07:53 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: %%2 Microsoft Office Sessions: ========================= Error: (01/03/2014 11:09:39 AM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf086a84e3afdbC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll275126f4-745f-11e3-8661-001d7da69f5a Error: (01/02/2014 06:50:12 PM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c164c01cf07e1d29b4ceaC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll53d8de5e-73d6-11e3-a418-001d7da69f5a Error: (01/02/2014 00:10:02 PM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf07a9f1f05dcaC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll6cb28a8e-739e-11e3-be3a-001d7da69f5a Error: (01/02/2014 11:10:08 AM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf079f091a4ec1C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll0e8eeca3-7396-11e3-b386-001d7da69f5a Error: (01/01/2014 06:45:58 PM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167001cf071884232cd7C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll91f85c2c-730c-11e3-8431-001d7da69f5a Error: (01/01/2014 10:37:10 AM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167c01cf06d3d3bf5558C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll4936b1d6-72c8-11e3-96f1-001d7da69f5a Error: (12/31/2013 06:03:42 PM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf061cc0b470faC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll80214536-723d-11e3-8f31-001d7da69f5a Error: (12/31/2013 10:36:07 AM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167001cf060a063ee9f5C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dllf8d21604-71fe-11e3-9b11-001d7da69f5a Error: (12/30/2013 07:16:05 PM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166401cf058a640cee63C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll725fe1c3-717e-11e3-9a9d-001d7da69f5a Error: (12/30/2013 07:08:45 PM) (Source: Application Error)(User: ) Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167001cf0583c32ab42cC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll6b89b043-717d-11e3-9912-001d7da69f5a ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 4095.55 MB Available physical RAM: 2565.52 MB Total Pagefile: 8189.29 MB Available Pagefile: 5875.7 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:64.52 GB) (Free:18.39 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: (Daten) (Fixed) (Total:10.01 GB) (Free:9.94 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 75 GB) (Disk ID: CCCDCCCD) Partition 1: (Active) - (Size=65 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2014-01-03 12:35:51 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000060 WDC_WD80 rev.06.0 74,53GB Running: gmer_2.1.19163 (1).exe; Driver: C:\Users\Wolfgang\AppData\Local\Temp\fwdyikob.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000754e1465 2 bytes [4E, 75] .text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754e14bb 2 bytes [4E, 75] .text ... * 2 .text C:\Users\Wolfgang\AppData\Local\VNT\vntldr.exe[2640] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000754e1465 2 bytes [4E, 75] .text C:\Users\Wolfgang\AppData\Local\VNT\vntldr.exe[2640] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754e14bb 2 bytes [4E, 75] .text ... * 2 .text C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000754e1465 2 bytes [4E, 75] .text C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754e14bb 2 bytes [4E, 75] .text ... * 2 .text C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[4708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000754e1465 2 bytes [4E, 75] .text C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[4708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754e14bb 2 bytes [4E, 75] .text ... * 2 .text C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[4196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000754e1465 2 bytes [4E, 75] .text C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[4196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754e14bb 2 bytes [4E, 75] .text ... * 2 ---- EOF - GMER 2.1 ---- |
Themen zu Windows-Update funktioniert nicht mehr |
antivir, avira, branding, browser, ccsetup, excel, flash player, funktioniert nicht mehr, helper, homepage, iexplore.exe, internet, internet explorer, kaspersky, mozilla, nationzoom, nationzoom entfernen, newtab, ohne befund, plug-in, pup.optional.conduit.a, registry, rundll, scan, software, svchost.exe, system, updates, windows |