Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows-Update funktioniert nicht mehr

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 03.01.2014, 12:39   #1
tylerfolk
 
Windows-Update funktioniert nicht mehr - Standard

Windows-Update funktioniert nicht mehr



Liebes Trojaner-Board,

da ich mir nicht sicher bin, ob die Quelle des Problems tatsächlich ein Viren/Malwarebefall ist erstmal das Posting hier: An Weihnachten habe ich mir den Rechner meines Vaters (Win7, 64Bit) angesehen und festgestellt, dass seit Oktober 2012 kein Update mehr erfolgt ist. Das gleiche war bei den Windows Security Essentials der Fall. Beides hängt sich bei der Suche nach Updates regelmäßig auf. Ebenso war im Internet Explorer die Seite Nationzoom als Startseite eingestellt. Mithilfe von Malwarebytes konnte ich Nationzoom zwar entfernen können, doch besteht das Update-Problem weiterhin (die Problem-Fix von Microsoft habe ich auch versucht, ohne Erfolg). Um dennoch mal einen Suchlauf nach Viren zu ermöglichen habe ich dann die Security Essentials deinstalliert und durch Avira ersetzt. Allerdings ohne Befund im Suchlauf.
Ich hoffe ihr habt eine Idee, was das Problem sein könnte. Vielen Dank schon einmal für die Hilfe.

beste Grüße
Daniel

Schritt 1: defogger: erledigt!

Schritt 2: Farbar Recovery Scan Tool
FRST
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by Wolfgang (administrator) on WOLFGANG-PC on 03-01-2014 12:18:31
Running from C:\Users\Wolfgang\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Tor\tor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\opwareSE2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(APN LLC.) C:\Users\Wolfgang\AppData\Local\VNT\vntldr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [OpwareSE2] - C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\opwareSE2.exe [49152 2003-05-08] (ScanSoft, Inc.)
HKLM-x32\...\Run: [OPSE reminder] - C:\Program Files (x86)\ScanSoft\OmniPageSE2.0\EregGer\Ereg.ini [240 2012-08-22] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.)
MountPoints2: {5c852899-056b-11e2-b7d6-001d7da69f5a} - E:\iStudio.exe
AppInit_DLLs: C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1317152 2013-12-16] (Conduit)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1009440 2013-12-16] (Conduit)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x91C5A807377ECD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.zvab.com/
hxxp://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&q={searchTerms}&SSPV=
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: Conduit Search
FF Homepage: hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV=
FF NewTab: hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.6.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.6.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default\searchplugins\conduit-search.xml
FF Extension: No Name - C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\wjokoj0y.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV=
CHR RestoreOnStartup: "hxxp://search.conduit.com/?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&SSPV="
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: hxxp://search.conduit.com/Results.aspx?ctid=CT3318155&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPEA41F654-6BEF-4AC6-95A5-73BDEAE9F245&q=%s&SSPV=
CHR DefaultNewTabURL: 
CHR Extension: (Google Docs) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0
CHR Extension: (Gmail) - C:\Users\Wolfgang\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2
CHR HKLM-x32\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2251552 2013-12-16] (Conduit)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-26] ()
S3 WinHttpAutoProxySvc; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 pcbkjrjs; \??\C:\Windows\system32\drivers\pcbkjrjs.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-03 12:18 - 2014-01-03 12:19 - 00014479 _____ C:\Users\Wolfgang\Desktop\FRST.txt
2014-01-03 12:18 - 2014-01-03 12:18 - 00000000 ____D C:\FRST
2014-01-03 12:14 - 2014-01-03 12:14 - 00000478 _____ C:\Users\Wolfgang\Desktop\defogger_disable.log
2014-01-03 12:14 - 2014-01-03 12:14 - 00000000 _____ C:\Users\Wolfgang\defogger_reenable
2014-01-03 12:13 - 2014-01-03 12:13 - 00050477 _____ C:\Users\Wolfgang\Desktop\Defogger.exe
2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\SearchProtect
2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-12-28 19:44 - 2013-12-28 19:44 - 00696041 _____ C:\Users\Wolfgang\Documents\PaperArtistOriginal_2013-12-25_14-32-41.jpeg
2013-12-26 13:38 - 2013-12-26 13:38 - 07123640 _____ (FreeDownloadManager.ORG                                     ) C:\fdminst.exe
2013-12-25 15:57 - 2013-12-25 15:57 - 01230364 _____ () C:\Users\Wolfgang\Desktop\Rezept Omaa.EXE
2013-12-24 18:57 - 2013-12-24 18:57 - 00347816 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe
2013-12-24 18:55 - 2013-12-24 18:55 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-12-24 10:51 - 2013-12-24 10:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Malwarebytes
2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-24 10:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-24 10:37 - 2013-12-24 10:42 - 00000000 ____D C:\AdwCleaner
2013-12-24 10:37 - 2013-12-24 10:37 - 01233962 _____ C:\Users\Wolfgang\Downloads\adwcleaner_3.016.exe
2013-12-24 10:31 - 2014-01-03 11:50 - 00002291 _____ C:\Windows\setupact.log
2013-12-24 10:31 - 2013-12-24 18:52 - 00107174 _____ C:\Windows\PFRO.log
2013-12-24 10:31 - 2013-12-24 10:31 - 00000000 _____ C:\Windows\setuperr.log
2013-12-24 03:10 - 2013-12-24 03:10 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\AskPartnerNetwork
2013-12-24 03:06 - 2014-01-03 12:17 - 01931750 _____ (Farbar) C:\Users\Wolfgang\Desktop\FRST64.exe
2013-12-24 03:06 - 2013-12-24 03:06 - 00377856 _____ C:\Users\Wolfgang\Downloads\gmer_2.1.19163.exe
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Avira
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\VNT
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\APN
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\VNT
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-24 02:46 - 2013-12-24 02:46 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\ProgramData\Avira
2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-24 02:45 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-24 02:45 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-24 02:45 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-24 02:45 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-24 02:40 - 2014-01-01 10:33 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\QuickScan
2013-12-24 02:33 - 2013-12-24 02:33 - 00179984 _____ (Kaspersky Lab) C:\Users\Wolfgang\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-12-24 02:32 - 2013-12-24 02:32 - 00185800 _____ (Лаборатория Касперского) C:\Users\Wolfgang\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5203.exe
2013-12-23 22:28 - 2013-12-23 22:28 - 00000000 ____D C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket
2013-12-23 22:27 - 2013-12-23 22:27 - 15549025 _____ C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket.zip
2013-12-23 22:18 - 2013-12-23 22:19 - 85502736 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\mpam-fe.exe
2013-12-23 22:15 - 2013-12-23 22:15 - 94700312 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\msert.exe
2013-12-23 22:09 - 2013-12-23 22:09 - 00000000 ____D C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4
2013-12-23 22:08 - 2013-12-23 22:08 - 00053422 _____ C:\Users\Wolfgang\Documents\cc_20131223_220832.reg
2013-12-23 22:05 - 2013-12-23 22:06 - 24361353 _____ C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4.zip
2013-12-23 22:02 - 2013-12-23 22:02 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-23 22:01 - 2013-12-23 22:02 - 00000000 ____D C:\Program Files\CCleaner
2013-12-23 22:01 - 2013-12-23 22:01 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-23 22:00 - 2013-12-23 22:02 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim (1).exe
2013-12-23 22:00 - 2013-12-23 22:01 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim.exe
2013-12-23 21:51 - 2013-12-23 21:52 - 129598176 _____ C:\Users\Wolfgang\Downloads\avira_free_antivirus_de.exe
2013-12-10 13:01 - 2013-12-10 13:01 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-09 13:05 - 2013-12-09 13:05 - 00002992 _____ C:\Windows\System32\Tasks\{5E070436-74A7-4350-9A69-C8355E6E3609}
2013-12-06 15:33 - 2013-12-06 15:33 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-06 14:59 - 2013-12-06 14:59 - 00001037 _____ C:\Users\Public\Desktop\VideoPlayer.lnk
2013-12-06 14:24 - 2013-12-06 14:24 - 00000000 ____D C:\0f242c2b0e96c5d7b648085c9a9c351e
2013-12-06 14:23 - 2013-12-06 14:59 - 00000000 ____D C:\Program Files (x86)\VideoPlayer
2013-12-06 14:23 - 2013-12-06 14:24 - 00000000 ____D C:\c672906bcf378af6e9fbf8b8d9d6e0

==================== One Month Modified Files and Folders =======

2014-01-03 12:19 - 2014-01-03 12:18 - 00014479 _____ C:\Users\Wolfgang\Desktop\FRST.txt
2014-01-03 12:18 - 2014-01-03 12:18 - 00000000 ____D C:\FRST
2014-01-03 12:17 - 2013-12-24 03:06 - 01931750 _____ (Farbar) C:\Users\Wolfgang\Desktop\FRST64.exe
2014-01-03 12:14 - 2014-01-03 12:14 - 00000478 _____ C:\Users\Wolfgang\Desktop\defogger_disable.log
2014-01-03 12:14 - 2014-01-03 12:14 - 00000000 _____ C:\Users\Wolfgang\defogger_reenable
2014-01-03 12:14 - 2012-08-19 13:47 - 00000000 ____D C:\Users\Wolfgang
2014-01-03 12:13 - 2014-01-03 12:13 - 00050477 _____ C:\Users\Wolfgang\Desktop\Defogger.exe
2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\SearchProtect
2014-01-03 12:12 - 2014-01-03 12:12 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2014-01-03 12:00 - 2012-08-24 16:14 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-03 11:58 - 2009-07-14 05:45 - 00014640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-03 11:58 - 2009-07-14 05:45 - 00014640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-03 11:54 - 2012-08-19 13:41 - 01379633 _____ C:\Windows\WindowsUpdate.log
2014-01-03 11:50 - 2013-12-24 10:31 - 00002291 _____ C:\Windows\setupact.log
2014-01-03 11:50 - 2012-08-24 16:14 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-03 11:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-03 11:01 - 2012-08-19 19:39 - 00000000 ____D C:\Users\Wolfgang\Documents\Outlook-Dateien
2014-01-01 10:33 - 2013-12-24 02:40 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\QuickScan
2013-12-30 19:12 - 2013-05-09 12:27 - 00010506 _____ C:\Users\Wolfgang\Documents\Mappe2gold.xlsx
2013-12-30 19:06 - 2013-08-16 17:50 - 00011635 _____ C:\Users\Wolfgang\Desktop\Mappe  wertpap.xlsx
2013-12-29 22:14 - 2012-11-21 14:02 - 00470528 _____ C:\Users\Wolfgang\Desktop\Mappe1 bücher.xls
2013-12-29 18:20 - 2012-09-04 19:50 - 00001634 _____ C:\cap.ini
2013-12-29 18:20 - 2012-09-04 19:50 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Canon
2013-12-29 18:20 - 2012-08-22 09:43 - 00010835 _____ C:\NsScanforTest.ini
2013-12-29 18:08 - 2012-08-22 09:43 - 00000000 ___SD C:\Users\Wolfgang\Documents\My PageManager
2013-12-28 19:44 - 2013-12-28 19:44 - 00696041 _____ C:\Users\Wolfgang\Documents\PaperArtistOriginal_2013-12-25_14-32-41.jpeg
2013-12-26 13:38 - 2013-12-26 13:38 - 07123640 _____ (FreeDownloadManager.ORG                                     ) C:\fdminst.exe
2013-12-25 15:57 - 2013-12-25 15:57 - 01230364 _____ () C:\Users\Wolfgang\Desktop\Rezept Omaa.EXE
2013-12-25 15:50 - 2012-08-27 08:52 - 00017111 _____ C:\Users\Wolfgang\Sti_Trace.log
2013-12-24 18:57 - 2013-12-24 18:57 - 00347816 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe
2013-12-24 18:55 - 2013-12-24 18:55 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (2).exe
2013-12-24 18:52 - 2013-12-24 10:31 - 00107174 _____ C:\Windows\PFRO.log
2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-24 10:51 - 2013-12-24 10:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Wolfgang\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-12-24 10:51 - 2013-12-24 10:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Malwarebytes
2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-24 10:51 - 2013-12-24 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-24 10:42 - 2013-12-24 10:37 - 00000000 ____D C:\AdwCleaner
2013-12-24 10:41 - 2013-11-20 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-24 10:41 - 2012-08-19 13:50 - 00001001 _____ C:\Users\Wolfgang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-24 10:37 - 2013-12-24 10:37 - 01233962 _____ C:\Users\Wolfgang\Downloads\adwcleaner_3.016.exe
2013-12-24 10:31 - 2013-12-24 10:31 - 00000000 _____ C:\Windows\setuperr.log
2013-12-24 03:10 - 2013-12-24 03:10 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\AskPartnerNetwork
2013-12-24 03:06 - 2013-12-24 03:06 - 00377856 _____ C:\Users\Wolfgang\Downloads\gmer_2.1.19163.exe
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Avira
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\VNT
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\ProgramData\APN
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\VNT
2013-12-24 02:47 - 2013-12-24 02:47 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2013-12-24 02:46 - 2013-12-24 02:46 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\ProgramData\Avira
2013-12-24 02:45 - 2013-12-24 02:45 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-24 02:42 - 2012-08-19 19:22 - 00001912 _____ C:\Windows\epplauncher.mif
2013-12-24 02:33 - 2013-12-24 02:33 - 00179984 _____ (Kaspersky Lab) C:\Users\Wolfgang\Downloads\kss12.0.1.117mlg_en-de_ru-de_fr-de_de-de.exe
2013-12-24 02:32 - 2013-12-24 02:32 - 00185800 _____ (Лаборатория Касперского) C:\Users\Wolfgang\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5203.exe
2013-12-23 22:43 - 2012-08-19 13:48 - 00000000 ___RD C:\Users\Wolfgang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-23 22:28 - 2013-12-23 22:28 - 00000000 ____D C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket
2013-12-23 22:27 - 2013-12-23 22:27 - 15549025 _____ C:\Users\Wolfgang\Downloads\Microsoft_Fix-it-Paket.zip
2013-12-23 22:19 - 2013-12-23 22:18 - 85502736 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\mpam-fe.exe
2013-12-23 22:15 - 2013-12-23 22:15 - 94700312 _____ (Microsoft Corporation) C:\Users\Wolfgang\Downloads\msert.exe
2013-12-23 22:09 - 2013-12-23 22:09 - 00000000 ____D C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4
2013-12-23 22:08 - 2013-12-23 22:08 - 00053422 _____ C:\Users\Wolfgang\Documents\cc_20131223_220832.reg
2013-12-23 22:07 - 2013-06-21 13:49 - 00000000 ___DC C:\Users\Wolfgang\AppData\Local\MigWiz
2013-12-23 22:07 - 2012-08-22 13:20 - 00000000 ____D C:\Windows\Minidump
2013-12-23 22:07 - 2012-08-19 14:37 - 00000000 ____D C:\Windows\Panther
2013-12-23 22:06 - 2013-12-23 22:05 - 24361353 _____ C:\Users\Wolfgang\Downloads\MicrosoftSecurityEssentials-4.4.zip
2013-12-23 22:02 - 2013-12-23 22:02 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-23 22:02 - 2013-12-23 22:01 - 00000000 ____D C:\Program Files\CCleaner
2013-12-23 22:02 - 2013-12-23 22:00 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim (1).exe
2013-12-23 22:01 - 2013-12-23 22:01 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-23 22:01 - 2013-12-23 22:00 - 03571656 _____ (Piriform Ltd) C:\Users\Wolfgang\Downloads\ccsetup409_slim.exe
2013-12-23 21:52 - 2013-12-23 21:51 - 129598176 _____ C:\Users\Wolfgang\Downloads\avira_free_antivirus_de.exe
2013-12-20 22:34 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-18 17:28 - 2012-11-27 13:15 - 00000000 ____D C:\Users\Wolfgang\Downloads\neue-fuehrerscheinregeln-ab-januar-2013-a-865665_files
2013-12-18 17:28 - 2012-08-19 14:05 - 00000000 __RHD C:\MSOCache
2013-12-18 17:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-18 17:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-10 13:01 - 2013-12-10 13:01 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-10 13:01 - 2012-08-24 16:14 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-09 13:05 - 2013-12-09 13:05 - 00002992 _____ C:\Windows\System32\Tasks\{5E070436-74A7-4350-9A69-C8355E6E3609}
2013-12-09 11:37 - 2013-12-24 02:45 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2013-12-24 02:45 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2013-12-24 02:45 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-09 11:37 - 2013-12-24 02:45 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-06 19:31 - 2012-08-24 16:14 - 00000000 ____D C:\Program Files\Google
2013-12-06 18:55 - 2012-08-24 16:14 - 00004110 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 18:55 - 2012-08-24 16:14 - 00003858 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 15:33 - 2013-12-06 15:33 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-06 15:08 - 2012-08-24 16:14 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\Google
2013-12-06 14:59 - 2013-12-06 14:59 - 00001037 _____ C:\Users\Public\Desktop\VideoPlayer.lnk
2013-12-06 14:59 - 2013-12-06 14:23 - 00000000 ____D C:\Program Files (x86)\VideoPlayer
2013-12-06 14:24 - 2013-12-06 14:24 - 00000000 ____D C:\0f242c2b0e96c5d7b648085c9a9c351e
2013-12-06 14:24 - 2013-12-06 14:23 - 00000000 ____D C:\c672906bcf378af6e9fbf8b8d9d6e0
2013-12-06 14:10 - 2012-11-03 16:25 - 00000000 ____D C:\Users\Wolfgang\AppData\Roaming\Mozilla
2013-12-06 13:25 - 2013-04-22 12:52 - 00000000 ____D C:\Users\Wolfgang\LexsoftNV
2013-12-06 13:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-12-06 13:24 - 2012-11-03 16:25 - 00000000 ____D C:\Users\Wolfgang\AppData\Local\Mozilla

Some content of TEMP:
====================
C:\Users\Wolfgang\AppData\Local\Temp\avgnt.exe
C:\Users\Wolfgang\AppData\Local\Temp\dlLogic.exe
C:\Users\Wolfgang\AppData\Local\Temp\GCVerifier.dll
C:\Users\Wolfgang\AppData\Local\Temp\mpam-c639a2a3.exe
C:\Users\Wolfgang\AppData\Local\Temp\nsb7E8C.exe
C:\Users\Wolfgang\AppData\Local\Temp\nsd5141.exe
C:\Users\Wolfgang\AppData\Local\Temp\nsj84C8.exe
C:\Users\Wolfgang\AppData\Local\Temp\nsm4D87.exe
C:\Users\Wolfgang\AppData\Local\Temp\nsq49FC.exe
C:\Users\Wolfgang\AppData\Local\Temp\nsx817B.exe
C:\Users\Wolfgang\AppData\Local\Temp\Offercast_AVIRAV7_.exe
C:\Users\Wolfgang\AppData\Local\Temp\Quarantine.exe
C:\Users\Wolfgang\AppData\Local\Temp\verifier.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-31 13:13

==================== End Of Log ============================
         
Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2014
Ran by Wolfgang at 2014-01-03 12:19:59
Running from C:\Users\Wolfgang\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2012.0806.1213.19931 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.70727.2220 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0806.1213.19931 - Ihr Firmenname) Hidden
ArcSoft PhotoStudio 5.5 (x32 Version:  - ArcSoft)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2951 - APN, LLC)
Canon CanoScan Toolbox 4.8 (x32 Version:  - )
CanoScan Toolbox Ver4.9 (x32 Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0806.1212.19931 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0806.1213.19931 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.09 - Piriform)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version:  - Microsoft)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Java 7 Update 6 (64-bit) (Version: 7.0.60 - Oracle)
LEXsoft Professional 3.1 (x32 Version: 3.1 - Wolters Kluwer Deutschland Information Services GmbH)
Luchterhand - BGB-Kommentar (x32 Version:  - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Manual CanoScan 8400F (x32 Version:  - )
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 25.0.1 (x86 en-US) (x32 Version: 25.0.1 - Mozilla)
OmniPage SE (x32 Version: 2.00.0004 - ScanSoft, Inc.)
PDF Creator (Version:  - )
Presto! PageManager 6.11 (x32 Version:  - )
Search Protect (x32 Version: 2.9.8.2 - Conduit) <==== ATTENTION
Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2827323) 64-Bit Edition (Version:  - Microsoft)
WPM17.8.0.3159 (x32 Version: 17.8.0.3159 - Cherished Technololgy LIMITED) <==== ATTENTION

==================== Restore Points  =========================

23-12-2013 22:25:07 Geplanter Prüfpunkt
31-12-2013 12:21:01 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {040749C4-6B5F-4DC0-B6C3-0C31D3A9CDF0} - System32\Tasks\{0C46A6D5-BD7D-4E04-89CF-6607E86F56F0} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation)
Task: {208B3054-AC2C-49C4-91A6-4B3899F17809} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {248D21D8-8AAA-447B-97BB-52743A613F66} - System32\Tasks\{B0145DE3-9B09-42CB-9F39-7800B3B27D3C} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation)
Task: {51AE6573-2F9E-4675-84F0-F5A4DAB44736} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {5369F6B3-33D3-4FE8-9B8C-D65257B99A3D} - \AdobeFlashPlayerUpdate 2 No Task File
Task: {6B5D6E97-4415-4F4F-A65B-2A1A7C40ACC0} - System32\Tasks\{446FF916-31EE-4219-BBE6-DFEC888AB461} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation)
Task: {6F8BD911-FDDB-491E-A2C6-E80CEB746210} - System32\Tasks\{C3FDBB07-247A-4543-9420-E4B82F2BCF25} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation)
Task: {7A270E09-72D3-495F-BEB1-4746BECB496F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-24] (Google Inc.)
Task: {8FD7BF64-D64D-40A5-8ED2-6F0C0B4B3DB2} - System32\Tasks\{4E1D2BD7-77BE-4299-8F8A-393A7CBDBB32} => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe [2013-09-03] (Adobe Systems Incorporated)
Task: {999A20E9-C350-4756-A449-BEF2A2A1EE1C} - System32\Tasks\{09118475-EABC-4902-BD7B-0059C7837A15} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation)
Task: {C3D44332-BD26-4138-B615-87282A57C84C} - \AdobeFlashPlayerUpdate No Task File
Task: {C40088C5-2529-4BAC-A3D7-0AD7C508296D} - System32\Tasks\{628B8465-4DB0-43D2-B8C6-599E7A803493} => C:\Program Files (x86)\NewSoft\Presto! PageManager 6\prestopm.exe [2004-06-08] (NewSoft Technology Corporation)
Task: {E015CFAA-50E3-4103-9EED-7BB84760169C} - System32\Tasks\{1746E9A8-C501-45A8-A7B8-14AEDA36A027} => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe [2013-09-03] (Adobe Systems Incorporated)
Task: {FB7F824B-FB37-4245-BFE9-CAB2E5A608A0} - System32\Tasks\{5E070436-74A7-4350-9A69-C8355E6E3609} => C:\Users\Wolfgang\Documents\My PageManager\AutumnView.EXE
Task: {FCBDFB40-539D-4107-85A7-7C502AA0FBF1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-24] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2012-08-06 11:24 - 2012-08-06 11:24 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-08-06 11:07 - 2012-08-06 11:07 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-12-24 02:45 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-03-16 23:11 - 2011-03-16 23:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-12-06 15:33 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 15:33 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 15:33 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 15:33 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 15:33 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 15:33 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/03/2014 11:09:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x668
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (01/02/2014 06:50:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x64c
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (01/02/2014 00:10:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x668
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (01/02/2014 11:10:08 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x668
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (01/01/2014 06:45:58 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x670
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (01/01/2014 10:37:10 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x67c
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (12/31/2013 06:03:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x668
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (12/31/2013 10:36:07 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x670
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (12/30/2013 07:16:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x664
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (12/30/2013 07:08:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x501fefb5
Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000033c1
ID des fehlerhaften Prozesses: 0x670
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3


System errors:
=============
Error: (01/03/2014 00:03:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:53:58 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:51:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:51:28 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:51:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:09:39 AM) (Source: Service Control Manager) (User: )
Description: Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/03/2014 11:09:38 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (01/03/2014 11:08:28 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:08:08 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2

Error: (01/03/2014 11:07:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde mit folgendem Fehler beendet: 
%%2


Microsoft Office Sessions:
=========================
Error: (01/03/2014 11:09:39 AM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf086a84e3afdbC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll275126f4-745f-11e3-8661-001d7da69f5a

Error: (01/02/2014 06:50:12 PM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c164c01cf07e1d29b4ceaC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll53d8de5e-73d6-11e3-a418-001d7da69f5a

Error: (01/02/2014 00:10:02 PM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf07a9f1f05dcaC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll6cb28a8e-739e-11e3-be3a-001d7da69f5a

Error: (01/02/2014 11:10:08 AM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf079f091a4ec1C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll0e8eeca3-7396-11e3-b386-001d7da69f5a

Error: (01/01/2014 06:45:58 PM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167001cf071884232cd7C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll91f85c2c-730c-11e3-8431-001d7da69f5a

Error: (01/01/2014 10:37:10 AM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167c01cf06d3d3bf5558C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll4936b1d6-72c8-11e3-96f1-001d7da69f5a

Error: (12/31/2013 06:03:42 PM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166801cf061cc0b470faC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll80214536-723d-11e3-8f31-001d7da69f5a

Error: (12/31/2013 10:36:07 AM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167001cf060a063ee9f5C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dllf8d21604-71fe-11e3-9b11-001d7da69f5a

Error: (12/30/2013 07:16:05 PM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c166401cf058a640cee63C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll725fe1c3-717e-11e3-9a9d-001d7da69f5a

Error: (12/30/2013 07:08:45 PM) (Source: Application Error)(User: )
Description: Fuel.Service.exe1.0.0.0501fefb5Device.dll4.1.0.04f55e10bc000000500000000000033c167001cf0583c32ab42cC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll6b89b043-717d-11e3-9912-001d7da69f5a


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 4095.55 MB
Available physical RAM: 2565.52 MB
Total Pagefile: 8189.29 MB
Available Pagefile: 5875.7 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:64.52 GB) (Free:18.39 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Daten) (Fixed) (Total:10.01 GB) (Free:9.94 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 75 GB) (Disk ID: CCCDCCCD)
Partition 1: (Active) - (Size=65 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Schritt 3: Scan mit GMER

Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-03 12:35:51
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000060 WDC_WD80 rev.06.0 74,53GB
Running: gmer_2.1.19163 (1).exe; Driver: C:\Users\Wolfgang\AppData\Local\Temp\fwdyikob.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   00000000754e1465 2 bytes [4E, 75]
.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                                     * 2
.text  C:\Users\Wolfgang\AppData\Local\VNT\vntldr.exe[2640] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                            00000000754e1465 2 bytes [4E, 75]
.text  C:\Users\Wolfgang\AppData\Local\VNT\vntldr.exe[2640] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                           00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                                     * 2
.text  C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                          00000000754e1465 2 bytes [4E, 75]
.text  C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                         00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                                     * 2
.text  C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[4708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                    00000000754e1465 2 bytes [4E, 75]
.text  C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe[4708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                   00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                                     * 2
.text  C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[4196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                             00000000754e1465 2 bytes [4E, 75]
.text  C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe[4196] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                            00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                                     * 2

---- EOF - GMER 2.1 ----
         

 

Themen zu Windows-Update funktioniert nicht mehr
antivir, avira, branding, browser, ccsetup, excel, flash player, funktioniert nicht mehr, helper, homepage, iexplore.exe, internet, internet explorer, kaspersky, mozilla, nationzoom, nationzoom entfernen, newtab, ohne befund, plug-in, pup.optional.conduit.a, registry, rundll, scan, software, svchost.exe, system, updates, windows




Ähnliche Themen: Windows-Update funktioniert nicht mehr


  1. Windows Update funktioniert nicht mehr - Fehlercode 80244019 - Virus?
    Plagegeister aller Art und deren Bekämpfung - 30.07.2015 (2)
  2. Windows Update funktioniert nicht
    Log-Analyse und Auswertung - 16.12.2014 (3)
  3. IE funktioniert nicht mehr (vermutlich nach Java Update..)- komme nicht mehr ins Internet
    Log-Analyse und Auswertung - 16.06.2014 (6)
  4. MSE & Win Update funktioniert nicht mehr, Funde: Trojan; Worm u.a
    Plagegeister aller Art und deren Bekämpfung - 15.12.2013 (20)
  5. Tastatur funktioniert nicht mehr nach Update auf Windows 8.1
    Alles rund um Windows - 14.12.2013 (11)
  6. Windows 7: Sicherheitscenter kann nicht aktiviert werden, Update funktioniert nicht mehr!
    Log-Analyse und Auswertung - 22.11.2013 (19)
  7. Windows Update funktioniert nicht / Firefox Update mischt auch mit
    Alles rund um Windows - 18.01.2013 (2)
  8. Firewall windows 7 und Update funktioniert nicht mehr
    Log-Analyse und Auswertung - 11.09.2012 (3)
  9. Windows Update funktioniert nicht mehr. Fehlercode: 80070490
    Alles rund um Windows - 27.05.2012 (3)
  10. Windows Update funktioniert nicht mehr. Fehlercode: 80070490
    Alles rund um Windows - 12.05.2012 (13)
  11. windows update funktioniert nicht mehr
    Log-Analyse und Auswertung - 25.03.2011 (1)
  12. Windows Update Funktioniert Nicht!
    Alles rund um Windows - 05.12.2010 (10)
  13. Erst TAN-Trojaner, nun funktioniert Windows Update nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 20.09.2010 (3)
  14. Dienst automatischer Update funktioniert nicht mehr Trojaner?
    Plagegeister aller Art und deren Bekämpfung - 27.09.2008 (11)
  15. Windows Update funktioniert nicht, nichts hilft
    Alles rund um Windows - 21.09.2008 (2)
  16. Windows Update funktioniert nicht
    Alles rund um Windows - 18.08.2008 (1)
  17. Windows Update funktioniert nicht mehr
    Alles rund um Windows - 04.01.2005 (4)

Zum Thema Windows-Update funktioniert nicht mehr - Liebes Trojaner-Board, da ich mir nicht sicher bin, ob die Quelle des Problems tatsächlich ein Viren/Malwarebefall ist erstmal das Posting hier: An Weihnachten habe ich mir den Rechner meines Vaters - Windows-Update funktioniert nicht mehr...

Alle Zeitangaben in WEZ +1. Es ist jetzt 00:28 Uhr.


Copyright ©2000-2025, Trojaner-Board
Archiv
Du betrachtest: Windows-Update funktioniert nicht mehr auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.