Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU

schrauber · 12.03.2014, 09:29

Das Bild bitte normal anhängen, nicht zippen.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Kriega · 13.03.2014, 16:16

Naja das habe ich ja schon gemacht. Da kommt dann:

Zitat:

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1

schrauber · 14.03.2014, 12:10

MSE bitte mal deinstallieren und neu installierne.

Kriega · 14.03.2014, 20:30

Geht leider nicht. Und um MSE neu zu installieren muss ich es erst deinstallieren können

schrauber · 15.03.2014, 17:15

Deinstalliere MSE mit Revo.
Revo Uninstaller Pro - Uninstall Software, Remove Programs easily, Forced Uninstall, Leftovers Uninstaller

Kriega · 15.03.2014, 19:34

Die Deinstallation hat geklappt, die Installation jedoch nicht :/
Der Fehler bleibt bestehen

schrauber · 16.03.2014, 17:34

Deinstalliere nochmal mit Revo, falls vorhanden, dann bitte nicht mehr neu installieren sondern bitte ein frisches FRST log posten.

Kriega · 16.03.2014, 18:04

Ist nicht mehr vorhanden

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by Emilio (administrator) on EMILIOS-HP-PC on 16-03-2014 18:00:47
Running from C:\Users\Emilio\Desktop\FRST-OlderVersion
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Spotify Ltd) C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Dropbox, Inc.) C:\Users\Emilio\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Spotify Ltd) C:\Users\Emilio\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
HKLM\...\Run: [HPSYSDRV] - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\HPSYSDRV.EXE [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] - C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [172624 2014-03-07] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-02-25] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3513785353-2090306979-4278820556-1000\...\Run: [Spotify Web Helper] - C:\Users\Emilio\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-02-02] (Spotify Ltd)
Startup: C:\Users\Emilio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Emilio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=CMDTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=CMDTDFJS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=CMDTDFJS
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
Toolbar: HKLM-x32 - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-4300-7A786E7484D7} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Extension: (Google Docs) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-16]
CHR Extension: (Google Drive) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-16]
CHR Extension: (WOT) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-02-02]
CHR Extension: (YouTube) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-16]
CHR Extension: (Adblock Plus) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-03-17]
CHR Extension: (Google-Suche) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-16]
CHR Extension: (Youtube Video Downloader) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpbkobkodledeibpmilbmnpfolihcnla [2013-06-08]
CHR Extension: (Avira Browser Safety) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-03-08]
CHR Extension: (Youtube Series Downloader) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\jghmjoeoeedipbgbgofflfgcfpineanf [2013-06-08]
CHR Extension: (SmallringFX DarkBlue Theme) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfijmgohofmpjlcgmjplbpmkpchdhpk [2013-03-16]
CHR Extension: (V-bates) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk [2013-06-26]
CHR Extension: (Download Youtube as mp3) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\mepapnoaejebkkpkpacihjlfekoggahp [2013-10-05]
CHR Extension: (Privacy Palette) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjkcflkplhgpebknipkekjggglimnone [2013-03-17]
CHR Extension: (Google Wallet) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-06]
CHR Extension: (Google Mail) - C:\Users\Emilio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-16]
CHR HKLM-x32\...\Chrome\Extension: [ajadlheagenmmedmhaoafgkdenfilcme] - C:\Program Files (x86)\BetterSurf\BetterSurfPlusV1\ch\BetterSurfPlusV1.crx [2013-03-16]
CHR HKLM-x32\...\Chrome\Extension: [ieghcpafofcpcjmacgknimjbimfcdfoc] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta804\ch\VideoPlayerV3beta804.crx [2013-03-16]
CHR HKLM-x32\...\Chrome\Extension: [iiahmooinmkibiblfkgkcckfabbkmojp] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha246\ch\WebexpEnhancedV1alpha246.crx [2013-03-16]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [116816 2014-03-07] (Avira Operations GmbH & Co. KG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1134624 2012-07-18] (PDF Complete Inc)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660504 2013-02-07] (Secunia)
S2 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [X]
S2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [X]
S2 Intel(R) Capability Licensing Service Interface; "c:\Program Files\Intel\iCLS Client\HeciServer.exe" [X]
S2 MsMpSvc; "c:\Program Files\Microsoft Security Client\MsMpEng.exe" [X]
S3 NisSrv; "c:\Program Files\Microsoft Security Client\NisSrv.exe" [X]
S3 osppsvc; "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" [X]
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
S3 IFCoEMP; C:\Windows\system32\drivers\ifM60x64.sys [348944 2011-06-15] (Intel(R) Corporation)
S3 IFCoEVB; C:\Windows\system32\drivers\ifP60X64.sys [70928 2011-06-15] (Intel(R) Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-02-07] (Secunia)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-16 14:26 - 2014-03-16 14:26 - 00002020 _____ () C:\Users\Emilio\Desktop\Avira Free Antivirus starten.lnk
2014-03-15 19:05 - 2014-03-15 19:05 - 13697720 _____ (Microsoft Corporation) C:\Users\Emilio\Downloads\MSEInstall (1).exe
2014-03-15 19:05 - 2014-03-15 19:05 - 11157328 _____ (Microsoft Corporation) C:\Users\Emilio\Downloads\MSEInstall (2).exe
2014-03-15 18:50 - 2014-03-15 18:50 - 00001039 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-03-15 18:50 - 2014-03-15 18:50 - 00000000 ____D () C:\Users\Emilio\AppData\Local\VS Revo Group
2014-03-15 18:50 - 2014-03-15 18:50 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-03-15 18:50 - 2014-03-15 18:50 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-15 18:50 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-03-15 18:49 - 2014-03-15 18:49 - 10619688 _____ (VS Revo Group ) C:\Users\Emilio\Downloads\RevoUninProSetup.exe
2014-03-14 20:27 - 2014-03-14 20:27 - 13697720 _____ (Microsoft Corporation) C:\Users\Emilio\Downloads\mseinstall.exe
2014-03-14 02:20 - 2014-03-14 02:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 16:11 - 2014-03-13 16:11 - 00409600 _____ (Farbar) C:\Users\Emilio\Downloads\FSS (1).exe
2014-03-13 16:01 - 2014-03-13 16:31 - 92567752 _____ () C:\Users\Emilio\Downloads\933 Zod_ iak (2014).rar
2014-03-13 14:18 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 14:18 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 14:18 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 14:18 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 14:18 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 14:18 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 14:18 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 14:17 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 14:17 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 14:17 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 14:17 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 14:17 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 14:17 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 14:17 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 14:17 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 14:17 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 14:17 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 14:17 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 14:17 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 14:17 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 14:17 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 14:17 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 14:17 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 14:17 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 14:17 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 14:17 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 14:17 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 14:17 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 14:17 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 14:17 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 14:17 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 14:17 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 14:17 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 14:17 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 14:17 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 14:17 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 14:17 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 14:17 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 14:17 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 14:17 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 14:17 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 14:17 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 14:17 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 14:17 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 14:17 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 14:17 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 14:17 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 14:17 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 14:14 - 2014-03-13 14:14 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-03-12 20:35 - 2014-03-12 20:35 - 05128584 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-10 12:06 - 2014-03-10 12:07 - 00000000 ____D () C:\Users\Emilio\Documents\1&1
2014-03-09 20:13 - 2014-03-09 20:13 - 00099158 _____ () C:\Users\Emilio\Downloads\chrome-youtube-downloader-2.6.20.zip
2014-03-09 20:13 - 2014-03-09 20:13 - 00099158 _____ () C:\Users\Emilio\Downloads\chrome-youtube-downloader-2.6.20 (1).zip
2014-03-09 13:31 - 2014-03-09 13:31 - 00002485 _____ () C:\Users\Emilio\Downloads\FSS.txt
2014-03-09 13:30 - 2014-03-09 13:30 - 00409600 _____ (Farbar) C:\Users\Emilio\Downloads\FSS.exe
2014-03-09 11:38 - 2014-03-09 11:59 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-03-09 11:27 - 2014-03-16 00:06 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\DVD Maker
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Common Files\Services
2014-03-09 10:55 - 2014-03-09 10:56 - 00000000 ____D () C:\Users\Emilio\Desktop\Tweaking.com - Windows Repair
2014-03-09 10:53 - 2014-03-09 10:53 - 03098210 _____ () C:\Users\Emilio\Downloads\tweaking.com_windows_repair_aio.zip
2014-03-08 13:25 - 2014-03-08 13:25 - 00000000 ____D () C:\Users\Emilio\AppData\Roaming\Avira
2014-03-08 13:24 - 2014-02-25 11:41 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-03-08 13:24 - 2014-02-25 11:41 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-03-08 13:24 - 2014-02-25 11:41 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-03-08 13:22 - 2014-03-12 20:30 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-03-08 13:22 - 2014-03-12 20:30 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-08 13:22 - 2014-03-12 20:30 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-03-08 13:22 - 2014-03-08 13:22 - 04051872 _____ (Avira Operations GmbH & Co. KG) C:\Users\Emilio\Downloads\avira_de_av___ws.exe
2014-03-08 13:12 - 2014-03-08 13:12 - 00000000 ____D () C:\Users\Emilio\AppData\Local\WinZip
2014-03-08 12:55 - 2014-03-08 19:01 - 00004242 _____ () C:\Windows\IE9_main.log
2014-03-08 12:51 - 2014-03-08 12:51 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-08 12:51 - 2014-03-08 12:51 - 00000000 ____D () C:\Program Files\iTunes
2014-03-07 20:28 - 2014-03-07 20:28 - 00002151 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-03-07 20:28 - 2014-03-07 20:28 - 00000000 ____D () C:\Program Files\WinZip
2014-03-07 20:23 - 2014-03-07 20:23 - 46956032 _____ () C:\Users\Emilio\Downloads\wz180gev-64.msi
2014-03-02 18:47 - 2014-03-02 18:47 - 01064488 _____ (BillP Studios) C:\Users\Emilio\Downloads\wpsetup.exe
2014-03-02 17:49 - 2014-03-02 18:35 - 141656540 _____ () C:\Users\Emilio\Downloads\TS-DBDEN.part5.rar
2014-03-02 17:19 - 2014-03-08 12:51 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-02 17:19 - 2014-03-08 12:51 - 00000000 ____D () C:\Program Files\iPod
2014-03-02 17:19 - 2014-03-02 17:19 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-02 17:14 - 2014-03-02 17:15 - 00000000 ____D () C:\Users\Emilio\Desktop\Neuer Ordner (3)
2014-02-16 20:49 - 2014-02-16 20:49 - 00198742 _____ () C:\Users\Emilio\Downloads\extension_1_0_0_10.crx
2014-02-15 00:52 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 00:52 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 23:26 - 2014-02-14 23:38 - 305247075 _____ () C:\Users\Emilio\Downloads\Texture Pack by DvizehEdits.rar
2014-02-14 14:21 - 2014-02-14 14:21 - 00006124 _____ () C:\Users\Emilio\Downloads\circo.zip
2014-02-14 14:17 - 2014-02-14 14:17 - 00013475 _____ () C:\Users\Emilio\Downloads\dotboundary.zip
2014-02-14 14:11 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 14:11 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 14:11 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 14:11 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 14:11 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 14:11 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 14:11 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 14:11 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 14:11 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 14:11 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 14:11 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 14:11 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 14:11 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 14:11 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 14:11 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 14:11 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 14:11 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 14:11 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 14:11 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 14:11 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 14:11 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 14:11 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 14:11 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 14:11 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 14:11 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 14:11 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 14:11 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 14:11 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-16 18:00 - 2014-02-02 15:07 - 00000000 ____D () C:\FRST
2014-03-16 18:00 - 2014-01-26 15:39 - 00000000 ____D () C:\Users\Emilio\Desktop\FRST-OlderVersion
2014-03-16 17:57 - 2013-03-16 14:11 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{F6BA0110-D05B-4941-A2AC-C1C89CCDA816}
2014-03-16 17:37 - 2013-04-01 23:26 - 00000000 ____D () C:\Users\Emilio\AppData\Roaming\Spotify
2014-03-16 17:33 - 2014-02-07 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-16 17:05 - 2013-03-16 15:05 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-16 16:13 - 2013-01-03 04:19 - 00686006 _____ () C:\Windows\system32\perfh007.dat
2014-03-16 16:13 - 2013-01-03 04:19 - 00145580 _____ () C:\Windows\system32\perfc007.dat
2014-03-16 16:13 - 2009-07-14 06:13 - 01622164 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-16 15:02 - 2013-01-03 04:47 - 00000000 ____D () C:\ProgramData\PDFC
2014-03-16 14:26 - 2014-03-16 14:26 - 00002020 _____ () C:\Users\Emilio\Desktop\Avira Free Antivirus starten.lnk
2014-03-16 14:12 - 2009-07-14 05:45 - 00016768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-16 14:12 - 2009-07-14 05:45 - 00016768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-16 14:09 - 2013-03-16 23:01 - 01151220 _____ () C:\Windows\WindowsUpdate.log
2014-03-16 14:03 - 2013-03-16 20:31 - 00000000 ___RD () C:\Users\Emilio\Dropbox
2014-03-16 14:03 - 2013-03-16 20:19 - 00000000 ____D () C:\Users\Emilio\AppData\Roaming\Dropbox
2014-03-16 14:01 - 2014-02-01 22:14 - 00001568 _____ () C:\Windows\setupact.log
2014-03-16 14:01 - 2013-03-16 15:05 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-16 14:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-16 00:06 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-16 00:05 - 2013-03-16 17:30 - 00000000 ____D () C:\Users\Emilio\AppData\Local\PMB Files
2014-03-16 00:05 - 2013-03-16 17:29 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-15 19:19 - 2013-01-03 04:48 - 00002122 _____ () C:\Windows\epplauncher.mif
2014-03-15 19:05 - 2014-03-15 19:05 - 13697720 _____ (Microsoft Corporation) C:\Users\Emilio\Downloads\MSEInstall (1).exe
2014-03-15 19:05 - 2014-03-15 19:05 - 11157328 _____ (Microsoft Corporation) C:\Users\Emilio\Downloads\MSEInstall (2).exe
2014-03-15 19:01 - 2014-02-01 22:14 - 00271022 _____ () C:\Windows\PFRO.log
2014-03-15 18:50 - 2014-03-15 18:50 - 00001039 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-03-15 18:50 - 2014-03-15 18:50 - 00000000 ____D () C:\Users\Emilio\AppData\Local\VS Revo Group
2014-03-15 18:50 - 2014-03-15 18:50 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-03-15 18:50 - 2014-03-15 18:50 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-15 18:49 - 2014-03-15 18:49 - 10619688 _____ (VS Revo Group ) C:\Users\Emilio\Downloads\RevoUninProSetup.exe
2014-03-15 16:45 - 2013-04-01 23:27 - 00000000 ____D () C:\Users\Emilio\AppData\Local\Spotify
2014-03-15 01:00 - 2013-04-05 20:27 - 00000000 ____D () C:\Users\Emilio\AppData\Roaming\Skype
2014-03-14 20:27 - 2014-03-14 20:27 - 13697720 _____ (Microsoft Corporation) C:\Users\Emilio\Downloads\mseinstall.exe
2014-03-14 11:40 - 2013-03-16 15:05 - 00000000 ____D () C:\Users\Emilio\AppData\Local\Deployment
2014-03-14 11:40 - 2013-03-16 15:05 - 00000000 ____D () C:\Users\Emilio\AppData\Local\Apps\2.0
2014-03-14 11:15 - 2009-07-14 05:45 - 00285824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 11:14 - 2013-07-13 11:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-14 02:20 - 2014-03-14 02:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 16:31 - 2014-03-13 16:01 - 92567752 _____ () C:\Users\Emilio\Downloads\933 Zod_ iak (2014).rar
2014-03-13 16:11 - 2014-03-13 16:11 - 00409600 _____ (Farbar) C:\Users\Emilio\Downloads\FSS (1).exe
2014-03-13 14:14 - 2014-03-13 14:14 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-03-13 00:03 - 2013-09-13 16:00 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForEmilio
2014-03-13 00:03 - 2013-09-13 16:00 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForEmilio.job
2014-03-12 20:35 - 2014-03-12 20:35 - 05128584 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 20:35 - 2014-02-07 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 20:35 - 2014-02-07 11:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 20:35 - 2014-02-07 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 20:30 - 2014-03-08 13:22 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-03-12 20:30 - 2014-03-08 13:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-12 20:30 - 2014-03-08 13:22 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-03-10 12:07 - 2014-03-10 12:06 - 00000000 ____D () C:\Users\Emilio\Documents\1&1
2014-03-09 20:13 - 2014-03-09 20:13 - 00099158 _____ () C:\Users\Emilio\Downloads\chrome-youtube-downloader-2.6.20.zip
2014-03-09 20:13 - 2014-03-09 20:13 - 00099158 _____ () C:\Users\Emilio\Downloads\chrome-youtube-downloader-2.6.20 (1).zip
2014-03-09 19:37 - 2013-03-25 01:44 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-09 19:37 - 2013-03-25 01:44 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-03-09 13:31 - 2014-03-09 13:31 - 00002485 _____ () C:\Users\Emilio\Downloads\FSS.txt
2014-03-09 13:30 - 2014-03-09 13:30 - 00409600 _____ (Farbar) C:\Users\Emilio\Downloads\FSS.exe
2014-03-09 12:06 - 2013-03-16 14:14 - 00061240 _____ () C:\Users\Emilio\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-09 11:59 - 2014-03-09 11:38 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2014-03-09 11:58 - 2009-07-14 03:34 - 00000439 _____ () C:\Windows\win.ini
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\MSBuild
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\DVD Maker
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-09 11:27 - 2014-03-09 11:27 - 00000000 ____D () C:\Program Files\Common Files\Services
2014-03-09 10:56 - 2014-03-09 10:55 - 00000000 ____D () C:\Users\Emilio\Desktop\Tweaking.com - Windows Repair
2014-03-09 10:53 - 2014-03-09 10:53 - 03098210 _____ () C:\Users\Emilio\Downloads\tweaking.com_windows_repair_aio.zip
2014-03-08 19:01 - 2014-03-08 12:55 - 00004242 _____ () C:\Windows\IE9_main.log
2014-03-08 13:25 - 2014-03-08 13:25 - 00000000 ____D () C:\Users\Emilio\AppData\Roaming\Avira
2014-03-08 13:24 - 2014-01-03 12:21 - 00000000 ____D () C:\ProgramData\Avira
2014-03-08 13:22 - 2014-03-08 13:22 - 04051872 _____ (Avira Operations GmbH & Co. KG) C:\Users\Emilio\Downloads\avira_de_av___ws.exe
2014-03-08 13:12 - 2014-03-08 13:12 - 00000000 ____D () C:\Users\Emilio\AppData\Local\WinZip
2014-03-08 13:12 - 2013-01-03 04:47 - 00000000 ____D () C:\ProgramData\WinZip
2014-03-08 12:51 - 2014-03-08 12:51 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-08 12:51 - 2014-03-08 12:51 - 00000000 ____D () C:\Program Files\iTunes
2014-03-08 12:51 - 2014-03-02 17:19 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-08 12:51 - 2014-03-02 17:19 - 00000000 ____D () C:\Program Files\iPod
2014-03-08 12:31 - 2013-01-03 04:47 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-07 20:28 - 2014-03-07 20:28 - 00002151 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-03-07 20:28 - 2014-03-07 20:28 - 00000000 ____D () C:\Program Files\WinZip
2014-03-07 20:28 - 2013-03-16 14:10 - 00000000 ____D () C:\Users\Emilio
2014-03-07 20:23 - 2014-03-07 20:23 - 46956032 _____ () C:\Users\Emilio\Downloads\wz180gev-64.msi
2014-03-07 19:59 - 2013-01-03 04:40 - 00000000 ____D () C:\Program Files\Intel
2014-03-06 15:15 - 2011-02-11 21:29 - 01595508 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-02 18:47 - 2014-03-02 18:47 - 01064488 _____ (BillP Studios) C:\Users\Emilio\Downloads\wpsetup.exe
2014-03-02 18:47 - 2014-02-02 15:42 - 00000000 ____D () C:\ProgramData\InstallMate
2014-03-02 18:35 - 2014-03-02 17:49 - 141656540 _____ () C:\Users\Emilio\Downloads\TS-DBDEN.part5.rar
2014-03-02 18:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-02 17:19 - 2014-03-02 17:19 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-02 17:15 - 2014-03-02 17:14 - 00000000 ____D () C:\Users\Emilio\Desktop\Neuer Ordner (3)
2014-03-02 16:37 - 2014-02-01 20:58 - 00012292 ____H () C:\Users\Emilio\.DS_Store
2014-03-01 07:05 - 2014-03-13 14:17 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 14:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 14:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 14:18 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 14:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 14:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 14:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 14:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 14:17 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 14:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 14:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 14:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 14:17 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 14:17 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 14:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 14:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 14:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 14:17 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 14:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 14:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 14:17 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 14:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:43 - 2014-03-13 14:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:42 - 2014-03-13 14:17 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 14:17 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 14:17 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 14:17 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 14:17 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 14:17 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 14:17 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 14:17 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 14:17 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 14:17 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 14:17 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 14:17 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 14:17 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 14:17 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 14:17 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 14:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 14:17 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-25 11:41 - 2014-03-08 13:24 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-25 11:41 - 2014-03-08 13:24 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-25 11:41 - 2014-03-08 13:24 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-16 21:32 - 2013-08-17 15:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 21:31 - 2013-03-29 15:05 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 20:49 - 2014-02-16 20:49 - 00198742 _____ () C:\Users\Emilio\Downloads\extension_1_0_0_10.crx
2014-02-15 13:00 - 2013-03-16 15:05 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-15 13:00 - 2013-03-16 15:05 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-14 23:38 - 2014-02-14 23:26 - 305247075 _____ () C:\Users\Emilio\Downloads\Texture Pack by DvizehEdits.rar
2014-02-14 14:21 - 2014-02-14 14:21 - 00006124 _____ () C:\Users\Emilio\Downloads\circo.zip
2014-02-14 14:21 - 2013-03-16 14:51 - 00000000 ____D () C:\Users\Emilio\AppData\Roaming\SoftGrid Client
2014-02-14 14:17 - 2014-02-14 14:17 - 00013475 _____ () C:\Users\Emilio\Downloads\dotboundary.zip

Some content of TEMP:
====================
C:\Users\Emilio\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 13:49

==================== End Of Log ============================

--- --- ---

schrauber · 17.03.2014, 10:20

Bitte mal die Schritte hier abarbeiten:

Installation Error 0x80070643 - Microsoft Community

Kriega · 18.03.2014, 23:21

Ich komme da leider nicht weiter.
Ich habe alles befolgt was bei Punkt 1 und 2 stand, aber der Fehler blieb bestehen und ich konnte MSE nicht installieren
Punkt 3 habe ich ausgelassen da ich ja keinen XP habe und die Datei von der in Punkt 4 die Rede ist kann ich nicht finden.

schrauber · 19.03.2014, 17:12

welche Datei meinst Du? Da steht 5mal Punkt 4

Kriega · 19.03.2014, 17:44

Ne also jedes Themengebiet bzw. jede Überschrift habe ich so für mich selbst als Punkte definiert

(4 an der Zahl)
Im Endeffekt stehe ich nun wieder ohne Antivierensoftware da. Also alles wie immer^^

schrauber · 20.03.2014, 09:58

Zitat:

4. Give everyone permission to the desktop by typing the following command:

· CACLS “c:\documents and settings\all users\desktop” /t /g everyone:f

Du meinst das? was genau klappt da nit?

Kriega · 20.03.2014, 13:05

1) See possible workarounds below:
1.1 Ich habe Avira wieder deinstalliert weil ich alle vorhandenen Antivierenprogramme löschen sollte, doch MSE konnte ich nicht installieren
1.2 und 1.3 wusste ich nicht wie ich das machen soll

2) If you recently uninstalled OneCare, follow the steps below:
2.1 bis 2.8 habe ich alles gemacht nur 2.9 ging nicht

3) If the failure is on XP machine, check if the machine has windows installer 3.1 or above.
Habe keinen XP-PC also ausgelassen.

4) If the workarounds above do not resolve your issue, check the install logs:
Schon bei 4.1 konnte ich das Log nicht finden und dann konnte ich das auch sein lassen.

schrauber · 21.03.2014, 10:30

Findest Du den Ordner in dem das Log liegen soll?

14.03.2014, 12:10	#33
schrauber /// the machine /// TB-Ausbilder	Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU MSE bitte mal deinstallieren und neu installierne. __________________ __________________

17.03.2014, 10:20	#39
schrauber /// the machine /// TB-Ausbilder	Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU Bitte mal die Schritte hier abarbeiten: Installation Error 0x80070643 - Microsoft Community __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

19.03.2014, 17:12	#41
schrauber /// the machine /// TB-Ausbilder	Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU welche Datei meinst Du? Da steht 5mal Punkt 4 __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

21.03.2014, 10:30	#45
schrauber /// the machine /// TB-Ausbilder	Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU Findest Du den Ordner in dem das Log liegen soll? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU

Log-Analyse und Auswertung: Virus: Avira kann nicht geupdated werden/ verbraucht sehr viel CPU