| |
| |||||||
Log-Analyse und Auswertung: Befall softwareupdater.ui.exdeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
20.01.2014, 22:41
| #1 |
 |  Befall softwareupdater.ui.exde Hallo, zunächst mal Entschuldigung, wenn ich irgendwelche Forenregeln verletze, ist mein erster Versuch. Seit geraumer Zeit erscheint immer nach Start Windows 7 ein Fenster Fremake Softwareupdater, habe ich nie geöffnet, sondern immer gleich geschlossen. Seit ein paar Tagen fällt mir auf, dass Firefox extrem langsam ist, z. B. werden e-mails unter freenet nur zu 70% abgerufen, dann ist Schluss. Seit vielleicht 3-4 Tagen ist mir aufgefallen, dass wahllos Wörter doppelt unterstrichen sind. Trotz Ad-Blocker hat auch so ziemlich jede Seite absolut nervige Werbung. Daraufhin habe ich schon mal das ein oder andere gelesen, und "rausbekommen" das der Übeltäter vermutlich softwareupdater.ui.exe heisst. Deinstallieren mit der normalen Windows-Funktion geht nicht, da er da nicht angezeigt wird. Also habe ich wie geraten erst mal Suchprogramme durchlaufen lassen Spybot hat nix gefunden, Malwarebytes hat folgendes gefunden: Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.15.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16750 Christine :: CHRISTINE-PC [Administrator] 20.01.2014 22:10:46 MBAM-log-2014-01-20 (22-16-33).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 272397 Laufzeit: 5 Minute(n), 2 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 8 HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} (PUP.Optional.GreatSaver.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt. HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt. HKCU\Software\Iminent (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 1 C:\Users\Christine\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 2 C:\Users\Christine\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. C:\Users\Christine\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. (Ende) das ich bereits gelöscht habe. Danach habe ich wie häufig geraten AdwCleaner v.3.01 durchlaufen lassen mit folgendem Ergebnis: # AdwCleaner v3.017 - Bericht erstellt am 20/01/2014 um 22:17:48 # Aktualisiert 12/01/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Christine - CHRISTINE-PC # Gestartet von : C:\Users\Christine\Desktop\Downloads\adwcleaner.exe # Option : Suchen ***** [ Dienste ] ***** Dienst Gefunden : SystemStoreService ***** [ Dateien / Ordner ] ***** Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk Datei Gefunden : C:\Windows\System32\roboot64.exe Datei Gefunden : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Ui Ordner Gefunden C:\Program Files (x86)\Iminent Ordner Gefunden C:\Program Files (x86)\SoftwareUpdater Ordner Gefunden C:\ProgramData\Partner Ordner Gefunden C:\ProgramData\SoftWarehouse Ordner Gefunden C:\Users\Alex und Basti\AppData\Local\torch Ordner Gefunden C:\Users\Alex und Basti\AppData\LocalLow\AskToolbar Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch Ordner Gefunden C:\Users\Christine\AppData\Local\AskToolbar Ordner Gefunden C:\Users\Christine\AppData\Local\Software_Updater Ordner Gefunden C:\Users\Christine\AppData\Local\SoftwareUpdater Ordner Gefunden C:\Users\Christine\AppData\Local\torch Ordner Gefunden C:\Users\Christine\AppData\LocalLow\AskToolbar Ordner Gefunden C:\Users\Christine\AppData\LocalLow\SimplyTech Ordner Gefunden C:\Users\Christine\AppData\Roaming\file scout Ordner Gefunden C:\Users\Christine\AppData\Roaming\PerformerSoft Ordner Gefunden C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe} ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gefunden : HKCU\Software\596da8ab76fbf41 Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\AskToolbar Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\simplytech Schlüssel Gefunden : HKCU\Software\Ask.com Schlüssel Gefunden : HKCU\Software\AskToolbar Schlüssel Gefunden : HKCU\Software\BabylonToolbar Schlüssel Gefunden : HKCU\Software\DataMngr Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar Schlüssel Gefunden : HKCU\Software\filescout Schlüssel Gefunden : HKCU\Software\Iminent Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} Schlüssel Gefunden : HKCU\Software\Softonic Schlüssel Gefunden : [x64] HKCU\Software\Ask.com Schlüssel Gefunden : [x64] HKCU\Software\AskToolbar Schlüssel Gefunden : [x64] HKCU\Software\BabylonToolbar Schlüssel Gefunden : [x64] HKCU\Software\DataMngr Schlüssel Gefunden : [x64] HKCU\Software\DataMngr_Toolbar Schlüssel Gefunden : [x64] HKCU\Software\filescout Schlüssel Gefunden : [x64] HKCU\Software\Iminent Schlüssel Gefunden : [x64] HKCU\Software\Softonic Schlüssel Gefunden : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Schlüssel Gefunden : HKLM\SOFTWARE\596da8ab76fbf41 Schlüssel Gefunden : HKLM\Software\AskToolbar Schlüssel Gefunden : HKLM\Software\Babylon Schlüssel Gefunden : HKLM\SOFTWARE\Classes\*\shell\filescout Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\secman.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1 Schlüssel Gefunden : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF Schlüssel Gefunden : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHost.Tool Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF} Schlüssel Gefunden : HKLM\Software\DataMngr Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabfjnbeinlpljodiajipidiompfl Schlüssel Gefunden : HKLM\Software\Iminent Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA41BB14-E67B-1653-C57B-5CA99418A866} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}] Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater] ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16750 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\prefs.js ] Zeile gefunden : user_pref("extensions.asktb.ff-original-keyword-url", ""); Zeile gefunden : user_pref("extensions.sVrgtf2iPIRB.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && wind[...] [ Datei : C:\Users\Alex und Basti\AppData\Roaming\Mozilla\Firefox\Profiles\qgu1gvr1.default\prefs.js ] Zeile gefunden : user_pref("browser.startup.homepage", "hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE"); Zeile gefunden : user_pref("extensions.asktb.ff-original-keyword-url", ""); ************************* AdwCleaner[R0].txt - [20704 octets] - [20/01/2014 22:17:48] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [20765 octets] ####### Was davon muss denn nun runter??? Bitte um HIlfe |
|
21.01.2014, 01:36
| #2 |
| /// TB-Ausbilder   | Befall softwareupdater.ui.exde Hallo,
__________________mach bitte einen FRST-Scan: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
21.01.2014, 22:26
| #3 |
| | Befall softwareupdater.ui.exde Hallo,
__________________hoffentlich ist das jetzt mit der Anmeldung alles richtig, hier die erstellten Dateien; FRST Additions Logfile: [CODE]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-01-2014 Ran by Christine at 2014-01-21 20:26:18 Running from C:\Users\Christine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2HPTNBH4 Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AV: Kaspersky Internet Security (Disabled - Out of date) {2EAA32A5-1EE1-1B22-95DA-337730C6E984} AS: Kaspersky Internet Security (Disabled - Up to date) {95CBD341-38DB-14AC-AF6A-08054B41A339} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} FW: Kaspersky Internet Security (Disabled) {1691B380-548E-1A7A-BE85-9A42CE15AEFF} ==================== Installed Programs ====================== Action Replay Code Manager (x32 Version: - ) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133 - Adobe Systems, Inc.) Alcatel onetouch Manager (x32 Version: 13.04.2345 - Mobile Action) Angry Birds Star Wars (x32 Version: 1.3.0 - Rovio Entertainment Ltd.) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) Ask Toolbar (x32 Version: 1.15.26.0 - Ask.com) <==== ATTENTION Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.9.0 - Asmedia Technology) AVIConverter 5.1.6 (x32 Version: 5.1.6 - ) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.6.45268 - Ask.com) Biet-O-Matic v2.14.12 (x32 Version: 2.14.12 - BOM Development Team) Bonjour (Version: 3.0.0.10 - Apple Inc.) Coby Media Manager (x32 Version: 1.0.4314 - Coby) Colour Land 3 (x32 Version: 1.0.0 - Klett Verlag GmbH) Common Desktop Agent (Version: 1.62.0 - OEM) Hidden COMPUTERBILD Vorteil-Center (x32 Version: 1.1.23 - J3S) Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation) CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) Hidden CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) Hidden CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.) CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden eGames Pinball (x32 Version: - ) ElsterFormular (x32 Version: 14.4.20130909 - Landesfinanzdirektion Thüringen) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2 - Microsoft Corporation) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Hidden Freemake Video Downloader (x32 Version: 3.5.0 - Ellora Assets Corporation) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Gardenscapes – Gestalte dein Haus (x32 Version: - Playrix Entertainment) Gardenscapes (x32 Version: - Playrix Entertainment) GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team) Google Chrome (x32 Version: 12.0.742.91 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden GS Supporter 1.80 (x32 Version: - Verified Publisher) <==== ATTENTION iCloud (Version: 3.1.0.40 - Apple Inc.) Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 8.0.1.1399 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.23.219.2 - Intel Corporation) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 7 Update 3 (64-bit) (Version: 7.0.30 - Oracle) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Hidden Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2 - Microsoft Corporation) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) MediacoderSE (x32 Version: 1.1 - amax) Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden Memeo Instant Backup (x32 Version: 4.60.0.7943 - Memeo Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.9.0 (Version: 1.3.9.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.11.1111 - NVIDIA Corporation) Hidden NVIDIA PhysX System Software 9.11.1111 (Version: 9.11.1111 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.6516 - Realtek Semiconductor Corp.) Samsung Easy Document Creator (x32 Version: 1.04.06 (07.08.2012) - Samsung Electronics Co., Ltd.) Samsung Easy Printer Manager (x32 Version: 1.02.63.01(09.08.2012) - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Hidden Samsung OCR Software (x32 Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (x32 Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Samsung Scan Process Machine (x32 Version: 1.00.20.02 - Samsung Electronics Co., Ltd.) Hidden Samsung SCX-3400 Series (x32 Version: 1.13 (17.09.2012) - Samsung Electronics Co., Ltd.) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.) Secret Maryo Chronicles (x32 Version: 1.9 - Florian Richter) Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0 - Adobe Systems Incorporated) Spybot - Search & Destroy (x32 Version: 2.0.12 - Safer-Networking Ltd.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamViewer 8 (x32 Version: 8.0.17396 - TeamViewer) TomTom HOME (x32 Version: 2.9.7 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2 - TomTom International B.V.) Unity Web Player (HKCU Version: - Unity Technologies ApS) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2 - Microsoft Corporation) watchmi (x32 Version: 3.0.0 - Axel Springer Digital TV Guide GmbH) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinPcap 4.1.2 (x32 Version: 4.1.0.2001 - CACE Technologies) WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 15-01-2014 20:28:14 Windows Update 16-01-2014 16:57:13 Windows Update 16-01-2014 21:05:38 Windows Update 16-01-2014 21:14:12 Windows Update 16-01-2014 21:28:45 Windows Modules Installer 16-01-2014 21:31:27 Windows Modules Installer 16-01-2014 21:37:47 Windows Update 16-01-2014 21:53:38 Windows Modules Installer 16-01-2014 21:54:01 Windows Modules Installer 16-01-2014 21:55:31 Windows Update 16-01-2014 22:04:44 Windows Update 17-01-2014 20:05:47 Windows Update 17-01-2014 20:13:47 Windows Update 17-01-2014 20:15:24 Windows Update 17-01-2014 20:23:35 Windows Update 18-01-2014 18:02:45 Windows Update 18-01-2014 21:01:20 Windows Update 19-01-2014 20:30:30 Windows Update 20-01-2014 21:42:24 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {17D37D64-572F-4414-AA10-E5F7C226EC58} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-18] () Task: {351524A9-BBE8-4EB0-9C4D-BB3168BC3536} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated) Task: {63DAC18D-9588-4CA7-B0ED-64B6F42AE6DA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {6AF19A8E-234E-4487-9082-981B7C42488E} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-19] () Task: {6C85E579-86A4-4582-82AB-1F3A2C270616} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {81B57309-DFB4-4B15-9DC7-4A9B49EA1965} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-13] (Google Inc.) Task: {AA025448-A441-4D88-9582-B2A52977F52C} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe Task: {AF604A01-5267-4164-9AAA-7F2F37D8272D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-13] (Google Inc.) Task: {B65A361B-4362-49D4-9C0C-400C22777AD8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {E17E6B3B-89B6-4FFB-8227-8AF6ABB09D63} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-02-20 21:23 - 2012-02-20 21:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2012-01-31 11:24 - 2012-01-31 11:24 - 00004608 _____ () C:\Program Files (x86)\watchmi\de\TvdTray.resources.dll 2013-02-13 20:55 - 2013-02-13 20:55 - 00059904 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\3.0.0.8__f722db7bec59a14b\Tvd.Remote.dll 2014-01-12 20:40 - 2014-01-12 20:40 - 02759168 _____ () C:\Program Files (x86)\GS Supporter\Assistant_x64.dll 2013-03-11 17:38 - 2012-12-18 09:31 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-12 20:40 - 2014-01-12 20:40 - 03041792 _____ () C:\Program Files (x86)\GS Supporter\Assistant.dll 2014-01-12 20:40 - 2014-01-12 20:40 - 00146768 _____ () C:\Program Files (x86)\GS Supporter\AssistantSvc.dll 2013-04-18 19:30 - 2012-11-13 13:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-04-18 19:30 - 2012-11-13 13:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-04-18 19:30 - 2012-11-13 13:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-04-18 19:30 - 2012-08-23 08:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-04-18 19:30 - 2012-11-13 13:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl 2013-08-19 18:43 - 2013-08-19 18:43 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll 2012-02-22 22:54 - 2011-11-30 05:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-02-22 22:53 - 2012-01-20 04:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2010-08-04 00:39 - 2010-08-04 00:39 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2010-08-04 00:39 - 2010-08-04 00:39 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2013-04-18 19:30 - 2012-11-13 13:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/21/2014 04:05:23 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 10:07:21 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 09:41:46 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e Ausnahmecode: 0xc015000f Fehleroffset: 0x000000000006f82a ID des fehlerhaften Prozesses: 0x898 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Error: (01/20/2014 09:41:43 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18222, Zeitstempel: 0x51f1ddfa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005055a ID des fehlerhaften Prozesses: 0x898 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 System errors: ============= Error: (01/20/2014 10:43:30 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (01/20/2014 10:42:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2872339) Error: (01/20/2014 10:42:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2882822) Error: (01/20/2014 10:06:44 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 20.01.2014 um 22:02:53 unerwartet heruntergefahren. Error: (01/20/2014 09:40:39 PM) (Source: nvlddmkm) (User: ) Description: \Device\Video5!051d(2528) Error: (01/20/2014 04:27:50 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Freemake Improver" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/20/2014 04:27:50 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Freemake Improver erreicht. Error: (01/19/2014 09:31:22 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (01/19/2014 09:30:55 PM) (Source: DCOM) (User: ) Description: {F05589DB-898A-4735-80D6-3646EF68478D} Error: (01/19/2014 09:30:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2872339) Microsoft Office Sessions: ========================= Error: (01/21/2014 04:05:23 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 10:07:21 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 09:41:46 PM) (Source: Application Error)(User: ) Description: Explorer.EXE6.1.7601.175674d672ee4ntdll.dll6.1.7601.177254ec4aa8ec015000f000000000006f82a89801cf15f41f1bdb0eC:\Windows\Explorer.EXEC:\Windows\SYSTEM32 \ntdll.dll467fcbc0-8213-11e3-ace5-8c89a5ce0185 Error: (01/20/2014 09:41:43 PM) (Source: Application Error)(User: ) Description: Explorer.EXE6.1.7601.175674d672ee4SHELL32.dll6.1.7601.1822251f1ddfac0000005000000000005055a89801cf15f41f1bdb0eC:\Windows\Explorer.EXEC:\Windows\system 32\SHELL32.dll44df3af0-8213-11e3-ace5-8c89a5ce0185 ==================== Memory info =========================== Percentage of memory in use: 25% Total physical RAM: 8158.91 MB Available physical RAM: 6096.24 MB Total Pagefile: 16316.02 MB Available Pagefile: 13582.78 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:1346.17 GB) (Free:1261.67 GB) NTFS Drive d: (Recover) (Fixed) (Total:50 GB) (Free:29.86 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1397 GB) (Disk ID: 1C325544) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=-753589551104) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) ==================== End Of Log ============================ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-01-2014
Ran by Christine (administrator) on CHRISTINE-PC on 21-01-2014 20:25:53
Running from C:\Users\Christine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2HPTNBH4
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-11-29] (Realtek Semiconductor)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-02-15] (Google Inc.)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Alex und Basti\...\Policies\system: [LogonHoursAction] 2
HKU\Alex und Basti\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\PROGRA~2\GSSUPP~1\ASSIST~2.DLL => C:\Program Files (x86)\GS Supporter\Assistant_x64.dll [2759168 2014-01-12] ()
AppInit_DLLs-x32: c:\progra~2\gssupp~1\assist~1.dll => C:\Program Files (x86)\GS Supporter\Assistant.dll [3041792 2014-01-12] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {F1E99E07-A6F9-4F82-AC8B-97A6F99464FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1dda9c46-5386-4db3-8acd-4d49fa526902&apn_sauid=31CCEC70-C042-4B3D-97F8-2FF03B6D74E9
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default
FF SearchEngineOrder.1: Ask.com
FF Homepage: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Christine\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FRITZ!Box AddOn - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\fb_add_on@avm.de [2013-07-02]
FF Extension: greAtsaveR - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\uuycv@eeuagfbx.net [2014-01-12]
FF Extension: Freemium_Toolbar - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{49f312ab-c063-406d-a647-8638a2986fea} [2013-05-04]
FF Extension: Ghostery - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\firefox@ghostery.com.xpi [2013-08-19]
FF Extension: Adblock Plus - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-04-18]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (greAtsaveR) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbfdpfmaenkghncdihliiadcbdikoi [2014-01-12]
CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Christine\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.18.0.crx [2013-03-11]
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-02-19]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-09-08]
CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2013-02-19]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-09-08]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-09-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2013-02-13] (Kaspersky Lab ZAO)
R2 e9f32388; C:\Program Files (x86)\GS Supporter\AssistantSvc.dll [146768 2014-01-12] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101376 2013-02-07] (Freemake)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-02-07] (Ellora Assets Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [297984 2014-01-21] ()
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2013-02-13] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST
2014-01-20 22:17 - 2014-01-20 22:18 - 00000000 ____D C:\AdwCleaner
2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk
2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan
2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3
2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url
2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2014-01-16 23:06 - 2013-10-23 09:20 - 03426956 _____ C:\Windows\system32\nvcoproc.bin
2014-01-16 23:06 - 2012-02-22 23:02 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveEditor
2014-01-16 23:06 - 2011-12-01 22:26 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-01-16 23:06 - 2011-07-18 22:23 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover
2014-01-16 23:06 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-16 23:06 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur
2014-01-16 22:31 - 2014-01-16 22:54 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url
2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0
2014-01-16 22:07 - 2014-01-21 16:05 - 00000616 _____ C:\Windows\setupact.log
2014-01-15 17:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 17:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 17:50 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt
2014-01-12 20:42 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-12 20:40 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Program Files (x86)\GS Supporter
2014-01-12 18:29 - 2014-01-12 18:31 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie
2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel
2014-01-08 17:52 - 2014-01-08 18:27 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack
2014-01-08 17:18 - 2014-01-08 18:06 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0
2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails
2014-01-08 17:04 - 2014-01-12 17:37 - 00000000 ____D C:\Users\Christine\.gimp-2.8
2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2
2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-08 17:02 - 2014-01-08 17:43 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip
2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test
2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager
==================== One Month Modified Files and Folders =======
2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST
2014-01-21 19:37 - 2013-02-14 05:52 - 01341345 _____ C:\Windows\WindowsUpdate.log
2014-01-21 19:36 - 2013-02-13 20:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-21 19:31 - 2013-04-27 18:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-21 17:36 - 2013-02-13 20:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-21 17:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2014-01-21 16:27 - 2013-05-04 10:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater Ui
2014-01-21 16:27 - 2013-05-04 10:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2014-01-21 16:12 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-21 16:12 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-21 16:05 - 2014-01-16 22:07 - 00000616 _____ C:\Windows\setupact.log
2014-01-21 16:05 - 2013-07-02 19:39 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2014-01-21 16:05 - 2012-02-22 15:34 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-21 16:05 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-20 22:43 - 2013-11-19 08:00 - 00381629 _____ C:\Windows\IE11_main.log
2014-01-20 22:18 - 2014-01-20 22:17 - 00000000 ____D C:\AdwCleaner
2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk
2014-01-20 18:31 - 2013-12-05 18:52 - 00000000 ____D C:\Users\Christine\Desktop\DMS-Launcher
2014-01-20 17:58 - 2013-04-14 18:02 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft
2014-01-19 21:30 - 2013-02-14 20:42 - 00000000 ____D C:\Users\Christine\AppData\Roaming\SoftGrid Client
2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan
2014-01-19 13:40 - 2013-04-14 10:12 - 00000099 _____ C:\Users\Public\LMDebug.log
2014-01-17 21:21 - 2010-11-21 04:47 - 00146140 _____ C:\Windows\PFRO.log
2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3
2014-01-17 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-17 20:55 - 2013-12-20 14:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url
2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2014-01-16 23:06 - 2012-02-22 15:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-16 22:54 - 2014-01-16 22:31 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url
2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur
2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0
2014-01-16 17:53 - 2009-07-14 05:45 - 00310240 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:31 - 2013-08-18 10:53 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:28 - 2011-07-18 21:31 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt
2014-01-12 21:42 - 2013-04-18 19:30 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-12 20:42 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\SoftWarehouse
2014-01-12 20:42 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Program Files (x86)\GS Supporter
2014-01-12 20:40 - 2013-02-13 21:29 - 00000000 ____D C:\Users\Christine\AppData\Local\Google
2014-01-12 20:06 - 2013-03-11 17:39 - 00000000 ____D C:\Users\Christine\AppData\Local\DoNotTrackPlus
2014-01-12 18:31 - 2014-01-12 18:29 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie
2014-01-12 17:37 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\.gimp-2.8
2014-01-10 15:15 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-09 17:51 - 2011-05-16 15:04 - 00654602 _____ C:\Windows\system32\perfh007.dat
2014-01-09 17:51 - 2011-05-16 15:04 - 00130216 _____ C:\Windows\system32\perfc007.dat
2014-01-09 17:51 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-08 18:27 - 2014-01-08 17:52 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack
2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel
2014-01-08 18:06 - 2014-01-08 17:18 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0
2014-01-08 17:43 - 2014-01-08 17:02 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip
2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails
2014-01-08 17:06 - 2013-02-13 20:58 - 00000000 ____D C:\Users\Christine
2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2
2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test
2014-01-06 14:17 - 2013-07-17 16:03 - 00000000 ____D C:\Users\Christine\Documents\Free YouTube Download Manager
2013-12-28 11:37 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager
Some content of TEMP:
====================
C:\Users\Christine\AppData\Local\Temp\avgnt.exe
C:\Users\Christine\AppData\Local\Temp\Colour_Land_3_install.exe
C:\Users\Christine\AppData\Local\Temp\i4jdel0.exe
C:\Users\Christine\AppData\Local\Temp\WindowsUpdateAgent30-x64.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-19 14:10
==================== End Of Log ============================
--- --- --- |
|
22.01.2014, 20:09
| #4 |
| | Befall softwareupdater.ui.exde Hallo, hier also die logs von heute:AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 19:18:20
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Christine - CHRISTINE-PC
# Gestartet von : C:\Users\Christine\Desktop\Downloads\adwcleaner.exe
# Option : Suchen
***** [ Dienste ] *****
Dienst Gefunden : SystemStoreService
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk
Datei Gefunden : C:\Windows\System32\roboot64.exe
Datei Gefunden : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater
Datei Gefunden : C:\Windows\System32\Tasks\Software Updater Ui
Ordner Gefunden C:\Program Files (x86)\Iminent
Ordner Gefunden C:\Program Files (x86)\SoftwareUpdater
Ordner Gefunden C:\ProgramData\Partner
Ordner Gefunden C:\ProgramData\SoftWarehouse
Ordner Gefunden C:\Users\Alex und Basti\AppData\Local\torch
Ordner Gefunden C:\Users\Alex und Basti\AppData\LocalLow\AskToolbar
Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch
Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch
Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch
Ordner Gefunden C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch
Ordner Gefunden C:\Users\Christine\AppData\Local\AskToolbar
Ordner Gefunden C:\Users\Christine\AppData\Local\Software_Updater
Ordner Gefunden C:\Users\Christine\AppData\Local\SoftwareUpdater
Ordner Gefunden C:\Users\Christine\AppData\Local\torch
Ordner Gefunden C:\Users\Christine\AppData\LocalLow\AskToolbar
Ordner Gefunden C:\Users\Christine\AppData\LocalLow\SimplyTech
Ordner Gefunden C:\Users\Christine\AppData\Roaming\file scout
Ordner Gefunden C:\Users\Christine\AppData\Roaming\PerformerSoft
Ordner Gefunden C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\596da8ab76fbf41
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel Gefunden : HKCU\Software\Ask.com
Schlüssel Gefunden : HKCU\Software\AskToolbar
Schlüssel Gefunden : HKCU\Software\BabylonToolbar
Schlüssel Gefunden : HKCU\Software\DataMngr
Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : HKCU\Software\filescout
Schlüssel Gefunden : HKCU\Software\Iminent
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\Ask.com
Schlüssel Gefunden : [x64] HKCU\Software\AskToolbar
Schlüssel Gefunden : [x64] HKCU\Software\BabylonToolbar
Schlüssel Gefunden : [x64] HKCU\Software\DataMngr
Schlüssel Gefunden : [x64] HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : [x64] HKCU\Software\filescout
Schlüssel Gefunden : [x64] HKCU\Software\Iminent
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\596da8ab76fbf41
Schlüssel Gefunden : HKLM\Software\AskToolbar
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Schlüssel Gefunden : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gefunden : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabfjnbeinlpljodiajipidiompfl
Schlüssel Gefunden : HKLM\Software\Iminent
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA41BB14-E67B-1653-C57B-5CA99418A866}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16750
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\prefs.js ]
Zeile gefunden : user_pref("extensions.asktb.ff-original-keyword-url", "");
Zeile gefunden : user_pref("extensions.sVrgtf2iPIRB.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && wind[...]
[ Datei : C:\Users\Alex und Basti\AppData\Roaming\Mozilla\Firefox\Profiles\qgu1gvr1.default\prefs.js ]
Zeile gefunden : user_pref("browser.startup.homepage", "hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE");
Zeile gefunden : user_pref("extensions.asktb.ff-original-keyword-url", "");
*************************
AdwCleaner[R0].txt - [21070 octets] - [20/01/2014 22:17:48]
AdwCleaner[R1].txt - [20765 octets] - [22/01/2014 19:18:20]
########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [20826 octets] ##########
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 01 Ran by Christine (administrator) on CHRISTINE-PC on 22-01-2014 19:27:03 Running from C:\Users\Christine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8PE9XWQW Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe () C:\Program Files (x86)\watchmi\TvdService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe () C:\Program Files (x86)\watchmi\TvdTray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe () C:\Users\Christine\Desktop\Downloads\adwcleaner.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-11-29] (Realtek Semiconductor) HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] () HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [ApnUpdater] - "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.) Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-02-15] (Google Inc.) HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.) HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom) HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung) HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung) HKCU\...\Policies\system: [LogonHoursAction] 2 HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\Alex und Basti\...\Policies\system: [LogonHoursAction] 2 HKU\Alex und Basti\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 AppInit_DLLs-x32: => File Not Found ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {F1E99E07-A6F9-4F82-AC8B-97A6F99464FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1dda9c46-5386-4db3-8acd-4d49fa526902&apn_sauid=31CCEC70-C042-4B3D-97F8-2FF03B6D74E9 BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.) BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default FF SearchEngineOrder.1: Ask.com FF Homepage: Google FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Christine\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: FRITZ!Box AddOn - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\fb_add_on@avm.de [2013-07-02] FF Extension: greAtsaveR - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\uuycv@eeuagfbx.net [2014-01-12] FF Extension: Freemium_Toolbar - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{49f312ab-c063-406d-a647-8638a2986fea} [2013-05-04] FF Extension: Ghostery - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\firefox@ghostery.com.xpi [2013-08-19] FF Extension: Adblock Plus - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-04-18] FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2013-02-13] FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2013-02-13] FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2013-02-13] FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ [] FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ [] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (greAtsaveR) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbfdpfmaenkghncdihliiadcbdikoi [2014-01-12] CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Christine\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.18.0.crx [2013-03-11] CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-02-19] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-09-08] CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2013-02-19] CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-09-08] CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-09-08] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG) S3 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2013-02-13] (Kaspersky Lab ZAO) R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101376 2013-02-07] (Freemake) R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-02-07] (Ellora Assets Corp.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.) S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [297984 2014-01-22] () R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2013-02-13] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-21 22:28 - 2014-01-21 22:28 - 00040176 _____ C:\Users\Christine\Documents\FRST.txt 2014-01-21 22:28 - 2014-01-21 22:28 - 00034421 _____ C:\Users\Christine\Documents\Addition.txt 2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST 2014-01-20 22:17 - 2014-01-22 19:18 - 00000000 ____D C:\AdwCleaner 2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk 2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan 2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3 2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url 2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate 2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2014-01-16 23:06 - 2013-10-23 09:20 - 03426956 _____ C:\Windows\system32\nvcoproc.bin 2014-01-16 23:06 - 2012-02-22 23:02 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveEditor 2014-01-16 23:06 - 2011-12-01 22:26 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia 2014-01-16 23:06 - 2011-07-18 22:23 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover 2014-01-16 23:06 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-16 23:06 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur 2014-01-16 22:31 - 2014-01-16 22:54 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url 2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0 2014-01-16 22:07 - 2014-01-22 19:06 - 00000672 _____ C:\Windows\setupact.log 2014-01-15 17:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 17:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 17:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 17:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 17:50 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 17:50 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 17:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 17:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 17:50 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt 2014-01-12 20:42 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\SoftWarehouse 2014-01-12 20:40 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\InstallMate 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$ 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b 2014-01-12 18:29 - 2014-01-12 18:31 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie 2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel 2014-01-08 17:52 - 2014-01-08 18:27 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack 2014-01-08 17:18 - 2014-01-08 18:06 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0 2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails 2014-01-08 17:04 - 2014-01-12 17:37 - 00000000 ____D C:\Users\Christine\.gimp-2.8 2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2 2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk 2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2 2014-01-08 17:02 - 2014-01-08 17:43 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip 2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test 2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager ==================== One Month Modified Files and Folders ======= 2014-01-22 19:18 - 2014-01-20 22:17 - 00000000 ____D C:\AdwCleaner 2014-01-22 19:14 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-22 19:14 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-22 19:11 - 2013-05-04 10:49 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater Ui 2014-01-22 19:11 - 2013-05-04 10:49 - 00004206 _____ C:\Windows\System32\Tasks\Software Updater 2014-01-22 19:11 - 2013-02-14 05:52 - 01474968 _____ C:\Windows\WindowsUpdate.log 2014-01-22 19:07 - 2013-02-13 20:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-22 19:06 - 2014-01-16 22:07 - 00000672 _____ C:\Windows\setupact.log 2014-01-22 19:06 - 2013-07-02 19:39 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2014-01-22 19:06 - 2012-02-22 15:34 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-22 19:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-22 19:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing 2014-01-21 22:29 - 2013-11-19 08:00 - 00388668 _____ C:\Windows\IE11_main.log 2014-01-21 22:28 - 2014-01-21 22:28 - 00040176 _____ C:\Users\Christine\Documents\FRST.txt 2014-01-21 22:28 - 2014-01-21 22:28 - 00034421 _____ C:\Users\Christine\Documents\Addition.txt 2014-01-21 21:36 - 2013-02-13 20:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-21 21:31 - 2013-04-27 18:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST 2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk 2014-01-20 18:31 - 2013-12-05 18:52 - 00000000 ____D C:\Users\Christine\Desktop\DMS-Launcher 2014-01-20 17:58 - 2013-04-14 18:02 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft 2014-01-19 21:30 - 2013-02-14 20:42 - 00000000 ____D C:\Users\Christine\AppData\Roaming\SoftGrid Client 2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan 2014-01-19 13:40 - 2013-04-14 10:12 - 00000099 _____ C:\Users\Public\LMDebug.log 2014-01-17 21:21 - 2010-11-21 04:47 - 00146140 _____ C:\Windows\PFRO.log 2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3 2014-01-17 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports 2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-17 20:55 - 2013-12-20 14:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url 2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate 2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten 2014-01-16 23:06 - 2012-02-22 15:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2014-01-16 22:54 - 2014-01-16 22:31 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url 2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur 2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0 2014-01-16 17:53 - 2009-07-14 05:45 - 00310240 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 21:31 - 2013-08-18 10:53 - 00000000 ____D C:\Windows\system32\MRT 2014-01-15 21:28 - 2011-07-18 21:31 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt 2014-01-12 21:42 - 2013-04-18 19:30 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2014-01-12 20:42 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\SoftWarehouse 2014-01-12 20:42 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\InstallMate 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$ 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator 2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b 2014-01-12 20:40 - 2013-02-13 21:29 - 00000000 ____D C:\Users\Christine\AppData\Local\Google 2014-01-12 20:06 - 2013-03-11 17:39 - 00000000 ____D C:\Users\Christine\AppData\Local\DoNotTrackPlus 2014-01-12 18:31 - 2014-01-12 18:29 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie 2014-01-12 17:37 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\.gimp-2.8 2014-01-10 15:15 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-09 17:51 - 2011-05-16 15:04 - 00654602 _____ C:\Windows\system32\perfh007.dat 2014-01-09 17:51 - 2011-05-16 15:04 - 00130216 _____ C:\Windows\system32\perfc007.dat 2014-01-09 17:51 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-08 18:27 - 2014-01-08 17:52 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack 2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel 2014-01-08 18:06 - 2014-01-08 17:18 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0 2014-01-08 17:43 - 2014-01-08 17:02 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip 2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails 2014-01-08 17:06 - 2013-02-13 20:58 - 00000000 ____D C:\Users\Christine 2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2 2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk 2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2 2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test 2014-01-06 14:17 - 2013-07-17 16:03 - 00000000 ____D C:\Users\Christine\Documents\Free YouTube Download Manager 2013-12-28 11:37 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager Some content of TEMP: ==================== C:\Users\Christine\AppData\Local\Temp\avgnt.exe C:\Users\Christine\AppData\Local\Temp\Colour_Land_3_install.exe C:\Users\Christine\AppData\Local\Temp\i4jdel0.exe C:\Users\Christine\AppData\Local\Temp\Quarantine.exe C:\Users\Christine\AppData\Local\Temp\WindowsUpdateAgent30-x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 14:10 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2014 01 Ran by Christine at 2014-01-22 19:27:21 Running from C:\Users\Christine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8PE9XWQW Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AV: Kaspersky Internet Security (Disabled - Out of date) {2EAA32A5-1EE1-1B22-95DA-337730C6E984} AS: Kaspersky Internet Security (Disabled - Up to date) {95CBD341-38DB-14AC-AF6A-08054B41A339} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} FW: Kaspersky Internet Security (Disabled) {1691B380-548E-1A7A-BE85-9A42CE15AEFF} ==================== Installed Programs ====================== Action Replay Code Manager (x32 Version: - ) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133 - Adobe Systems, Inc.) Alcatel onetouch Manager (x32 Version: 13.04.2345 - Mobile Action) Angry Birds Star Wars (x32 Version: 1.3.0 - Rovio Entertainment Ltd.) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) Ask Toolbar (x32 Version: 1.15.26.0 - Ask.com) <==== ATTENTION Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.9.0 - Asmedia Technology) AVIConverter 5.1.6 (x32 Version: 5.1.6 - ) Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.6.45268 - Ask.com) Biet-O-Matic v2.14.12 (x32 Version: 2.14.12 - BOM Development Team) Bonjour (Version: 3.0.0.10 - Apple Inc.) Coby Media Manager (x32 Version: 1.0.4314 - Coby) Colour Land 3 (x32 Version: 1.0.0 - Klett Verlag GmbH) Common Desktop Agent (Version: 1.62.0 - OEM) Hidden COMPUTERBILD Vorteil-Center (x32 Version: 1.1.23 - J3S) Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation) CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) CyberLink Power2Go (x32 Version: 7.0.0.1327 - CyberLink Corp.) Hidden CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) Hidden CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.) CyberLink WaveEditor (x32 Version: 1.0.1.2821 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden eGames Pinball (x32 Version: - ) ElsterFormular (x32 Version: 14.4.20130909 - Landesfinanzdirektion Thüringen) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2 - Microsoft Corporation) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Free YouTube Download Manager (x32 Version: 1.0.0.4 - Freetec) Hidden Freemake Video Downloader (x32 Version: 3.5.0 - Ellora Assets Corporation) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Gardenscapes – Gestalte dein Haus (x32 Version: - Playrix Entertainment) Gardenscapes (x32 Version: - Playrix Entertainment) GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team) Google Chrome (x32 Version: 12.0.742.91 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden iCloud (Version: 3.1.0.40 - Apple Inc.) Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 8.0.1.1399 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.23.219.2 - Intel Corporation) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java(TM) 7 Update 3 (64-bit) (Version: 7.0.30 - Oracle) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Kaspersky Internet Security 2012 (x32 Version: 12.0.0.374 - Kaspersky Lab) Hidden Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2 - Microsoft Corporation) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) MediacoderSE (x32 Version: 1.1 - amax) Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden Memeo Instant Backup (x32 Version: 4.60.0.7943 - Memeo Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.9.0 (Version: 1.3.9.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.11.1111 - NVIDIA Corporation) Hidden NVIDIA PhysX System Software 9.11.1111 (Version: 9.11.1111 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.6516 - Realtek Semiconductor Corp.) Samsung Easy Document Creator (x32 Version: 1.04.06 (07.08.2012) - Samsung Electronics Co., Ltd.) Samsung Easy Printer Manager (x32 Version: 1.02.63.01(09.08.2012) - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Hidden Samsung OCR Software (x32 Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (x32 Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Samsung Scan Process Machine (x32 Version: 1.00.20.02 - Samsung Electronics Co., Ltd.) Hidden Samsung SCX-3400 Series (x32 Version: 1.13 (17.09.2012) - Samsung Electronics Co., Ltd.) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.) Secret Maryo Chronicles (x32 Version: 1.9 - Florian Richter) Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0 - Adobe Systems Incorporated) Spybot - Search & Destroy (x32 Version: 2.0.12 - Safer-Networking Ltd.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamViewer 8 (x32 Version: 8.0.17396 - TeamViewer) TomTom HOME (x32 Version: 2.9.7 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2 - TomTom International B.V.) Unity Web Player (HKCU Version: - Unity Technologies ApS) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2 - Microsoft Corporation) watchmi (x32 Version: 3.0.0 - Axel Springer Digital TV Guide GmbH) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinPcap 4.1.2 (x32 Version: 4.1.0.2001 - CACE Technologies) WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0 - win.rar GmbH) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 15-01-2014 20:28:14 Windows Update 16-01-2014 16:57:13 Windows Update 16-01-2014 21:05:38 Windows Update 16-01-2014 21:14:12 Windows Update 16-01-2014 21:28:45 Windows Modules Installer 16-01-2014 21:31:27 Windows Modules Installer 16-01-2014 21:37:47 Windows Update 16-01-2014 21:53:38 Windows Modules Installer 16-01-2014 21:54:01 Windows Modules Installer 16-01-2014 21:55:31 Windows Update 16-01-2014 22:04:44 Windows Update 17-01-2014 20:05:47 Windows Update 17-01-2014 20:13:47 Windows Update 17-01-2014 20:15:24 Windows Update 17-01-2014 20:23:35 Windows Update 18-01-2014 18:02:45 Windows Update 18-01-2014 21:01:20 Windows Update 19-01-2014 20:30:30 Windows Update 20-01-2014 21:42:24 Windows Update 21-01-2014 21:29:07 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {17D37D64-572F-4414-AA10-E5F7C226EC58} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-12-18] () Task: {351524A9-BBE8-4EB0-9C4D-BB3168BC3536} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated) Task: {63DAC18D-9588-4CA7-B0ED-64B6F42AE6DA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {6AF19A8E-234E-4487-9082-981B7C42488E} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-12-19] () Task: {6C85E579-86A4-4582-82AB-1F3A2C270616} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {81B57309-DFB4-4B15-9DC7-4A9B49EA1965} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-13] (Google Inc.) Task: {AA025448-A441-4D88-9582-B2A52977F52C} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe Task: {AF604A01-5267-4164-9AAA-7F2F37D8272D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-13] (Google Inc.) Task: {B65A361B-4362-49D4-9C0C-400C22777AD8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {E17E6B3B-89B6-4FFB-8227-8AF6ABB09D63} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-14 10:09 - 2011-05-02 05:40 - 00034304 _____ () C:\Windows\System32\ssm1mlm.dll 2012-02-22 15:33 - 2013-10-23 09:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-02-13 20:55 - 2013-02-13 20:55 - 00059904 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\3.0.0.8__f722db7bec59a14b\Tvd.Remote.dll 2013-02-13 20:55 - 2013-02-13 20:55 - 00034304 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Tools\3.0.0.8__f722db7bec59a14b\Tvd.Tools.dll 2013-02-13 20:55 - 2013-02-13 20:55 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\FingerPrint\1.0.0.0__a62e68e935d72fa6\FingerPrint.dll 2013-02-13 20:55 - 2013-02-13 20:55 - 00079360 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Reporting\3.0.0.8__f722db7bec59a14b\Tvd.Reporting.dll 2013-02-13 20:55 - 2013-02-13 20:55 - 00153088 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Aprico\3.0.0.8__f722db7bec59a14b\Tvd.Aprico.dll 2012-02-20 21:23 - 2012-02-20 21:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2012-01-31 11:24 - 2012-01-31 11:24 - 00004608 _____ () C:\Program Files (x86)\watchmi\de\TvdTray.resources.dll 2013-03-11 17:38 - 2012-12-18 09:31 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-04-18 19:30 - 2012-11-13 13:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-04-18 19:30 - 2012-11-13 13:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-04-18 19:30 - 2012-11-13 13:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-04-18 19:30 - 2012-08-23 08:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-04-18 19:30 - 2012-11-13 13:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl 2010-08-04 00:39 - 2010-08-04 00:39 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2010-08-04 00:39 - 2010-08-04 00:39 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2013-04-18 19:30 - 2012-11-13 13:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl 2013-08-19 18:43 - 2013-08-19 18:43 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll 2012-02-22 22:54 - 2011-11-30 05:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-02-22 22:53 - 2012-01-20 04:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/22/2014 07:06:40 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/21/2014 10:05:19 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FreemakeUtilsService.exe, Version: 1.0.0.0, Zeitstempel: 0x5113b56f Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18015, Zeitstempel: 0x50b83c8a Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000c41f ID des fehlerhaften Prozesses: 0x430 Startzeit der fehlerhaften Anwendung: 0xFreemakeUtilsService.exe0 Pfad der fehlerhaften Anwendung: FreemakeUtilsService.exe1 Pfad des fehlerhaften Moduls: FreemakeUtilsService.exe2 Berichtskennung: FreemakeUtilsService.exe3 Error: (01/21/2014 10:05:17 PM) (Source: .NET Runtime) (User: ) Description: Application: FreemakeUtilsService.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.ArgumentException Stack: at System.Security.Principal.SecurityIdentifier..ctor(System.String) at FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary() at FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo) at FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck() at FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs) at FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs) at System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs) at System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object) at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() at System.Threading.ThreadPoolWorkQueue.Dispatch() at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() Error: (01/21/2014 04:05:23 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 10:07:21 PM) (Source: MemeoBackgroundService) (User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 09:41:46 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e Ausnahmecode: 0xc015000f Fehleroffset: 0x000000000006f82a ID des fehlerhaften Prozesses: 0x898 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Error: (01/20/2014 09:41:43 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18222, Zeitstempel: 0x51f1ddfa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005055a ID des fehlerhaften Prozesses: 0x898 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 System errors: ============= Error: (01/21/2014 10:29:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (01/21/2014 10:29:27 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2872339) Error: (01/21/2014 10:29:23 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2882822) Error: (01/21/2014 10:05:25 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Freemake Improver" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (01/21/2014 08:47:17 PM) (Source: Schannel) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (01/20/2014 10:43:30 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (01/20/2014 10:42:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2872339) Error: (01/20/2014 10:42:44 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2882822) Error: (01/20/2014 10:06:44 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 20.01.2014 um 22:02:53 unerwartet heruntergefahren. Error: (01/20/2014 09:40:39 PM) (Source: nvlddmkm) (User: ) Description: \Device\Video5!051d(2528) Microsoft Office Sessions: ========================= Error: (01/22/2014 07:06:40 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/21/2014 10:05:19 PM) (Source: Application Error)(User: ) Description: FreemakeUtilsService.exe1.0.0.05113b56fKERNELBASE.dll6.1.7601.1801550b83c8ae04343520000c41f43001cf16ba2e8d65eaC:\ProgramData\Freemake\FreemakeUtilsSer vice\FreemakeUtilsService.exeC:\Windows\syswow64\KERNELBASE.dllbba040d5-82df-11e3-a344-8c89a5ce0185 Error: (01/21/2014 10:05:17 PM) (Source: .NET Runtime)(User: ) Description: Application: FreemakeUtilsService.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.ArgumentException Stack: at System.Security.Principal.SecurityIdentifier..ctor(System.String) at FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary() at FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo) at FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck() at FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs) at FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs) at System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs) at System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object) at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() at System.Threading.ThreadPoolWorkQueue.Dispatch() at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() Error: (01/21/2014 04:05:23 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 10:07:21 PM) (Source: MemeoBackgroundService)(User: ) Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden. bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data) bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor) bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider) --- Ende der internen Ausnahmestapelüberwachung --- bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType) bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration. bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity) bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity) bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args) Error: (01/20/2014 09:41:46 PM) (Source: Application Error)(User: ) Description: Explorer.EXE6.1.7601.175674d672ee4ntdll.dll6.1.7601.177254ec4aa8ec015000f000000000006f82a89801cf15f41f1bdb0eC:\Windows\Explorer.EXEC:\Windows\SYSTEM32 \ntdll.dll467fcbc0-8213-11e3-ace5-8c89a5ce0185 Error: (01/20/2014 09:41:43 PM) (Source: Application Error)(User: ) Description: Explorer.EXE6.1.7601.175674d672ee4SHELL32.dll6.1.7601.1822251f1ddfac0000005000000000005055a89801cf15f41f1bdb0eC:\Windows\Explorer.EXEC:\Windows\system 32\SHELL32.dll44df3af0-8213-11e3-ace5-8c89a5ce0185 ==================== Memory info =========================== Percentage of memory in use: 26% Total physical RAM: 8158.91 MB Available physical RAM: 5956.25 MB Total Pagefile: 16316.02 MB Available Pagefile: 13727.76 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:1346.17 GB) (Free:1261.33 GB) NTFS Drive d: (Recover) (Fixed) (Total:50 GB) (Free:29.86 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1397 GB) (Disk ID: 1C325544) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=-753589551104) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) So schauts also heute aus. Gruß Kirsche 143 |
|
21.01.2014, 22:51
| #5 |
| /// TB-Ausbilder | Befall softwareupdater.ui.exde Ok, passt. Schritt 1
Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3 Starte noch einmal FRST.
Bitte poste in deiner nächsten Antwort:
__________________ cheers, Leo |
|
22.01.2014, 20:23
| #6 |
| /// TB-Ausbilder | Befall softwareupdater.ui.exde Wiederhole die Schritte 2 und 3 bitte. Aber drücke dieses Mal beim AdwCleaner nach der Suche auf "Löschen", wie es in der Anleitunge beschrieben ist.
__________________ --> Befall softwareupdater.ui.exde |
|
22.01.2014, 20:53
| #7 |
| | Befall softwareupdater.ui.exde Sorry, dass Frauen aber auch immer nicht machen können, was Ihnen gesagt wird... Jetzt also nochmals die logsAdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 20:41:39
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Christine - CHRISTINE-PC
# Gestartet von : C:\Users\Christine\Desktop\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : SystemStoreService
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\SoftWarehouse
Ordner Gelöscht : C:\Program Files (x86)\Iminent
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Users\CHRIST~1\AppData\Local\Temp\AskSearch
Ordner Gelöscht : C:\Users\Christine\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Christine\AppData\Local\Software_Updater
Ordner Gelöscht : C:\Users\Christine\AppData\Local\SoftwareUpdater
Ordner Gelöscht : C:\Users\Christine\AppData\Local\torch
Ordner Gelöscht : C:\Users\Christine\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Christine\AppData\LocalLow\SimplyTech
Ordner Gelöscht : C:\Users\Christine\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Christine\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Alex und Basti\AppData\Local\torch
Ordner Gelöscht : C:\Users\Alex und Basti\AppData\LocalLow\AskToolbar
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabfjnbeinlpljodiajipidiompfl
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Schlüssel Gelöscht : HKCU\Software\596da8ab76fbf41
Schlüssel Gelöscht : HKLM\SOFTWARE\596da8ab76fbf41
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA41BB14-E67B-1653-C57B-5CA99418A866}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16750
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");
Zeile gelöscht : user_pref("extensions.sVrgtf2iPIRB.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self.location.protocol.indexOf('hxxp')>-1 && wind[...]
[ Datei : C:\Users\Alex und Basti\AppData\Roaming\Mozilla\Firefox\Profiles\qgu1gvr1.default\prefs.js ]
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE");
Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");
*************************
AdwCleaner[R0].txt - [21070 octets] - [20/01/2014 22:17:48]
AdwCleaner[R1].txt - [21131 octets] - [22/01/2014 19:18:20]
AdwCleaner[R2].txt - [21192 octets] - [22/01/2014 20:40:39]
AdwCleaner[S0].txt - [20345 octets] - [22/01/2014 20:41:39]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20406 octets] ##########
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 02
Ran by Christine (administrator) on CHRISTINE-PC on 22-01-2014 20:49:51
Running from C:\Users\Christine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8PE9XWQW
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Farbar) C:\Users\Christine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8PE9XWQW\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-11-29] (Realtek Semiconductor)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-02-15] (Google Inc.)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Alex und Basti\...\Policies\system: [LogonHoursAction] 2
HKU\Alex und Basti\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs-x32: => File Not Found
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {F1E99E07-A6F9-4F82-AC8B-97A6F99464FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1dda9c46-5386-4db3-8acd-4d49fa526902&apn_sauid=31CCEC70-C042-4B3D-97F8-2FF03B6D74E9
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default
FF SearchEngineOrder.1: Ask.com
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Christine\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FRITZ!Box AddOn - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\fb_add_on@avm.de [2013-07-02]
FF Extension: greAtsaveR - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\uuycv@eeuagfbx.net [2014-01-12]
FF Extension: Freemium_Toolbar - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{49f312ab-c063-406d-a647-8638a2986fea} [2013-05-04]
FF Extension: Ghostery - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\firefox@ghostery.com.xpi [2013-08-19]
FF Extension: Adblock Plus - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-04-18]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (greAtsaveR) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbfdpfmaenkghncdihliiadcbdikoi [2014-01-12]
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-02-19]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-09-08]
CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2013-02-19]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-09-08]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-09-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2013-02-13] (Kaspersky Lab ZAO)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101376 2013-02-07] (Freemake)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-02-07] (Ellora Assets Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2013-02-13] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-21 22:28 - 2014-01-21 22:28 - 00040176 _____ C:\Users\Christine\Documents\FRST.txt
2014-01-21 22:28 - 2014-01-21 22:28 - 00034421 _____ C:\Users\Christine\Documents\Addition.txt
2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST
2014-01-20 22:17 - 2014-01-22 20:41 - 00000000 ____D C:\AdwCleaner
2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk
2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan
2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3
2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url
2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2014-01-16 23:06 - 2013-10-23 09:20 - 03426956 _____ C:\Windows\system32\nvcoproc.bin
2014-01-16 23:06 - 2012-02-22 23:02 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveEditor
2014-01-16 23:06 - 2011-12-01 22:26 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-01-16 23:06 - 2011-07-18 22:23 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover
2014-01-16 23:06 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-16 23:06 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur
2014-01-16 22:31 - 2014-01-16 22:54 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url
2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0
2014-01-16 22:07 - 2014-01-22 20:43 - 00000728 _____ C:\Windows\setupact.log
2014-01-15 17:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 17:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 17:50 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt
2014-01-12 20:40 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b
2014-01-12 18:29 - 2014-01-12 18:31 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie
2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel
2014-01-08 17:52 - 2014-01-08 18:27 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack
2014-01-08 17:18 - 2014-01-08 18:06 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0
2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails
2014-01-08 17:04 - 2014-01-12 17:37 - 00000000 ____D C:\Users\Christine\.gimp-2.8
2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2
2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-08 17:02 - 2014-01-08 17:43 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip
2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test
2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager
==================== One Month Modified Files and Folders =======
2014-01-22 20:44 - 2013-02-13 20:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-22 20:43 - 2014-01-16 22:07 - 00000728 _____ C:\Windows\setupact.log
2014-01-22 20:43 - 2013-07-02 19:39 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2014-01-22 20:43 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-22 20:42 - 2013-02-14 05:52 - 01485344 _____ C:\Windows\WindowsUpdate.log
2014-01-22 20:42 - 2012-02-22 15:34 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-22 20:41 - 2014-01-20 22:17 - 00000000 ____D C:\AdwCleaner
2014-01-22 20:36 - 2013-02-13 20:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-22 20:31 - 2013-04-27 18:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-22 19:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2014-01-22 19:14 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-22 19:14 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-21 22:29 - 2013-11-19 08:00 - 00388668 _____ C:\Windows\IE11_main.log
2014-01-21 22:28 - 2014-01-21 22:28 - 00040176 _____ C:\Users\Christine\Documents\FRST.txt
2014-01-21 22:28 - 2014-01-21 22:28 - 00034421 _____ C:\Users\Christine\Documents\Addition.txt
2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST
2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk
2014-01-20 18:31 - 2013-12-05 18:52 - 00000000 ____D C:\Users\Christine\Desktop\DMS-Launcher
2014-01-20 17:58 - 2013-04-14 18:02 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft
2014-01-19 21:30 - 2013-02-14 20:42 - 00000000 ____D C:\Users\Christine\AppData\Roaming\SoftGrid Client
2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan
2014-01-19 13:40 - 2013-04-14 10:12 - 00000099 _____ C:\Users\Public\LMDebug.log
2014-01-17 21:21 - 2010-11-21 04:47 - 00146140 _____ C:\Windows\PFRO.log
2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3
2014-01-17 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-17 20:55 - 2013-12-20 14:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url
2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2014-01-16 23:06 - 2012-02-22 15:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-16 22:54 - 2014-01-16 22:31 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url
2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur
2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0
2014-01-16 17:53 - 2009-07-14 05:45 - 00310240 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:31 - 2013-08-18 10:53 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:28 - 2011-07-18 21:31 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt
2014-01-12 21:42 - 2013-04-18 19:30 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-12 20:42 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b
2014-01-12 20:40 - 2013-02-13 21:29 - 00000000 ____D C:\Users\Christine\AppData\Local\Google
2014-01-12 20:06 - 2013-03-11 17:39 - 00000000 ____D C:\Users\Christine\AppData\Local\DoNotTrackPlus
2014-01-12 18:31 - 2014-01-12 18:29 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie
2014-01-12 17:37 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\.gimp-2.8
2014-01-10 15:15 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-09 17:51 - 2011-05-16 15:04 - 00654602 _____ C:\Windows\system32\perfh007.dat
2014-01-09 17:51 - 2011-05-16 15:04 - 00130216 _____ C:\Windows\system32\perfc007.dat
2014-01-09 17:51 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-08 18:27 - 2014-01-08 17:52 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack
2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel
2014-01-08 18:06 - 2014-01-08 17:18 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0
2014-01-08 17:43 - 2014-01-08 17:02 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip
2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails
2014-01-08 17:06 - 2013-02-13 20:58 - 00000000 ____D C:\Users\Christine
2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2
2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test
2014-01-06 14:17 - 2013-07-17 16:03 - 00000000 ____D C:\Users\Christine\Documents\Free YouTube Download Manager
2013-12-28 11:37 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager
Some content of TEMP:
====================
C:\Users\Christine\AppData\Local\Temp\avgnt.exe
C:\Users\Christine\AppData\Local\Temp\Colour_Land_3_install.exe
C:\Users\Christine\AppData\Local\Temp\i4jdel0.exe
C:\Users\Christine\AppData\Local\Temp\Quarantine.exe
C:\Users\Christine\AppData\Local\Temp\WindowsUpdateAgent30-x64.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-19 14:10
==================== End Of Log ============================
--- --- --- Ach ja, beim Hochfahren nach dem Löschen hat Avira gemeckert, dass der Browserschutz nicht mehr vorhanden wäre und ich die Toolbar laden soll. Soll ich? |
|
22.01.2014, 21:10
| #8 |
| /// TB-Ausbilder | Befall softwareupdater.ui.exde Ja du kannst den Browserschutz von Avira reparieren lassen durch die angegebenen Schritte. Wie läuft der Rechner sonst? Noch Probleme vorhanden? Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter FF Extension: greAtsaveR - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\uuycv@eeuagfbx.net [2014-01-12]
CHR Extension: (greAtsaveR) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbfdpfmaenkghncdihliiadcbdikoi [2014-01-12]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
__________________ cheers, Leo |
|
23.01.2014, 22:01
| #9 |
| | Befall softwareupdater.ui.exde Hallo, hat etwas länger gedauert, habe die Scanzeit unterschätzt Hier mal die neuen logs Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-01-2014 02 Ran by Christine at 2014-01-22 21:40:08 Run:1 Running from C:\Users\Christine\Desktop\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** FF Extension: greAtsaveR - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\uuycv@eeuagfbx.net [2014-01-12] CHR Extension: (greAtsaveR) - C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbfdpfmaenkghncdihliiadcbdikoi [2014-01-12] ***************** C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\uuycv@eeuagfbx.net => Moved successfully. C:\Users\Christine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcbfdpfmaenkghncdihliiadcbdikoi => Moved successfully. ==== End of Fixlog ==== ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=3544afb727fe3246a0912f1dc2b88133 # engine=16757 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-22 09:48:44 # local_time=2014-01-22 10:48:44 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1285 16777214 100 98 26718745 87075236 0 0 # compatibility_mode=1799 16775165 100 96 16583 255850614 9366 0 # compatibility_mode=5893 16776574 100 94 16771593 142057174 0 0 # scanned=114017 # found=2 # cleaned=0 # scan_time=3082 sh=D1199219C46F35E8B94587E9FB1AF26DA2F921B9 ft=0 fh=0000000000000000 vn="a variant of MSIL/Hoax.FakeHack.I application" ac=I fn="C:\Users\Christine\AppData\Local\Temp\Galaxy_Life_Hack_2012_v3.02-1.rar" sh=D1199219C46F35E8B94587E9FB1AF26DA2F921B9 ft=0 fh=0000000000000000 vn="a variant of MSIL/Hoax.FakeHack.I application" ac=I fn="C:\Users\Christine\AppData\Local\Temp\Galaxy_Life_Hack_2012_v3.02.rar" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=3544afb727fe3246a0912f1dc2b88133 # engine=16769 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-23 06:32:13 # local_time=2014-01-23 07:32:13 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1285 16777214 100 98 26789754 87149845 0 0 # compatibility_mode=1799 16775165 100 96 5289 255925223 1676 0 # compatibility_mode=5893 16776574 100 94 16846202 142131783 0 0 # scanned=207047 # found=2 # cleaned=0 # scan_time=4941 sh=D1199219C46F35E8B94587E9FB1AF26DA2F921B9 ft=0 fh=0000000000000000 vn="a variant of MSIL/Hoax.FakeHack.I application" ac=I fn="C:\Users\Christine\AppData\Local\Temp\Galaxy_Life_Hack_2012_v3.02-1.rar" sh=D1199219C46F35E8B94587E9FB1AF26DA2F921B9 ft=0 fh=0000000000000000 vn="a variant of MSIL/Hoax.FakeHack.I application" ac=I fn="C:\Users\Christine\AppData\Local\Temp\Galaxy_Life_Hack_2012_v3.02.rar" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=3544afb727fe3246a0912f1dc2b88133 # engine=16769 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-01-23 08:55:03 # local_time=2014-01-23 09:55:03 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1285 16777214 100 98 26798324 87158415 0 0 # compatibility_mode=1799 16775165 100 96 13859 255933793 10246 0 # compatibility_mode=5893 16776574 100 94 16854772 142140353 0 0 # scanned=206977 # found=2 # cleaned=0 # scan_time=4912 sh=D1199219C46F35E8B94587E9FB1AF26DA2F921B9 ft=0 fh=0000000000000000 vn="a variant of MSIL/Hoax.FakeHack.I application" ac=I fn="C:\Users\Christine\AppData\Local\Temp\Galaxy_Life_Hack_2012_v3.02-1.rar" sh=D1199219C46F35E8B94587E9FB1AF26DA2F921B9 ft=0 fh=0000000000000000 vn="a variant of MSIL/Hoax.FakeHack.I application" ac=I fn="C:\Users\Christine\AppData\Local\Temp\Galaxy_Life_Hack_2012_v3.02.rar" Ja ansonsten ist es in sofern unverändert, dass mit dem Firefox immer noch was nicht stimmt. Die willkürlichen Unterstreichungen sind noch da, ist immer noch megalangsam und öffnet keine E-Mail. Ach ja, kleiner Nachtrag noch. Explorer stürzt immer ab, sobald ich versuche mit Rechtsklick den Ordner zu löschen, mit Datei/Löschen bringt auch nix. Gruß Kirsche 143 Geändert von Kirsche143 (23.01.2014 um 22:08 Uhr) |
|
23.01.2014, 23:56
| #10 |
| /// TB-Ausbilder | Befall softwareupdater.ui.exde Ok. Schritt 1 Starte noch einmal FRST.
Schritt 2 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter REG: reg query "HKCR\*\shellex" /s
REG: reg query "HKCR\AllFileSystemObjects\shellex" /s
REG: reg query "HKCR\Folder\shellex" /s
REG: reg query "HKCR\Directory\shellex" /s
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ cheers, Leo |
|
24.01.2014, 21:02
| #11 |
| | Befall softwareupdater.ui.exde Hallo, dann mal auf in die nächste Runde: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-01-2014 02 Ran by Christine at 2014-01-24 20:58:19 Run:2 Running from C:\Users\Christine\Desktop\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** REG: reg query "HKCR\*\shellex" /s REG: reg query "HKCR\AllFileSystemObjects\shellex" /s REG: reg query "HKCR\Folder\shellex" /s REG: reg query "HKCR\Directory\shellex" /s ***************** ========= reg query "HKCR\*\shellex" /s ========= HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\BriefcaseMenu (Standard) REG_SZ {85BBD920-42A0-1069-A2E4-08002B30309D} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Kaspersky Anti-Virus (Standard) REG_SZ {dd230880-495a-11d1-b064-008048ec2fc5} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With (Standard) REG_SZ {09799AFB-AD67-11d1-ABCD-00C04FC30936} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With EncryptionMenu (Standard) REG_SZ {A470F8CF-A1E8-4f65-8335-227475AA5C46} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\PhotoStreamsExt (Standard) REG_SZ {89D984B3-813B-406A-8298-118AFA3A22AE} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SDECon32 (Standard) REG_SZ {44176360-2BBF-4EC1-93CE-384B8681A0BC} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SDECon64 (Standard) REG_SZ {44176360-2BBF-4EC1-93CE-384B8681A0BC} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Sharing (Standard) REG_SZ {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Shell Extension for Malware scanning (Standard) REG_SZ {45AC2688-0253-4ED8-97DE-B5370FA7D48A} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinRAR (Standard) REG_SZ {B41DB860-64E4-11D2-9906-E49FADC173CA} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinRAR32 (Standard) REG_SZ {B41DB860-8EE4-11D2-9906-E49FADC173CA} HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449} (Standard) REG_SZ Taskband Pin HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} (Standard) REG_SZ Start Menu Pin HKEY_CLASSES_ROOT\*\shellex\PropertySheetHandlers HKEY_CLASSES_ROOT\*\shellex\PropertySheetHandlers\BriefcasePage (Standard) REG_SZ {85BBD920-42A0-1069-A2E4-08002B30309D} HKEY_CLASSES_ROOT\*\shellex\PropertySheetHandlers\CryptoSignMenu (Standard) REG_SZ {7444C719-39BF-11D1-8CD9-00C04FC29D45} HKEY_CLASSES_ROOT\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c} HKEY_CLASSES_ROOT\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32} (Standard) REG_SZ OLE DocFile Property Page HKEY_CLASSES_ROOT\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03} (Standard) REG_SZ Summary Properties Page ========= End of Reg: ========= ========= reg query "HKCR\AllFileSystemObjects\shellex" /s ========= HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\ContextMenuHandlers HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu (Standard) REG_SZ {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\ContextMenuHandlers\MBAMShlExt (Standard) REG_SZ {57CE581A-0CB6-4266-9CA0-19364C90A0B3} HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\ContextMenuHandlers\SendTo (Standard) REG_SZ {7BA4C740-9E81-11CF-99D3-00AA004AE837} HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153} HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\PropertySheetHandlers HKEY_CLASSES_ROOT\AllFileSystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153} ========= End of Reg: ========= ========= reg query "HKCR\Folder\shellex" /s ========= HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} (Standard) REG_SZ OpenOffice Column Handler HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{F9DB5320-233E-11D1-9F84-707F02C10627} (Standard) REG_SZ PDF Column Info HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\BriefcaseMenu (Standard) REG_SZ {85BBD920-42A0-1069-A2E4-08002B30309D} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Kaspersky Anti-Virus (Standard) REG_SZ {dd230880-495a-11d1-b064-008048ec2fc5} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Library Location (Standard) REG_SZ {3dad6c5d-2167-4cae-9914-f99e41c12cfa} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\MBAMShlExt (Standard) REG_SZ {57CE581A-0CB6-4266-9CA0-19364C90A0B3} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SDECon32 (Standard) REG_SZ {44176360-2BBF-4EC1-93CE-384B8681A0BC} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SDECon64 (Standard) REG_SZ {44176360-2BBF-4EC1-93CE-384B8681A0BC} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Shell Extension for Malware scanning (Standard) REG_SZ {45AC2688-0253-4ED8-97DE-B5370FA7D48A} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\WinRAR (Standard) REG_SZ {B41DB860-64E4-11D2-9906-E49FADC173CA} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\WinRAR32 (Standard) REG_SZ {B41DB860-8EE4-11D2-9906-E49FADC173CA} HKEY_CLASSES_ROOT\Folder\shellex\DragDropHandlers HKEY_CLASSES_ROOT\Folder\shellex\DragDropHandlers\WinRAR (Standard) REG_SZ {B41DB860-64E4-11D2-9906-E49FADC173CA} HKEY_CLASSES_ROOT\Folder\shellex\DragDropHandlers\WinRAR32 (Standard) REG_SZ {B41DB860-8EE4-11D2-9906-E49FADC173CA} HKEY_CLASSES_ROOT\Folder\shellex\DragDropHandlers\{BD472F60-27FA-11cf-B8B4-444553540000} (Standard) REG_SZ HKEY_CLASSES_ROOT\Folder\shellex\PropertySheetHandlers HKEY_CLASSES_ROOT\Folder\shellex\PropertySheetHandlers\BriefcasePage (Standard) REG_SZ {85BBD920-42A0-1069-A2E4-08002B30309D} ========= End of Reg: ========= ========= reg query "HKCR\Directory\shellex" /s ========= HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\EncryptionMenu (Standard) REG_SZ {A470F8CF-A1E8-4f65-8335-227475AA5C46} HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\Kaspersky Anti-Virus (Standard) REG_SZ {dd230880-495a-11d1-b064-008048ec2fc5} HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\Sharing (Standard) REG_SZ {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153} HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem (Standard) REG_SZ {217FC9C0-3AEA-1069-A2DB-08002B30309D} HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing (Standard) REG_SZ {40dd6e20-7c17-11ce-a804-00aa003ca9f6} HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\Sharing (Standard) REG_SZ {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c} HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\{4a7ded0a-ad25-11d0-98a8-0800361b1103} HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153} HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\{ef43ecfe-2ab9-4632-bf21-58909dd177f0} (Standard) REG_SZ ========= End of Reg: ========= ==== End of Fixlog ==== FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-01-2014 02
Ran by Christine (administrator) on CHRISTINE-PC on 24-01-2014 20:55:43
Running from C:\Users\Christine\Desktop\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ServiceLocator.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-11-29] (Realtek Semiconductor)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-30] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-02-15] (Google Inc.)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-08-27] (TomTom)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Alex und Basti\...\Policies\system: [LogonHoursAction] 2
HKU\Alex und Basti\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs-x32: => File Not Found
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {F1E99E07-A6F9-4F82-AC8B-97A6F99464FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=1dda9c46-5386-4db3-8acd-4d49fa526902&apn_sauid=31CCEC70-C042-4B3D-97F8-2FF03B6D74E9
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default
FF SearchEngineOrder.1: Ask.com
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Christine\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FRITZ!Box AddOn - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\fb_add_on@avm.de [2013-07-02]
FF Extension: Freemium_Toolbar - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{49f312ab-c063-406d-a647-8638a2986fea} [2013-05-04]
FF Extension: Ghostery - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\firefox@ghostery.com.xpi [2013-08-19]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20]
FF Extension: Adblock Plus - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-04-18]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Kaspersky Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2013-02-13]
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-02-19]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\urladvisor.crx [2011-09-08]
CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2013-02-19]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\virtkbd.crx [2011-09-08]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ChromeExt\ab.crx [2011-09-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
S3 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [206448 2013-02-13] (Kaspersky Lab ZAO)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101376 2013-02-07] (Freemake)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-02-07] (Ellora Assets Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-18] (Avira Operations GmbH & Co. KG)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2011-03-04] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2011-03-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637272 2013-02-13] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-22 21:31 - 2014-01-22 21:31 - 00000000 ____D C:\Users\Christine\AppData\Local\AskPartnerNetwork
2014-01-22 21:28 - 2014-01-22 21:28 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-22 21:28 - 2014-01-22 21:28 - 00000000 ____D C:\ProgramData\APN
2014-01-22 21:28 - 2014-01-22 21:28 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2014-01-21 22:28 - 2014-01-21 22:28 - 00040176 _____ C:\Users\Christine\Documents\FRST.txt
2014-01-21 22:28 - 2014-01-21 22:28 - 00034421 _____ C:\Users\Christine\Documents\Addition.txt
2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST
2014-01-20 22:17 - 2014-01-22 20:41 - 00000000 ____D C:\AdwCleaner
2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk
2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan
2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3
2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url
2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2014-01-16 23:06 - 2013-10-23 09:20 - 03426956 _____ C:\Windows\system32\nvcoproc.bin
2014-01-16 23:06 - 2012-02-22 23:02 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveEditor
2014-01-16 23:06 - 2011-12-01 22:26 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-01-16 23:06 - 2011-07-18 22:23 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover
2014-01-16 23:06 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-16 23:06 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur
2014-01-16 22:31 - 2014-01-16 22:54 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url
2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0
2014-01-16 22:07 - 2014-01-24 19:59 - 00000896 _____ C:\Windows\setupact.log
2014-01-15 17:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 17:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 17:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 17:50 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt
2014-01-12 20:40 - 2014-01-12 20:42 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b
2014-01-12 18:29 - 2014-01-12 18:31 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie
2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel
2014-01-08 17:52 - 2014-01-08 18:27 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack
2014-01-08 17:18 - 2014-01-08 18:06 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0
2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails
2014-01-08 17:04 - 2014-01-12 17:37 - 00000000 ____D C:\Users\Christine\.gimp-2.8
2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2
2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-08 17:02 - 2014-01-08 17:43 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip
2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test
2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager
==================== One Month Modified Files and Folders =======
2014-01-24 20:36 - 2013-02-13 20:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-24 20:31 - 2013-04-27 18:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-24 20:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2014-01-24 20:07 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-24 20:07 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-24 20:06 - 2013-02-14 05:52 - 01735709 _____ C:\Windows\WindowsUpdate.log
2014-01-24 19:59 - 2014-01-16 22:07 - 00000896 _____ C:\Windows\setupact.log
2014-01-24 19:59 - 2013-07-02 19:39 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2014-01-24 19:59 - 2013-02-13 20:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-24 19:59 - 2012-02-22 15:34 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-24 19:59 - 2010-11-21 04:47 - 00148598 _____ C:\Windows\PFRO.log
2014-01-24 19:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-23 22:36 - 2013-11-19 08:00 - 00402728 _____ C:\Windows\IE11_main.log
2014-01-22 21:31 - 2014-01-22 21:31 - 00000000 ____D C:\Users\Christine\AppData\Local\AskPartnerNetwork
2014-01-22 21:28 - 2014-01-22 21:28 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-22 21:28 - 2014-01-22 21:28 - 00000000 ____D C:\ProgramData\APN
2014-01-22 21:28 - 2014-01-22 21:28 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2014-01-22 21:28 - 2013-03-11 17:39 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-22 20:41 - 2014-01-20 22:17 - 00000000 ____D C:\AdwCleaner
2014-01-21 22:28 - 2014-01-21 22:28 - 00040176 _____ C:\Users\Christine\Documents\FRST.txt
2014-01-21 22:28 - 2014-01-21 22:28 - 00034421 _____ C:\Users\Christine\Documents\Addition.txt
2014-01-21 20:25 - 2014-01-21 20:25 - 00000000 ____D C:\FRST
2014-01-20 21:41 - 2014-01-20 21:41 - 00001330 _____ C:\Users\Christine\Desktop\adwcleaner - Verknüpfung.lnk
2014-01-20 18:31 - 2013-12-05 18:52 - 00000000 ____D C:\Users\Christine\Desktop\DMS-Launcher
2014-01-20 17:58 - 2013-04-14 18:02 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft
2014-01-19 21:30 - 2013-02-14 20:42 - 00000000 ____D C:\Users\Christine\AppData\Roaming\SoftGrid Client
2014-01-19 13:43 - 2014-01-19 13:43 - 00000063 _____ C:\Users\Christine\AppData\Roaming\mbam.context.scan
2014-01-19 13:40 - 2013-04-14 10:12 - 00000099 _____ C:\Users\Public\LMDebug.log
2014-01-17 21:20 - 2014-01-17 21:20 - 00000000 ____D C:\2f3053256c000379ac123029035466f3
2014-01-17 21:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2014-01-17 20:55 - 2014-01-17 20:55 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-17 20:55 - 2014-01-17 20:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-17 20:55 - 2013-12-20 14:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-16 23:07 - 2014-01-16 23:07 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer Troubleshooting.url
2014-01-16 23:07 - 2014-01-16 23:07 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-16 23:06 - 2014-01-16 23:06 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-16 23:06 - 2014-01-16 23:06 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2014-01-16 23:06 - 2012-02-22 15:34 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2014-01-16 23:06 - 2012-02-22 15:33 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2014-01-16 22:54 - 2014-01-16 22:31 - 00000134 _____ C:\Users\Christine\Desktop\Internet Explorer-Problembehebung.url
2014-01-16 22:37 - 2014-01-16 22:37 - 00000000 ____D C:\Windows\CheckSur
2014-01-16 22:13 - 2014-01-16 22:13 - 00000000 ____D C:\Users\Christine\AppData\Local\Apps\2.0
2014-01-16 17:53 - 2009-07-14 05:45 - 00310240 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:31 - 2013-08-18 10:53 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:28 - 2011-07-18 21:31 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 17:48 - 2014-01-15 17:48 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft echt
2014-01-12 21:42 - 2013-04-18 19:30 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-12 20:42 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\HomeGroupUser$
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Gast
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Christine\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Alex und Basti\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Torch
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator\AppData\Local\Comodo
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\Users\Administrator
2014-01-12 20:40 - 2014-01-12 20:40 - 00000000 ____D C:\ProgramData\504c2cf8db11ac3b
2014-01-12 20:40 - 2013-02-13 21:29 - 00000000 ____D C:\Users\Christine\AppData\Local\Google
2014-01-12 20:06 - 2013-03-11 17:39 - 00000000 ____D C:\Users\Christine\AppData\Local\DoNotTrackPlus
2014-01-12 18:31 - 2014-01-12 18:29 - 00000000 ____D C:\Users\Christine\AppData\Roaming\.minecraft - Kopie
2014-01-12 17:37 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\.gimp-2.8
2014-01-10 15:15 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-09 17:51 - 2011-05-16 15:04 - 00654602 _____ C:\Windows\system32\perfh007.dat
2014-01-09 17:51 - 2011-05-16 15:04 - 00130216 _____ C:\Windows\system32\perfc007.dat
2014-01-09 17:51 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-08 18:27 - 2014-01-08 17:52 - 00000000 ____D C:\Users\Christine\Desktop\Texturepack
2014-01-08 18:11 - 2014-01-08 18:11 - 00006030 _____ C:\Users\Christine\AppData\Local\recently-used.xbel
2014-01-08 18:06 - 2014-01-08 17:18 - 00000000 ____D C:\Users\Christine\AppData\Local\gtk-2.0
2014-01-08 17:43 - 2014-01-08 17:02 - 53924034 _____ C:\Users\Christine\Desktop\Alex sein Masterpack keine.zip
2014-01-08 17:06 - 2014-01-08 17:06 - 00000000 ____D C:\Users\Christine\.thumbnails
2014-01-08 17:06 - 2013-02-13 20:58 - 00000000 ____D C:\Users\Christine
2014-01-08 17:04 - 2014-01-08 17:04 - 00000000 ____D C:\Users\Christine\AppData\Local\gegl-0.2
2014-01-08 17:03 - 2014-01-08 17:03 - 00000898 _____ C:\Users\Christine\Desktop\GIMP 2.lnk
2014-01-08 17:03 - 2014-01-08 17:03 - 00000000 ____D C:\Program Files\GIMP 2
2014-01-06 14:42 - 2014-01-06 14:42 - 00000000 ____D C:\test
2014-01-06 14:17 - 2013-07-17 16:03 - 00000000 ____D C:\Users\Christine\Documents\Free YouTube Download Manager
2013-12-28 11:37 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-26 18:44 - 2013-12-26 18:44 - 00000000 ____D C:\Users\Christine\Documents\onetouch Manager
Some content of TEMP:
====================
C:\Users\Christine\AppData\Local\Temp\avgnt.exe
C:\Users\Christine\AppData\Local\Temp\Colour_Land_3_install.exe
C:\Users\Christine\AppData\Local\Temp\i4jdel0.exe
C:\Users\Christine\AppData\Local\Temp\Quarantine.exe
C:\Users\Christine\AppData\Local\Temp\WindowsUpdateAgent30-x64.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-19 14:10
==================== End Of Log ============================
Gruß Kirsche143 |
|
26.01.2014, 20:52
| #12 |
| | Habt Ihr meinen Thread vergessen - softwarupdater.ui.exe Hallo und noch mal vielen Dank für die schnellen Antworten, die ich schon bekommen habe. Will mal vorsichtig anfragen, ob mit den logs was nicht i. o. war. Mein Rechner ist eigentlich doch recht viel benutzt und liegt doch jetzt ein wenig brach... Gruß Kirsche143 |
|
27.01.2014, 21:53
| #13 |
| | Befall softwareupdater.ui.exde Hallo, bin ein wenig verunsichert, ob ich das mit den Antworten richtig gemacht habe. Wenn Euch noch was fehlt, dann einfach kurze Info, damit ich es nochmals posten kann. So kann ich aber alles sehen ??? Wenn was anderes dringender ist, dann vielleicht bitte kurze Info Gruß Kirsche143 |
|
28.01.2014, 20:51
| #14 |
| /// TB-Ausbilder | Befall softwareupdater.ui.exde Sorry für die Verzögerung. Wie ist's im Firefox nach diesem Fix? Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter FF Extension: Freemium_Toolbar - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{49f312ab-c063-406d-a647-8638a2986fea} [2013-05-04]
FF Extension: Ghostery - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\firefox@ghostery.com.xpi [2013-08-19]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Und wann stürzt der Explorer genau ab? Grundsätzlich bei jedem Rechtsklick? Oder nur bei einem Rechtklick auf einen Ordner? Oder auch auf Dateien?
__________________ cheers, Leo |
|
28.01.2014, 21:07
| #15 |
| | Befall softwareupdater.ui.exde Hallo, so der fix von eben Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-01-2014 02 Ran by Christine at 2014-01-28 21:00:21 Run:3 Running from C:\Users\Christine\Desktop\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** FF Extension: Freemium_Toolbar - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\{49f312ab-c063-406d-a647-8638a2986fea} [2013-05-04] FF Extension: Ghostery - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\1z5urb6t.default\Extensions\firefox@ghostery.com.xpi [2013-08-19] ***************** Musste inzwischen Avira neu installieren, weil da irgendwas schief ging. Firefox auch. Irgendwoher tauchte die Yahoo-?? Toolbar auf und liess sich nur mit Tricks wieder wegbringen (einfaches deinstallieren hat nicht gereicht. Mit der Neuinstallation von Firefox scheinen die seltsamen Unterstreichungen Geschichte zu sein. Öffnet auch freenet.de wieder. Bekomme hier aber seit vielleicht einer Woche auffallende viele Spammails über Jobs. Ist mir die letzten 10 Jahre nicht passiert. Explorer stürzt entweder beim Rechtsklick auf Ordner ab oder beim kopieren mehrerer Dateien, z. B. für mp3-Player Gruß Kirsche143 |
|
| Themen zu Befall softwareupdater.ui.exde |
| administrator, appdatalow, autostart, browser, dateien, desktop, explorer, file, gelöscht, google, langsam, malwarebytes, microsoft, ordner, pup.optional.babylon, pup.optional.babylontoolbar.a, pup.optional.datamngr.a, pup.optional.filescout.a, pup.optional.greatsaver.a, pup.optional.iminent.a, registrierungsdatenbank, seite, system32, windows |
Hybrid-Darstellung
