|
Plagegeister aller Art und deren Bekämpfung: fehlermeldung backgroundcontainer.dll nicht gefundenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
22.02.2014, 01:51 | #1 |
| fehlermeldung backgroundcontainer.dll nicht gefunden hay ich habe ein problem seit einiger zeit kommt bei mir die meldung dass backgroundcontainer.dll nicht gefunden wird ich habe schon mal im internet bissl danach gesucht und auf manchen seiten gefunden dass spyhunter dabei helfen sollte.. hab die vollversion und hatte nicht geholfen hab das problem dabei belassen weil außer der meldung nichts passierte mit dem pc aber nach ner zeit wird es schon nervig und ich möchte langsam etwas dagegen unternehmen |
22.02.2014, 12:32 | #2 |
/// the machine /// TB-Ausbilder | fehlermeldung backgroundcontainer.dll nicht gefunden hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
22.02.2014, 15:54 | #3 |
| fehlermeldung backgroundcontainer.dll nicht gefunden hier frst
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01 Ran by benni (administrator) on BENNI-PC on 22-02-2014 15:46:04 Running from C:\Users\benni\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Spotify Ltd) C:\Users\benni\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor) HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [6330568 2013-03-21] (ESET) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\.DEFAULT\...\RunOnce: [panda4_1dn] - reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_1dn" /f HKU\.DEFAULT\...\RunOnce: [panda4_1dn_XP] - reg.exe delete "HKCU\Software\panda4_1dn" /f HKU\S-1-5-21-966205214-3003307941-2416234732-1000\...\Run: [Spotify Web Helper] - C:\Users\benni\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-30] (Spotify Ltd) HKU\S-1-5-21-966205214-3003307941-2416234732-1000\...\Run: [Akamai NetSession Interface] - C:\Users\benni\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-966205214-3003307941-2416234732-1000\...\Run: [ooVoo.exe] - C:\Program Files (x86)\ooVoo\oovoo.exe [35253312 2013-09-10] (ooVoo LLC) HKU\S-1-5-21-966205214-3003307941-2416234732-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.) HKU\S-1-5-21-966205214-3003307941-2416234732-1000\...\MountPoints2: {6986ae13-d830-11e2-b2cd-808951582d22} - F:\Autorun.exe IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IFEO\hamachi-2-ui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe" ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44DA134B5167CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WMAYU538158181581&ts=1378686392 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WMAYU538158181581&ts=1378686392 URLSearchHook: HKCU - (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WMAYU538158181581&ts=1378686392 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD5000AAKX-001CA0_WD-WMAYU538158181581&ts=1378686392 SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {82A438CD-AC6A-46AF-B075-F7558ECEC7B8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=98daf67b-d680-441a-bc9d-a1ab9a41e032&apn_sauid=11CCA12A-6A42-4DF1-A38F-D291BE5095B6 SearchScopes: HKCU - {F36AF53E-D374-40A0-98CF-EEC1D069BA5D} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3317483&CUI=UN17587764852008531&UM=2 BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) FireFox: ======== FF ProfilePath: C:\Users\benni\AppData\Roaming\Mozilla\Firefox\Profiles\xy10mjtg.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\benni\AppData\Roaming\Mozilla\Firefox\Profiles\xy10mjtg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-03] FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-25] FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1341664 2013-03-21] (ESET) S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-02-18] () R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2013-10-18] (Enigma Software Group USA, LLC.) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-10-30] () R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2013-02-14] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [150616 2013-01-10] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [190232 2013-01-10] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [59440 2013-01-10] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [58416 2013-02-14] (ESET) S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] () S3 HWHandSet; C:\Windows\System32\DRIVERS\hw_quusbmdm.sys [223232 2011-10-24] (Huawei Technologies Co., Ltd.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-10-30] () R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-07-19] (TuneUp Software) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.) S3 wolf; \??\C:\AeriaGames\WolfTeam-DE\avital\wolf64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-22 15:46 - 2014-02-22 15:46 - 00012876 _____ () C:\Users\benni\Downloads\FRST.txt 2014-02-22 15:45 - 2014-02-22 15:46 - 00000000 ____D () C:\FRST 2014-02-22 15:44 - 2014-02-22 15:44 - 02154496 _____ (Farbar) C:\Users\benni\Downloads\FRST64.exe 2014-02-19 16:54 - 2014-02-19 16:54 - 00003108 _____ () C:\Windows\System32\Tasks\{0D412E51-E0AE-433A-BC47-52A7AE905291} 2014-02-17 20:08 - 2014-02-17 20:08 - 00262144 ____N () C:\Windows\Minidump\021714-11684-01.dmp 2014-02-16 16:07 - 2014-02-16 16:07 - 00262144 ____N () C:\Windows\Minidump\021614-11700-01.dmp 2014-02-15 22:18 - 2014-02-15 22:18 - 00002284 _____ () C:\Users\benni\Desktop\SpyHunter.lnk 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\Windows\0028CB34D5D3460FB308A39A095A5E01.TMP 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\sh4ldr 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group 2014-02-13 23:44 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-13 23:44 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-13 23:44 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-13 23:44 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-13 23:44 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-13 23:44 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-13 23:44 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-13 23:44 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-13 23:44 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-13 23:44 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-13 23:44 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-13 23:44 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-13 23:44 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-13 23:44 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-13 23:44 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-13 23:44 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-13 23:44 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-13 23:44 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-13 23:44 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-13 23:44 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-13 23:44 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-13 23:44 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-13 23:44 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-13 23:44 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-13 23:44 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-13 23:44 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-13 23:44 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-13 23:44 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-13 23:44 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-13 23:44 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-13 23:44 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-13 23:44 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-13 23:44 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-13 23:44 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-13 23:44 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-13 23:44 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-13 23:44 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-13 23:44 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-13 23:44 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-13 23:44 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-13 23:44 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-13 21:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-13 21:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-13 21:27 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-13 21:27 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-13 21:27 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-13 21:27 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-13 21:27 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-13 21:26 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-13 21:26 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-13 21:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-13 21:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-13 21:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-13 21:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-13 21:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-13 21:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-13 21:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-13 21:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-13 21:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-13 21:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-13 21:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-13 21:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-13 21:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-13 21:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-13 21:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-13 21:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-13 21:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-13 21:26 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-13 21:26 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-12 22:39 - 2014-02-12 22:39 - 00000000 ____D () C:\Users\benni\Documents\Remedy 2014-02-12 22:38 - 2014-02-19 16:28 - 00122275 _____ () C:\Windows\DirectX.log 2014-02-12 01:19 - 2014-02-12 01:19 - 00000000 _____ () C:\Users\benni\Desktop\Neue Bitmap.bmp 2014-02-11 21:59 - 2014-02-11 21:59 - 00003288 ____N () C:\bootsqm.dat 2014-02-09 22:15 - 2014-02-09 22:22 - 00005084 _____ () C:\Windows\DPINST.LOG 2014-02-09 22:09 - 2014-02-09 22:16 - 00000000 ____D () C:\Program Files (x86)\Zenimax Online 2014-02-07 22:55 - 2014-02-07 22:55 - 00274648 _____ () C:\Windows\Minidump\020714-13182-01.dmp 2014-02-05 22:24 - 2014-02-15 22:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-05 21:57 - 2014-02-05 21:57 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-02-04 22:48 - 2014-02-07 00:15 - 00000000 ____D () C:\Program Files (x86)\Handset WinDriver 2014-02-04 22:48 - 2014-02-04 22:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf 2014-02-04 22:48 - 2011-10-24 05:04 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_quusbmdm.sys 2014-02-04 22:48 - 2011-10-24 04:51 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\hw_usbdev.sys 2014-02-04 22:48 - 2010-02-19 00:00 - 01533512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFUpdate_01007.dll 2014-02-04 22:48 - 2010-02-19 00:00 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll 2014-02-04 22:48 - 2010-02-19 00:00 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll 2014-02-04 22:48 - 2010-02-19 00:00 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll 2014-02-04 22:48 - 2010-02-19 00:00 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WinUSBCoInstaller.dll 2014-02-04 22:47 - 2014-02-07 00:15 - 00000978 _____ () C:\NSI_DriverInstall.log 2014-02-03 22:13 - 2014-02-07 00:43 - 00000000 ____D () C:\Users\benni\Downloads\android 2014-02-03 00:30 - 2014-02-03 00:30 - 00000000 ____D () C:\Users\benni\AppData\Local\PBlackout 2014-02-03 00:21 - 2014-02-09 22:15 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1 2014-02-03 00:14 - 2014-02-03 00:14 - 00001073 _____ () C:\Users\benni\Desktop\Project Blackout.lnk 2014-02-03 00:14 - 2014-02-03 00:14 - 00001073 _____ () C:\Users\Admin\Desktop\Project Blackout.lnk 2014-02-03 00:11 - 2014-02-03 00:20 - 00000000 ____D () C:\Program Files (x86)\Project Blackout 2014-02-01 20:49 - 2014-02-17 19:59 - 00000000 ____D () C:\Users\benni\AppData\Roaming\TS3Client 2014-02-01 20:49 - 2014-02-03 00:05 - 00000000 ____D () C:\Users\benni\AppData\Local\Overwolf 2014-02-01 20:48 - 2014-02-01 20:48 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-02-01 20:48 - 2014-02-01 20:48 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-01-30 14:50 - 2014-01-30 23:13 - 00000000 ____D () C:\Users\benni\amy 2014-01-30 14:50 - 2014-01-30 14:50 - 00000000 ____D () C:\Users\benni\vid 2014-01-29 16:29 - 2014-01-29 16:29 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-01-29 16:29 - 2014-01-29 16:29 - 00000000 _____ () C:\autoexec.bat 2014-01-29 16:28 - 2014-01-29 17:38 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-01-29 15:31 - 2014-01-29 16:24 - 00000000 ____D () C:\ProgramData\ParetoLogic 2014-01-29 15:31 - 2014-01-29 15:31 - 00000000 ____D () C:\Users\benni\AppData\Roaming\ParetoLogic 2014-01-29 15:31 - 2014-01-29 15:31 - 00000000 ____D () C:\Users\benni\AppData\Roaming\DriverCure 2014-01-26 19:28 - 2014-02-10 14:32 - 00001552 _____ () C:\Windows\PFRO.log 2014-01-26 19:28 - 2014-02-08 19:07 - 00276968 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-26 01:00 - 2014-02-22 15:37 - 00013166 _____ () C:\Windows\setupact.log 2014-01-26 01:00 - 2014-01-26 01:00 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-25 20:59 - 2014-02-11 22:43 - 00058016 _____ () C:\Users\benni\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-25 20:13 - 2014-01-25 20:13 - 00000000 ____D () C:\Users\benni\AppData\Roaming\ESET 2014-01-25 20:13 - 2014-01-25 20:13 - 00000000 ____D () C:\Users\benni\AppData\Local\ESET 2014-01-25 20:12 - 2014-01-25 20:12 - 00000000 ____D () C:\ProgramData\ESET 2014-01-25 20:12 - 2014-01-25 20:12 - 00000000 ____D () C:\Program Files\ESET 2014-01-25 19:15 - 2014-01-25 19:16 - 11687241 _____ () C:\Users\benni\Downloads\Meine Freunde.mp4 2014-01-25 19:05 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-25 19:05 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-25 19:05 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-25 19:05 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-25 19:05 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-25 19:05 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-25 19:05 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-25 19:05 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-25 19:05 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== One Month Modified Files and Folders ======= 2014-02-22 15:46 - 2014-02-22 15:46 - 00012876 _____ () C:\Users\benni\Downloads\FRST.txt 2014-02-22 15:46 - 2014-02-22 15:45 - 00000000 ____D () C:\FRST 2014-02-22 15:44 - 2014-02-22 15:44 - 02154496 _____ (Farbar) C:\Users\benni\Downloads\FRST64.exe 2014-02-22 15:44 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-22 15:44 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-22 15:42 - 2013-08-30 15:56 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-02-22 15:42 - 2013-06-12 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-22 15:40 - 2013-06-11 20:11 - 01609850 _____ () C:\Windows\WindowsUpdate.log 2014-02-22 15:37 - 2014-01-26 01:00 - 00013166 _____ () C:\Windows\setupact.log 2014-02-22 15:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-22 00:23 - 2013-06-12 11:59 - 00000000 ____D () C:\Users\benni\AppData\Roaming\Skype 2014-02-20 23:44 - 2013-07-17 20:33 - 00000000 ____D () C:\Users\benni\AppData\Roaming\Spotify 2014-02-20 23:42 - 2013-06-12 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-20 23:42 - 2013-06-12 11:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-20 23:42 - 2013-06-12 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-19 18:56 - 2013-06-14 18:04 - 00000000 ____D () C:\ProgramData\Ubisoft 2014-02-19 18:55 - 2013-07-05 17:49 - 00000000 ____D () C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-02-19 16:54 - 2014-02-19 16:54 - 00003108 _____ () C:\Windows\System32\Tasks\{0D412E51-E0AE-433A-BC47-52A7AE905291} 2014-02-19 16:28 - 2014-02-12 22:38 - 00122275 _____ () C:\Windows\DirectX.log 2014-02-19 16:02 - 2013-06-14 17:48 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-02-19 16:02 - 2013-06-14 17:48 - 00000000 ____D () C:\Program Files (x86)\Ubisoft 2014-02-18 23:20 - 2011-04-12 08:43 - 00696620 _____ () C:\Windows\system32\perfh007.dat 2014-02-18 23:20 - 2011-04-12 08:43 - 00147916 _____ () C:\Windows\system32\perfc007.dat 2014-02-18 23:20 - 2009-07-14 06:13 - 01612484 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-18 18:22 - 2013-11-21 18:30 - 00000000 ____D () C:\Users\benni\Documents\Assassin's Creed IV Black Flag 2014-02-18 17:33 - 2013-07-24 22:34 - 00291944 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-02-18 17:33 - 2013-07-24 22:34 - 00000000 ____D () C:\Users\benni\AppData\Local\PunkBuster 2014-02-18 17:33 - 2013-07-24 22:04 - 00291944 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-02-18 17:33 - 2013-07-24 22:04 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-02-17 20:08 - 2014-02-17 20:08 - 00262144 ____N () C:\Windows\Minidump\021714-11684-01.dmp 2014-02-17 20:08 - 2013-06-24 19:41 - 00000000 ____D () C:\Windows\Minidump 2014-02-17 19:59 - 2014-02-01 20:49 - 00000000 ____D () C:\Users\benni\AppData\Roaming\TS3Client 2014-02-16 23:11 - 2013-08-30 22:05 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-16 23:10 - 2013-06-14 17:42 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 16:07 - 2014-02-16 16:07 - 00262144 ____N () C:\Windows\Minidump\021614-11700-01.dmp 2014-02-16 16:07 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-16 15:00 - 2014-01-03 20:02 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-02-16 15:00 - 2013-07-02 13:37 - 00000000 ____D () C:\Users\benni\AppData\Local\CrashDumps 2014-02-16 14:58 - 2013-06-15 15:35 - 00000000 ____D () C:\Users\benni\AppData\Local\LogMeIn Hamachi 2014-02-16 14:26 - 2013-12-03 22:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 22:59 - 2013-06-11 21:00 - 00001421 _____ () C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-15 22:44 - 2014-02-05 22:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-15 22:18 - 2014-02-15 22:18 - 00002284 _____ () C:\Users\benni\Desktop\SpyHunter.lnk 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\Windows\0028CB34D5D3460FB308A39A095A5E01.TMP 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\sh4ldr 2014-02-15 22:18 - 2014-02-15 22:18 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group 2014-02-15 22:02 - 2013-07-17 20:33 - 00000000 ____D () C:\Users\benni\AppData\Local\Spotify 2014-02-15 00:28 - 2013-12-19 13:26 - 00000058 _____ () C:\Users\benni\AppData\Roaming\WB.CFG 2014-02-14 22:35 - 2013-06-12 20:53 - 00000000 ____D () C:\Users\benni\AppData\Local\DownloadGuide 2014-02-13 23:54 - 2013-06-13 18:43 - 01589442 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-12 22:39 - 2014-02-12 22:39 - 00000000 ____D () C:\Users\benni\Documents\Remedy 2014-02-12 01:19 - 2014-02-12 01:19 - 00000000 _____ () C:\Users\benni\Desktop\Neue Bitmap.bmp 2014-02-12 00:34 - 2013-06-18 17:41 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts 2014-02-12 00:34 - 2013-06-11 21:00 - 00000000 ____D () C:\Users\benni 2014-02-12 00:33 - 2013-06-12 20:59 - 00000000 ____D () C:\Users\benni\Documents\TubeBox 2014-02-11 22:43 - 2014-01-25 20:59 - 00058016 _____ () C:\Users\benni\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-11 21:59 - 2014-02-11 21:59 - 00003288 ____N () C:\bootsqm.dat 2014-02-10 14:32 - 2014-01-26 19:28 - 00001552 _____ () C:\Windows\PFRO.log 2014-02-09 22:22 - 2014-02-09 22:15 - 00005084 _____ () C:\Windows\DPINST.LOG 2014-02-09 22:16 - 2014-02-09 22:09 - 00000000 ____D () C:\Program Files (x86)\Zenimax Online 2014-02-09 22:16 - 2013-09-29 22:49 - 00000000 ____D () C:\Users\benni\AppData\Local\Unity 2014-02-09 22:15 - 2014-02-03 00:21 - 00000000 ____D () C:\Program Files (x86)\BandiMPEG1 2014-02-08 19:07 - 2014-01-26 19:28 - 00276968 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-02-07 23:11 - 2013-06-29 16:17 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-02-07 22:55 - 2014-02-07 22:55 - 00274648 _____ () C:\Windows\Minidump\020714-13182-01.dmp 2014-02-07 00:43 - 2014-02-03 22:13 - 00000000 ____D () C:\Users\benni\Downloads\android 2014-02-07 00:15 - 2014-02-04 22:48 - 00000000 ____D () C:\Program Files (x86)\Handset WinDriver 2014-02-07 00:15 - 2014-02-04 22:47 - 00000978 _____ () C:\NSI_DriverInstall.log 2014-02-06 13:16 - 2014-02-13 23:44 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-02-13 23:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-02-13 23:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-02-13 23:44 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-02-13 23:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-02-13 23:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-02-13 23:44 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-02-13 23:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-02-13 23:44 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-02-13 23:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-02-13 23:44 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-02-13 23:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-02-13 23:44 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-02-13 23:44 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-02-13 23:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-02-13 23:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-02-13 23:44 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-02-13 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-02-13 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-13 23:44 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-02-13 23:44 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-02-13 23:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-02-13 23:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-02-13 23:44 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-02-13 23:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-02-13 23:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-02-13 23:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-02-13 23:44 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:25 - 2014-02-13 23:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:24 - 2014-02-13 23:44 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-02-13 23:44 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-02-13 23:44 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-02-13 23:44 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-02-13 23:44 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-02-13 23:44 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-02-13 23:44 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-02-13 23:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-02-13 23:44 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-02-13 23:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-05 21:57 - 2014-02-05 21:57 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-02-04 22:48 - 2014-02-04 22:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf 2014-02-03 00:30 - 2014-02-03 00:30 - 00000000 ____D () C:\Users\benni\AppData\Local\PBlackout 2014-02-03 00:20 - 2014-02-03 00:11 - 00000000 ____D () C:\Program Files (x86)\Project Blackout 2014-02-03 00:14 - 2014-02-03 00:14 - 00001073 _____ () C:\Users\benni\Desktop\Project Blackout.lnk 2014-02-03 00:14 - 2014-02-03 00:14 - 00001073 _____ () C:\Users\Admin\Desktop\Project Blackout.lnk 2014-02-03 00:05 - 2014-02-01 20:49 - 00000000 ____D () C:\Users\benni\AppData\Local\Overwolf 2014-02-02 23:45 - 2013-10-18 18:38 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-02-02 23:41 - 2013-10-18 18:19 - 00000000 ____D () C:\AeriaGames 2014-02-02 22:37 - 2013-11-17 15:47 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2013 2014-02-01 20:48 - 2014-02-01 20:48 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-02-01 20:48 - 2014-02-01 20:48 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-01-31 00:40 - 2013-07-13 19:44 - 00000000 ____D () C:\Users\benni\Documents\Camtasia Studio 2014-01-31 00:33 - 2013-07-21 21:00 - 00007680 _____ () C:\Users\benni\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-30 23:13 - 2014-01-30 14:50 - 00000000 ____D () C:\Users\benni\amy 2014-01-30 14:50 - 2014-01-30 14:50 - 00000000 ____D () C:\Users\benni\vid 2014-01-29 18:58 - 2013-06-12 16:14 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive 2014-01-29 17:38 - 2014-01-29 16:28 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-01-29 16:29 - 2014-01-29 16:29 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-01-29 16:29 - 2014-01-29 16:29 - 00000000 _____ () C:\autoexec.bat 2014-01-29 16:24 - 2014-01-29 15:31 - 00000000 ____D () C:\ProgramData\ParetoLogic 2014-01-29 16:21 - 2013-06-12 11:03 - 00000000 ____D () C:\Users\benni\AppData\Local\Adobe 2014-01-29 15:31 - 2014-01-29 15:31 - 00000000 ____D () C:\Users\benni\AppData\Roaming\ParetoLogic 2014-01-29 15:31 - 2014-01-29 15:31 - 00000000 ____D () C:\Users\benni\AppData\Roaming\DriverCure 2014-01-28 12:32 - 2013-11-17 15:50 - 00038200 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2014-01-28 12:32 - 2013-11-17 15:50 - 00030520 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2014-01-28 12:32 - 2013-11-17 15:49 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2014-01-28 12:32 - 2013-11-17 15:49 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2014-01-28 12:32 - 2013-11-17 15:49 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2014-01-26 19:32 - 2013-11-06 22:47 - 00000000 ____D () C:\Users\benni\AppData\Local\panda4_1dn 2014-01-26 19:28 - 2013-09-30 16:07 - 00000000 ____D () C:\ProgramData\Panda Security 2014-01-26 19:28 - 2013-09-30 16:07 - 00000000 ____D () C:\Program Files (x86)\Panda Security 2014-01-26 19:28 - 2013-06-28 19:28 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-01-26 01:00 - 2014-01-26 01:00 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-25 22:07 - 2013-10-18 18:19 - 00000000 ____D () C:\Users\benni\AppData\Local\Akamai 2014-01-25 21:26 - 2013-09-23 20:28 - 00000000 ____D () C:\Users\benni\AppData\Roaming\.minecraft 2014-01-25 21:25 - 2013-12-10 16:49 - 00000000 ____D () C:\Users\benni\Downloads\minecraft server 2014-01-25 20:13 - 2014-01-25 20:13 - 00000000 ____D () C:\Users\benni\AppData\Roaming\ESET 2014-01-25 20:13 - 2014-01-25 20:13 - 00000000 ____D () C:\Users\benni\AppData\Local\ESET 2014-01-25 20:12 - 2014-01-25 20:12 - 00000000 ____D () C:\ProgramData\ESET 2014-01-25 20:12 - 2014-01-25 20:12 - 00000000 ____D () C:\Program Files\ESET 2014-01-25 20:02 - 2013-11-11 16:41 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Panda Security 2014-01-25 20:02 - 2013-09-30 16:08 - 00000000 ____D () C:\Users\benni\AppData\Roaming\Panda Security 2014-01-25 19:16 - 2014-01-25 19:15 - 11687241 _____ () C:\Users\benni\Downloads\Meine Freunde.mp4 Some content of TEMP: ==================== C:\Users\benni\AppData\Local\Temp\AdbWinApi.dll C:\Users\benni\AppData\Local\Temp\AdbWinUsbApi.dll C:\Users\benni\AppData\Local\Temp\bdfilters.dll C:\Users\benni\AppData\Local\Temp\hwadb.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-25 02:08 ==================== End Of Log ============================ und hier addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-02-2014 01 Ran by benni at 2014-02-22 15:47:05 Running from C:\Users\benni\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: ESET Smart Security 6.0 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1} AS: ESET Smart Security 6.0 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: ESET Personal Firewall (Enabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} ==================== Installed Programs ====================== Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Reader XI (11.0.05) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.) AION Free-to-Play Version 1.0 (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: 1.0 - Gameforge) Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc) Alan Wake (HKLM-x32\...\Steam App 108710) (Version: - Remedy Entertainment) AMD Accelerated Video Transcoding (Version: 12.10.100.30328 - Advanced Micro Devices, Inc.) Hidden AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{2748FDE2-7BA8-1D20-11A2-FF01CEB009A5}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Fuel (Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden AMD Media Foundation Decoders (Version: 1.0.80328.2204 - Advanced Micro Devices, Inc.) Hidden AMD Steady Video Plug-In (Version: 2.06.0000 - AMD) Hidden AMD VISION Engine Control Center (x32 Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden Application Profiles (HKLM-x32\...\{D726D186-0BA7-8BC4-6273-A9AED17C7B8A}) (Version: 2.0.4532.34673 - Advanced Micro Devices, Inc.) Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft) Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform) Cry of Fear (HKLM-x32\...\Steam App 223710) (Version: - Team Psykskallar) Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts) Die Sims™ 3 Stadt-Accessoires (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts) Die Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts) Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.10.1 - Electronic Arts) Die Sims™ 3 Traumsuite-Accessoires (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts) DriverTuner 3.1.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.1 - LionSea SoftWare) EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden ESET Smart Security (HKLM\...\{A941F75F-3888-4EDC-ACA8-8C5CB8618A5F}) (Version: 6.0.400.1 - ESET, spol s r. o.) Extended Update (HKCU\...\UpdaterEX) (Version: - ) FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time) Game of Thrones (HKLM-x32\...\Steam App 208730) (Version: - Cyanide Studios) Gameforge Live 1.10.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.10.0 - Gameforge) Handset WinDriver 1.02.02.00 (HKLM-x32\...\Handset WinDriver) (Version: 1.02.02.00 - Huawei technologies Co., Ltd.) Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Logitech SetPoint 6.32 (HKLM\...\sp6) (Version: 6.32.20 - Logitech) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.130 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.130 - LogMeIn, Inc.) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) No More Room in Hell (HKLM-x32\...\Steam App 224260) (Version: - No More Room in Hell Team) OF: Red River (x32 Version: 1.0.0003.129 - Codemasters) Hidden ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.5.9060 - ooVoo LLC.) Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.) Project Blackout (HKLM-x32\...\Project Blackout) (Version: 1.0.0 - Zepetto) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.) Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Spotify (HKCU\...\Spotify) (Version: 0.9.7.16.g4b197456 - Spotify AB) SpyHunter (HKLM-x32\...\{0028CB34-D5D3-460F-B308-A39A095A5E01}) (Version: 4.16.5.4290 - Enigma Software Group USA, LLC) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.25942 - TeamViewer) Tom Clancy's H.A.W.X. 2 (HKLM-x32\...\Steam App 48180) (Version: - Ubisoft Romania) Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft) TubeBox (HKLM-x32\...\{ea583457-af36-4f59-8e38-c663c08e13b0}) (Version: 4.4.0.0 - Freetec) TubeBox (x32 Version: 4.4.0.0 - Freetec) Hidden TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.260 - TuneUp Software) TuneUp Utilities 2013 (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation) Uplay (HKLM-x32\...\Uplay) (Version: 3.0 - Ubisoft) VLC media player 2.0.7 (HKLM-x32\...\VLC media player) (Version: 2.0.7 - VideoLAN) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) ==================== Restore Points ========================= 21-02-2014 21:10:16 Windows Update ==================== Hosts content: ========================== 2014-01-29 16:29 - 2014-01-29 16:29 - 00000000 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {18B1BF44-4055-4960-8BC1-EDBFFCB68B55} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe <==== ATTENTION Task: {3C8F4628-027C-45C8-B812-7C2B42F6B628} - \Lyrics Seeker Update No Task File Task: {3FAFC633-F1CC-434B-A87A-1EB9BE19B727} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated) Task: {75FF6D01-E7AC-49F7-AEFE-13F6A8C475DE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {7D383475-1108-434F-900E-11C99FD663A2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-20] (Adobe Systems Incorporated) Task: {A1EAB63B-03CF-40C7-B16A-3D988DE103D2} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software) Task: {AEBB7694-3542-4C39-B891-9F8D3E837341} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\benni\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION Task: {C81B0139-AFAA-453B-A2D6-1F068407C4D4} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-03-28 21:31 - 2013-03-28 21:31 - 00210944 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2012-09-23 12:53 - 2012-09-23 12:53 - 00748544 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2012-09-23 12:53 - 2012-09-23 12:53 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2013-03-28 21:30 - 2013-03-28 21:30 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2013-07-24 22:04 - 2014-02-18 17:33 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-01-28 12:34 - 2014-01-28 12:34 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll 2011-10-07 10:39 - 2011-10-07 10:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll 2014-02-05 22:24 - 2014-02-15 22:44 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-01-25 19:03 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll 2014-01-25 19:03 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll 2013-08-21 13:18 - 2014-02-11 03:34 - 00751616 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2013-08-28 12:47 - 2014-02-20 00:07 - 01135296 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2013-08-07 10:31 - 2014-01-11 00:33 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun ==================== Faulty Device Manager Devices ============= Name: Ethernet-Controller Description: Ethernet-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (02/22/2014 03:43:08 PM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall Error: (02/22/2014 03:38:58 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/22/2014 01:27:36 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/22/2014 01:26:43 AM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall Error: (02/22/2014 00:58:43 AM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall Error: (02/22/2014 00:58:10 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/21/2014 10:42:12 PM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall Error: (02/21/2014 10:06:41 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/20/2014 10:25:57 PM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall Error: (02/20/2014 10:25:39 PM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall System errors: ============= Error: (02/22/2014 01:25:46 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 22.02.2014 um 01:24:15 unerwartet heruntergefahren. Error: (02/22/2014 00:56:20 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 22.02.2014 um 00:54:44 unerwartet heruntergefahren. Error: (02/20/2014 10:25:39 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/20/2014 10:25:39 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (02/20/2014 00:42:53 AM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (02/19/2014 10:02:27 PM) (Source: bowser) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{20970BE9-4990-479E-88C7-C605C1DE5047}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (02/19/2014 09:15:51 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/19/2014 09:15:51 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (02/19/2014 09:04:13 PM) (Source: bowser) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{20970BE9-4990-479E-88C7-C605C1DE5047}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (02/19/2014 08:58:57 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 19.02.2014 um 20:57:31 unerwartet heruntergefahren. Microsoft Office Sessions: ========================= Error: (02/22/2014 03:43:08 PM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall Error: (02/22/2014 03:38:58 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/22/2014 01:27:36 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/22/2014 01:26:43 AM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall Error: (02/22/2014 00:58:43 AM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall Error: (02/22/2014 00:58:10 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/21/2014 10:42:12 PM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall Error: (02/21/2014 10:06:41 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/20/2014 10:25:57 PM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall Error: (02/20/2014 10:25:39 PM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 3053.23 MB Available physical RAM: 1693.25 MB Total Pagefile: 6104.63 MB Available Pagefile: 4549.76 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:200 GB) (Free:19.64 GB) NTFS Drive d: () (Fixed) (Total:265.66 GB) (Free:156.26 GB) NTFS Drive e: (GDVD1113_90) (CDROM) (Total:7.89 GB) (Free:0 GB) UDF Drive h: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1E100649) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=266 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
23.02.2014, 11:36 | #4 |
/// the machine /// TB-Ausbilder | fehlermeldung backgroundcontainer.dll nicht gefunden Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu fehlermeldung backgroundcontainer.dll nicht gefunden |
belassen, bissl, einiger, fehlermeldung, gefunde, geholfen, gesuch, gesucht, inter, interne, internet, langsam, meldung, nervig, nichts, problem, seite, seiten, spyhunter, unternehmen, vollversion |