Windows 7: Firefox fehlermeldung : Proxy-Server verweigert die Verbindung, Internet Explorer falsche Startseite, viel werbung

bm123 · 16.04.2014, 12:46

Moin,
mein Bruder gab mir seinen Laptop. Seine Aussage:
Der Internet Explorer hat immer die falsche Startseite, einstellen nüzt nichts und Firefox verweigert die Verbindung mit Proxy-Server!

Er selber hatt schon was mit Virescannern versucht, welche weis ich nicht, hat er mir nicht mitgeteilt.
Vorher hatte Firefox das selbe Problem wie der IE, nach dem scan kam die o.g. Fehlermeldung.

Auf dem Laptop sind zwei Benutzerkonten, Seines und das seiner Tochter.
Ich habe die folgenden Logfiles nur auf seinem Konto erstellt!
Wenn ich welche mit dem anderen Konto erstellen soll, so sagt es mir bitte.

defogger:

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:06 on 16/04/2014 (ICH)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

FRST

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-04-2014
Ran by ICH (administrator) on SVENI-PC on 16-04-2014 13:08:02
Running from C:\Users\ICH\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-07-29] (Synaptics Incorporated)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [165912 2009-09-23] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe [385560 2009-09-23] (Intel Corporation)
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe [363544 2009-09-23] (Intel Corporation)
HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2010-02-25] ( Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1475584 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1475584 2010-11-20] (Microsoft Corporation)
Startup: C:\Users\sveni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3070 B611 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3070 B611 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x34A51FD27CE3CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396190897&from=tugs&uid=WDCXWD1600BEVS-00VAT0_WD-WXH70837063970639
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396190897&from=tugs&uid=WDCXWD1600BEVS-00VAT0_WD-WXH70837063970639&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396190897&from=tugs&uid=WDCXWD1600BEVS-00VAT0_WD-WXH70837063970639&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396190897&from=tugs&uid=WDCXWD1600BEVS-00VAT0_WD-WXH70837063970639&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\ICH\AppData\Roaming\Mozilla\Firefox\Profiles\iqsjhmlr.default
FF user.js: detected! => C:\Users\ICH\AppData\Roaming\Mozilla\Firefox\Profiles\iqsjhmlr.default\user.js
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Mysearchdial
FF Homepage: hxxp://google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-26] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [246224 2009-12-07] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-16] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-16 13:08 - 2014-04-16 13:08 - 00009106 _____ () C:\Users\ICH\Desktop\FRST.txt
2014-04-16 13:07 - 2014-04-16 13:08 - 00000000 ____D () C:\FRST
2014-04-16 13:06 - 2014-04-16 13:06 - 00000468 _____ () C:\Users\ICH\Desktop\defogger_disable.log
2014-04-16 13:06 - 2014-04-16 13:06 - 00000000 _____ () C:\Users\ICH\defogger_reenable
2014-04-16 13:06 - 2014-04-16 13:05 - 02054144 _____ (Farbar) C:\Users\ICH\Desktop\FRST64.exe
2014-04-16 13:06 - 2014-04-16 13:05 - 00380416 _____ () C:\Users\ICH\Desktop\Gmer-19357.exe
2014-04-16 13:06 - 2014-04-16 13:04 - 00050477 _____ () C:\Users\ICH\Desktop\Defogger.exe
2014-04-16 12:44 - 2014-04-16 12:44 - 00000000 ____D () C:\Users\ICH\AppData\Roaming\hpqLog
2014-04-15 18:39 - 2014-04-15 18:40 - 00000000 ____D () C:\03463972d690932c2a4980ba
2014-04-15 18:32 - 2014-04-15 18:32 - 00000566 _____ () C:\Windows\PFRO.log
2014-04-14 23:54 - 2014-02-17 21:55 - 00000426 _____ () C:\AVScanner.ini
2014-04-14 23:49 - 2014-04-16 12:41 - 00000946 _____ () C:\Windows\setupact.log
2014-04-14 23:49 - 2014-04-14 23:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-14 21:46 - 2014-04-16 12:41 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-14 21:38 - 2014-04-14 21:38 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-14 21:38 - 2014-04-14 21:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-14 21:38 - 2014-04-14 21:38 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-14 21:38 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-14 21:38 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-14 21:38 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-14 21:26 - 2014-04-14 21:28 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\ICH\Downloads\mbam-setup-2.0.1.1004(1).exe
2014-04-14 21:26 - 2014-04-14 21:27 - 05888117 _____ (Malwarebytes Corporation ) C:\Users\ICH\Downloads\mbam-setup-2.0.1.1004.exe.part
2014-04-14 20:49 - 2014-04-14 20:49 - 00011280 _____ () C:\Users\ICH\Documents\cc_20140414_204909 04.2014 sicherung.reg
2014-04-14 19:23 - 2014-04-14 19:23 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-14 19:23 - 2014-04-14 19:23 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-14 19:23 - 2014-04-14 19:23 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-14 19:18 - 2014-04-14 19:18 - 03710504 _____ (Piriform Ltd) C:\Users\ICH\Downloads\ccsetup412_slim.exe
2014-04-10 12:14 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-10 12:14 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-10 12:14 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-10 12:14 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-10 12:14 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 12:14 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 12:14 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 12:14 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 12:14 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 12:14 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 12:14 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 12:14 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 12:14 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 12:14 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 12:14 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-10 12:14 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-10 12:14 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 12:14 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 12:14 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 12:14 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 12:14 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-30 20:20 - 2014-03-30 20:20 - 02209056 _____ () C:\Users\ICH\Downloads\avira-eu-cleaner_de.exe
2014-03-30 17:22 - 2014-03-30 17:22 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-30 17:22 - 2014-03-30 17:22 - 00000000 _____ () C:\autoexec.bat
2014-03-30 17:21 - 2014-03-30 20:09 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-30 17:18 - 2014-03-30 17:18 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ICH\Downloads\SpyHunter-Installer.exe
2014-03-30 17:18 - 2014-03-30 17:18 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ICH\Downloads\SpyHunter-Installer(1).exe
2014-03-30 17:06 - 2014-03-30 17:06 - 00000000 ___RD () C:\Users\ICH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-30 17:05 - 2014-04-16 13:05 - 00000284 _____ () C:\Windows\Tasks\MySearchDial.job
2014-03-30 17:05 - 2014-04-14 20:05 - 00003220 _____ () C:\Windows\System32\Tasks\MySearchDial
2014-03-30 17:05 - 2014-04-14 20:05 - 00000088 _____ () C:\Users\ICH\AppData\Roaming\WB.CFG
2014-03-30 17:05 - 2014-03-30 17:08 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-03-30 17:05 - 2014-03-28 16:38 - 01172776 _____ (AnyProtect.com) C:\Users\ICH\AppData\Local\AnyProtectScannerSetup.exe
2014-03-30 16:55 - 2014-03-30 16:55 - 00000000 ____D () C:\Users\ICH\AppData\Local\Tuguu_SL
2014-03-30 16:54 - 2014-03-31 17:06 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-03-30 16:54 - 2014-03-30 20:01 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2014-03-30 16:54 - 2014-03-30 17:26 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-03-30 16:54 - 2014-03-30 17:06 - 00002826 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2014-03-30 16:54 - 2014-03-30 17:06 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2014-03-30 16:54 - 2014-03-30 17:06 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2014-03-30 16:54 - 2014-03-30 17:06 - 00000312 _____ () C:\Users\ICH\AppData\Roaming\aps.uninstall.scan.results
2014-03-30 16:53 - 2014-04-16 12:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-30 16:53 - 2014-03-30 16:53 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-30 16:52 - 2014-04-14 22:20 - 00000000 ____D () C:\ProgramData\WPM
2014-03-30 16:52 - 2014-04-14 22:18 - 00000000 ____D () C:\Users\ICH\AppData\Roaming\SupTab
2014-03-30 16:50 - 2014-03-30 16:50 - 00003208 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance
2014-03-30 16:50 - 2014-03-30 16:49 - 01172776 _____ (AnyProtect.com) C:\Users\ICH\AppData\Local\nsc9E15.tmp
2014-03-30 16:49 - 2014-04-16 12:50 - 00000274 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
2014-03-30 16:49 - 2014-04-16 12:42 - 00000268 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job
2014-03-30 16:49 - 2014-03-30 16:50 - 00002496 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Startup
2014-03-30 16:48 - 2014-03-30 16:48 - 00000000 ____D () C:\Users\ICH\AppData\Roaming\Uniblue
2014-03-30 16:48 - 2014-03-30 16:48 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-03-30 16:46 - 2014-03-30 16:46 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 16:45 - 2014-03-30 16:45 - 00000000 ____D () C:\Users\ICH\AppData\Local\SearchProtect
2014-03-30 16:45 - 2014-03-30 16:45 - 00000000 _____ () C:\END
2014-03-29 13:44 - 2014-03-29 13:44 - 00000000 ____D () C:\Users\ICH\AppData\Local\LogMeIn
2014-03-18 22:21 - 2014-03-18 22:21 - 00000000 ____D () C:\5b852adafe4e7cb5bb6d92ac

==================== One Month Modified Files and Folders =======

2014-04-16 13:08 - 2014-04-16 13:08 - 00009106 _____ () C:\Users\ICH\Desktop\FRST.txt
2014-04-16 13:08 - 2014-04-16 13:07 - 00000000 ____D () C:\FRST
2014-04-16 13:06 - 2014-04-16 13:06 - 00000468 _____ () C:\Users\ICH\Desktop\defogger_disable.log
2014-04-16 13:06 - 2014-04-16 13:06 - 00000000 _____ () C:\Users\ICH\defogger_reenable
2014-04-16 13:06 - 2012-12-24 13:37 - 00000000 ____D () C:\Users\ICH
2014-04-16 13:05 - 2014-04-16 13:06 - 02054144 _____ (Farbar) C:\Users\ICH\Desktop\FRST64.exe
2014-04-16 13:05 - 2014-04-16 13:06 - 00380416 _____ () C:\Users\ICH\Desktop\Gmer-19357.exe
2014-04-16 13:05 - 2014-03-30 17:05 - 00000284 _____ () C:\Windows\Tasks\MySearchDial.job
2014-04-16 13:04 - 2014-04-16 13:06 - 00050477 _____ () C:\Users\ICH\Desktop\Defogger.exe
2014-04-16 12:51 - 2014-03-30 16:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-16 12:50 - 2014-03-30 16:49 - 00000274 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
2014-04-16 12:48 - 2011-09-07 19:27 - 01401585 _____ () C:\Windows\WindowsUpdate.log
2014-04-16 12:48 - 2009-07-14 19:58 - 00699712 _____ () C:\Windows\system32\perfh007.dat
2014-04-16 12:48 - 2009-07-14 19:58 - 00149820 _____ () C:\Windows\system32\perfc007.dat
2014-04-16 12:48 - 2009-07-14 07:13 - 01620812 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-16 12:48 - 2009-07-14 06:45 - 00016176 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-16 12:48 - 2009-07-14 06:45 - 00016176 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-16 12:47 - 2012-12-24 13:37 - 00000000 ____D () C:\Users\ICH\AppData\Local\VirtualStore
2014-04-16 12:45 - 2014-03-10 20:23 - 01595092 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-04-16 12:44 - 2014-04-16 12:44 - 00000000 ____D () C:\Users\ICH\AppData\Roaming\hpqLog
2014-04-16 12:44 - 2011-10-27 20:28 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-04-16 12:42 - 2014-03-30 16:49 - 00000268 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job
2014-04-16 12:41 - 2014-04-14 23:49 - 00000946 _____ () C:\Windows\setupact.log
2014-04-16 12:41 - 2014-04-14 21:46 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-16 12:41 - 2013-06-01 20:02 - 00000000 ____D () C:\Users\ICH\AppData\Local\LogMeIn Hamachi
2014-04-16 12:41 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-15 18:40 - 2014-04-15 18:39 - 00000000 ____D () C:\03463972d690932c2a4980ba
2014-04-15 18:32 - 2014-04-15 18:32 - 00000566 _____ () C:\Windows\PFRO.log
2014-04-14 23:49 - 2014-04-14 23:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-14 23:25 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-14 23:14 - 2013-02-04 15:09 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3090529953-2460283286-818632398-1000UA.job
2014-04-14 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-14 22:20 - 2014-03-30 16:52 - 00000000 ____D () C:\ProgramData\WPM
2014-04-14 22:18 - 2014-03-30 16:52 - 00000000 ____D () C:\Users\ICH\AppData\Roaming\SupTab
2014-04-14 21:38 - 2014-04-14 21:38 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-14 21:38 - 2014-04-14 21:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-14 21:38 - 2014-04-14 21:38 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-04-14 21:28 - 2014-04-14 21:26 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\ICH\Downloads\mbam-setup-2.0.1.1004(1).exe
2014-04-14 21:27 - 2014-04-14 21:26 - 05888117 _____ (Malwarebytes Corporation ) C:\Users\ICH\Downloads\mbam-setup-2.0.1.1004.exe.part
2014-04-14 20:49 - 2014-04-14 20:49 - 00011280 _____ () C:\Users\ICH\Documents\cc_20140414_204909 04.2014 sicherung.reg
2014-04-14 20:05 - 2014-03-30 17:05 - 00003220 _____ () C:\Windows\System32\Tasks\MySearchDial
2014-04-14 20:05 - 2014-03-30 17:05 - 00000088 _____ () C:\Users\ICH\AppData\Roaming\WB.CFG
2014-04-14 19:25 - 2013-11-23 21:31 - 00000000 ____D () C:\Windows\Minidump
2014-04-14 19:25 - 2011-09-07 20:23 - 00000000 ____D () C:\Windows\Panther
2014-04-14 19:23 - 2014-04-14 19:23 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-14 19:23 - 2014-04-14 19:23 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-14 19:23 - 2014-04-14 19:23 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-14 19:18 - 2014-04-14 19:18 - 03710504 _____ (Piriform Ltd) C:\Users\ICH\Downloads\ccsetup412_slim.exe
2014-04-13 17:43 - 2013-03-23 10:36 - 00000000 ____D () C:\Users\sveni\AppData\Roaming\Spotify
2014-04-13 17:43 - 2013-03-16 13:59 - 00000000 ____D () C:\Users\sveni\AppData\Local\LogMeIn Hamachi
2014-04-13 17:38 - 2013-02-04 15:09 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3090529953-2460283286-818632398-1000Core.job
2014-04-13 17:30 - 2013-01-10 19:51 - 00000000 ____D () C:\Users\sveni\AppData\Roaming\Skype
2014-04-11 11:49 - 2013-08-15 02:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-11 11:46 - 2012-02-12 12:57 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-10 12:04 - 2013-03-23 10:39 - 00000000 ____D () C:\Users\sveni\AppData\Local\Spotify
2014-04-03 09:51 - 2014-04-14 21:38 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-14 21:38 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-14 21:38 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-31 17:06 - 2014-03-30 16:54 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-03-31 14:52 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-31 03:16 - 2014-04-10 12:14 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-10 12:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-10 12:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-10 12:14 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 20:20 - 2014-03-30 20:20 - 02209056 _____ () C:\Users\ICH\Downloads\avira-eu-cleaner_de.exe
2014-03-30 20:09 - 2014-03-30 17:21 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-03-30 20:01 - 2014-03-30 16:54 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2014-03-30 18:54 - 2013-01-19 14:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 17:36 - 2013-03-23 10:39 - 00002022 _____ () C:\Users\sveni\Desktop\Spotify.lnk
2014-03-30 17:36 - 2013-03-23 10:39 - 00002008 _____ () C:\Users\sveni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-03-30 17:26 - 2014-03-30 16:54 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-03-30 17:22 - 2014-03-30 17:22 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-30 17:22 - 2014-03-30 17:22 - 00000000 _____ () C:\autoexec.bat
2014-03-30 17:18 - 2014-03-30 17:18 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ICH\Downloads\SpyHunter-Installer.exe
2014-03-30 17:18 - 2014-03-30 17:18 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ICH\Downloads\SpyHunter-Installer(1).exe
2014-03-30 17:08 - 2014-03-30 17:05 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-03-30 17:06 - 2014-03-30 17:06 - 00000000 ___RD () C:\Users\ICH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-30 17:06 - 2014-03-30 16:54 - 00002826 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2014-03-30 17:06 - 2014-03-30 16:54 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2014-03-30 17:06 - 2014-03-30 16:54 - 00002824 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2014-03-30 17:06 - 2014-03-30 16:54 - 00000312 _____ () C:\Users\ICH\AppData\Roaming\aps.uninstall.scan.results
2014-03-30 16:57 - 2013-01-30 22:23 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-30 16:55 - 2014-03-30 16:55 - 00000000 ____D () C:\Users\ICH\AppData\Local\Tuguu_SL
2014-03-30 16:53 - 2014-03-30 16:53 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-30 16:53 - 2013-09-01 20:51 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-30 16:53 - 2011-09-17 11:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-30 16:50 - 2014-03-30 16:50 - 00003208 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance
2014-03-30 16:50 - 2014-03-30 16:49 - 00002496 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Startup
2014-03-30 16:49 - 2014-03-30 16:50 - 01172776 _____ (AnyProtect.com) C:\Users\ICH\AppData\Local\nsc9E15.tmp
2014-03-30 16:48 - 2014-03-30 16:48 - 00000000 ____D () C:\Users\ICH\AppData\Roaming\Uniblue
2014-03-30 16:48 - 2014-03-30 16:48 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-03-30 16:46 - 2014-03-30 16:46 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 16:46 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-30 16:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-30 16:45 - 2014-03-30 16:45 - 00000000 ____D () C:\Users\ICH\AppData\Local\SearchProtect
2014-03-30 16:45 - 2014-03-30 16:45 - 00000000 _____ () C:\END
2014-03-29 13:44 - 2014-03-29 13:44 - 00000000 ____D () C:\Users\ICH\AppData\Local\LogMeIn
2014-03-29 13:44 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-03-28 16:38 - 2014-03-30 17:05 - 01172776 _____ (AnyProtect.com) C:\Users\ICH\AppData\Local\AnyProtectScannerSetup.exe
2014-03-18 22:21 - 2014-03-18 22:21 - 00000000 ____D () C:\5b852adafe4e7cb5bb6d92ac
2014-03-17 16:18 - 2009-07-14 06:45 - 00275856 _____ () C:\Windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\sveni\AppData\Local\Temp\AskSLib.dll
C:\Users\sveni\AppData\Local\Temp\chutil.dll
C:\Users\sveni\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\sveni\AppData\Local\Temp\i4jdel0.exe
C:\Users\sveni\AppData\Local\Temp\install_flashplayer10_chra_aih.exe
C:\Users\sveni\AppData\Local\Temp\ptk4gcrl.dll
C:\Users\sveni\AppData\Local\Temp\ResetDevice.exe
C:\Users\sveni\AppData\Local\Temp\SkypeSetup.exe
C:\Users\sveni\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-14 22:50

==================== End Of Log ============================

FRST Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-04-2014
Ran by ICH at 2014-04-16 13:08:55
Running from C:\Users\ICH\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
HP Deskjet 3070 B611 series - Grundlegende Software für das Gerät (HKLM\...\{B0BF4E84-0EE3-4E47-B90E-27B40348E022}) (Version: 25.0.571.0 - Hewlett-Packard Co.)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.6.2 - Synaptics Incorporated)

==================== Restore Points  =========================

18-03-2014 20:21:17 Windows Update
19-03-2014 14:22:16 Windows Update
23-03-2014 18:20:35 Windows Update
28-03-2014 13:22:58 Windows Update
30-03-2014 14:47:14 Uniblue SpeedUpMyPC installation
30-03-2014 14:56:40 Removed Adobe Flash Player 11 ActiveX.
30-03-2014 15:21:24 Installed SpyHunter
30-03-2014 18:03:47 Removed SpyHunter
30-03-2014 18:05:39 Removed SpyHunter
30-03-2014 18:07:45 Removed SpyHunter
30-03-2014 18:08:29 Removed SpyHunter
30-03-2014 22:04:10 Avira EU-Cleaner - 31.03.2014 00:04
01-04-2014 15:52:23 Windows Update
07-04-2014 17:39:13 Windows Update
10-04-2014 18:05:52 Windows Update
11-04-2014 09:44:35 Windows Update
14-04-2014 21:27:47 Windows Update
15-04-2014 16:38:54 Windows Update
16-04-2014 10:43:27 Removed QLBCASL

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {16BB62E6-A89B-4DFB-BCE3-F75A23F8B3A9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3090529953-2460283286-818632398-1000UA => C:\Users\sveni\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-04] (Facebook Inc.)
Task: {2A543878-7A91-4DA1-81D5-2753F4AC716B} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {4410127F-8756-45D4-9BEF-5CD9D0DCEEE0} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2014-03-24] (Uniblue Systems Limited) <==== ATTENTION
Task: {61F9AC68-036A-41BA-98A3-3FF4A95D4229} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2014-03-24] (Uniblue Systems Limited) <==== ATTENTION
Task: {7795566C-0694-4F2D-A6C4-CF2722F6E4BC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-30] (Adobe Systems Incorporated)
Task: {8320BD4E-28C7-426D-9570-5B8A61A14071} - System32\Tasks\MySearchDial => C:\Users\ICH\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {9572EB78-6F60-4F78-A026-97A81A454122} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {C6441921-8992-4C53-B66F-7E7DC726A46C} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {CC969808-F2C1-4491-9195-E2856F0816C3} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3090529953-2460283286-818632398-1000Core => C:\Users\sveni\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-04] (Facebook Inc.)
Task: {DE11AFC9-B9B4-46CA-A7F2-E3B3C8909E9C} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {DFDE54CF-55E7-4A27-AD5D-1F4AF4433B76} - System32\Tasks\{F826A647-66EC-4707-99FD-F9875470C78A} => C:\Program Files (x86)\Surf &amp; E-Mail-Stick\Surf &amp; E-Mail-Stick.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3090529953-2460283286-818632398-1000Core.job => C:\Users\sveni\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3090529953-2460283286-818632398-1000UA.job => C:\Users\sveni\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\MySearchDial.job => C:\Users\ICH\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2011-06-08 23:49 - 2011-06-08 23:49 - 02812776 _____ () C:\Windows\system32\HPScanTRDrv_DJ3070_B611.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/16/2014 00:44:30 PM) (Source: Microsoft-Windows-RestartManager) (User: sveni-PC)
Description: Die Anwendung oder der Dienst "hpqwmiex" konnte nicht neu gestartet werden.

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


System errors:
=============
Error: (04/16/2014 00:42:25 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/16/2014 00:38:56 PM) (Source: Microsoft-Windows-DriverFrameworks-UserMode) (User: NT-AUTORITÄT)
Description: Das Treiberpaket konnte nicht installiert werden. Der letzte Status war "1115".

Error: (04/16/2014 00:35:05 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎15.‎04.‎2014 um 18:39:39 unerwartet heruntergefahren.

Error: (04/14/2014 11:52:07 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (04/14/2014 11:51:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/14/2014 11:51:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (04/14/2014 10:18:52 PM) (Source: DCOM) (User: )
Description: {06622D85-6856-4460-8DE1-A81921B41C4B}

Error: (04/14/2014 07:45:59 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst IPBusEnum erreicht.

Error: (04/14/2014 07:08:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140966905

Error: (04/14/2014 07:08:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140966905


Microsoft Office Sessions:
=========================
Error: (04/16/2014 00:44:30 PM) (Source: Microsoft-Windows-RestartManager)(User: sveni-PC)
Description: 0hpqWmiEx.exehpqwmiex03026217830600

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (04/14/2014 11:51:24 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (04/14/2014 11:51:20 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 2037.88 MB
Available physical RAM: 1129.94 MB
Total Pagefile: 4075.77 MB
Available Pagefile: 2917.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.05 GB) (Free:106.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 1DDD9228)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End Of Log ============================

GMER:

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-16 13:18:10
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-2 WDC_WD1600BEVS-00VAT0 rev.11.01A11 149,05GB
Running: Gmer-19357.exe; Driver: C:\Users\ICH\AppData\Local\Temp\pgloypog.sys


---- Threads - GMER 2.1 ----

Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3912:3992]                                                                      0000000076f47587
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3912:2548]                                                                      00000000745f7712
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3912:468]                                                                       00000000773b2e65
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3912:1920]                                                                      00000000773b3e85
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3912:2524]                                                                      00000000773b3e85
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3912:3000]                                                                      00000000773b3e85

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Bind    \Device\{0A499656-1C08-48D6-BF2D-E027948BC8E6}?\Device\{0FAD5763-F823-4325-BAFA-EF6BB46A7167}?\Device\{4E818552-8FD4-498E-96BB-16D6001927CD}?\Device\{1E999E6A-5029-42F2-BB9B-CFE48FAD23EB}?
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Route   "{0A499656-1C08-48D6-BF2D-E027948BC8E6}"?"{0FAD5763-F823-4325-BAFA-EF6BB46A7167}"?"{4E818552-8FD4-498E-96BB-16D6001927CD}"?"{1E999E6A-5029-42F2-BB9B-CFE48FAD23EB}"?
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Export  \Device\TCPIP6TUNNEL_{0A499656-1C08-48D6-BF2D-E027948BC8E6}?\Device\TCPIP6TUNNEL_{0FAD5763-F823-4325-BAFA-EF6BB46A7167}?\Device\TCPIP6TUNNEL_{4E818552-8FD4-498E-96BB-16D6001927CD}?\Device\TCPIP6TUNNEL_{1E999E6A-5029-42F2-BB9B-CFE48FAD23EB}?
Reg     HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{4E818552-8FD4-498E-96BB-16D6001927CD}@InterfaceName                      isatap.{DCD2706F-1E03-4BFA-9C58-C569D4F71B34}
Reg     HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{4E818552-8FD4-498E-96BB-16D6001927CD}@ReusableType                       0

---- EOF - GMER 2.1 ----

Danke für eure Hilfe!
MfG
Björn

Windows 7: Firefox fehlermeldung : Proxy-Server verweigert die Verbindung, Internet Explorer falsche Startseite, viel werbung

Log-Analyse und Auswertung: Windows 7: Firefox fehlermeldung : Proxy-Server verweigert die Verbindung, Internet Explorer falsche Startseite, viel werbung

Windows 7: Firefox fehlermeldung : Proxy-Server verweigert die Verbindung, Internet Explorer falsche Startseite, viel werbung

Ähnliche Themen: Windows 7: Firefox fehlermeldung : Proxy-Server verweigert die Verbindung, Internet Explorer falsche Startseite, viel werbung