FRST Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-04-2014
Ran by user (administrator) on USER-PC on 30-04-2014 12:26:46
Running from C:\Users\user\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Windows\PLFSetI.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(AVAST Software) C:\Program Files\Avast\AvastUI.exe
(OpenOffice.org) C:\Users\user\Downloads\OpenOffice\program\swriter.exe
(OpenOffice.org) C:\Users\user\Downloads\OpenOffice\program\soffice.exe
(OpenOffice.org) C:\Users\user\Downloads\OpenOffice\program\soffice.bin
(Mozilla Corporation) C:\Users\user\Downloads\Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-11-30] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2013-10-23] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Avast\AvastUI.exe [3854640 2014-04-12] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-14] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about :blank
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.168.201
FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\user\Downloads\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: SNT - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\9_wk@yea-ynj.com [2014-04-21]
FF Extension: DownloadHelper - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Avast\WebRep\FF [2013-04-27]
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://websearch.amaizingsearches.info/?pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51"
CHR Extension: (No Name) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\edhpopddkofagcaighdcfjhdkfhemjek [2014-04-21]
CHR Extension: (No Name) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbgankknpfaiehaleodimbahabmakh [2014-04-21]
CHR Extension: (SNT) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kolcoemgpdenjndpljnmmklfecdpokgp [2014-04-21]
CHR Extension: (No Name) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd [2014-04-18]
CHR Extension: (Social Face) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiaejidbmkiecgbjeifoejpgmdaleoha [2014-04-21]
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\Avast\AvastSvc.exe [50344 2014-04-12] (AVAST Software)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-12] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-12] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-12] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2014-01-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-12] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-01-10] (Anchorfree Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-30 11:30 - 2014-04-30 11:31 - 00012950 _____ () C:\Users\user\Downloads\Addition.txt
2014-04-30 11:29 - 2014-04-30 12:27 - 00007139 _____ () C:\Users\user\Downloads\FRST.txt
2014-04-30 11:28 - 2014-04-30 11:29 - 02061824 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2014-04-30 10:35 - 2014-04-30 10:35 - 00000056 _____ () C:\Windows\setupact.log
2014-04-30 10:35 - 2014-04-30 10:35 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-30 09:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-04-30 09:44 - 2014-04-30 09:47 - 00000000 ____D () C:\AdwCleaner
2014-04-30 09:42 - 2014-04-30 09:42 - 00000000 ____D () C:\Windows\ERUNT
2014-04-28 10:08 - 2014-04-30 12:26 - 00000000 ____D () C:\FRST
2014-04-22 10:47 - 2014-04-22 10:47 - 00001724 _____ () C:\Users\user\Desktop\CrystalEye.lnk
2014-04-21 13:51 - 2014-04-21 13:51 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-04-21 13:43 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\Rightapp software
2014-04-21 13:41 - 2014-04-21 13:45 - 00000000 ____D () C:\ProgramData\Savue neet
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\user\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator
2014-04-21 13:40 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-21 13:24 - 2014-04-21 13:35 - 00000000 ____D () C:\ProgramData\WPM
2014-04-21 13:24 - 2014-04-21 13:24 - 00000000 ____D () C:\ProgramData\IePluginService
2014-04-21 13:12 - 2014-04-21 13:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WinRAR
2014-04-21 13:11 - 2014-04-22 09:52 - 00000000 ____D () C:\Users\user\Downloads\WinRAR
2014-04-21 11:36 - 2014-04-21 11:36 - 00000000 _____ () C:\autoexec.bat
2014-04-17 11:19 - 2014-04-30 12:18 - 00000000 ___RD () C:\Users\user\Desktop\Facharbeit
2014-04-16 10:14 - 2014-04-16 10:15 - 00004157 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b13.log
2014-04-12 19:57 - 2014-04-12 19:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-09 08:08 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 08:08 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 08:08 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 08:08 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 08:08 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 08:08 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 08:08 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 08:08 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 08:08 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 08:08 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 08:08 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 08:08 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 08:08 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
==================== One Month Modified Files and Folders =======
2014-04-30 12:27 - 2014-04-30 11:29 - 00007139 _____ () C:\Users\user\Downloads\FRST.txt
2014-04-30 12:26 - 2014-04-28 10:08 - 00000000 ____D () C:\FRST
2014-04-30 12:18 - 2014-04-17 11:19 - 00000000 ___RD () C:\Users\user\Desktop\Facharbeit
2014-04-30 12:09 - 2013-11-24 14:27 - 01320393 _____ () C:\Windows\WindowsUpdate.log
2014-04-30 11:31 - 2014-04-30 11:30 - 00012950 _____ () C:\Users\user\Downloads\Addition.txt
2014-04-30 11:30 - 2013-04-27 09:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-30 11:29 - 2014-04-30 11:28 - 02061824 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2014-04-30 10:42 - 2009-07-14 06:45 - 00023120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-30 10:42 - 2009-07-14 06:45 - 00023120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-30 10:35 - 2014-04-30 10:35 - 00000056 _____ () C:\Windows\setupact.log
2014-04-30 10:35 - 2014-04-30 10:35 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-30 10:35 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-30 09:47 - 2014-04-30 09:44 - 00000000 ____D () C:\AdwCleaner
2014-04-30 09:42 - 2014-04-30 09:42 - 00000000 ____D () C:\Windows\ERUNT
2014-04-29 18:02 - 2009-07-14 19:58 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-04-29 18:02 - 2009-07-14 19:58 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-04-29 18:02 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-29 17:36 - 2013-04-27 09:03 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 17:36 - 2013-04-27 09:03 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 17:36 - 2013-04-27 09:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 17:35 - 2013-04-27 09:54 - 00004152 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-28 14:41 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-22 10:57 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-22 10:47 - 2014-04-22 10:47 - 00001724 _____ () C:\Users\user\Desktop\CrystalEye.lnk
2014-04-22 09:53 - 2013-06-22 09:27 - 00000000 ____D () C:\Users\user\Downloads\Java
2014-04-22 09:52 - 2014-04-21 13:11 - 00000000 ____D () C:\Users\user\Downloads\WinRAR
2014-04-21 13:51 - 2014-04-21 13:51 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-04-21 13:45 - 2014-04-21 13:41 - 00000000 ____D () C:\ProgramData\Savue neet
2014-04-21 13:43 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\Rightapp software
2014-04-21 13:43 - 2014-04-21 13:40 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\user\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator
2014-04-21 13:41 - 2013-06-23 20:38 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2014-04-21 13:35 - 2014-04-21 13:24 - 00000000 ____D () C:\ProgramData\WPM
2014-04-21 13:24 - 2014-04-21 13:24 - 00000000 ____D () C:\ProgramData\IePluginService
2014-04-21 13:12 - 2014-04-21 13:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WinRAR
2014-04-21 13:06 - 2013-04-11 15:38 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-21 12:52 - 2014-03-29 13:21 - 00000000 ____D () C:\Users\user\Downloads\Firefox
2014-04-21 11:36 - 2014-04-21 11:36 - 00000000 _____ () C:\autoexec.bat
2014-04-21 11:14 - 2013-05-09 18:31 - 00761344 ___SH () C:\Users\user\Thumbs.db
2014-04-17 11:20 - 2014-02-26 20:15 - 00000000 ____D () C:\Users\user\Sichern\Documents\DBI
2014-04-16 10:17 - 2013-11-14 00:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 10:15 - 2014-04-16 10:14 - 00004157 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b13.log
2014-04-16 09:34 - 2013-06-10 23:11 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-04-14 11:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-12 20:02 - 2013-04-27 09:53 - 00000000 ____D () C:\Program Files\Avast
2014-04-12 19:57 - 2014-04-12 19:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-12 19:57 - 2014-02-20 10:55 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-12 19:57 - 2013-04-27 09:54 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-09 15:16 - 2013-07-14 23:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 15:14 - 2010-06-24 11:33 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-03-31 09:35 - 2013-04-27 08:49 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-19 11:57
==================== End Of Log ============================
--- --- ---
Code:
Alles auswählen Aufklappen ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-04-2014
Ran by user at 2014-04-30 12:27:40
Running from C:\Users\user\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Acer Crystal Eye webcam Ver:1.1.184.610 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.184.610 - Chicony Electronics Co.,Ltd.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2016 - Avast Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.21 - Piriform)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
Google Update Helper (x32 Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKCU\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)
==================== Restore Points =========================
30-04-2014 07:02:45 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1CE354B2-C204-4714-BB2C-B2663DD24D61} - System32\Tasks\avast! Emergency Update => C:\Program Files\Avast\AvastEmUpdate.exe [2014-04-12] (AVAST Software)
Task: {2AE44BA6-BAC6-47EB-B510-2C9908A1511D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-10-23 13:18 - 2013-10-23 13:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2014-04-30 09:35 - 2014-04-30 09:35 - 02252800 _____ () C:\Program Files\Avast\defs\14042902\algo.dll
2014-04-30 11:31 - 2014-04-30 11:31 - 02252800 _____ () C:\Program Files\Avast\defs\14043000\algo.dll
2014-02-20 10:55 - 2014-02-20 10:55 - 19336120 _____ () C:\Program Files\Avast\libcef.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Users\user\Downloads\OpenOffice\program\libxml2.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00170496 _____ () C:\Users\user\Downloads\OpenOffice\program\libxslt.dll
2014-03-29 13:21 - 2014-03-29 13:21 - 03642480 _____ () C:\Users\user\Downloads\Firefox\mozjs.dll
2012-09-23 20:43 - 2012-09-23 20:43 - 00313992 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\sqlite.dll
2012-12-18 21:08 - 2012-12-18 21:08 - 14588632 _____ () C:\Program Files (x86)\Adobe\Reader 11.0\Reader\NPSWF32.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/30/2014 10:36:29 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "ierss://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/30/2014 10:36:29 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (04/30/2014 10:35:50 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (04/30/2014 10:35:50 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
Error: (04/30/2014 10:35:29 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Microsoft Office Sessions:
=========================
Error: (04/30/2014 10:36:29 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07ierss://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/30/2014 10:36:29 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (04/30/2014 10:35:50 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
Error: (04/30/2014 10:35:48 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
4700
CodeIntegrity Errors:
===================================
Date: 2014-02-07 06:42:34.951
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 69%
Total physical RAM: 1978.91 MB
Available physical RAM: 604.9 MB
Total Pagefile: 3957.83 MB
Available Pagefile: 2270.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.79 GB) (Free:194.63 GB) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: F1E620A9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
==================== End Of Log ============================