|
Alles rund um Windows: Systemadministrator einrichtenWindows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
22.07.2014, 12:50 | #1 |
| Problem: Systemadministrator einrichten Hallo liebes T-B, mal wieder muss ich mich ratlos an euch wenden, ich hab versucht wie in eurem Thema "Anleitung: Maßnahmen zur Absicherung des Rechners" beschrieben meine Windows Updates automatisch installieren zu lassen. Jedoch steht dort dann bei mir "Einstellungen werden vom Systemadministrator verwaltet" In den Benutzerkonten bin ich der Administrator und neben mir gibt es keinen anderen außer das Administrator Konto (dor auch das gleiche Problem). Wenn ich dann auf das schlaue Fragenzeichen gehe wird mir gesagt das ich diese Einstellungen in den Gruppenrichtlinien verwalten kann, nur wei komme ich auf die Gruppenrichtlinien verwaltung? Nun habe ich mehrere Seiten durchsucht und die dort aufgeführten Lösungen haben auch nicht geholfen ( In der Kommandozeile eingeben: net user Administrator /active ). Desweiteren war ein weiterer Lösungesweg einen Key in der Registry zu verändern, da bin ich jedoch sehr vorsichtig und möchte lieber euren Rat einholen. In der Vergangenheit hab ich ein bisschen mit meinem Heimnetzwerk und den dortigen Geräten rumgebastelt, vielleicht hab ich das was verstellt Mein Betriebsystem ist Win 7 Home Premium falls das eine Rolle spielt Vielen Dank
__________________ MfG BeRealm |
22.07.2014, 16:07 | #2 |
Gesperrt | Systemadministrator einrichten Anleitung / Hilfe Hallo! Schaue mal hier:
__________________pcwArbeitsplatz Download - - PC-WELT Dort findest du ein kleines Helferprogramm, was den Arbeitsplatz mit sinnvollen Erweiterungen erweitert. In deinem Fall musst du das Programm installieren, und dann auf "Rechtsklick" die Shell-Erweiterungen anzeigen lassen. Dort kannst du dann unter dem Register "Benutzerkonten" dein Anliegen wie oben beschrieben, ausführen. Das Programm ist in erster Linie für WinXP gedacht! Unter Win7 sind nicht alle Register mit einer Funktion hinterlegt. Dennoch eine kluge Sache das ganze! mfg |
22.07.2014, 16:09 | #3 |
| Systemadministrator einrichten Details Das kannste glaube ich nur im Administratorkonto einstellen, die Einstellungen werden dann für alle Nutzerkonten übernommen. Macht ja auch Sinn.
__________________Schonmal im abgesicherten Modus versucht ? |
22.07.2014, 16:11 | #4 |
/// Malwareteam | Lösung: Systemadministrator einrichten Hallo, also erstmal: Die Gruppenrichtlinienverwaltung kannst du öffnen:
Die Windows Update Optionen sind dabei unter: Computerkonfiguration/Administrative Vorlagen/Windows-Komponenten/Windows Update Benutzerkonfiguration/Administrative Vorlagen/Windows-Komponenten/Windows Update Ich würde aber erstmal das versuchen: https://www.trojaner-board.de/showthread.php?t=126216 |
22.07.2014, 18:08 | #5 | |
| Wie Systemadministrator einrichten Vielen Dank für die Antworten. @ Luxenbourg : Eigentlich wollte ich gerne weitere Tools oder dergleichen nicht nutzen wenn ich es vermeiden kann @Darklord666: Wie ich schon gesagt hatte, habe ich das auch schon vergebens Versucht. Zitat:
Wenn ich den Windows repair Vorgang getätigt habe was ist dann zu tun? Und kann ich danach das Programm wieder deinstallieren?
__________________ MfG BeRealm |
22.07.2014, 18:13 | #6 |
Gesperrt | Wo Systemadministrator einrichten Lösung! Das Tool ist "nur" eine kleine Erweiterung, und nicht mal ein Programm. Lässt sich auch rückstandslos entfernen. Aber gut, jedem das seine. |
22.07.2014, 18:39 | #7 |
/// Malwareteam | Systemadministrator einrichten Ich sehe grade dass gpedit.msc nur in Windows 7 Professional und aufwärts integriert ist - du hast ja Home Premium Hat sich die Situation mit dem Windows Update geändert? Poste mal bitte den Logfile in Code-Tags Wie äußert sich dein Problem konkret? Wann erscheint die Meldung und was konkret willst du einstellen? |
22.07.2014, 20:17 | #8 |
| Systemadministrator einrichten Den Log sowie das Ergebniss des Repair werde ich noch posten. Mein Problem ist das mir mein Windows sagt ich muss um die Windows update einstellungen auf "automatisch herrunterladen und installieren" zu stellen "Systemadministrator" sein welcher ich anscheinend nicht bin sondern nur "Administrator". Ich weiß jetzzt nicht wo der unterschied ist aber es wird beschrieben wenn ich auf das Windows Fragezeichen gehe das diese einstellungen in den "Gruppenrichtlinien" geändert werden können. Die Frage stellt sich also nun: 1. Wieso bin ich kein Systemadministrator bzw. wie werde ich einer? 2. Wie komme ich in die Gruppenrichtlinien um diese zu ändern Für Windows 7 Home Premium habe ich bei google noch keinen Lösungsweg finden können Leider hat sich nichts geändert. Hier nochmal der Screenshot meines Problems Hier nochmal das immernoch bestehende Problem als screenshot Hier der Repair Log: Code:
ATTFilter System Variables -------------------------------------------------------------------------------- OS: Windows 7 Home Premium OS Architecture: 64-bit OS Version: 6.1.7601 OS Service Pack: Service Pack 1 Computer Name: NILS-PC Windows Drive: C:\ Windows Path: C:\Windows Current Profile: C:\Users\Nils Current Profile SID: S-1-5-21-4215263498-307554076-952119999-1000 Current Profile Classes: S-1-5-21-4215263498-307554076-952119999-1000_Classes Profiles Location: C:\Users Profiles Location 2: C:\Windows\ServiceProfiles Local Settings AppData: C:\Users\Nils\AppData\Local -------------------------------------------------------------------------------- System Information -------------------------------------------------------------------------------- System Up Time: 0 Days 00:35:12 Process Count: 57 Commit Total: 2,88 GB Commit Limit: 11,98 GB Commit Peak: 3,11 GB Handle Count: 21527 Kernel Total: 557,64 MB Kernel Paged: 417,73 MB Kernel Non Paged: 139,91 MB System Cache: 3,98 GB Thread Count: 988 -------------------------------------------------------------------------------- Memory Before Cleaning with CleanMem -------------------------------------------------------------------------------- Memory Total: 5,99 GB Memory Used: 1,57 GB(26,1599%) Memory Avail.: 4,42 GB -------------------------------------------------------------------------------- Cleaning Memory Before Starting Repairs... Memory After Cleaning with CleanMem -------------------------------------------------------------------------------- Memory Total: 5,99 GB Memory Used: 1,43 GB(23,8341%) Memory Avail.: 4,56 GB -------------------------------------------------------------------------------- Starting Repairs... Start (22/07/2014 19:55:35) 01 - Reset Registry Permissions 01/03 HKEY_CURRENT_USER & Sub Keys Start (22/07/2014 19:55:39) Running Repair Under Current User Account Done (22/07/2014 19:56:06) 01 - Reset Registry Permissions 02/03 HKEY_LOCAL_MACHINE & Sub Keys Start (22/07/2014 19:56:06) Running Repair Under System Account Done (22/07/2014 20:01:09) 01 - Reset Registry Permissions 03/03 HKEY_CLASSES_ROOT & Sub Keys Start (22/07/2014 20:01:09) Running Repair Under System Account Done (22/07/2014 20:02:55) 02 - Reset File Permissions: C: C: & Sub Folders Start (22/07/2014 20:02:55) Running Repair Under System Account Done (22/07/2014 20:10:29) 02 - Reset File Permissions: D: D: & Sub Folders Start (22/07/2014 20:10:29) Running Repair Under System Account Done (22/07/2014 20:10:47) 02 - Reset File Permissions: X: X: & Sub Folders Start (22/07/2014 20:10:47) Running Repair Under System Account Done (22/07/2014 20:10:50) 02 - Reset File Permissions: All Profiles C:\Users & Sub Folders Start (22/07/2014 20:10:50) Running Repair Under System Account Done (22/07/2014 20:12:55) 02 - Reset File Permissions: Current Profile C:\Users\Nils & Sub Folders Start (22/07/2014 20:12:55) Running Repair Under System Account Done (22/07/2014 20:15:03) 02 - Reset File Permissions: Cleanup Repairing Restricted Folders Permissions To Avoid Infinite Loops Start (22/07/2014 20:15:04) Running Repair Under System Account Processing ACL of: <\\?\C:\Documents and Settings> SetACL finished successfully. Processing ACL of: <\\?\C:\ProgramData\Application Data> SetACL finished successfully. Processing ACL of: <\\?\C:\ProgramData\Desktop> SetACL finished successfully. Processing ACL of: <\\?\C:\ProgramData\Documents> SetACL finished successfully. Processing ACL of: <\\?\C:\ProgramData\Favorites> SetACL finished successfully. Processing ACL of: <\\?\C:\ProgramData\Start Menu> SetACL finished successfully. Processing ACL of: <\\?\C:\ProgramData\Templates> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\All Users\Application Data> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\All Users\Desktop> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\All Users\Documents> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\All Users\Favorites> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\All Users\Start Menu> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\All Users\Templates> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default User> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Application Data> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Cookies> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Local Settings> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\My Documents> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\NetHood> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\PrintHood> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Recent> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\SendTo> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Start Menu> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Templates> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\AppData\Local\Application Data> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\AppData\Local\History> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\AppData\Local\Temporary Internet Files> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Documents\My Music> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Documents\My Pictures> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Default\Documents\My Videos> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Public\Documents\My Music> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Public\Documents\My Pictures> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Public\Documents\My Videos> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Administrator\Application Data> Reading the SD from <\\?\C:\Users\Administrator\Application Data> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\Cookies> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Administrator\Local Settings> Reading the SD from <\\?\C:\Users\Administrator\Local Settings> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\My Documents> Reading the SD from <\\?\C:\Users\Administrator\My Documents> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\NetHood> Reading the SD from <\\?\C:\Users\Administrator\NetHood> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\PrintHood> Reading the SD from <\\?\C:\Users\Administrator\PrintHood> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\Recent> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Administrator\SendTo> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Administrator\Start Menu> Reading the SD from <\\?\C:\Users\Administrator\Start Menu> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\Templates> Reading the SD from <\\?\C:\Users\Administrator\Templates> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\AppData\Local\Application Data> Reading the SD from <\\?\C:\Users\Administrator\AppData\Local\Application Data> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\AppData\Local\History> Reading the SD from <\\?\C:\Users\Administrator\AppData\Local\History> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\AppData\Local\Temporary Internet Files> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Administrator\Documents\My Music> Reading the SD from <\\?\C:\Users\Administrator\Documents\My Music> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\Documents\My Pictures> Reading the SD from <\\?\C:\Users\Administrator\Documents\My Pictures> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Administrator\Documents\My Videos> Reading the SD from <\\?\C:\Users\Administrator\Documents\My Videos> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\Application Data> Reading the SD from <\\?\C:\Users\Nils\Application Data> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\Cookies> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Nils\Local Settings> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Nils\My Documents> Reading the SD from <\\?\C:\Users\Nils\My Documents> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\NetHood> Reading the SD from <\\?\C:\Users\Nils\NetHood> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\PrintHood> Reading the SD from <\\?\C:\Users\Nils\PrintHood> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\Recent> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Nils\SendTo> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Nils\Start Menu> Reading the SD from <\\?\C:\Users\Nils\Start Menu> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\Templates> Reading the SD from <\\?\C:\Users\Nils\Templates> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\AppData\Local\Application Data> Reading the SD from <\\?\C:\Users\Nils\AppData\Local\Application Data> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\AppData\Local\History> Reading the SD from <\\?\C:\Users\Nils\AppData\Local\History> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\AppData\Local\Temporary Internet Files> SetACL finished successfully. Processing ACL of: <\\?\C:\Users\Nils\Documents\My Music> Reading the SD from <\\?\C:\Users\Nils\Documents\My Music> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\Documents\My Pictures> Reading the SD from <\\?\C:\Users\Nils\Documents\My Pictures> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Processing ACL of: <\\?\C:\Users\Nils\Documents\My Videos> Reading the SD from <\\?\C:\Users\Nils\Documents\My Videos> failed with: Das System kann die angegebene Datei nicht finden. SetACL finished with error(s): SetACL error message: The call to GetNamedSecurityInfo () failed Operating system error message: Das System kann die angegebene Datei nicht finden. Done (22/07/2014 20:15:55) 03 - Register System Files Start (22/07/2014 20:15:55) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:17:10) 04 - Repair WMI Start (22/07/2014 20:17:10) Starting Security Center So We Can Export The Security Info. Exporting Antivirus Info... Emsisoft Anti-Malware Exported. Exporting AntiSpyware Info... Windows Defender Exported. Emsisoft Anti-Malware Exported. Exporting 3rd Party Firewall Info... Online Armor Firewall Exported. Running Repair Under Current User Account Done (22/07/2014 20:19:39) 05 - Repair Windows Firewall Start (22/07/2014 20:19:39) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:20:52) 06 - Repair Internet Explorer Start (22/07/2014 20:20:52) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:23:55) 07 - Repair MDAC/MS Jet Start (22/07/2014 20:23:55) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:25:03) 08 - Repair Hosts File Start (22/07/2014 20:25:03) Running Repair Under System Account Done (22/07/2014 20:25:08) 09 - Remove Policies Set By Infections Start (22/07/2014 20:25:08) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:25:14) 10 - Repair Start Menu Icons Removed By Infections Start (22/07/2014 20:25:14) Running Repair Under System Account Done (22/07/2014 20:25:20) 11 - Repair Icons Start (22/07/2014 20:25:20) Running Repair Under Current User Account Done (22/07/2014 20:25:22) 12 - Repair Winsock & DNS Cache Start (22/07/2014 20:25:22) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:29:42) 13 - Remove Temp Files Start (22/07/2014 20:29:42) Running Repair Under System Account Done (22/07/2014 20:39:57) 14 - Repair Proxy Settings Start (22/07/2014 20:39:57) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:40:04) 15 - Unhide Non System Files Start (22/07/2014 20:40:04) C:\ - Total Files Unhidden: 1063 - Check Unhidden_Files.txt for list of files unhidden D:\ - Total Files Unhidden: 333 - Check Unhidden_Files.txt for list of files unhidden X:\ - Total Files Unhidden: 0 - Check Unhidden_Files.txt for list of files unhidden Done (22/07/2014 20:42:08) 16 - Repair Windows Updates Start (22/07/2014 20:42:08) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:46:06) 17 - Repair CD/DVD Missing/Not Working Start (22/07/2014 20:46:06) iTunes not found, not applying UpperFilters iTunes Reg Key Done (22/07/2014 20:46:06) 18 - Repair Volume Shadow Copy Service Start (22/07/2014 20:46:06) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:51:18) 19 - Repair Windows Sidebar/Gadgets Start (22/07/2014 20:51:18) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:51:26) 20 - Repair MSI (Windows Installer) Start (22/07/2014 20:51:26) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:51:55) 21 - Repair Windows Snipping Tool Start (22/07/2014 20:51:55) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:01) 22.01 - Repair bat Association Start (22/07/2014 20:52:01) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:08) 22.02 - Repair cmd Association Start (22/07/2014 20:52:08) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:14) 22.03 - Repair com Association Start (22/07/2014 20:52:14) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:19) 22.04 - Repair Directory Association Start (22/07/2014 20:52:19) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:25) 22.05 - Repair Drive Association Start (22/07/2014 20:52:25) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:32) 22.06 - Repair exe Association Start (22/07/2014 20:52:32) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:39) 22.07 - Repair Folder Association Start (22/07/2014 20:52:39) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:44) 22.08 - Repair inf Association Start (22/07/2014 20:52:44) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:50) 22.09 - Repair lnk (Shortcuts) Association Start (22/07/2014 20:52:50) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:52:56) 22.10 - Repair msc Association Start (22/07/2014 20:52:56) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:53:04) 22.11 - Repair reg Association Start (22/07/2014 20:53:04) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:53:11) 22.12 - Repair scr Association Start (22/07/2014 20:53:11) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:53:17) 23 - Repair Windows Safe Mode Start (22/07/2014 20:53:17) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:53:22) 24 - Repair Print Spooler Start (22/07/2014 20:53:22) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:53:42) 25 - Restore Important Windows Services Start (22/07/2014 20:53:42) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:54:31) 26 - Set Windows Services To Default Startup Start (22/07/2014 20:54:31) Running Repair Under Current User Account Running Repair Under System Account Done (22/07/2014 20:54:47) Skipping Repair. Repair is for Windows v6.2 (Windows 8 & Newer) or higher. Current version: 6.1 Skipping Repair. Repair is for Windows v6.2 (Windows 8 & Newer) or higher. Current version: 6.1 Skipping Repair. Repair is for Windows v6.2 (Windows 8 & Newer) or higher. Current version: 6.1 Cleaning up empty logs... All Selected Repairs Done. Done (22/07/2014 20:54:47) Total Repair Time: 00:59:15 ...YOU MUST RESTART YOUR SYSTEM... Running Repair Under Current User Account
__________________ MfG BeRealm |
22.07.2014, 20:55 | #9 |
/// Malwareteam | Systemadministrator einrichten Ich kann mir vorstellen, dass beispielsweise dein TuneUp zur "Leistungsoptimierung" in der Registry entsprechende Manipulationen durchgeführt hat, damit sich Updates nicht im laufenden System installieren. Soweit ich das beurteilen kann, ergibt sich durch die jetzige Einstellung kein Risiko für dich, da die Updates ja installiert werden, nur halt beim Neustarten. Auf eigene Gefahr kannst du dieser Anleitung folgen Microsoft Community Zu deiner eigenen Sicherheit solltest du zuvor einen Wiederherstellungspunkt erstellen. |
23.07.2014, 08:24 | #10 |
/// TB-Ausbilder | Systemadministrator einrichten [gelöst]Hinweis: Registry Cleaner Ich sehe, dass du sogenannte Registry Cleaner installiert hast. In deinem Fall Tune Up CRAPWARE. Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab. Der Grund ist ganz einfach: Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich. Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler. Zerstörst du die Registry, zerstörst du Windows. Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich. Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über Start --> Systemsteuerung --> Software (bei Windows XP)zu deinstallieren. Mach mal bitte: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
23.07.2014, 11:02 | #11 |
| Systemadministrator einrichten [gelöst] FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014 Ran by Nils (administrator) on NILS-PC on 23-07-2014 11:54:39 Running from C:\Users\Nils\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (AMD) C:\Windows\System32\atieclxx.exe (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oacat.exe (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oasrv.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oaui.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oahlp.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [@OnlineArmor GUI] => C:\Program Files (x86)\Online Armor\oaui.exe [7558464 2013-10-11] (Emsisoft GmbH) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-14] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-15] (Renesas Electronics Corporation) HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH) HKLM\...\RunOnce: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink) HKU\.DEFAULT\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.) HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Agent] => "C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe" HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse] => "C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe" --hidden --nowizard HKU\.DEFAULT\...\Run: [Bitdefender-Geldbörse-Anwendungs-Agent] => "C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe" HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-4215263498-307554076-952119999-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run HKU\S-1-5-21-4215263498-307554076-952119999-1000\...\Policies\Explorer: [NoRecentDocsNetHood] 1 HKU\S-1-5-21-4215263498-307554076-952119999-1000\...\Policies\Explorer: [NoRecentDocsHistory] 1 HKU\S-1-5-21-4215263498-307554076-952119999-1000\...\Policies\Explorer: [NoRecentDocsMenu] 1 HKU\S-1-5-21-4215263498-307554076-952119999-1000\...\MountPoints2: {af3d3d76-c40b-11e1-a69c-6c626d71b5ac} - K:\setup.exe -a IFEO\pdvdlaunchpolicy.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IFEO\powerdvd12.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=nis&pvid=20.4.0.40 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - {D4B784BE-9D95-493C-9913-1CBFF80823C3} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=NDV&o=15765&src=kw&q={searchTerms}&locale=&apn_ptnrs=NY&apn_dtid=YYYYYYYYDE&apn_uid=048098F7-35A8-4F01-AB9A-F8571793D74C&apn_sauid=DA1A58EF-DF01-4BE1-9D62-CFCB57AEADB1& BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> No File BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334 FF Homepage: https://www.ixquick.de/ FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20((url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D" FF NetworkProxy: "type", 2 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.) FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF user.js: detected! => C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334\user.js FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Ghostery - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334\Extensions\firefox@ghostery.com.xpi [2014-07-18] FF Extension: ProxMate - Proxy on steroids! - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2014-07-18] FF Extension: Flagfox - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-07-18] FF Extension: NoScript - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-07-18] FF Extension: Adblock Plus - C:\Users\Nils\AppData\Roaming\Mozilla\Firefox\Profiles\osojicxh.default-1405634837334\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-18] FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2014-05-10] FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-05-10] FF HKLM-x32\...\Firefox\Extensions: [{6D5C8FC4-DE46-41bf-9092-93F0F78E9115}] - C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_2.6.0.52\coFFFw Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION ==================== Services (Whitelisted) ================= R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH) R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-06-12] (CyberGhost S.R.L) S4 CLHNServiceForPowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [87336 2012-01-12] (CyberLink Corp.) S4 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [75048 2012-01-12] (CyberLink) S4 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [296232 2012-01-12] (CyberLink) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] () R2 OAcat; C:\Program Files (x86)\Online Armor\OAcat.exe [584864 2013-10-11] (Emsisoft GmbH) S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37176 2014-06-05] (The OpenVPN Project) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD) S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 SvcOnlineArmor; C:\Program Files (x86)\Online Armor\oasrv.exe [4457688 2013-10-11] (Emsisoft GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2014-07-16] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH) R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH) R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH) R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH) R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-04] (DT Soft Ltd) R2 ntk_PowerDVD12; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [82928 2011-10-27] (Cyberlink Corp.) R1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [64720 2013-10-11] () R1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [62008 2013-10-11] () R1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [52360 2013-10-11] (Emsisoft) R3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [35368 2013-10-11] (Emsisoft) S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) S3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2014-04-09] (Razer Inc) S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 SKYNETU2C; C:\Windows\System32\DRIVERS\SkyNetU2C_AMD64.SYS [270424 2010-05-10] (TechniSat Digital, S.A.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed] R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\000.fcl [146928 2012-01-11] (CyberLink Corp.) S3 BTCFilterService; system32\DRIVERS\motfilt.sys [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 motccgp; system32\DRIVERS\motccgp.sys [X] S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X] S3 motmodem; system32\DRIVERS\motmodem.sys [X] S3 MotoSwitchService; system32\DRIVERS\motswch.sys [X] S3 Motousbnet; system32\DRIVERS\Motousbnet.sys [X] S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-23 11:54 - 2014-07-23 11:55 - 00021447 _____ () C:\Users\Nils\Downloads\FRST.txt 2014-07-23 11:53 - 2014-07-23 11:54 - 00000000 ____D () C:\FRST 2014-07-23 11:52 - 2014-07-23 11:53 - 02090496 _____ (Farbar) C:\Users\Nils\Downloads\FRST64.exe 2014-07-22 20:51 - 2014-07-22 20:51 - 00003160 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-07-22 19:46 - 2014-07-22 20:54 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2014-07-22 19:45 - 2014-07-22 19:45 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-NILS-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2014-07-22 19:43 - 2014-07-22 19:43 - 00000000 ____D () C:\RegBackup 2014-07-22 19:19 - 2014-07-22 19:19 - 00003408 _____ () C:\bootsqm.dat 2014-07-22 19:08 - 2014-07-22 19:09 - 00000000 ____D () C:\Users\Nils\Tweaking.com - Windows Repair 2014-07-22 18:56 - 2014-07-22 18:56 - 00000000 __SHD () C:\Users\Nils\AppData\Local\EmieUserList 2014-07-22 18:56 - 2014-07-22 18:56 - 00000000 __SHD () C:\Users\Nils\AppData\Local\EmieSiteList 2014-07-22 13:08 - 2014-07-22 13:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TuneUp Software 2014-07-22 13:08 - 2014-07-22 13:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\TuneUp Software 2014-07-22 12:56 - 2014-07-22 12:56 - 00117576 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OnlineArmor 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel Corporation 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ATI 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Local\ATI 2014-07-22 12:53 - 2014-07-22 12:53 - 00001421 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-22 12:53 - 2014-07-22 12:53 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe 2014-07-22 12:49 - 2014-07-22 12:53 - 00000000 ____D () C:\Users\Administrator 2014-07-22 12:49 - 2014-07-22 12:49 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Startmenü 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten 2014-07-22 12:49 - 2014-06-26 01:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Overwolf 2014-07-22 12:49 - 2012-06-22 11:11 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help 2014-07-22 12:49 - 2011-11-18 00:13 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover 2014-07-22 12:49 - 2011-11-17 23:19 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Macromedia 2014-07-22 12:49 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-07-22 12:49 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-07-19 12:19 - 2014-07-19 12:19 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-07-18 23:04 - 2014-07-18 23:04 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\Thunderbird 2014-07-18 23:04 - 2014-07-18 23:04 - 00000000 ____D () C:\Users\Nils\AppData\Local\Thunderbird 2014-07-18 22:59 - 2014-07-18 22:59 - 00002090 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-07-18 22:59 - 2014-07-18 22:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-07-18 22:14 - 2014-07-18 22:14 - 21991496 _____ (Mozilla) C:\Users\Nils\Downloads\Thunderbird Setup 24.6.0.exe 2014-07-16 13:25 - 2014-07-16 13:25 - 00000000 ____D () C:\ProgramData\Riot Games 2014-07-15 10:47 - 2014-07-15 11:38 - 00000000 ____D () C:\ProgramData\OnlineArmor 2014-07-15 10:47 - 2014-07-15 10:47 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\OnlineArmor 2014-07-15 10:41 - 2014-07-22 21:04 - 00000000 ____D () C:\Program Files (x86)\Online Armor 2014-07-15 10:41 - 2014-07-15 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Armor 2014-07-15 10:41 - 2013-10-11 03:41 - 00062008 _____ () C:\Windows\SysWOW64\Drivers\oahlp64.sys 2014-07-15 10:41 - 2013-10-11 03:40 - 00064720 _____ () C:\Windows\SysWOW64\Drivers\OADriver.sys 2014-07-15 10:41 - 2013-10-11 03:40 - 00052360 _____ (Emsisoft) C:\Windows\SysWOW64\Drivers\OAmon.sys 2014-07-15 10:41 - 2013-10-11 03:40 - 00035368 _____ (Emsisoft) C:\Windows\system32\Drivers\OAnet.sys 2014-07-13 18:02 - 2014-07-13 18:02 - 10696960 _____ (Emsisoft GmbH ) C:\Users\Nils\Downloads\OnlineArmorSetup_10623628.exe 2014-07-13 17:49 - 2014-07-13 17:49 - 00000000 ____D () C:\ProgramData\Emsisoft 2014-07-13 16:54 - 2014-07-13 16:54 - 00001095 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk 2014-07-13 16:54 - 2014-07-13 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware 2014-07-13 16:53 - 2014-07-23 11:48 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware 2014-07-13 16:53 - 2014-07-13 16:53 - 00000000 ____D () C:\Users\Nils\Documents\Anti-Malware 2014-07-13 16:41 - 2014-07-13 16:42 - 236484336 _____ (Emsisoft GmbH ) C:\Users\Nils\Downloads\EmsisoftInternetSecuritySetup.exe 2014-07-13 16:33 - 2014-07-13 16:33 - 00242124 _____ () C:\ProgramData\1405261972.bdinstall.bin 2014-07-11 19:54 - 2014-07-11 19:54 - 00007605 _____ () C:\Users\Nils\AppData\Local\Resmon.ResmonCfg 2014-07-09 10:50 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-09 10:50 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-09 10:50 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 10:50 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 10:50 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-09 10:50 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 10:50 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 10:50 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-09 10:50 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-09 10:50 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-09 10:50 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 10:50 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-09 10:50 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-09 10:50 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-09 10:50 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-09 10:50 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-09 10:50 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 10:50 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-09 10:50 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 10:50 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-09 10:50 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 10:50 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-09 10:50 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 10:50 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 10:50 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 10:50 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-09 10:50 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 10:50 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-09 10:50 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-09 10:50 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-09 10:50 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 10:50 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 10:50 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 10:50 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-09 10:50 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 10:50 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-09 10:50 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-09 10:50 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-09 10:50 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-09 10:50 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 10:50 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-09 10:50 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-09 10:50 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 10:50 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 10:50 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 10:50 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 10:50 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 10:50 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 10:50 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-09 10:50 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 10:50 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 10:50 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 10:50 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-09 10:50 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 10:50 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 10:50 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-09 10:50 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-09 10:50 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-09 10:50 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 10:50 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 10:50 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 10:50 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-09 10:50 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-09 10:50 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-09 10:50 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-09 10:50 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-09 10:50 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-09 01:26 - 2014-07-09 11:26 - 05659136 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-07-03 01:42 - 2014-07-08 21:25 - 00000000 ____D () C:\Users\Nils\AppData\Local\wf-launcher 2014-07-03 01:42 - 2014-07-08 19:35 - 00000000 ____D () C:\ProgramData\GFACE 2014-06-27 00:34 - 2014-06-27 00:34 - 00001382 _____ () C:\Users\Nils\Desktop\putty.exe - Verknüpfung.lnk 2014-06-26 23:53 - 2014-06-27 03:31 - 00000600 _____ () C:\Users\Nils\AppData\Local\PUTTY.RND 2014-06-26 23:52 - 2014-06-26 23:52 - 00495616 _____ (Simon Tatham) C:\Users\Nils\Downloads\putty.exe 2014-06-26 14:19 - 2014-06-26 14:26 - 826192020 _____ () C:\Users\Nils\Downloads\2014-06-20-wheezy-raspbian.zip 2014-06-26 12:13 - 2014-06-26 12:13 - 00002090 _____ () C:\Users\Public\Desktop\SDFormatter.lnk 2014-06-26 12:13 - 2014-06-26 12:13 - 00001067 _____ () C:\Users\Public\Desktop\Win32DiskImager.lnk 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDFormatter 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\Program Files (x86)\SDA 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\Program Files (x86)\ImageWriter 2014-06-26 03:11 - 2014-06-26 14:26 - 00000000 ____D () C:\Users\Nils\Downloads\raspberry 2014-06-26 01:32 - 2014-06-26 01:32 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task 2014-06-26 01:32 - 2014-06-26 01:32 - 00000000 ____D () C:\Users\Default\AppData\Local\Overwolf 2014-06-26 01:32 - 2014-06-26 01:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\Overwolf ==================== One Month Modified Files and Folders ======= 2014-07-23 11:55 - 2014-07-23 11:54 - 00021447 _____ () C:\Users\Nils\Downloads\FRST.txt 2014-07-23 11:54 - 2014-07-23 11:53 - 00000000 ____D () C:\FRST 2014-07-23 11:53 - 2014-07-23 11:52 - 02090496 _____ (Farbar) C:\Users\Nils\Downloads\FRST64.exe 2014-07-23 11:52 - 2009-07-14 06:45 - 00016976 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-23 11:52 - 2009-07-14 06:45 - 00016976 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-23 11:50 - 2012-06-15 12:15 - 02042671 _____ () C:\Windows\WindowsUpdate.log 2014-07-23 11:48 - 2014-07-13 16:53 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware 2014-07-23 11:48 - 2013-07-21 16:20 - 00119131 _____ () C:\Users\Nils\Network_Meter_Data.js 2014-07-23 11:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-23 11:46 - 2009-07-14 06:51 - 00250121 _____ () C:\Windows\setupact.log 2014-07-23 00:25 - 2013-07-21 23:06 - 00000027 _____ () C:\Users\Nils\AppData\Roaming\Network Meter_Usage.ini 2014-07-23 00:13 - 2012-06-15 15:25 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\Skype 2014-07-22 23:26 - 2013-06-06 12:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-22 22:07 - 2012-06-15 16:48 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-07-22 21:04 - 2014-07-15 10:41 - 00000000 ____D () C:\Program Files (x86)\Online Armor 2014-07-22 21:01 - 2011-03-11 11:20 - 00689118 _____ () C:\Windows\system32\perfh007.dat 2014-07-22 21:01 - 2011-03-11 11:20 - 00146450 _____ () C:\Windows\system32\perfc007.dat 2014-07-22 21:01 - 2009-07-14 07:13 - 01629508 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-22 20:57 - 2012-06-15 12:18 - 00117576 _____ () C:\Users\Nils\AppData\Local\GDIPFONTCACHEV1.DAT 2014-07-22 20:56 - 2010-11-21 05:47 - 03305850 _____ () C:\Windows\PFRO.log 2014-07-22 20:56 - 2009-07-14 06:45 - 00446808 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-22 20:54 - 2014-07-22 19:46 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE 2014-07-22 20:51 - 2014-07-22 20:51 - 00003160 _____ () C:\Windows\System32\Tasks\SidebarExecute 2014-07-22 20:23 - 2009-07-14 04:34 - 00000514 _____ () C:\Windows\win.ini 2014-07-22 19:45 - 2014-07-22 19:45 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-NILS-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2014-07-22 19:43 - 2014-07-22 19:43 - 00000000 ____D () C:\RegBackup 2014-07-22 19:19 - 2014-07-22 19:19 - 00003408 _____ () C:\bootsqm.dat 2014-07-22 19:09 - 2014-07-22 19:08 - 00000000 ____D () C:\Users\Nils\Tweaking.com - Windows Repair 2014-07-22 19:08 - 2012-06-15 12:17 - 00000000 ____D () C:\Users\Nils 2014-07-22 18:56 - 2014-07-22 18:56 - 00000000 __SHD () C:\Users\Nils\AppData\Local\EmieUserList 2014-07-22 18:56 - 2014-07-22 18:56 - 00000000 __SHD () C:\Users\Nils\AppData\Local\EmieSiteList 2014-07-22 13:56 - 2012-09-03 13:31 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\TS3Client 2014-07-22 13:56 - 2012-09-03 13:31 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client 2014-07-22 13:55 - 2013-09-10 09:34 - 00000000 ____D () C:\Users\Nils\AppData\Local\Overwolf 2014-07-22 13:27 - 2013-10-07 23:25 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014 2014-07-22 13:08 - 2014-07-22 13:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TuneUp Software 2014-07-22 13:08 - 2014-07-22 13:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\TuneUp Software 2014-07-22 12:56 - 2014-07-22 12:56 - 00117576 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OnlineArmor 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Intel Corporation 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ATI 2014-07-22 12:56 - 2014-07-22 12:56 - 00000000 ____D () C:\Users\Administrator\AppData\Local\ATI 2014-07-22 12:53 - 2014-07-22 12:53 - 00001421 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-22 12:53 - 2014-07-22 12:53 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe 2014-07-22 12:53 - 2014-07-22 12:49 - 00000000 ____D () C:\Users\Administrator 2014-07-22 12:53 - 2013-12-12 19:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-07-22 12:49 - 2014-07-22 12:49 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Startmenü 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten 2014-07-22 12:49 - 2014-07-22 12:49 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten 2014-07-19 12:20 - 2013-12-26 12:33 - 00001649 _____ () C:\Windows\system32\TeamViewer9_Hooks.log 2014-07-19 12:19 - 2014-07-19 12:19 - 00001106 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-07-19 11:22 - 2012-06-16 16:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-18 23:04 - 2014-07-18 23:04 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\Thunderbird 2014-07-18 23:04 - 2014-07-18 23:04 - 00000000 ____D () C:\Users\Nils\AppData\Local\Thunderbird 2014-07-18 22:59 - 2014-07-18 22:59 - 00002090 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-07-18 22:59 - 2014-07-18 22:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-07-18 22:14 - 2014-07-18 22:14 - 21991496 _____ (Mozilla) C:\Users\Nils\Downloads\Thunderbird Setup 24.6.0.exe 2014-07-17 20:09 - 2013-07-16 18:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-07-17 11:40 - 2013-10-07 23:12 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\vlc 2014-07-16 13:25 - 2014-07-16 13:25 - 00000000 ____D () C:\ProgramData\Riot Games 2014-07-16 10:24 - 2013-10-07 23:26 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2014-07-16 10:24 - 2013-10-07 23:26 - 00036152 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2014-07-16 10:24 - 2013-10-07 23:25 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2014-07-16 10:24 - 2013-10-07 23:25 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2014-07-16 10:24 - 2013-10-07 23:25 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2014-07-15 22:13 - 2012-06-26 22:01 - 00000000 ____D () C:\Users\Nils\Documents\My Games 2014-07-15 11:38 - 2014-07-15 10:47 - 00000000 ____D () C:\ProgramData\OnlineArmor 2014-07-15 10:47 - 2014-07-15 10:47 - 00000000 ____D () C:\Users\Nils\AppData\Roaming\OnlineArmor 2014-07-15 10:41 - 2014-07-15 10:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Armor 2014-07-13 18:02 - 2014-07-13 18:02 - 10696960 _____ (Emsisoft GmbH ) C:\Users\Nils\Downloads\OnlineArmorSetup_10623628.exe 2014-07-13 17:49 - 2014-07-13 17:49 - 00000000 ____D () C:\ProgramData\Emsisoft 2014-07-13 16:54 - 2014-07-13 16:54 - 00001095 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk 2014-07-13 16:54 - 2014-07-13 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware 2014-07-13 16:53 - 2014-07-13 16:53 - 00000000 ____D () C:\Users\Nils\Documents\Anti-Malware 2014-07-13 16:42 - 2014-07-13 16:41 - 236484336 _____ (Emsisoft GmbH ) C:\Users\Nils\Downloads\EmsisoftInternetSecuritySetup.exe 2014-07-13 16:33 - 2014-07-13 16:33 - 00242124 _____ () C:\ProgramData\1405261972.bdinstall.bin 2014-07-13 16:33 - 2014-06-17 03:10 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender 2014-07-11 19:54 - 2014-07-11 19:54 - 00007605 _____ () C:\Users\Nils\AppData\Local\Resmon.ResmonCfg 2014-07-09 21:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-07-09 11:26 - 2014-07-09 01:26 - 05659136 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-07-09 11:26 - 2013-06-06 12:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 11:26 - 2012-06-15 14:51 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 11:26 - 2011-11-17 23:19 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-09 11:05 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-09 11:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-09 11:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-09 10:55 - 2012-06-15 13:08 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-09 10:54 - 2013-07-30 00:34 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-09 10:53 - 2011-03-14 16:08 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-08 21:25 - 2014-07-03 01:42 - 00000000 ____D () C:\Users\Nils\AppData\Local\wf-launcher 2014-07-08 19:35 - 2014-07-03 01:42 - 00000000 ____D () C:\ProgramData\GFACE 2014-07-07 11:46 - 2012-06-15 17:26 - 00000000 ____D () C:\Program Files\DivX 2014-07-07 11:46 - 2012-06-15 17:26 - 00000000 ____D () C:\Program Files (x86)\DivX 2014-07-07 11:46 - 2012-06-15 17:24 - 00000000 ____D () C:\ProgramData\DivX 2014-06-30 02:14 - 2014-01-09 17:31 - 00000000 ____D () C:\Users\Nils\AppData\Local\Downloaded Installations 2014-06-30 00:04 - 2014-01-02 20:32 - 00000000 ____D () C:\Users\Nils\Uralte Datein 2014-06-27 03:31 - 2014-06-26 23:53 - 00000600 _____ () C:\Users\Nils\AppData\Local\PUTTY.RND 2014-06-27 02:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-06-27 00:34 - 2014-06-27 00:34 - 00001382 _____ () C:\Users\Nils\Desktop\putty.exe - Verknüpfung.lnk 2014-06-26 23:52 - 2014-06-26 23:52 - 00495616 _____ (Simon Tatham) C:\Users\Nils\Downloads\putty.exe 2014-06-26 14:26 - 2014-06-26 14:19 - 826192020 _____ () C:\Users\Nils\Downloads\2014-06-20-wheezy-raspbian.zip 2014-06-26 14:26 - 2014-06-26 03:11 - 00000000 ____D () C:\Users\Nils\Downloads\raspberry 2014-06-26 13:53 - 2014-06-03 19:33 - 00007168 ___SH () C:\Users\Nils\Thumbs.db 2014-06-26 13:32 - 2013-09-10 09:35 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-06-26 12:13 - 2014-06-26 12:13 - 00002090 _____ () C:\Users\Public\Desktop\SDFormatter.lnk 2014-06-26 12:13 - 2014-06-26 12:13 - 00001067 _____ () C:\Users\Public\Desktop\Win32DiskImager.lnk 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDFormatter 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\Program Files (x86)\SDA 2014-06-26 12:13 - 2014-06-26 12:13 - 00000000 ____D () C:\Program Files (x86)\ImageWriter 2014-06-26 01:32 - 2014-07-22 12:49 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Overwolf 2014-06-26 01:32 - 2014-06-26 01:32 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task 2014-06-26 01:32 - 2014-06-26 01:32 - 00000000 ____D () C:\Users\Default\AppData\Local\Overwolf 2014-06-26 01:32 - 2014-06-26 01:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\Overwolf 2014-06-26 01:32 - 2013-10-30 00:32 - 00000000 ____D () C:\ProgramData\Overwolf Files to move or delete: ==================== C:\Users\Nils\Network_Meter_Data.js ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 22:32 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-07-2014 Ran by Nils at 2014-07-23 11:56:16 Running from C:\Users\Nils\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367} FW: Online Armor Firewall (Enabled) {BD3F5FCA-866B-1E2E-0A68-58900A751EA1} ==================== Installed Programs ====================== Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.) AMD APP SDK Runtime (Version: 2.5.793.1 - Advanced Micro Devices Inc.) Hidden AMD AVIVO64 Codecs (Version: 11.7.0.11013 - Advanced Micro Devices, Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{6A25E342-A5DE-9A33-5118-5E22D8A8C774}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.61013.1636 - Advanced Micro Devices, Inc.) Hidden Ashampoo Burning Studio 2012 v.10.0.15 (HKLM-x32\...\Ashampoo Burning Studio 2012_is1) (Version: 10.0.15 - Ashampoo GmbH & Co. KG) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Audials (HKLM-x32\...\{9116E9E6-E1F9-4835-95B8-31E7F158E9F7}) (Version: 10.0.50301.100 - Audials AG) BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games) Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - ) Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version: - ) Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - Canon Inc.) Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - ) Catalyst Control Center (x32 Version: 2011.1013.1702.28713 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2011.1013.1702.28713 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2011.1013.1702.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2011.1013.1701.28713 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2011.1013.1702.28713 - Advanced Micro Devices, Inc.) Hidden Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version: - CyberGhost S.R.L.) CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1312.54 - CyberLink Corp.) CyberLink PowerDVD 12 (x32 Version: 12.0.1312.54 - CyberLink Corp.) Hidden CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.) CyberLink PowerRecover (x32 Version: 5.5.4125 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0328 - DT Soft Ltd) Day of Defeat: Source (HKLM-x32\...\Steam App 300) (Version: - Valve) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC) Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.) Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version: - ) Emsisoft Anti-Malware (HKLM-x32\...\{BC30E5E7-047D-4232-A7E8-F2CB7CC7B2E0}_is1) (Version: 9.0 - Emsisoft GmbH) ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Update Helper (x32 Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation) Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 2.3.188.0 - Microsoft Corporation) Hidden MotoHelper MergeModules (x32 Version: 1.2.0 - Motorola) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.6.0 - Mozilla) Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - ) NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles) NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation) Online Armor 7.0 (HKLM-x32\...\OnlineArmor_is1) (Version: 7.0 - Emsisoft GmbH) OpenVPN 2.3.4-I002 (HKLM\...\OpenVPN) (Version: 2.3.4-I002 - ) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) Path of Exile (HKLM-x32\...\Steam App 238960) (Version: - Grinding Gear Games) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.308.1 - Tracker Software Products Ltd) PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.25.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.25.0 - Renesas Electronics Corporation) Hidden SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association) Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) SUPER © v2014.build.60+Recorder (2014/02/18) Version v2014.buil (HKLM-x32\...\{8E2A18E2-96AF-8549-4DE7-5C06B75719A4}_is1) (Version: v2014.build.60+Recorder - eRightSoft) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.340 - TuneUp Software) TuneUp Utilities 2014 (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN) Warface (HKLM-x32\...\Steam App 291480) (Version: - Crytek GmbH) Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{F6EBBA16-FD92-4B34-9703-2B326FF7F364}) (Version: 21.01.8499 - Buhl Data Service GmbH) xp-AntiSpy 3.98-2 (HKLM-x32\...\xp-AntiSpy) (Version: - Christian Taubenheim) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 18-07-2014 09:14:51 Windows Update 20-07-2014 17:00:31 Windows-Sicherung 22-07-2014 10:16:19 Windows Update 22-07-2014 17:45:39 Tweaking.com - Windows Repair ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-07-22 20:25 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {09BF38C9-B255-49AE-947D-DE59929E822C} - System32\Tasks\{D00C8BBD-19FF-46D4-A82C-008E60B7377D} => C:\Users\Nils\Downloads\LeagueofLegends_EUW_Installer_06_12_13(1).exe Task: {17FB9653-33CF-47BB-B91F-FB8B3675C4B6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {1E707367-C8D6-4526-B88F-70BE58E2596C} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {3F67F263-0640-4C30-82C8-7F77EA99F2DD} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe Task: {4B33C136-5566-4D3D-BE14-692242C7CABC} - System32\Tasks\{2DD88588-C1C3-49BE-A5CD-7606CE1DFAE4} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {4B3FC5C6-2BE1-4611-89B2-CD9EC6E26096} - System32\Tasks\{EFEE90A8-E1A4-4EB5-84D3-51AAAA27A5C7} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {5097A33A-BAFC-4A0C-830B-EE3635307363} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {6665D69B-4CA4-4396-A198-30B87ED3FD75} - System32\Tasks\{59005705-FE92-4EC3-AFCE-35B55AD3A113} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603 Task: {70D83F4A-CC88-42BF-8B44-7E22E3D840F6} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {7D762521-8CC8-4F89-B531-BA88D1918F96} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {E1C3524D-B7F0-45CC-B21C-AF38E4AD3FA4} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {E81940D7-E92F-447F-B254-D27DDBF6F930} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation) Task: {F424D82B-A7F5-494E-958A-BA725FB95F3D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {FC35673F-C750-4843-8C5E-887EEE536E52} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-07-16] (TuneUp Software) Task: {FD55260E-7F5D-45DC-B36A-04D9FE94B299} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2013-07-16 18:41 - 2011-02-07 09:56 - 00138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2014-07-16 10:24 - 2014-07-16 10:24 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll 2011-10-14 03:01 - 2011-10-14 03:01 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2014-07-13 16:53 - 2014-06-18 15:50 - 00703800 _____ () C:\Program Files (x86)\Emsisoft Anti-Malware\fw32.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-05-10 16:29 - 2014-06-06 06:38 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-02-12 19:50 - 2014-02-12 19:50 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\367540c92c2004ff2c6695778fed5dd6\IsdiInterop.ni.dll 2011-11-17 19:56 - 2011-05-20 20:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Nils\Downloads\putty.exe:BDU ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/22/2014 08:57:28 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (07/22/2014 08:57:28 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDSBS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDSBS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDSBS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDSBS.MFL System errors: ============= Error: (07/23/2014 11:48:40 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/23/2014 11:47:27 AM) (Source: WMPNetworkSvc) (EventID: 14319) (User: ) Description: Dienst "WMPNetworkSvc" konnte nicht gestartet werden, da eine Gruppenrichtlinie Windows Media Player davon abhält, Mediendateien mit anderen Geräten gemeinsam zu nutzen. Error: (07/23/2014 00:18:01 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/23/2014 00:08:01 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/22/2014 11:58:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/22/2014 11:48:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/22/2014 11:38:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/22/2014 11:28:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/22/2014 11:18:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (07/22/2014 11:08:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (07/22/2014 08:57:28 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (07/22/2014 08:57:28 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDSBS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDSBS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDSBS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDS.MFL Error: (07/22/2014 08:18:15 PM) (Source: WinMgmt) (EventID: 4) (User: ) Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDSBS.MFL CodeIntegrity Errors: =================================== Date: 2014-03-24 23:51:56.489 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:51:56.333 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:51:56.177 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:33:00.979 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:33:00.807 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:33:00.620 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:33:00.386 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:33:00.214 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:33:00.043 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-24 23:19:28.623 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume5\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6002.18005_none_f0780c78ec8773db_bcrypt.dll_e2f091ac" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 34% Total physical RAM: 6135.11 MB Available physical RAM: 3990.29 MB Total Pagefile: 12268.41 MB Available Pagefile: 9331.84 MB Total Virtual: 8192 MB Available Virtual: 8191.79 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:880.41 GB) (Free:479.45 GB) NTFS Drive d: (Recover) (Fixed) (Total:50 GB) (Free:0.01 GB) NTFS Drive x: (Alte Festplatte) (Fixed) (Total:465.76 GB) (Free:465.62 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=880 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) ======================================================== Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 2BAB359D) Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS) ==================== End Of Log ============================
__________________ MfG BeRealm |
23.07.2014, 11:23 | #12 |
/// TB-Ausbilder | Systemadministrator einrichten [gelöst] OK, der zeigt nix an bezüglich Windows Update. Du kannst es mit Windows Repair AIO versuchen und bei Repair Options halt nur Windows Update setzen. http://www.trojaner-board.de/126216-...epair-aio.html |
23.07.2014, 11:48 | #13 |
| Systemadministrator einrichten [gelöst] Das habe ich gestern komplett durchlaufen lassen wie burningice mir das beschrieben hatte und ich habe immernoch das selbe problem. Den Log von Windows Repiar AIO hatte ich gestern dazu gepostet. Nebenbei: die Registry funktionen und diese Live Optimierungsgeschichte von TU habe komplett deaktiviert seit einem Jahr. Hauptsächlich nutze ich es zwecks Übersichtlichkeit und der Einfachheit (bsp.: beim finden größerer Datenmengen zum Frühjahrsputz, autostart konfigurieren oder auch zum sicheren löschen noch DOD 5220.22 / Gutmann). Ich will jetzt aber nicht abschweifen Hab auch schon gelesen das es sehr sehr Gefährlich sein kann, weshalb ich es nur höchstens einmal im Quartal nutze.
__________________ MfG BeRealm |
23.07.2014, 12:25 | #14 |
| Systemadministrator einrichten [gelöst] Ich werde wohl nie verstehen, warum jemand Registry Cleaner verwendet. Allein die installierten Dateien verlangsamen den PC. Mach mal bitte den Scan, dann können wir mal schauen ob der was anzeigt. Downloade dir bitte Farbar Service Scanner
Poste bitte den Inhalt hier. |
23.07.2014, 12:34 | #15 |
/// TB-Ausbilder | Systemadministrator einrichten [gelöst] Downloade dir bitte Farbar's Service Scanner
|
Themen zu Systemadministrator einrichten |
anderen, anleitung, automatisch, benutzerkonten, betriebsystem, einrichten, einstellungen, euren, frage, gen, home, installieren, kommandozeile, konto, problem, ratlos, registry, seite, seiten, spiel, updates, verändern, windows, windows updates, zeichen |