BitDefender meldet mir ständig infizierte Webressource

Ladybird312 · 20.09.2014, 13:26

Hallo zusammen, seit gestern meldet mir mein BitDefender unter Windows 8 und Chrome infizierte Webressource.

Auch beim anmachen habe ich kurz auf dem Startbildschirm einen schwarzen DOS Kasten.

Ich weiß ich soll ein Log einstellen, habe aber keinen Plan wie ich das mache.

Hoffe ihr könnt mir helfen. LG Nicole

M-K-D-B · 20.09.2014, 13:30

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!

FRST Logfile erstellen:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Ladybird312 · 20.09.2014, 15:22

Hallo Matthias, danke.
Wie erstelle oder wo finde ich denn die Logfile?

M-K-D-B · 20.09.2014, 15:59

Servus,

steht alles in der Anleitung (in meinem letzten Post)

Ladybird312 · 20.09.2014, 16:42

Jaaa wer lesen kann ....

sorry

Also ich hab jetzt die Logfiles um sie einzufügen sind sie zu groß und als Anhang auch sagt er mir hier.

M-K-D-B · 21.09.2014, 11:02

Zitat:

Zitat von Ladybird312

Also ich hab jetzt die Logfiles um sie einzufügen sind sie zu groß und als Anhang auch sagt er mir hier.

die Dateien als Archip zippen und dann hier einfügen... Rechtsklick auf die Datei > Senden an > Zip komprimierter Ordner...

Ladybird312 · 21.09.2014, 11:46

Hoffe es hat geklappt

M-K-D-B · 21.09.2014, 11:48

Servus,

ja, hat geklappt.

Fehlt noch die 2. Logdatei: Addition.txt

Ladybird312 · 21.09.2014, 12:18

Ich weiß, ich finde sie nicht mehr.

Ladybird312 · 21.09.2014, 12:21

Ah doch

M-K-D-B · 21.09.2014, 12:29

Servus,

gut gemacht.

So geht es jetzt los:

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

Ladybird312 · 21.09.2014, 13:45

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 21/09/2014 um 13:44:54
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : N - OUR-LAPPI
# Gestartet von : C:\Users\N\Desktop\AdwCleaner_3.310 (1).exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk
Ordner Gefunden : C:\Users\N\AppData\Local\PennyBee
Ordner Gefunden : C:\Users\N\AppData\Local\Pokki
Ordner Gefunden : C:\Users\N\AppData\Local\SearchProtect
Ordner Gefunden : C:\Users\Public\Pokki

***** [ Tasks ] *****

Task Gefunden : LaunchSignup
Task Gefunden : RocketTab Update Task
Task Gefunden : RocketTab

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\Classes\pokki
Schlüssel Gefunden : HKCU\Software\InstallCore
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Schlüssel Gefunden : HKCU\Software\PennyBee
Schlüssel Gefunden : HKCU\Software\Pokki
Schlüssel Gefunden : HKCU\Software\RocketTabInstalled
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\InstallCore
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gefunden : [x64] HKCU\Software\PennyBee
Schlüssel Gefunden : [x64] HKCU\Software\Pokki
Schlüssel Gefunden : [x64] HKCU\Software\RocketTabInstalled
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RocketTab
Schlüssel Gefunden : HKLM\SOFTWARE\RocketTab
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17278


-\\ Google Chrome v37.0.2062.120

[ Datei : C:\Users\N\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2340 octets] - [21/09/2014 13:44:54]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2400 octets] ##########

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 21/09/2014 um 13:49:03
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : N - OUR-LAPPI
# Gestartet von : C:\Users\N\Desktop\AdwCleaner_3.310 (1).exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\N\AppData\Local\PennyBee
Ordner Gelöscht : C:\Users\N\AppData\Local\Pokki
Ordner Gelöscht : C:\Users\N\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Public\Pokki
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk

***** [ Tasks ] *****

Task Gelöscht : LaunchSignup
Task Gelöscht : RocketTab Update Task
Task Gelöscht : RocketTab

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\PennyBee
Schlüssel Gelöscht : HKCU\Software\Pokki
Schlüssel Gelöscht : HKCU\Software\RocketTabInstalled
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\RocketTab
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RocketTab

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17278


-\\ Google Chrome v37.0.2062.120

[ Datei : C:\Users\N\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2508 octets] - [21/09/2014 13:44:54]
AdwCleaner[S0].txt - [2038 octets] - [21/09/2014 13:49:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2098 octets] ##########

Ich bekomme immer eine Proxy Fehlermeldung beim öffnen des Browsers. Muß ich das ausstellen?

Code:

ATTFilter

2014-01-08 09:39:27.856 PROFILE  [Midas stop] [0ms]
2014-01-08 09:39:27.856 PROFILE  [Stop Drivers] [0ms]
2014-01-08 09:39:27.856 PROFILE  [Registration data] [0ms]
2014-01-08 09:39:27.856 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-08 09:39:27.856 PROFILE  [Parental uninit] [0ms]
2014-01-08 09:39:27.856 PROFILE  [WSACleanup] [0ms]
2014-01-08 09:39:28.075 PROFILE  [Free SF] [209ms]
2014-01-08 09:39:28.075 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-08 09:39:28.075 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-08 09:39:28.075 PROFILE  [OBK unload] [0ms]
2014-01-08 09:39:28.075 PROFILE  [LogUnInit] [0ms]
2014-01-08 09:39:30.997 PROFILE  [CM Stop & eventq uninit] [2s:932ms]
2014-01-08 09:39:30.997 PROFILE  [npcomm uninit] [0ms]
2014-01-08 09:39:30.997 PROFILE  [STOP Received - time] [3s:146ms]
2014-01-09 14:08:50.818 PROFILE  [Midas stop] [12ms]
2014-01-09 14:08:50.864 PROFILE  [Stop Drivers] [47ms]
2014-01-09 14:08:50.864 PROFILE  [Registration data] [0ms]
2014-01-09 14:08:50.864 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-09 14:08:50.864 PROFILE  [Parental uninit] [0ms]
2014-01-09 14:08:50.864 PROFILE  [WSACleanup] [0ms]
2014-01-09 14:08:51.451 PROFILE  [Free SF] [595ms]
2014-01-09 14:08:51.467 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-09 14:08:51.467 PROFILE  [AntiPh & AS unload] [5ms]
2014-01-09 14:08:51.467 PROFILE  [OBK unload] [0ms]
2014-01-09 14:08:51.621 PROFILE  [LogUnInit] [0ms]
2014-01-09 14:08:59.004 PROFILE  [CM Stop & eventq uninit] [7s:380ms]
2014-01-09 14:08:59.004 PROFILE  [npcomm uninit] [0ms]
2014-01-09 14:08:59.004 PROFILE  [STOP Received - time] [8s:211ms]
2014-01-09 17:17:18.229 PROFILE  [Midas stop] [0ms]
2014-01-09 17:17:18.229 PROFILE  [Stop Drivers] [0ms]
2014-01-09 17:17:18.229 PROFILE  [Registration data] [0ms]
2014-01-09 17:17:18.229 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-09 17:17:18.229 PROFILE  [Parental uninit] [0ms]
2014-01-09 17:17:18.229 PROFILE  [WSACleanup] [0ms]
2014-01-09 17:17:18.354 PROFILE  [Free SF] [126ms]
2014-01-09 17:17:18.354 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-09 17:17:18.354 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-09 17:17:18.354 PROFILE  [OBK unload] [0ms]
2014-01-09 17:17:18.370 PROFILE  [LogUnInit] [0ms]
2014-01-09 17:17:21.245 PROFILE  [CM Stop & eventq uninit] [2s:883ms]
2014-01-09 17:17:21.245 PROFILE  [npcomm uninit] [0ms]
2014-01-09 17:17:21.245 PROFILE  [STOP Received - time] [3s:20ms]
2014-01-09 22:57:56.717 PROFILE  [Midas stop] [0ms]
2014-01-09 22:57:56.873 PROFILE  [Stop Drivers] [157ms]
2014-01-09 22:57:56.873 PROFILE  [Registration data] [0ms]
2014-01-09 22:57:56.873 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-09 22:57:56.889 PROFILE  [Parental uninit] [0ms]
2014-01-09 22:57:56.889 PROFILE  [WSACleanup] [0ms]
2014-01-09 22:57:57.498 PROFILE  [Free SF] [610ms]
2014-01-09 22:57:57.529 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-09 22:57:57.529 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-09 22:57:57.529 PROFILE  [OBK unload] [8ms]
2014-01-09 22:57:57.576 PROFILE  [LogUnInit] [0ms]
2014-01-09 22:58:03.158 PROFILE  [CM Stop & eventq uninit] [5s:581ms]
2014-01-09 22:58:03.158 PROFILE  [npcomm uninit] [0ms]
2014-01-09 22:58:03.158 PROFILE  [STOP Received - time] [6s:453ms]
2014-01-11 11:40:38.500 PROFILE  [Midas stop] [0ms]
2014-01-11 11:40:38.531 PROFILE  [Stop Drivers] [29ms]
2014-01-11 11:40:38.531 PROFILE  [Registration data] [0ms]
2014-01-11 11:40:38.531 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-11 11:40:38.531 PROFILE  [Parental uninit] [0ms]
2014-01-11 11:40:38.531 PROFILE  [WSACleanup] [0ms]
2014-01-11 11:40:38.765 PROFILE  [Free SF] [227ms]
2014-01-11 11:40:38.765 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-11 11:40:38.765 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-11 11:40:38.765 PROFILE  [OBK unload] [0ms]
2014-01-11 11:40:38.781 PROFILE  [LogUnInit] [0ms]
2014-01-11 11:40:41.422 PROFILE  [CM Stop & eventq uninit] [2s:641ms]
2014-01-11 11:40:41.422 PROFILE  [npcomm uninit] [0ms]
2014-01-11 11:40:41.422 PROFILE  [STOP Received - time] [2s:929ms]
2014-01-17 09:01:32.950 PROFILE  [Midas stop] [10ms]
2014-01-17 09:01:33.884 PROFILE  [Stop Drivers] [916ms]
2014-01-17 09:01:33.884 PROFILE  [Registration data] [0ms]
2014-01-17 09:01:33.884 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-17 09:01:33.918 PROFILE  [Parental uninit] [16ms]
2014-01-17 09:01:33.918 PROFILE  [WSACleanup] [0ms]
2014-01-17 09:01:34.872 PROFILE  [Free SF] [955ms]
2014-01-17 09:01:34.888 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-17 09:01:34.888 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-17 09:01:34.888 PROFILE  [OBK unload] [0ms]
2014-01-17 09:01:34.973 PROFILE  [LogUnInit] [0ms]
2014-01-17 09:01:42.805 PROFILE  [CM Stop & eventq uninit] [7s:840ms]
2014-01-17 09:01:42.805 PROFILE  [npcomm uninit] [0ms]
2014-01-17 09:01:42.805 PROFILE  [STOP Received - time] [9s:941ms]
2014-01-25 13:36:50.507 PROFILE  [Midas stop] [10ms]
2014-01-25 13:36:50.616 PROFILE  [Stop Drivers] [109ms]
2014-01-25 13:36:50.616 PROFILE  [Registration data] [0ms]
2014-01-25 13:36:50.616 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-25 13:36:50.616 PROFILE  [Parental uninit] [0ms]
2014-01-25 13:36:50.616 PROFILE  [WSACleanup] [0ms]
2014-01-25 13:36:51.053 PROFILE  [Free SF] [445ms]
2014-01-25 13:36:51.085 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-25 13:36:51.085 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-25 13:36:51.085 PROFILE  [OBK unload] [0ms]
2014-01-25 13:36:51.194 PROFILE  [LogUnInit] [0ms]
2014-01-25 13:37:02.570 PROFILE  [CM Stop & eventq uninit] [11s:381ms]
2014-01-25 13:37:02.570 PROFILE  [npcomm uninit] [0ms]
2014-01-25 13:37:02.570 PROFILE  [STOP Received - time] [12s:112ms]
2014-01-29 00:04:40.516 PROFILE  [Midas stop] [8ms]
2014-01-29 00:04:40.563 PROFILE  [Stop Drivers] [52ms]
2014-01-29 00:04:40.563 PROFILE  [Registration data] [0ms]
2014-01-29 00:04:40.563 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-29 00:04:40.563 PROFILE  [Parental uninit] [0ms]
2014-01-29 00:04:40.563 PROFILE  [WSACleanup] [0ms]
2014-01-29 00:04:40.997 PROFILE  [Free SF] [429ms]
2014-01-29 00:04:40.997 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-29 00:04:40.997 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-29 00:04:40.997 PROFILE  [OBK unload] [0ms]
2014-01-29 00:04:41.013 PROFILE  [LogUnInit] [0ms]
2014-01-29 00:04:44.694 PROFILE  [CM Stop & eventq uninit] [3s:683ms]
2014-01-29 00:04:44.694 PROFILE  [npcomm uninit] [0ms]
2014-01-29 00:04:44.694 PROFILE  [STOP Received - time] [4s:212ms]
2014-01-29 16:48:25.412 PROFILE  [Midas stop] [0ms]
2014-01-29 16:48:25.497 PROFILE  [Stop Drivers] [90ms]
2014-01-29 16:48:25.497 PROFILE  [Registration data] [0ms]
2014-01-29 16:48:25.497 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-01-29 16:48:25.512 PROFILE  [Parental uninit] [0ms]
2014-01-29 16:48:25.512 PROFILE  [WSACleanup] [0ms]
2014-01-29 16:48:26.052 PROFILE  [Free SF] [536ms]
2014-01-29 16:48:26.052 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-01-29 16:48:26.052 PROFILE  [AntiPh & AS unload] [0ms]
2014-01-29 16:48:26.052 PROFILE  [OBK unload] [0ms]
2014-01-29 16:48:26.083 PROFILE  [LogUnInit] [0ms]
2014-01-29 16:48:30.769 PROFILE  [CM Stop & eventq uninit] [4s:681ms]
2014-01-29 16:48:30.769 PROFILE  [npcomm uninit] [0ms]
2014-01-29 16:48:30.769 PROFILE  [STOP Received - time] [5s:364ms]
2014-02-12 14:08:36.805 PROFILE  [Midas stop] [5ms]
2014-02-12 14:08:36.926 PROFILE  [Stop Drivers] [107ms]
2014-02-12 14:08:36.926 PROFILE  [Registration data] [0ms]
2014-02-12 14:08:36.926 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-02-12 14:08:36.943 PROFILE  [Parental uninit] [0ms]
2014-02-12 14:08:36.943 PROFILE  [WSACleanup] [0ms]
2014-02-12 14:08:37.646 PROFILE  [Free SF] [713ms]
2014-02-12 14:08:37.730 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-02-12 14:08:37.730 PROFILE  [AntiPh & AS unload] [0ms]
2014-02-12 14:08:37.730 PROFILE  [OBK unload] [0ms]
2014-02-12 14:08:38.094 PROFILE  [LogUnInit] [0ms]
2014-02-12 14:08:49.116 PROFILE  [CM Stop & eventq uninit] [11s:32ms]
2014-02-12 14:08:49.116 PROFILE  [npcomm uninit] [0ms]
2014-02-12 14:08:49.116 PROFILE  [STOP Received - time] [12s:346ms]
2014-02-13 12:20:32.749 PROFILE  [Midas stop] [0ms]
2014-02-13 12:20:32.981 PROFILE  [Stop Drivers] [230ms]
2014-02-13 12:20:32.981 PROFILE  [Registration data] [0ms]
2014-02-13 12:20:32.981 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-02-13 12:20:33.031 PROFILE  [Parental uninit] [0ms]
2014-02-13 12:20:33.031 PROFILE  [WSACleanup] [0ms]
2014-02-13 12:20:33.869 PROFILE  [Free SF] [838ms]
2014-02-13 12:20:33.869 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-02-13 12:20:33.869 PROFILE  [AntiPh & AS unload] [0ms]
2014-02-13 12:20:33.869 PROFILE  [OBK unload] [0ms]
2014-02-13 12:20:33.869 PROFILE  [LogUnInit] [0ms]
2014-02-13 12:20:37.982 PROFILE  [CM Stop & eventq uninit] [4s:115ms]
2014-02-13 12:20:37.982 PROFILE  [npcomm uninit] [0ms]
2014-02-13 12:20:37.982 PROFILE  [STOP Received - time] [5s:272ms]
2014-02-15 09:58:08.869 PROFILE  [Midas stop] [0ms]
2014-02-15 09:58:09.010 PROFILE  [Stop Drivers] [136ms]
2014-02-15 09:58:09.010 PROFILE  [Registration data] [0ms]
2014-02-15 09:58:09.010 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-02-15 09:58:09.010 PROFILE  [Parental uninit] [0ms]
2014-02-15 09:58:09.010 PROFILE  [WSACleanup] [0ms]
2014-02-15 09:58:09.463 PROFILE  [Free SF] [453ms]
2014-02-15 09:58:09.463 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-02-15 09:58:09.463 PROFILE  [AntiPh & AS unload] [0ms]
2014-02-15 09:58:09.463 PROFILE  [OBK unload] [0ms]
2014-02-15 09:58:09.494 PROFILE  [LogUnInit] [0ms]
2014-02-15 09:58:13.796 PROFILE  [CM Stop & eventq uninit] [4s:295ms]
2014-02-15 09:58:13.796 PROFILE  [npcomm uninit] [0ms]
2014-02-15 09:58:13.796 PROFILE  [STOP Received - time] [4s:962ms]
2014-02-20 09:58:29.441 PROFILE  [Midas stop] [24ms]
2014-02-20 09:58:29.721 PROFILE  [Stop Drivers] [275ms]
2014-02-20 09:58:29.721 PROFILE  [Registration data] [0ms]
2014-02-20 09:58:29.721 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-02-20 09:58:29.721 PROFILE  [Parental uninit] [0ms]
2014-02-20 09:58:29.721 PROFILE  [WSACleanup] [0ms]
2014-02-20 09:58:30.864 PROFILE  [Free SF] [1s:147ms]
2014-02-20 09:58:30.864 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-02-20 09:58:30.864 PROFILE  [AntiPh & AS unload] [0ms]
2014-02-20 09:58:30.864 PROFILE  [OBK unload] [0ms]
2014-02-20 09:58:30.911 PROFILE  [LogUnInit] [0ms]
2014-02-20 09:58:37.289 PROFILE  [CM Stop & eventq uninit] [6s:368ms]
2014-02-20 09:58:37.289 PROFILE  [npcomm uninit] [0ms]
2014-02-20 09:58:37.289 PROFILE  [STOP Received - time] [7s:996ms]
2014-02-25 14:20:10.584 PROFILE  [Midas stop] [15ms]
2014-02-25 14:20:10.615 PROFILE  [Stop Drivers] [5ms]
2014-02-25 14:20:10.615 PROFILE  [Registration data] [0ms]
2014-02-25 14:20:10.615 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-02-25 14:20:10.615 PROFILE  [Parental uninit] [0ms]
2014-02-25 14:20:10.615 PROFILE  [WSACleanup] [0ms]
2014-02-25 14:20:10.927 PROFILE  [Free SF] [321ms]
2014-02-25 14:20:10.927 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-02-25 14:20:10.927 PROFILE  [AntiPh & AS unload] [0ms]
2014-02-25 14:20:10.927 PROFILE  [OBK unload] [0ms]
2014-02-25 14:20:10.990 PROFILE  [LogUnInit] [0ms]
2014-02-25 14:20:15.271 PROFILE  [CM Stop & eventq uninit] [4s:283ms]
2014-02-25 14:20:15.271 PROFILE  [npcomm uninit] [0ms]
2014-02-25 14:20:15.271 PROFILE  [STOP Received - time] [4s:741ms]
2014-03-14 23:11:14.338 PROFILE  [Midas stop] [8ms]
2014-03-14 23:11:14.776 PROFILE  [Stop Drivers] [427ms]
2014-03-14 23:11:14.776 PROFILE  [Registration data] [0ms]
2014-03-14 23:11:14.776 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-03-14 23:11:14.776 PROFILE  [Parental uninit] [0ms]
2014-03-14 23:11:14.776 PROFILE  [WSACleanup] [0ms]
2014-03-14 23:11:15.932 PROFILE  [Free SF] [1s:163ms]
2014-03-14 23:11:15.932 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-03-14 23:11:15.932 PROFILE  [AntiPh & AS unload] [0ms]
2014-03-14 23:11:15.932 PROFILE  [OBK unload] [0ms]
2014-03-14 23:11:16.244 PROFILE  [LogUnInit] [0ms]
2014-03-14 23:11:30.577 PROFILE  [CM Stop & eventq uninit] [14s:336ms]
2014-03-14 23:11:30.577 PROFILE  [npcomm uninit] [0ms]
2014-03-14 23:11:30.577 PROFILE  [STOP Received - time] [16s:335ms]
2014-03-19 14:03:37.872 PROFILE  [Midas stop] [19ms]
2014-03-19 14:03:38.204 PROFILE  [Stop Drivers] [343ms]
2014-03-19 14:03:38.204 PROFILE  [Registration data] [0ms]
2014-03-19 14:03:38.204 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-03-19 14:03:38.243 PROFILE  [Parental uninit] [0ms]
2014-03-19 14:03:38.243 PROFILE  [WSACleanup] [0ms]
2014-03-19 14:03:39.465 PROFILE  [Free SF] [1s:211ms]
2014-03-19 14:03:39.528 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-03-19 14:03:39.528 PROFILE  [AntiPh & AS unload] [0ms]
2014-03-19 14:03:39.549 PROFILE  [OBK unload] [30ms]
2014-03-19 14:03:40.342 PROFILE  [LogUnInit] [0ms]
2014-03-19 14:03:53.980 PROFILE  [CM Stop & eventq uninit] [13s:636ms]
2014-03-19 14:03:53.980 PROFILE  [npcomm uninit] [0ms]
2014-03-19 14:03:53.996 PROFILE  [STOP Received - time] [16s:211ms]
2014-04-10 11:17:39.845 PROFILE  [Midas stop] [0ms]
2014-04-10 11:17:39.877 PROFILE  [Stop Drivers] [31ms]
2014-04-10 11:17:39.877 PROFILE  [Registration data] [0ms]
2014-04-10 11:17:39.877 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-04-10 11:17:39.877 PROFILE  [Parental uninit] [0ms]
2014-04-10 11:17:39.877 PROFILE  [WSACleanup] [0ms]
2014-04-10 11:17:40.420 PROFILE  [Free SF] [532ms]
2014-04-10 11:17:40.420 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-04-10 11:17:40.420 PROFILE  [AntiPh & AS unload] [0ms]
2014-04-10 11:17:40.421 PROFILE  [OBK unload] [0ms]
2014-04-10 11:17:40.541 PROFILE  [LogUnInit] [0ms]
2014-04-10 11:17:44.087 PROFILE  [CM Stop & eventq uninit] [3s:536ms]
2014-04-10 11:17:44.087 PROFILE  [npcomm uninit] [0ms]
2014-04-10 11:17:44.087 PROFILE  [STOP Received - time] [4s:266ms]
2014-04-16 23:09:44.906 PROFILE  [Midas stop] [14ms]
2014-04-16 23:09:45.141 PROFILE  [Stop Drivers] [224ms]
2014-04-16 23:09:45.141 PROFILE  [Registration data] [0ms]
2014-04-16 23:09:45.141 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-04-16 23:09:45.141 PROFILE  [Parental uninit] [0ms]
2014-04-16 23:09:45.141 PROFILE  [WSACleanup] [0ms]
2014-04-16 23:09:46.537 PROFILE  [Free SF] [1s:393ms]
2014-04-16 23:09:46.554 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-04-16 23:09:46.554 PROFILE  [AntiPh & AS unload] [0ms]
2014-04-16 23:09:46.554 PROFILE  [OBK unload] [0ms]
2014-04-16 23:09:46.686 PROFILE  [LogUnInit] [0ms]
2014-04-16 23:09:56.445 PROFILE  [CM Stop & eventq uninit] [9s:768ms]
2014-04-16 23:09:56.445 PROFILE  [npcomm uninit] [0ms]
2014-04-16 23:09:56.445 PROFILE  [STOP Received - time] [11s:694ms]
2014-05-03 18:35:59.993 PROFILE  [Midas stop] [34ms]
2014-05-03 18:36:00.180 PROFILE  [Stop Drivers] [190ms]
2014-05-03 18:36:00.180 PROFILE  [Registration data] [0ms]
2014-05-03 18:36:00.180 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-05-03 18:36:00.196 PROFILE  [Parental uninit] [0ms]
2014-05-03 18:36:00.196 PROFILE  [WSACleanup] [0ms]
2014-05-03 18:36:01.774 PROFILE  [Free SF] [1s:569ms]
2014-05-03 18:36:01.790 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-05-03 18:36:01.790 PROFILE  [AntiPh & AS unload] [0ms]
2014-05-03 18:36:01.805 PROFILE  [OBK unload] [0ms]
2014-05-03 18:36:02.008 PROFILE  [LogUnInit] [0ms]
2014-05-08 13:42:25.369 PROFILE  [Midas stop] [13ms]
2014-05-08 13:42:25.586 PROFILE  [Stop Drivers] [221ms]
2014-05-08 13:42:25.586 PROFILE  [Registration data] [0ms]
2014-05-08 13:42:25.586 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-05-08 13:42:25.586 PROFILE  [Parental uninit] [0ms]
2014-05-08 13:42:25.586 PROFILE  [WSACleanup] [0ms]
2014-05-08 13:42:28.350 PROFILE  [Free SF] [2s:767ms]
2014-05-08 13:42:28.381 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-05-08 13:42:28.381 PROFILE  [AntiPh & AS unload] [0ms]
2014-05-08 13:42:28.381 PROFILE  [OBK unload] [0ms]
2014-05-08 13:42:28.551 PROFILE  [LogUnInit] [0ms]
2014-05-08 13:42:37.522 PROFILE  [CM Stop & eventq uninit] [8s:966ms]
2014-05-08 13:42:37.522 PROFILE  [npcomm uninit] [0ms]
2014-05-08 13:42:37.558 PROFILE  [STOP Received - time] [12s:340ms]
2014-05-08 22:13:17.798 PROFILE  [Midas stop] [0ms]
2014-05-08 22:13:17.829 PROFILE  [Stop Drivers] [17ms]
2014-05-08 22:13:17.829 PROFILE  [Registration data] [0ms]
2014-05-08 22:13:17.829 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-05-08 22:13:17.829 PROFILE  [Parental uninit] [0ms]
2014-05-08 22:13:17.829 PROFILE  [WSACleanup] [0ms]
2014-05-08 22:13:19.267 PROFILE  [Free SF] [1s:440ms]
2014-05-08 22:13:19.267 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-05-08 22:13:19.267 PROFILE  [AntiPh & AS unload] [0ms]
2014-05-08 22:13:19.267 PROFILE  [OBK unload] [0ms]
2014-05-08 22:13:19.298 PROFILE  [LogUnInit] [0ms]
2014-05-08 22:13:22.408 PROFILE  [CM Stop & eventq uninit] [3s:109ms]
2014-05-08 22:13:22.408 PROFILE  [npcomm uninit] [0ms]
2014-05-08 22:13:22.408 PROFILE  [STOP Received - time] [4s:707ms]
2014-05-14 14:24:08.062 PROFILE  [Midas stop] [75ms]
2014-05-14 14:24:08.193 PROFILE  [Stop Drivers] [138ms]
2014-05-14 14:24:08.193 PROFILE  [Registration data] [0ms]
2014-05-14 14:24:08.193 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-05-14 14:24:08.193 PROFILE  [Parental uninit] [0ms]
2014-05-14 14:24:08.193 PROFILE  [WSACleanup] [0ms]
2014-05-14 14:24:09.112 PROFILE  [Free SF] [906ms]
2014-05-14 14:24:09.149 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-05-14 14:24:09.149 PROFILE  [AntiPh & AS unload] [0ms]
2014-05-14 14:24:09.149 PROFILE  [OBK unload] [0ms]
2014-05-14 14:24:09.366 PROFILE  [LogUnInit] [0ms]
2014-05-14 14:24:16.365 PROFILE  [CM Stop & eventq uninit] [7s:3ms]
2014-05-14 14:24:16.365 PROFILE  [npcomm uninit] [0ms]
2014-05-14 14:24:16.365 PROFILE  [STOP Received - time] [8s:430ms]
2014-06-11 23:38:49.152 PROFILE  [Midas stop] [10ms]
2014-06-11 23:38:49.340 PROFILE  [Stop Drivers] [151ms]
2014-06-11 23:38:49.340 PROFILE  [Registration data] [0ms]
2014-06-11 23:38:49.340 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-06-11 23:38:49.340 PROFILE  [Parental uninit] [0ms]
2014-06-11 23:38:49.340 PROFILE  [WSACleanup] [0ms]
2014-06-11 23:38:51.449 PROFILE  [Free SF] [2s:112ms]
2014-06-11 23:38:51.449 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-06-11 23:38:51.449 PROFILE  [AntiPh & AS unload] [0ms]
2014-06-11 23:38:51.449 PROFILE  [OBK unload] [0ms]
2014-06-11 23:38:51.824 PROFILE  [LogUnInit] [0ms]
2014-06-11 23:39:04.122 PROFILE  [CM Stop & eventq uninit] [12s:307ms]
2014-06-11 23:39:04.122 PROFILE  [npcomm uninit] [0ms]
2014-06-11 23:39:04.122 PROFILE  [STOP Received - time] [15s:56ms]
2014-06-16 08:58:26.739 PROFILE  [Midas stop] [27ms]
2014-06-16 08:58:26.927 PROFILE  [Stop Drivers] [187ms]
2014-06-16 08:58:26.927 PROFILE  [Registration data] [0ms]
2014-06-16 08:58:26.927 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-06-16 08:58:26.927 PROFILE  [Parental uninit] [0ms]
2014-06-16 08:58:26.927 PROFILE  [WSACleanup] [0ms]
2014-06-16 08:58:27.505 PROFILE  [Free SF] [575ms]
2014-06-16 08:58:27.505 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-06-16 08:58:27.505 PROFILE  [AntiPh & AS unload] [0ms]
2014-06-16 08:58:27.505 PROFILE  [OBK unload] [0ms]
2014-06-16 08:58:27.599 PROFILE  [LogUnInit] [0ms]
2014-06-16 08:58:38.134 PROFILE  [CM Stop & eventq uninit] [10s:531ms]
2014-06-16 08:58:38.134 PROFILE  [npcomm uninit] [0ms]
2014-06-16 08:58:38.134 PROFILE  [STOP Received - time] [11s:456ms]
2014-07-04 11:23:30.853 PROFILE  [Midas stop] [12ms]
2014-07-04 11:23:31.244 PROFILE  [Stop Drivers] [378ms]
2014-07-04 11:23:31.244 PROFILE  [Registration data] [0ms]
2014-07-04 11:23:31.244 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-07-04 11:23:31.244 PROFILE  [Parental uninit] [0ms]
2014-07-04 11:23:31.244 PROFILE  [WSACleanup] [0ms]
2014-07-04 11:23:33.604 PROFILE  [Free SF] [2s:363ms]
2014-07-04 11:23:33.604 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-07-04 11:23:33.604 PROFILE  [AntiPh & AS unload] [0ms]
2014-07-04 11:23:33.604 PROFILE  [OBK unload] [0ms]
2014-07-04 11:23:33.729 PROFILE  [LogUnInit] [0ms]
2014-07-04 11:23:50.905 PROFILE  [CM Stop & eventq uninit] [17s:174ms]
2014-07-04 11:23:50.905 PROFILE  [npcomm uninit] [0ms]
2014-07-04 11:23:50.905 PROFILE  [STOP Received - time] [20s:346ms]
2014-07-25 22:21:00.361 PROFILE  [Midas stop] [40ms]
2014-07-25 22:21:00.778 PROFILE  [Stop Drivers] [415ms]
2014-07-25 22:21:00.778 PROFILE  [Registration data] [0ms]
2014-07-25 22:21:00.778 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-07-25 22:21:00.778 PROFILE  [Parental uninit] [0ms]
2014-07-25 22:21:00.778 PROFILE  [WSACleanup] [0ms]
2014-07-25 22:21:01.683 PROFILE  [Free SF] [892ms]
2014-07-25 22:21:01.699 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-07-25 22:21:01.699 PROFILE  [AntiPh & AS unload] [0ms]
2014-07-25 22:21:01.699 PROFILE  [OBK unload] [0ms]
2014-07-25 22:21:01.830 PROFILE  [LogUnInit] [0ms]
2014-07-25 22:21:15.105 PROFILE  [CM Stop & eventq uninit] [13s:278ms]
2014-07-25 22:21:15.105 PROFILE  [npcomm uninit] [0ms]
2014-07-25 22:21:15.105 PROFILE  [STOP Received - time] [14s:969ms]
2014-08-13 22:11:02.418 PROFILE  [Midas stop] [9ms]
2014-08-13 22:11:02.590 PROFILE  [Stop Drivers] [166ms]
2014-08-13 22:11:02.590 PROFILE  [Registration data] [0ms]
2014-08-13 22:11:02.590 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-13 22:11:02.590 PROFILE  [Parental uninit] [0ms]
2014-08-13 22:11:02.590 PROFILE  [WSACleanup] [0ms]
2014-08-13 22:11:04.187 PROFILE  [Free SF] [1s:603ms]
2014-08-13 22:11:04.187 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-13 22:11:04.187 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-13 22:11:04.187 PROFILE  [OBK unload] [0ms]
2014-08-13 22:11:04.240 PROFILE  [LogUnInit] [0ms]
2014-08-13 22:11:08.173 PROFILE  [CM Stop & eventq uninit] [3s:928ms]
2014-08-13 22:11:08.173 PROFILE  [npcomm uninit] [0ms]
2014-08-13 22:11:08.173 PROFILE  [STOP Received - time] [5s:822ms]
2014-08-15 11:31:01.837 PROFILE  [Midas stop] [20ms]
2014-08-15 11:31:01.977 PROFILE  [Stop Drivers] [150ms]
2014-08-15 11:31:01.977 PROFILE  [Registration data] [0ms]
2014-08-15 11:31:01.977 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-15 11:31:01.993 PROFILE  [Parental uninit] [0ms]
2014-08-15 11:31:01.993 PROFILE  [WSACleanup] [0ms]
2014-08-15 11:31:02.774 PROFILE  [Free SF] [770ms]
2014-08-15 11:31:02.805 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-15 11:31:02.805 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-15 11:31:02.805 PROFILE  [OBK unload] [0ms]
2014-08-15 11:31:02.993 PROFILE  [LogUnInit] [0ms]
2014-08-15 11:31:17.122 PROFILE  [CM Stop & eventq uninit] [14s:139ms]
2014-08-15 11:31:17.154 PROFILE  [npcomm uninit] [23ms]
2014-08-15 11:31:17.169 PROFILE  [STOP Received - time] [15s:385ms]
2014-08-25 18:04:02.044 PROFILE  [Midas stop] [0ms]
2014-08-25 18:04:02.075 PROFILE  [Stop Drivers] [21ms]
2014-08-25 18:04:02.075 PROFILE  [Registration data] [0ms]
2014-08-25 18:04:02.075 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-25 18:04:02.075 PROFILE  [Parental uninit] [0ms]
2014-08-25 18:04:02.075 PROFILE  [WSACleanup] [0ms]
2014-08-25 18:04:02.481 PROFILE  [Free SF] [406ms]
2014-08-25 18:04:02.481 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-25 18:04:02.481 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-25 18:04:02.481 PROFILE  [OBK unload] [0ms]
2014-08-25 18:04:02.513 PROFILE  [LogUnInit] [0ms]
2014-08-25 18:04:05.466 PROFILE  [CM Stop & eventq uninit] [2s:958ms]
2014-08-25 18:04:05.466 PROFILE  [npcomm uninit] [0ms]
2014-08-25 18:04:05.466 PROFILE  [STOP Received - time] [3s:444ms]
2014-08-25 18:25:49.274 PROFILE  [Midas stop] [0ms]
2014-08-25 18:25:49.289 PROFILE  [Stop Drivers] [21ms]
2014-08-25 18:25:49.289 PROFILE  [Registration data] [0ms]
2014-08-25 18:25:49.289 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-25 18:25:49.305 PROFILE  [Parental uninit] [0ms]
2014-08-25 18:25:49.305 PROFILE  [WSACleanup] [0ms]
2014-08-25 18:25:49.555 PROFILE  [Free SF] [254ms]
2014-08-25 18:25:49.555 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-25 18:25:49.555 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-25 18:25:49.555 PROFILE  [OBK unload] [0ms]
2014-08-25 18:25:49.586 PROFILE  [LogUnInit] [0ms]
2014-08-25 18:25:51.540 PROFILE  [CM Stop & eventq uninit] [1s:957ms]
2014-08-25 18:25:51.540 PROFILE  [npcomm uninit] [0ms]
2014-08-25 18:25:51.540 PROFILE  [STOP Received - time] [2s:286ms]
2014-08-25 18:32:46.778 PROFILE  [Midas stop] [0ms]
2014-08-25 18:32:46.778 PROFILE  [Stop Drivers] [11ms]
2014-08-25 18:32:46.778 PROFILE  [Registration data] [0ms]
2014-08-25 18:32:46.778 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-25 18:32:46.778 PROFILE  [Parental uninit] [0ms]
2014-08-25 18:32:46.778 PROFILE  [WSACleanup] [0ms]
2014-08-25 18:32:46.794 PROFILE  [Free SF] [1ms]
2014-08-25 18:32:46.794 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-25 18:32:46.794 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-25 18:32:46.794 PROFILE  [OBK unload] [0ms]
2014-08-25 18:32:46.841 PROFILE  [LogUnInit] [0ms]
2014-08-25 18:32:48.450 PROFILE  [CM Stop & eventq uninit] [1s:613ms]
2014-08-25 18:32:48.450 PROFILE  [npcomm uninit] [0ms]
2014-08-25 18:32:48.450 PROFILE  [STOP Received - time] [1s:729ms]
2014-08-25 18:34:04.527 PROFILE  [Midas stop] [0ms]
2014-08-25 18:34:04.527 PROFILE  [Stop Drivers] [1ms]
2014-08-25 18:34:04.527 PROFILE  [Registration data] [0ms]
2014-08-25 18:34:04.527 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-25 18:34:04.527 PROFILE  [Parental uninit] [0ms]
2014-08-25 18:34:04.527 PROFILE  [WSACleanup] [0ms]
2014-08-25 18:34:04.542 PROFILE  [Free SF] [1ms]
2014-08-25 18:34:04.542 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-25 18:34:04.542 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-25 18:34:04.542 PROFILE  [OBK unload] [0ms]
2014-08-25 18:34:04.589 PROFILE  [LogUnInit] [0ms]
2014-08-25 18:34:06.621 PROFILE  [CM Stop & eventq uninit] [2s:32ms]
2014-08-25 18:34:06.621 PROFILE  [npcomm uninit] [0ms]
2014-08-25 18:34:06.621 PROFILE  [STOP Received - time] [2s:134ms]
2014-08-25 19:29:06.761 PROFILE  [Midas stop] [0ms]
2014-08-25 19:29:06.761 PROFILE  [Stop Drivers] [1ms]
2014-08-25 19:29:06.761 PROFILE  [Registration data] [0ms]
2014-08-25 19:29:06.761 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-25 19:29:06.761 PROFILE  [Parental uninit] [0ms]
2014-08-25 19:29:06.761 PROFILE  [WSACleanup] [0ms]
2014-08-25 19:29:07.027 PROFILE  [Free SF] [266ms]
2014-08-25 19:29:07.027 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-25 19:29:07.027 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-25 19:29:07.027 PROFILE  [OBK unload] [0ms]
2014-08-25 19:29:07.042 PROFILE  [LogUnInit] [0ms]
2014-08-25 19:29:09.121 PROFILE  [CM Stop & eventq uninit] [2s:83ms]
2014-08-25 19:29:09.121 PROFILE  [npcomm uninit] [0ms]
2014-08-25 19:29:09.121 PROFILE  [STOP Received - time] [2s:417ms]
2014-08-28 15:07:26.867 PROFILE  [Midas stop] [21ms]
2014-08-28 15:07:26.992 PROFILE  [Stop Drivers] [130ms]
2014-08-28 15:07:26.992 PROFILE  [Registration data] [0ms]
2014-08-28 15:07:26.992 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-28 15:07:26.992 PROFILE  [Parental uninit] [0ms]
2014-08-28 15:07:26.992 PROFILE  [WSACleanup] [0ms]
2014-08-28 15:07:28.648 PROFILE  [Free SF] [1s:651ms]
2014-08-28 15:07:28.648 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-28 15:07:28.648 PROFILE  [AntiPh & AS unload] [0ms]
2014-08-28 15:07:28.648 PROFILE  [OBK unload] [0ms]
2014-08-28 15:07:28.695 PROFILE  [LogUnInit] [0ms]
2014-08-28 15:07:39.105 PROFILE  [CM Stop & eventq uninit] [10s:409ms]
2014-08-28 15:07:39.105 PROFILE  [npcomm uninit] [0ms]
2014-08-28 15:07:39.105 PROFILE  [STOP Received - time] [12s:387ms]
2014-08-29 23:39:26.341 PROFILE  [Midas stop] [203ms]
2014-08-29 23:39:29.107 PROFILE  [Stop Drivers] [2s:765ms]
2014-08-29 23:39:29.185 PROFILE  [Registration data] [0ms]
2014-08-29 23:39:29.185 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-08-29 23:39:29.185 PROFILE  [Parental uninit] [0ms]
2014-08-29 23:39:29.185 PROFILE  [WSACleanup] [0ms]
2014-08-29 23:39:34.170 PROFILE  [Free SF] [4s:979ms]
2014-08-29 23:39:35.232 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-08-29 23:39:35.342 PROFILE  [AntiPh & AS unload] [120ms]
2014-08-29 23:39:35.342 PROFILE  [OBK unload] [0ms]
2014-08-29 23:39:35.717 PROFILE  [LogUnInit] [0ms]
2014-09-03 13:03:35.022 PROFILE  [Midas stop] [14ms]
2014-09-03 13:03:35.122 PROFILE  [Stop Drivers] [93ms]
2014-09-03 13:03:35.122 PROFILE  [Registration data] [0ms]
2014-09-03 13:03:35.122 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-09-03 13:03:35.122 PROFILE  [Parental uninit] [0ms]
2014-09-03 13:03:35.122 PROFILE  [WSACleanup] [0ms]
2014-09-03 13:03:35.539 PROFILE  [Free SF] [423ms]
2014-09-03 13:03:35.570 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-03 13:03:35.570 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-03 13:03:35.570 PROFILE  [OBK unload] [0ms]
2014-09-03 13:03:35.619 PROFILE  [LogUnInit] [0ms]
2014-09-03 13:03:41.216 PROFILE  [CM Stop & eventq uninit] [5s:611ms]
2014-09-03 13:03:41.216 PROFILE  [npcomm uninit] [0ms]
2014-09-03 13:03:41.216 PROFILE  [STOP Received - time] [6s:287ms]
2014-09-07 11:11:28.876 PROFILE  [Midas stop] [10ms]
2014-09-07 11:11:28.939 PROFILE  [Stop Drivers] [65ms]
2014-09-07 11:11:28.939 PROFILE  [Registration data] [0ms]
2014-09-07 11:11:28.939 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-09-07 11:11:28.939 PROFILE  [Parental uninit] [0ms]
2014-09-07 11:11:28.939 PROFILE  [WSACleanup] [0ms]
2014-09-07 11:11:29.380 PROFILE  [Free SF] [448ms]
2014-09-07 11:11:29.380 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-07 11:11:29.380 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-07 11:11:29.380 PROFILE  [OBK unload] [0ms]
2014-09-07 11:11:29.568 PROFILE  [LogUnInit] [0ms]
2014-09-07 11:11:35.419 PROFILE  [CM Stop & eventq uninit] [5s:860ms]
2014-09-07 11:11:35.419 PROFILE  [npcomm uninit] [0ms]
2014-09-07 11:11:35.419 PROFILE  [STOP Received - time] [6s:607ms]
2014-09-08 09:12:21.612 PROFILE  [Midas stop] [13ms]
2014-09-08 09:12:21.862 PROFILE  [Stop Drivers] [246ms]
2014-09-08 09:12:21.862 PROFILE  [Registration data] [0ms]
2014-09-08 09:12:21.862 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-09-08 09:12:21.862 PROFILE  [Parental uninit] [0ms]
2014-09-08 09:12:21.862 PROFILE  [WSACleanup] [0ms]
2014-09-08 09:12:22.643 PROFILE  [Free SF] [781ms]
2014-09-08 09:12:22.659 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-08 09:12:22.659 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-08 09:12:22.659 PROFILE  [OBK unload] [0ms]
2014-09-08 09:12:22.752 PROFILE  [LogUnInit] [0ms]
2014-09-08 09:12:29.768 PROFILE  [CM Stop & eventq uninit] [7s:25ms]
2014-09-08 09:12:29.768 PROFILE  [npcomm uninit] [0ms]
2014-09-08 09:12:29.768 PROFILE  [STOP Received - time] [8s:210ms]
2014-09-11 14:25:12.174 PROFILE  [Midas stop] [9ms]
2014-09-11 14:25:12.268 PROFILE  [Stop Drivers] [97ms]
2014-09-11 14:25:12.284 PROFILE  [Registration data] [0ms]
2014-09-11 14:25:12.284 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [0ms]
2014-09-11 14:25:12.284 PROFILE  [Parental uninit] [0ms]
2014-09-11 14:25:12.284 PROFILE  [WSACleanup] [0ms]
2014-09-11 14:25:12.432 PROFILE  [Free SF] [155ms]
2014-09-11 14:25:12.432 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-11 14:25:12.432 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-11 14:25:12.432 PROFILE  [OBK unload] [0ms]
2014-09-11 14:25:12.469 PROFILE  [LogUnInit] [0ms]
2014-09-11 14:25:16.632 PROFILE  [CM Stop & eventq uninit] [4s:163ms]
2014-09-11 14:25:16.632 PROFILE  [npcomm uninit] [0ms]
2014-09-11 14:25:16.632 PROFILE  [STOP Received - time] [4s:514ms]
2014-09-14 20:06:23.069 PROFILE  [Midas stop] [0ms]
2014-09-14 20:06:23.185 PROFILE  [Stop Drivers] [109ms]
2014-09-14 20:06:23.185 PROFILE  [Registration data] [0ms]
2014-09-14 20:06:23.602 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [413ms]
2014-09-14 20:06:23.602 PROFILE  [Parental uninit] [0ms]
2014-09-14 20:06:23.602 PROFILE  [WSACleanup] [0ms]
2014-09-14 20:06:25.009 PROFILE  [Free SF] [1s:415ms]
2014-09-14 20:06:25.009 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-14 20:06:25.009 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-14 20:06:25.009 PROFILE  [OBK unload] [0ms]
2014-09-14 20:06:25.076 PROFILE  [LogUnInit] [0ms]
2014-09-14 20:06:34.720 PROFILE  [CM Stop & eventq uninit] [9s:647ms]
2014-09-14 20:06:34.720 PROFILE  [npcomm uninit] [0ms]
2014-09-14 20:06:34.720 PROFILE  [STOP Received - time] [11s:701ms]
2014-09-21 13:49:59.454 PROFILE  [Midas stop] [0ms]
2014-09-21 13:49:59.460 PROFILE  [Stop Drivers] [7ms]
2014-09-21 13:49:59.460 PROFILE  [Registration data] [0ms]
2014-09-21 13:49:59.878 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [415ms]
2014-09-21 13:49:59.878 PROFILE  [Parental uninit] [0ms]
2014-09-21 13:49:59.878 PROFILE  [WSACleanup] [0ms]
2014-09-21 13:50:00.110 PROFILE  [Free SF] [242ms]
2014-09-21 13:50:00.110 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-21 13:50:00.110 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-21 13:50:00.110 PROFILE  [OBK unload] [0ms]
2014-09-21 13:50:00.141 PROFILE  [LogUnInit] [0ms]
2014-09-21 13:50:02.131 PROFILE  [CM Stop & eventq uninit] [1s:984ms]
2014-09-21 13:50:02.131 PROFILE  [npcomm uninit] [0ms]
2014-09-21 13:50:02.131 PROFILE  [STOP Received - time] [2s:698ms]
2014-09-21 14:25:00.524 PROFILE  [Midas stop] [20ms]
2014-09-21 14:25:00.740 PROFILE  [Stop Drivers] [214ms]
2014-09-21 14:25:00.740 PROFILE  [Registration data] [0ms]
2014-09-21 14:25:01.157 PROFILE  [NPCOMM_MSG_VSSERVDOWN NPC_BDAGENT_MAIN] [412ms]
2014-09-21 14:25:01.176 PROFILE  [Parental uninit] [0ms]
2014-09-21 14:25:01.176 PROFILE  [WSACleanup] [0ms]
2014-09-21 14:25:02.983 PROFILE  [Free SF] [1s:807ms]
2014-09-21 14:25:02.983 PROFILE  [UninitializeMultiUserSupport] [0ms]
2014-09-21 14:25:02.983 PROFILE  [AntiPh & AS unload] [0ms]
2014-09-21 14:25:02.985 PROFILE  [OBK unload] [10ms]
2014-09-21 14:25:03.032 PROFILE  [LogUnInit] [0ms]
2014-09-21 14:25:06.186 PROFILE  [CM Stop & eventq uninit] [3s:143ms]
2014-09-21 14:25:06.186 PROFILE  [npcomm uninit] [0ms]
2014-09-21 14:25:06.186 PROFILE  [STOP Received - time] [5s:709ms]

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.9 (09.20.2014:1)
OS: Windows 8.1 x64
Ran by N on 21.09.2014 at 14:30:35,97
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BBA6474E-CC2A-4AB9-97BE-4A330BF4A6B0}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\N\appdata\local\WSE_Lasaoren"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.09.2014 at 14:43:18,77
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ladybird312 · 21.09.2014, 13:51

So das wars

M-K-D-B · 22.09.2014, 08:10

So geht es weiter:

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Solltest du deinen Benutzernamen unkenntlich gemacht haben ("N"), so musst du jetzt den richtigen Namen einsetzen, sonst wird der Fix nicht funktionieren!

Code:

ATTFilter

start
CloseProcesses:
HKU\S-1-5-21-3416063132-584111183-2942680451-1001\...\Run: [PeenyBee] => C:\Users\N\AppData\Local\PennyBee\PennyBeeW.exe
C:\Users\N\AppData\Local\PennyBee
ProxyServer: http=127.0.0.1:61232;https=127.0.0.1:61232
C:\Program Files (x86)\Search Extensions
C:\Users\N\Downloads\Setup.exe
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

Starte die FRST.exe erneut. Setze einen Haken vor Addition und drücke auf Scan.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Schritt 3
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
Code:
ATTFilter
```
:filefind
*PennyBee*

:folderfind
*PennyBee*

:regfind
PennyBee
         
```
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von ESET,
die Logdatei von SecurityCheck,
die beiden neuen Logdateien von FRST.

Ladybird312 · 22.09.2014, 09:22

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014
Ran by N at 2014-09-22 10:03:59 Run:2
Running from C:\Users\N\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
HKU\S-1-5-21-3416063132-584111183-2942680451-1001\...\Run: [PeenyBee] => C:\Users\N\AppData\Local\PennyBee\PennyBeeW.exe
C:\Users\N\AppData\Local\PennyBee
ProxyServer: http=127.0.0.1:61232;https=127.0.0.1:61232
C:\Program Files (x86)\Search Extensions
C:\Users\N\Downloads\Setup.exe
EmptyTemp:
end
*****************

Processes closed successfully.
HKU\S-1-5-21-3416063132-584111183-2942680451-1001\Software\Microsoft\Windows\CurrentVersion\Run\\PeenyBee => Value not found.
"C:\Users\N\AppData\Local\PennyBee" => File/Directory not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value not found.
"C:\Program Files (x86)\Search Extensions" => File/Directory not found.
"C:\Users\N\Downloads\Setup.exe" => File/Directory not found.
EmptyTemp: => Removed 616.7 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

Code:

ATTFilter

SystemLook 30.07.11 by jpshortstuff
Log created at 10:15 on 22/09/2014 by N
Administrator - Elevation successful

========== filefind ==========

Searching for "*PennyBee*"
No files found.

========== folderfind ==========

Searching for "*PennyBee*"
C:\AdwCleaner\Quarantine\C\Users\N\AppData\Local\PennyBee	d------	[11:49 21/09/2014]

========== regfind ==========

Searching for "PennyBee"
[HKEY_CURRENT_USER\Software\Microsoft\.NETFramework\SQM\Apps\PennyBeeW.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\PennyBeeW_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\PennyBeeW_RASMANCS]
[HKEY_USERS\S-1-5-21-3416063132-584111183-2942680451-1001\Software\Microsoft\.NETFramework\SQM\Apps\PennyBeeW.exe]

-= EOF =-

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014
Ran by N at 2014-09-22 10:13:23
Running from C:\Users\N\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2011.1 - Acer Incorporated)
Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3104.3 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.3104 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0 - Adobe Systems Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.01.2012.1 - Acer Incorporated)
Bitdefender Internet Security 2015 (HKLM\...\Bitdefender) (Version: 18.11.0.872 - Bitdefender)
Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.8 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.2.1.2 - Broadcom Corporation)
calibre (HKLM-x32\...\{4ED40090-5A38-415F-B222-26DD6D3C1AEF}) (Version: 2.2.0 - Kovid Goyal)
Corel MediaOne (HKLM-x32\...\{3C569633-C8DE-46E2-BB8F-F65198681C2F}) (Version: 2.00.0000 - Corel Corporation)
Corel Painter Essentials 3 (x32 Version: 3.2 - Corel Corporation) Hidden
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ETDWare PS/2-X64 11.6.27.201_WHQL (HKLM\...\Elantech) (Version: 11.6.27.201 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3304 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.02.2009 - Acer)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pokki Start Menu (HKCU\...\Pokki_Start_Menu) (Version: 0.269.3.181 - )
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.05 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Ulead PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel)
Ulead PhotoImpact X3 (x32 Version: 1.00.0000 - Corel) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

05-09-2014 11:09:23 Geplanter Prüfpunkt
11-09-2014 10:31:56 Installed calibre
14-09-2014 11:34:30 Windows Update
19-09-2014 20:19:39 Removed 7-Zip 9.21
21-09-2014 10:39:53 Installed 7-Zip 9.20 (x64 edition)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {051BBD89-9BD5-419D-B576-D8D546F1B2C0} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0F314E26-7E51-4353-B785-C337AC75887F} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {26643143-FB5D-49C4-8637-A706DB6A9332} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2C9DE1E1-617F-46C9-9A22-BFF4039A7120} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {48F959A5-E756-4221-B567-E17E8C1091B6} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {515831A6-D03A-4DC8-B43D-EE99E4721374} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {594B2319-D5B8-4A85-ACCB-B47C4B97CE06} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8BC77A95-AD1D-4459-8F39-159DC4FAAC72} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8E201BC1-CA74-425E-A8F6-395747FDBC3C} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B7B834B8-1C15-4A10-9DAC-FB69E3E74EA0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25] (Google Inc.)
Task: {C9EA1598-EE2D-488D-BCD8-36713EE87D99} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E0C2A1ED-A1A4-4C38-A66B-81F5F4E168BB} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)
Task: {E286BCE0-04DA-422D-BDFC-E83462CAF61F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-25] (Google Inc.)
Task: {E399736D-6F82-446B-83F0-A84D829E84D1} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E75A2AAF-2677-4FA2-9565-70A7FAFD430F} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2013-07-26] (Acer Incorporated)
Task: {EA90B667-68C3-40B8-AA2F-7F2CA70D2FAE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-09-11] (Microsoft Corporation)
Task: {ED057309-F3EF-41B2-A20C-FDBFE25CA95E} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-09-03 14:47 - 2014-09-03 14:47 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2014-08-25 21:09 - 2014-06-30 13:26 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2014-08-25 21:09 - 2012-10-29 15:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2014-08-25 21:15 - 2014-08-25 21:15 - 00780592 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpbr.mdl
2014-08-25 21:15 - 2014-08-25 21:15 - 00568400 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpdsp.mdl
2014-08-25 21:15 - 2014-08-25 21:15 - 02602680 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttpph.mdl
2014-08-25 21:15 - 2014-08-25 21:15 - 01323408 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00047_002\ashttprbl.mdl
2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\WINDOWS\SysWOW64\PSIService.exe
2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-13 09:27 - 2013-09-03 21:45 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2013-10-26 04:23 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-08-29 18:28 - 2014-06-25 10:13 - 01457664 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-08-29 18:28 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-08-25 22:08 - 2007-08-02 21:07 - 00034064 _____ () C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\DetMethod.dll
2014-08-22 18:21 - 2014-08-22 18:21 - 00203008 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2014-08-22 18:21 - 2014-08-22 18:21 - 00630528 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2014-08-22 18:21 - 2014-08-22 18:21 - 00654552 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2014-08-22 18:21 - 2014-08-22 18:21 - 00119552 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2014-09-13 13:39 - 2014-09-13 13:39 - 00015616 _____ () C:\WINDOWS\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2014-08-06 16:47 - 2014-08-06 16:47 - 00013568 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2014-08-06 16:44 - 2014-08-06 16:44 - 00277096 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2013-10-26 04:53 - 2013-07-30 18:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-09-15 13:28 - 2014-09-04 05:01 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\libglesv2.dll
2014-09-15 13:28 - 2014-09-04 05:01 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\libegl.dll
2014-09-15 13:28 - 2014-09-04 05:01 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll
2014-09-15 13:28 - 2014-09-04 05:01 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll
2014-09-15 13:28 - 2014-09-04 05:01 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ffmpegsumo.dll
2014-09-15 13:28 - 2014-09-04 05:01 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\N\OneDrive:ms-properties
AlternateDataStreams: C:\Users\N\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\N\Downloads\ADE_4.0_Installer.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\Apache_OpenOffice_4.1.1_Win_x86_install_de.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\easetup.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\ElsterFormular-15.0.20140117k.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\FreeAudioCDToMP3Converter.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\Malavida_Download_Manager.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\mobiletrans_full1296.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\Movie-Maker.exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\Silverlight (1).exe:BDU
AlternateDataStreams: C:\Users\N\Downloads\SkypeSetup.exe:BDU

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKCU\...\StartupApproved\Run: => "Bitdefender-Geldbörse-Agent"

==================== Faulty Device Manager Devices =============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/22/2014 10:03:53 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 12.9.2014.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ec0

Startzeit: 01cfd63b95e33fcf

Endzeit: 69

Anwendungspfad: C:\Users\N\Desktop\FRST64.exe

Berichts-ID: fb0906e5-422e-11e4-8266-201a0672bb9d

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/22/2014 08:52:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/22/2014 08:52:27 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/22/2014 08:46:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/22/2014 08:34:23 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/22/2014 08:15:34 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20605 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 19fc

Startzeit: 01cfd620d1c86f71

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: daea00ef-421f-11e4-8265-201a0672bb9d

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (09/21/2014 05:44:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2014 05:29:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2014 05:26:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2014 05:25:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927151. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


System errors:
=============
Error: (09/22/2014 10:04:29 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (09/22/2014 10:03:59 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/22/2014 10:03:59 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/22/2014 10:03:59 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/22/2014 10:03:53 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (09/22/2014 10:03:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Integrated Clock Controller Service - Intel(R) ICCS" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/22/2014 10:03:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/22/2014 10:03:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ePower Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/22/2014 10:03:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/22/2014 10:03:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application Local Management Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (09/22/2014 10:03:53 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: FRST64.exe12.9.2014.0ec001cfd63b95e33fcf69C:\Users\N\Desktop\FRST64.exefb0906e5-422e-11e4-8266-201a0672bb9d

Error: (09/22/2014 08:52:43 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927142

Error: (09/22/2014 08:52:27 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147023170

Error: (09/22/2014 08:46:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927142

Error: (09/22/2014 08:34:23 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927142

Error: (09/22/2014 08:15:34 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2060519fc01cfd620d1c86f714294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exedaea00ef-421f-11e4-8265-201a0672bb9dmicrosoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (09/21/2014 05:44:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151

Error: (09/21/2014 05:29:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151

Error: (09/21/2014 05:26:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151

Error: (09/21/2014 05:25:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OUR-LAPPI)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Percentage of memory in use: 41%
Total physical RAM: 3985.27 MB
Available physical RAM: 2315.47 MB
Total Pagefile: 4881.27 MB
Available Pagefile: 2872.45 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:448.19 GB) (Free:372.98 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 7DC2343F)

Partition: GPT Partition Type.

==================== End Of Log ============================

20.09.2014, 15:59	#4
M-K-D-B /// TB-Ausbilder	BitDefender meldet mir ständig infizierte Webressource Servus, steht alles in der Anleitung (in meinem letzten Post)

21.09.2014, 11:48	#8
M-K-D-B /// TB-Ausbilder	BitDefender meldet mir ständig infizierte Webressource Servus, ja, hat geklappt. Fehlt noch die 2. Logdatei: Addition.txt

BitDefender meldet mir ständig infizierte Webressource

Log-Analyse und Auswertung: BitDefender meldet mir ständig infizierte Webressource