![]() |
|
Log-Analyse und Auswertung: Virus oder Trojaner in "C:\Programme\Settings Manager\smdmf\" gefunden, lässt sich aber nicht entfernenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Virus oder Trojaner in "C:\Programme\Settings Manager\smdmf\" gefunden, lässt sich aber nicht entfernen Hallo! Ich hatte schonmal ein Problem hier und habe daher bereits Log-Files von FRST und Addition anfertigen lassen, ich hoffe das ist in Ordnung. Wie im Titel beschrieben habe ich immer mal wieder von meinem Antiviren-System Avira die Meldung, dass sich im Ordner "C:\Programme\Settings Manager\smdmf" zwei Viren befinden. Kategorisiert werden sie als ADWARE/Adware.Gen und lassen sich nicht entfernen. Sowohl Avira schafft es nicht, die Viren oder Trojaner zu entfernen als auch ich nicht, da ich beim Versuch die innerhalb des Ordners befindlichen Dateien die Meldung bekomme, nicht auf diese Daten zugreifen zu können. In dem Ordner befinden sich folgende Dateien: favicon.ico Helper.dll Internet Explorer Settings.exe smdmf.dll smdmfbho.dll smdmfldr.dll smdmfldr_u.dll smdmfmgrc2.cfg SmdmFService.exe smdmfu.exe sysapcrt.dll tbicon.exe Uninstall.exe Ich habe bereits versucht über die Uninstall.exe etwas zu erreichen, allerdings deinstalliert diese Datei nichts. Folgend noch die FRST: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-10-2014 Ran by Timmi (administrator) on TIM-PC on 25-10-2014 18:10:49 Running from C:\Users\Timmi\Desktop Loaded Profile: Timmi (Available profiles: Timmi & UpdatusUser) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe (Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Hi-Rez Studios) C:\Program Files\Hi-Rez Studios\HiPatchService.exe (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\18.7.2.3\ccsvchst.exe (ClientConnect Ltd.) C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\18.7.2.3\ccsvchst.exe (globalUpdate) C:\Program Files\globalUpdate\Update\GoogleUpdate.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe (Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe (Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Macrovision Europe Ltd.) C:\Users\Timmi\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001 (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe () C:\Program Files\Gaming Mouse\DareUMonitor.exe () C:\Users\Timmi\AppData\Roaming\InetStat\inetstat.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe (TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.224\deploy\LoLLauncher.exe () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\LoLPatcher.exe (Nero AG) C:\Program Files\Nero\Update\NASvc.exe () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.115\deploy\LolClient.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9742952 2010-10-05] (Realtek Semiconductor) HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2012-10-03] (FNet Co., Ltd.) HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated) HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd) HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd) HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-14] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-01-26] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc) HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [Dare-U mouse] => C:\Program Files\Gaming Mouse\DareUMonitor.exe [786432 2012-11-19] () HKU\S-1-5-21-1715000752-643566925-54856787-1001\...\Run: [Pando Media Booster] => C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-29] () HKU\S-1-5-21-1715000752-643566925-54856787-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [17877168 2012-11-09] (Skype Technologies S.A.) HKU\S-1-5-21-1715000752-643566925-54856787-1001\...\Run: [Browser Infrastructure Helper] => C:\Users\Timmi\AppData\Local\Smartbar\Application\Smartbar.exe [28952 2014-06-11] (Smartbar) HKU\S-1-5-21-1715000752-643566925-54856787-1001\...\Run: [InetStat] => C:\Users\Timmi\AppData\Roaming\InetStat\inetstat.exe [1259488 2014-07-03] () HKU\S-1-5-21-1715000752-643566925-54856787-1001\...\Run: [BackgroundContainerV2] => "C:\Windows\system32\Rundll32.exe" "C:\Users\Timmi\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-03-21] (Microsoft Corporation) IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe Startup: C:\Users\Timmi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () Startup: C:\Users\Timmi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\smdmf\x64\sysapcrt.dll HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Settings Manager\smdmf\sysapcrt.dll [488464 2014-08-14] () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFA7FE944CDA3CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?affID=121562&tt=gc_&babsrc=HP_ss&mntrId=22C3BC5FF40F2D2A HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKLM - DVDVideoSoftTB DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\Timmi\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.) SearchScopes: HKLM - DefaultScope {AA25CD1D-CF3E-4BB9-B107-1555D22FDE08} URL = SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=adacc75c-f70f-6b6d-6a6e-2551e9e9b9c4&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=05/02/2014&type=hp1000 SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=164&itype=a&ver=13765&tm=351&src=ds&p={searchTerms} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6QVFdlkuDDcdAaunXoZgE5PjtiMDHhI2DK1Lv4UT8GdCTvmBxy0AFIas9JQyB68hZ4yWRPr-xoIg_U1ETgBZIIhvF8aMzL8ig_vbGCWfo2TPC116f8G5i2L6EsH2cRGZryNJNVPb1wVi2m5CxnfrAkfJxDxtxsURfbZlfSO7a-Bv0xaoA,,&q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=164&itype=a&ver=13765&tm=351&src=ds&p={searchTerms} SearchScopes: HKCU - {AA25CD1D-CF3E-4BB9-B107-1555D22FDE08} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848 SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = BHO: DVDVideoSoftTB DE Toolbar -> {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} -> C:\Users\Timmi\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.) BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Symantec NCO BHO -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) BHO: Symantec Intrusion Prevention -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM - DVDVideoSoftTB DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\Timmi\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.) Toolbar: HKLM - Yahoo Community Smartbar (by Linkury) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation) Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) Toolbar: HKCU - DVDVideoSoftTB DE Toolbar - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - C:\Users\Timmi\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn FF Extension: Symantec IPS - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn [2012-10-03] FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_13_2 FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_13_2 [2014-10-25] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR DefaultSearchKeyword: Default -> default-search.net CHR DefaultSearchURL: Default -> hxxp://www.default-search.net/search?sid=476&aid=164&itype=a&ver=12627&tm=351&src=ds&p={searchTerms} CHR DefaultSuggestURL: Default -> CHR Plugin: (Shockwave Flash) - F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\38.0.2125.104\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - F:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\38.0.2125.104\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\38.0.2125.104\pdf.dll () CHR Plugin: (Wajam) - F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins/PriamNPAPI.dll No File CHR Plugin: (Adobe Acrobat) - F:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Java Deployment Toolkit 6.0.170.4) - F:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll No File CHR Plugin: (2007 Microsoft Office system) - F:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - F:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File CHR Plugin: (Winamp Application Detector) - F:\Program Files\Mozilla Firefox\plugins\npwachk.dll No File CHR Plugin: (Microsoft® DRM) - F:\Program Files\Windows Media Player\npdrmv2.dll No File CHR Plugin: (Microsoft® DRM) - F:\Program Files\Windows Media Player\npwmsdrm.dll No File CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - F:\Program Files\Windows Media Player\npdsplay.dll No File CHR Plugin: (Google Update) - F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Google Earth Plugin) - F:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Plugin: (Panda ActiveScan 2.0) - F:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll No File CHR Plugin: (iTunes Application Detector) - F:\Program Files\iTunes\Mozilla Plugins\npitunes.dll No File CHR Plugin: (Ma-Config.com plugin) - F:\Program Files\ma-config.com\nphardwaredetection.dll No File CHR Plugin: (Silverlight Plug-In) - f:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Profile: C:\Users\Timmi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Timmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-03] CHR Extension: (Google Wallet) - C:\Users\Timmi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-20] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [284672 2011-01-26] (Advanced Micro Devices, Inc.) [File not signed] R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [140224 2010-06-17] (Advanced Micro Devices) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-10-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-14] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG) S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-09-28] (BitRaider, LLC) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-10-03] (Creative Labs) [File not signed] S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-10-03] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed] S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-05-18] (globalUpdate) [File not signed] U2 HiPatchService; C:\Program Files\Hi-Rez Studios\HiPatchService.exe [9216 2014-01-05] (Hi-Rez Studios) [File not signed] R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG) R2 NIS; C:\Program Files\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-17] (Symantec Corporation) R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2012-10-03] (Creative Labs) [File not signed] R2 TBSrv; C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe [350528 2014-04-10] (ClientConnect Ltd.) R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-07-03] (Fuyu LIMITED) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG) R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20100810.004\BHDrvx86.sys [692272 2010-08-09] (Symantec Corporation) S3 BRDriver; C:\ProgramData\BitRaider\BRDriver.sys [64808 2014-10-03] (BitRaider) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [371248 2010-08-13] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [102448 2010-08-13] (Symantec Corporation) R3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [32384 2011-02-08] (Etron Technology Inc) R3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [52352 2011-02-08] (Etron Technology Inc) R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files\Settings Manager\smdmf\smdmfmgrc2.cfg [34192 2014-08-14] (Aztec Media Inc) S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-10-11] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2012-10-03] (FNet Co., Ltd.) R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20100706.002\IDSVix86.sys [344112 2010-06-27] (Symantec Corporation) S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\NAVENG.SYS [85424 2010-08-13] (Symantec Corporation) S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20100813.009\NAVEX15.SYS [1362608 2010-08-13] (Symantec Corporation) S3 SRTSP; C:\Windows\System32\Drivers\NIS\1207020.003\SRTSP.SYS [516216 2011-03-31] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NIS\1207020.003\SRTSPX.SYS [50168 2011-03-31] (Symantec Corporation) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) R0 SymDS; C:\Windows\System32\drivers\NIS\1207020.003\SYMDS.SYS [340088 2011-01-27] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NIS\1207020.003\SYMEFA.SYS [744568 2011-03-15] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [126584 2012-10-04] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NIS\1207020.003\Ironx86.SYS [136312 2011-01-27] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NIS\1207020.003\SYMNETS.SYS [299640 2011-04-21] (Symantec Corporation) S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [5120 2012-12-19] () S3 WinRing0_1_2_0; C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [14416 2010-11-01] (OpenLibSys.org) R1 {0c0bb4a8-45a4-4685-9c1d-08d98af4b926}Gw; C:\Windows\System32\drivers\{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}Gw.sys [52920 2014-07-04] (StdLib) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Timmi\AppData\Local\Temp\catchme.sys [X] S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\WNt500x86\Sandra.sys [X] S3 XDva405; \??\C:\Windows\system32\XDva405.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-25 18:10 - 2014-10-25 18:11 - 00025408 _____ () C:\Users\Timmi\Desktop\FRST.txt 2014-10-25 17:18 - 2014-10-25 17:18 - 00000000 ____D () C:\Users\Timmi\Desktop\FRST-OlderVersion 2014-10-25 16:25 - 2014-10-25 16:25 - 00059470 _____ () C:\Users\Timmi\Desktop\AVSCAN-20141025-161611-2553CFAE.LOG 2014-10-22 20:19 - 2014-10-22 20:19 - 00000132 _____ () C:\Users\Timmi\Desktop\pözöh.txt 2014-10-19 16:17 - 2014-10-19 16:17 - 00000000 ____D () C:\Users\Timmi\Downloads\wallpapers 2014-10-15 07:43 - 2014-10-15 07:43 - 00000014 _____ () C:\Users\Timmi\Desktop\.txt 2014-10-12 07:18 - 2014-10-12 07:21 - 00000000 ____D () C:\Program Files\Emulator 2014-10-12 07:17 - 2014-10-12 07:18 - 109483737 _____ () C:\Users\Timmi\Downloads\Pokemon - Schwarze Edition (Germany).zip 2014-10-12 07:08 - 2014-10-12 07:22 - 00000000 ____D () C:\Program Files\DESMUME 2014-10-12 07:03 - 2014-10-12 07:03 - 01096820 _____ () C:\Users\Timmi\Downloads\desmume-0.9.10-win32.zip 2014-10-10 14:56 - 2014-10-10 14:56 - 00001544 _____ () C:\Users\Timmi\.recently-used.xbel 2014-09-29 16:27 - 2014-09-29 16:27 - 00000000 ____D () C:\Users\Timmi\AppData\Local\SWTOR 2014-09-28 22:11 - 2014-10-09 17:37 - 00000000 ____D () C:\ProgramData\BitRaider 2014-09-28 22:11 - 2014-09-28 22:11 - 00000000 ____D () C:\Users\Timmi\AppData\Local\SWTORPerf 2014-09-28 22:11 - 2014-09-28 22:11 - 00000000 ____D () C:\Users\Public\Documents\BitRaider 2014-09-28 22:10 - 2014-09-28 22:10 - 00001403 _____ () C:\Users\Public\Desktop\Star Wars - The Old Republic.lnk 2014-09-28 22:10 - 2014-09-28 22:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA 2014-09-28 22:10 - 2014-09-28 22:10 - 00000000 _____ () C:\end 2014-09-28 22:09 - 2014-09-28 22:09 - 29720272 _____ () C:\Users\Timmi\Downloads\SWTOR_setup.exe 2014-09-27 13:33 - 2014-09-28 15:06 - 00014787 _____ () C:\Users\Timmi\Desktop\lol_champs.ods ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-25 18:10 - 2014-07-10 05:54 - 00000000 ____D () C:\FRST 2014-10-25 17:50 - 2012-10-03 18:41 - 01834834 _____ () C:\Windows\WindowsUpdate.log 2014-10-25 17:23 - 2013-12-20 23:55 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-10-25 17:18 - 2014-07-09 17:10 - 01104384 _____ (Farbar) C:\Users\Timmi\Desktop\FRST.exe 2014-10-25 17:18 - 2013-04-17 23:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-10-25 17:01 - 2012-11-29 22:58 - 00000000 ____D () C:\Users\Timmi\AppData\Local\PMB Files 2014-10-25 16:38 - 2009-07-14 06:34 - 00014608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-10-25 16:38 - 2009-07-14 06:34 - 00014608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-10-25 16:32 - 2012-12-09 13:02 - 00000000 ____D () C:\Users\Timmi\AppData\Roaming\Skype 2014-10-25 16:32 - 2012-10-03 21:43 - 00000000 ____D () C:\Users\Timmi\AppData\Roaming\TS3Client 2014-10-25 16:29 - 2014-05-18 08:04 - 00000898 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2014-10-25 16:29 - 2013-12-20 23:55 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-10-25 16:29 - 2012-11-18 23:22 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-25 16:29 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-25 16:29 - 2009-07-14 06:39 - 00167526 _____ () C:\Windows\setupact.log 2014-10-25 16:26 - 2014-09-04 10:25 - 00000000 ____D () C:\ProgramData\smdmf 2014-10-25 14:09 - 2014-05-18 08:04 - 00000902 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2014-10-25 08:36 - 2013-04-28 00:08 - 00000000 ____D () C:\Users\Timmi\Desktop\musiiik 2014-10-23 21:29 - 2014-01-28 15:47 - 00000000 ____D () C:\Users\Timmi\AppData\Local\Battle.net 2014-10-22 21:41 - 2012-11-29 22:57 - 00000000 ____D () C:\ProgramData\PMB Files 2014-10-22 19:59 - 2013-12-14 09:12 - 00000000 ____D () C:\Program Files\StarCraft II 2014-10-20 21:46 - 2013-09-15 11:19 - 00000000 ____D () C:\Users\Timmi\Desktop\Bilder Sarah 2014-10-16 21:07 - 2014-08-13 14:10 - 00000000 ____D () C:\Users\Timmi\AppData\Local\._LiveCode_ 2014-10-16 20:59 - 2012-10-11 16:45 - 00000000 ____D () C:\Program Files\World of Warcraft 2014-10-16 09:21 - 2013-12-20 23:56 - 00002365 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-10-16 09:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles 2014-10-14 14:07 - 2013-05-02 10:54 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-10-14 14:07 - 2012-10-03 20:43 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-10-14 14:07 - 2012-10-03 20:43 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-10-11 09:36 - 2014-01-28 15:47 - 00000000 ____D () C:\Program Files\Battle.net 2014-10-10 14:59 - 2012-10-23 13:14 - 00000000 ____D () C:\Users\Timmi\.gimp-2.6 2014-10-10 14:56 - 2012-10-23 13:18 - 00000000 ____D () C:\Users\Timmi\AppData\Roaming\gtk-2.0 2014-10-10 14:56 - 2012-10-03 19:06 - 00000000 ____D () C:\Users\Timmi 2014-10-10 13:46 - 2012-10-04 14:46 - 00000000 ____D () C:\Users\Timmi\AppData\Local\CrashDumps 2014-09-30 20:11 - 2012-10-03 19:47 - 00351958 _____ () C:\Windows\PFRO.log 2014-09-28 22:10 - 2012-10-03 21:02 - 00014071 _____ () C:\Users\Timmi\Documents\Install STAR WARS The Old Republic.log 2014-09-28 22:10 - 2012-10-03 21:02 - 00000000 ____D () C:\Program Files\Common Files\BioWare 2014-09-28 22:10 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-09-27 10:43 - 2012-10-11 16:45 - 00000000 ____D () C:\Program Files\Common Files\Blizzard Entertainment Files to move or delete: ==================== C:\Users\Timmi\jagex_cl_runescape_LIVE.dat C:\Users\Timmi\random.dat Some content of TEMP: ==================== C:\Users\Timmi\AppData\Local\Temp\avgnt.exe C:\Users\Timmi\AppData\Local\Temp\_is1178.exe C:\Users\Timmi\AppData\Local\Temp\_is2700.exe C:\Users\Timmi\AppData\Local\Temp\_is272F.exe C:\Users\Timmi\AppData\Local\Temp\_is2912.exe C:\Users\Timmi\AppData\Local\Temp\_is3A78.exe C:\Users\Timmi\AppData\Local\Temp\_isA84C.exe C:\Users\Timmi\AppData\Local\Temp\_isAF42.exe C:\Users\Timmi\AppData\Local\Temp\_isD4DB.exe C:\Users\Timmi\AppData\Local\Temp\_isE349.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-22 17:56 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-10-2014 Ran by Timmi at 2014-10-25 18:11:34 Running from C:\Users\Timmi\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acrobat.com (HKLM\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated) Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.) Adobe AIR (Version: 1.0.8.4990 - Adobe Systems Inc.) Hidden Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated) AMD Fuel (Version: 2011.0126.1749.31909 - Ihr Firmenname) Hidden AMD USB Filter Driver (Version: 1.0.15.94 - Advanced Micro Devices, Inc.) Hidden ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.) ASRock eXtreme Tuner v0.1.66 (HKLM\...\ASRock eXtreme Tuner_is1) (Version: - ) ASRock InstantBoot v1.26 (HKLM\...\ASRock InstantBoot_is1) (Version: - ) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.) ATI Catalyst Install Manager (HKLM\...\{D95A0957-F389-C180-9660-B48E41FD83D4}) (Version: 3.0.812.0 - ATI Technologies, Inc.) Avira (HKLM\...\{df495620-2ba9-412d-828d-b27f020d9fc8}) (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Avira (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira) Battle.net (HKLM\...\Battle.net) (Version: - Blizzard Entertainment) BitRaider Web Client (HKLM\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC) Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version: - ) Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Graphics Previews Common (Version: 2011.0126.1749.31909 - ATI) Hidden Catalyst Control Center InstallProxy (Version: 2011.0126.1749.31909 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (Version: 2011.0126.1749.31909 - ATI) Hidden CCC Help Chinese Standard (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Chinese Traditional (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Czech (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Danish (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Dutch (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help English (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Finnish (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help French (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help German (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Greek (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Hungarian (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Italian (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Japanese (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Korean (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Norwegian (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Polish (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Portuguese (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Russian (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Spanish (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Swedish (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Thai (Version: 2011.0126.1748.31909 - ATI) Hidden CCC Help Turkish (Version: 2011.0126.1748.31909 - ATI) Hidden ccc-core-static (Version: 2011.0126.1749.31909 - Ihr Firmenname) Hidden ccc-utility (Version: 2011.0126.1749.31909 - ATI) Hidden Diablo III (HKLM\...\Diablo III) (Version: - Blizzard Entertainment) Dota 2 (HKLM\...\Steam App 570) (Version: - Valve) DVDVideoSoftTB DE Toolbar (HKLM\...\DVDVideoSoftTB_DE Toolbar) (Version: 6.9.0.16 - DVDVideoSoftTB DE) Etron USB3.0 Host Controller (HKLM\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Etron USB3.0 Host Controller (Version: 0.96 - Etron Technology) Hidden Firefox Browser (remove only) (HKLM\...\Firefox Browser) (Version: - ) Free YouTube Download version 3.2.2.430 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.2.430 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.) Game Booster 3 (HKLM\...\Game Booster_is1) (Version: 3.4 - IObit) GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team) Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.) Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden Hearthstone (HKLM\...\Hearthstone) (Version: - Blizzard Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) HydraVision (Version: 4.2.184.0 - ATI Technologies Inc.) Hidden InetStat (HKCU\...\InetStat) (Version: 0.4 - InetStat) Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden Java SE Development Kit 7 Update 7 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170070}) (Version: 1.7.0.70 - Oracle) Java-Editor 11.17, 2012.08.26 (HKLM\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version: - Gerhard Röhner) LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - ) LastChaosGER (HKLM\...\{A86A50FC-7C22-478B-BAEF-82393328825F}) (Version: 1.00.000 - Barunsongames CO., LTD.) LBOTS Top mouse Driver (HKLM\...\{F1A273BD-6A9E-41D8-A111-5E56ACD286F8}) (Version: 1.0 - Togran) League of Legends (HKLM\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.1.10329.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Nero ControlCenter (Version: 11.0.16700 - Nero AG) Hidden Nero ControlCenter Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden Nero Core Components (Version: 11.0.23200 - Nero AG) Hidden Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden Nero WaveEditor (HKLM\...\{8F7F40B4-8C55-4B92-8C89-16501DAC697F}) (Version: 12.5.00800 - Nero AG) Nero WaveEditor (Version: 12.0.12000 - Nero AG) Hidden Nero WaveEditor Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden Norton Internet Security (HKLM\...\NIS) (Version: 18.7.2.3 - Symantec Corporation) Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden NVIDIA 3D Vision Controller-Treiber 314.07 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.07 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 314.07 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.07 - NVIDIA Corporation) NVIDIA Grafiktreiber 314.07 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.07 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden NVIDIA PhysX (Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1407 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 314.07 (Version: 314.07 - NVIDIA Corporation) Hidden NVIDIA Update 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.12.12 - NVIDIA Corporation) Hidden OpenOffice.org 3.4.1 (HKLM\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.) PlanetSide 2 (HKCU\...\SOE-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment) Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden Quake Live (HKLM\...\Quake Live) (Version: - id Software) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6215 - Realtek Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Skype™ 6.0 (HKLM\...\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}) (Version: 6.0.126 - Skype Technologies S.A.) Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited) Star Wars The Old Republic (HKLM\...\swtor_swtor) (Version: 7.0.0.51 - Bioware/EA) Star Wars: The Old Republic (HKLM\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) StarCraft II (HKLM\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM\...\Steam) (Version: - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) Tribes Ascend (HKLM\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF010}) (Version: 1.0.1268.1 - Hi-Rez Studios) WindowsMangerProtect20.0.0.502 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ATTENTION WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) World of Warcraft (HKLM\...\World of Warcraft) (Version: - Blizzard Entertainment) XFastUsb (HKLM\...\XFastUsb) (Version: - ) XMedia Recode Version 3.1.3.7 (HKLM\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.3.7 - XMedia Recode) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1715000752-643566925-54856787-1001_Classes\CLSID\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}\InprocServer32 -> C:\Users\Timmi\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.) CustomCLSID: HKU\S-1-5-21-1715000752-643566925-54856787-1001_Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}\InprocServer32 -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CustomCLSID: HKU\S-1-5-21-1715000752-643566925-54856787-1001_Classes\CLSID\{457EF9F0-0A7C-4302-B47B-C207A8DE8598}\InprocServer32 -> C:\Users\Timmi\AppData\LocalLow\DVDVideoSoftTB_DE\prxtbDVD2.dll (ClientConnect Ltd.) CustomCLSID: HKU\S-1-5-21-1715000752-643566925-54856787-1001_Classes\CLSID\{66E8DCC7-97D2-4A89-8E08-D0610FF0878C}\InprocServer32 -> C:\Users\Timmi\AppData\Local\Conduit\Community Alerts\Alert.dll (ClientConnect Ltd.) CustomCLSID: HKU\S-1-5-21-1715000752-643566925-54856787-1001_Classes\CLSID\{92c24f1e-ffa1-410f-b16f-a787b45ff60d}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation) ==================== Restore Points ========================= 23-10-2014 15:13:59 Geplanter Prüfpunkt ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:04 - 2014-07-25 08:30 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0EFBBA42-58ED-413C-BE01-7457F7FCE730} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-20] (Google Inc.) Task: {212DCA0C-3062-45A7-BB10-573EDBE5F168} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-05-18] (globalUpdate) <==== ATTENTION Task: {331AAD3E-B5BE-4D33-BDD3-09C636E800D8} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-08] (Symantec Corporation) Task: {3610CBC7-09C2-4455-A189-DC641652A178} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-05-18] (globalUpdate) <==== ATTENTION Task: {5A21DD78-54DD-4CC1-827C-CA960C0DC97D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated) Task: {6B05B210-38E5-4D55-9AB5-8DA8E7AB9493} - System32\Tasks\{F2AAA375-3EE9-4C36-8337-5EF7041BF1B7} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.1.0.129.272/de/abandoninstall?page=tsProgressBar Task: {A71F1CD2-3B34-4FB4-9575-49C109E18332} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-08] (Symantec Corporation) Task: {C4DED83C-D0AD-48D9-9C23-E003317F5733} - System32\Tasks\fsupdate => C:\Program Files\Flowsurf\fsupd.exe [2014-04-15] () Task: {CFD9EA53-3BBF-48F5-B012-20764D67D4E9} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files\IObit\Game Booster 3\AutoUpdate.exe [2013-06-09] () Task: {E41AB5D7-967B-4A5B-BA96-55325A409D2A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-20] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-09-04 10:25 - 2014-08-14 10:07 - 00488464 _____ () C:\Program Files\Settings Manager\smdmf\sysapcrt.dll 2012-11-18 23:22 - 2013-02-10 02:35 - 00078624 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2011-01-26 17:59 - 2011-01-26 17:59 - 00072192 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Services.dll 2014-07-14 16:49 - 2014-07-14 16:49 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll 2014-07-14 16:49 - 2014-07-14 16:49 - 00065104 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll 2014-10-25 16:29 - 2014-10-25 16:29 - 00697884 _____ () C:\Users\Timmi\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0098\~df394b.tmp 2014-10-25 16:30 - 2014-10-25 16:30 - 00592896 _____ () C:\Users\Timmi\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0098\~de6248.tmp 2012-10-03 19:46 - 2009-02-06 18:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL 2012-10-03 19:46 - 2009-04-20 11:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL 2014-08-07 09:45 - 2014-07-14 16:49 - 00049744 _____ () C:\Users\Timmi\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll 2014-08-10 22:13 - 2012-11-19 23:44 - 00786432 _____ () C:\Program Files\Gaming Mouse\DareUMonitor.exe 2014-08-10 22:13 - 2013-03-27 12:48 - 00057344 _____ () C:\Program Files\Gaming Mouse\lan.dll 2014-08-10 22:13 - 2012-04-19 17:15 - 00061440 _____ () C:\Program Files\Gaming Mouse\hiddriver.dll 2014-07-03 12:10 - 2014-07-03 12:04 - 01259488 _____ () C:\Users\Timmi\AppData\Roaming\InetStat\inetstat.exe 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll 2014-08-07 13:06 - 2014-08-07 13:06 - 00148480 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll 2014-08-07 13:06 - 2014-08-07 13:06 - 00864768 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll 2014-08-07 13:06 - 2014-08-07 13:06 - 00677376 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll 2012-07-30 16:13 - 2014-08-07 13:06 - 00092104 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll 2012-07-30 16:13 - 2014-08-07 13:06 - 00105416 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll 2014-08-07 13:06 - 2014-08-07 13:06 - 00025600 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll 2014-08-07 13:06 - 2014-08-07 13:06 - 00242688 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll 2012-07-30 16:13 - 2014-08-07 13:06 - 00477128 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll 2013-11-17 12:00 - 2014-08-07 13:06 - 00484808 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll 2014-08-07 13:06 - 2014-08-07 13:06 - 00123904 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll 2014-09-04 10:25 - 2014-08-14 10:07 - 00019472 _____ () C:\Program Files\Settings Manager\smdmf\smdmfldr.dll 2014-09-07 10:36 - 2012-10-25 19:58 - 01300376 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe 2014-09-07 10:45 - 2014-10-10 15:01 - 02448376 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.224\deploy\LoLLauncher.exe 2014-10-10 15:01 - 2014-10-10 15:01 - 04143096 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\LoLPatcher.exe 2014-10-10 15:01 - 2014-10-10 15:01 - 01629176 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\RiotLauncher.dll 2014-09-10 19:54 - 2014-09-10 19:54 - 42975744 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\libcef.dll 2014-09-10 19:54 - 2014-09-10 19:54 - 01559552 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\icui18n.dll 2014-09-10 19:54 - 2014-09-10 19:54 - 01241088 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\icuuc.dll 2014-09-10 19:54 - 2014-09-10 19:54 - 04945408 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\v8.dll 2014-10-10 15:01 - 2014-10-10 15:01 - 01708032 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\RiotRadsIO.dll 2014-09-07 10:52 - 2014-09-07 10:52 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.115\deploy\LolClient.exe 2014-09-07 10:50 - 2014-09-07 10:50 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.115\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll 2014-09-07 10:50 - 2014-09-07 10:50 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.115\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll 2014-10-16 09:21 - 2014-10-10 04:03 - 01042760 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.104\libglesv2.dll 2014-10-16 09:21 - 2014-10-10 04:03 - 00211272 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.104\libegl.dll 2014-10-16 09:21 - 2014-10-10 04:04 - 08910664 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.104\pdf.dll 2014-10-16 09:21 - 2014-10-10 04:03 - 01681224 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.104\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1715000752-643566925-54856787-500 - Administrator - Disabled) Gast (S-1-5-21-1715000752-643566925-54856787-501 - Limited - Disabled) Timmi (S-1-5-21-1715000752-643566925-54856787-1001 - Administrator - Enabled) => C:\Users\Timmi UpdatusUser (S-1-5-21-1715000752-643566925-54856787-1003 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (10/25/2014 04:31:30 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\007534ff-7fbf-4a31-b297-a88fc19117e8.dmp Error: (10/25/2014 02:24:23 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (10/25/2014 02:23:42 PM) (Source: SideBySide) (EventID: 63) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (10/25/2014 02:09:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: GoogleUpdate.exe, Version: 1.3.25.0, Zeitstempel: 0x53592941 Name des fehlerhaften Moduls: urlmon.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53180948 Ausnahmecode: 0xc0000005 Fehleroffset: 0x75fea1a1 ID des fehlerhaften Prozesses: 0x193c Startzeit der fehlerhaften Anwendung: 0xGoogleUpdate.exe0 Pfad der fehlerhaften Anwendung: GoogleUpdate.exe1 Pfad des fehlerhaften Moduls: GoogleUpdate.exe2 Berichtskennung: GoogleUpdate.exe3 Error: (10/25/2014 08:28:44 AM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\9e46af74-2c69-4dfa-9f8c-e6e161d063d6.dmp Error: (10/24/2014 08:09:14 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\7ce53a0a-02e0-4309-bab7-97d5fe37e22b.dmp Error: (10/24/2014 06:03:39 AM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\12f152f0-ab2a-45ce-a12e-ec1ad6e1a56a.dmp Error: (10/23/2014 08:09:18 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\6c4751a2-6a0d-4340-9d6d-63c8f1476433.dmp Error: (10/23/2014 04:20:18 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\4dafdbdf-b177-4ba2-b3a7-fd9dddf11e7d.dmp Error: (10/22/2014 08:09:10 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\70e8937b-87c0-4ff6-b9c2-2790a4fb2dbf.dmp System errors: ============= Error: (10/25/2014 04:33:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (10/25/2014 04:33:18 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (10/25/2014 03:02:27 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "O2", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D6D01B92-4F92-4991-B1E6-87DD72489512}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (10/25/2014 08:30:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (10/25/2014 08:30:10 AM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (10/25/2014 08:29:11 AM) (Source: bowser) (EventID: 8003) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "O2", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D6D01B92-4F92-4991-B1E6-87DD72489512}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (10/24/2014 06:05:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (10/24/2014 06:05:37 AM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (10/23/2014 06:15:18 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "O2", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D6D01B92-4F92-4991-B1E6-87DD72489512}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Error: (10/23/2014 06:04:18 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "O2", der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{D6D01B92-4F92-4991-B1E6-87DD72489512}-Transport zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen. Microsoft Office Sessions: ========================= Error: (10/25/2014 04:31:30 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\007534ff-7fbf-4a31-b297-a88fc19117e8.dmp Error: (10/25/2014 02:24:23 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\Etron Technology\USB 3.0 Host Controller\Drivers\x64\ETSetup64.exe Error: (10/25/2014 02:23:42 PM) (Source: SideBySide) (EventID: 63) (User: ) Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3 Error: (10/25/2014 02:09:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: GoogleUpdate.exe1.3.25.053592941urlmon.dll_unloaded0.0.0.053180948c000000575fea1a1193c01cff04c75bc096bC:\Program Files\globalUpdate\Update\GoogleUpdate.exeurlmon.dllb93c1eaa-5c3f-11e4-98b5-bc5ff40f2d2a Error: (10/25/2014 08:28:44 AM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\9e46af74-2c69-4dfa-9f8c-e6e161d063d6.dmp Error: (10/24/2014 08:09:14 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\7ce53a0a-02e0-4309-bab7-97d5fe37e22b.dmp Error: (10/24/2014 06:03:39 AM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\12f152f0-ab2a-45ce-a12e-ec1ad6e1a56a.dmp Error: (10/23/2014 08:09:18 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\6c4751a2-6a0d-4340-9d6d-63c8f1476433.dmp Error: (10/23/2014 04:20:18 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\4dafdbdf-b177-4ba2-b3a7-fd9dddf11e7d.dmp Error: (10/22/2014 08:09:10 PM) (Source: globalUpdate Update) (EventID: 1) (User: NT-AUTORITÄT) Description: globalUpdate Update has encountered a fatal error. ver=1.3.25.0.private;lang=en;id=;is_machine=1;upload=0;minidump=C:\Program Files\globalUpdate\CrashReports\70e8937b-87c0-4ff6-b9c2-2790a4fb2dbf.dmp ==================== Memory info =========================== Processor: AMD FX(tm)-4100 Quad-Core Processor Percentage of memory in use: 56% Total physical RAM: 3579.64 MB Available physical RAM: 1572.61 MB Total Pagefile: 7157.58 MB Available Pagefile: 4709.4 MB Total Virtual: 2047.88 MB Available Virtual: 1916.44 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.76 GB) (Free:235.09 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (MX-1000) (CDROM) (Total:0.04 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1907EF76) Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS) ==================== End Of Log ============================ ![]() |
Themen zu Virus oder Trojaner in "C:\Programme\Settings Manager\smdmf\" gefunden, lässt sich aber nicht entfernen |
4d36e972-e325-11ce-bfc1-08002be10318, adware/adware.gen, branding, conduitsearch, conduitsearch entfernen, dvdvideosoft ltd., fehlercode 0x5, fehlercode 0xc0000005, js/securitydisabler.a.gen, league of legends, pup.optional.clientconnect, pup.optional.conduit.a, pup.optional.dvdvideosofttb.a, settings manager, teredo, vonteera, win32/adware.multiplug.ag, win32/kryptik.cgbj, win32/pricegong.b, win32/reveton.j, win32/riskware.astori.a, win32/smarttweak.a, win32/softonicdownloader.d, win32/somoto.p, win32/toolbar.conduit, win32/toolbar.conduit.y, win32/toolbar.linkury.g, win32/toolbar.searchsuite.m, win64/adware.multiplug.d, yahoo community smartbar |